From 90ccc05b5d3713e02e47afbcd52e08726151e152 Mon Sep 17 00:00:00 2001
From: vados-dev <vados@vados.ru>
Date: Sun, 12 Jul 2026 06:04:22 +0300
Subject: [PATCH] Backup for MikroGig created successfully at Jul 12 06:04:22.

---
 .../20260712/20260712060418-Binary.backup     |  Bin 0 -> 194200 bytes
 MikroGig/20260712/20260712060418-Config.rsc   | 3337 ++++++++++++++
 .../20260712/20260712060418-Diff-Config.rsc   |    4 +
 .../20260711/20260711224001-Config.rsc        | 3842 +++++++++++++++++
 .../20260711/20260711230002-Config.rsc        |   75 +
 .../20260711/20260711232002-Config.rsc        | 3840 ++++++++++++++++
 .../20260711/20260711234002-Config.rsc        | 3842 +++++++++++++++++
 .../20260712/20260712000002-Config.rsc        | 3841 ++++++++++++++++
 .../20260712/20260712030003-Config.rsc        | 3842 +++++++++++++++++
 .../20260712/20260712040002-Config.rsc        | 3841 ++++++++++++++++
 .../20260712/20260712044001-Config.rsc        | 3841 ++++++++++++++++
 .../20260712/20260712052001-Config.rsc        | 3842 +++++++++++++++++
 .../20260712/20260712054002-Config.rsc        | 3841 ++++++++++++++++
 13 files changed, 37988 insertions(+)
 create mode 100644 MikroGig/20260712/20260712060418-Binary.backup
 create mode 100644 MikroGig/20260712/20260712060418-Config.rsc
 create mode 100644 MikroGig/history/20260712/20260712060418-Diff-Config.rsc
 create mode 100644 MikroMaster/20260711/20260711224001-Config.rsc
 create mode 100644 MikroMaster/20260711/20260711230002-Config.rsc
 create mode 100644 MikroMaster/20260711/20260711232002-Config.rsc
 create mode 100644 MikroMaster/20260711/20260711234002-Config.rsc
 create mode 100644 MikroMaster/20260712/20260712000002-Config.rsc
 create mode 100644 MikroMaster/20260712/20260712030003-Config.rsc
 create mode 100644 MikroMaster/20260712/20260712040002-Config.rsc
 create mode 100644 MikroMaster/20260712/20260712044001-Config.rsc
 create mode 100644 MikroMaster/20260712/20260712052001-Config.rsc
 create mode 100644 MikroMaster/20260712/20260712054002-Config.rsc

diff --git a/MikroGig/20260712/20260712060418-Binary.backup b/MikroGig/20260712/20260712060418-Binary.backup
new file mode 100644
index 0000000000000000000000000000000000000000..d6e65b68c4e1ba450786efbaa285b7df80b40505
GIT binary patch
literal 194200
zcmV(cK>fe(sF8D+_5uJD!&L^--ywK(sK6X63#l6b0002|`~QBR1O)(C!s&L1?IcQL
zKY51NP3ezbo9OB9IjC+~%G{V!mjYldv#c0BQRdTR24*HKp+$t?t%U(;SiIMIhIiZ)
zOX_$2ah8ik3u2JIdl4RB&;IIo%dRez5&Spj^NG{Zc*&C2VVF6{9kKtNTzdk33ys}w
zxlUo!f4MZ%D{gYHR-L^2JKV<APmu?78@zv{Qnr933+>f|yry8Vg|r4u);GhG+-_Y^
z>ju_nw*BqGs&^@G?s_NhOA?&vGE4%6StSW36aonn&~tEEY2f^C9=^=C9PJ!z^FiDQ
zdWL8Fe~f~_G}25g@;k3X|5SlH^s9|miU*6fW3*HX0z>TkOl&m9r94Z$VBJq-A8pzw
zhp$R7_wvO-x$_wxCP%gl_iTzo1`bzR2}lE8M+Z>>VXmx3sby`#Yg~zUNqvg42WYg^
z*xjY*7~#1drh7&Oq+*}yxR(T39r*b-+<PCkmYyIHSEjcY_;Qa*r%0kB-s45(4sV3%
zn@lilzO>uq`Z~gORIaYC0ks&P3w$_8wnB$Kuw}}U$&NtV+5gPmR9cSXvREvQT2`o{
zM9!N?)%j_agsXFDd?tDYEzvS3?~C<`PJXZ2h)SqgPPMcb;0vs%F`%gu0I&l~cqJ#?
znUCIN9&AXN0T}!0d!}3PB7W;nGhby!=IL2wk(%p?@9Ph3Nyum3LkdPC*Ep&@3&@xx
z`yg1BInYoc&L#ukazuD%W%61mSM;(s*pVQw;-UEoD9pqva_v?=V<%wF6738|e?*p)
zaeian0F6(8Q)LwlyAtLU_^3fE_isW9;y0XdA0}cDMw*l%r~V&Aksq;)8|AS0zj|wO
zcri7a3<exv1DQ$Q$v&w6o!^-V{Z24^R)0HG3wowFaeD@Q&hr}3Hx@ZSv++$Gh^KF3
zzO;h41l8PV1zL<jxb54u*E@x=D-`N&X5UR?NHs)C(Go9^LKWq%oAKgGczGvh2h5rs
zEvuBE!|3Q{NWA}t#)7iM8Ha}Dn5|)BR&W-t`f##Ca>fq0c6!S+jL8D;B}Hz3kYn?0
z&bLp*o?m`XnpV`B6&_lynQ1yjoedN(Si?DeoL?%P%elM0^j*>`XQqAe!Pnab&U5)2
z5H6=rvU{H@Mrph}Z*~g(PYZz<bSKD_NTS>%%GMOYX#$v4!rt8TBzj8gk1~YZeSO|&
zz-rFIKXDLJZu>^60h2YMOZm9UCR&C)N7|h}5jR#$>4|w<nyrLgbhM{?pW!Iw+*MJ7
zqFdD=M&~V_;r7qZyT*N_ZIlgBYP=nAY#feIUd+_1tS=JA`s&F`2QhYPap*Xxy1`{5
zC0~A+m2F*uBP$@oa#LuD$Drcjy&S<F&nU5*OKZGcKb!_AYSQ%b=MR}raXgpyKRwom
zLQ#(3x09B>2pVNMIE6w^$dm<s0*37!wRjoCnhI0U2VI9!us0E6HoFYVWUdEk-2^dF
zGp=1(Ln{xm64<}9GPzNDYjuaGDouSi&$Y~G<zgt$dZM6{P&N4Jrr3r8?o?-Ok(BM0
zJnY(<!aBMNjF^b3Y5H1_$cV5{)Gf>sul%l@7O2XHT#If5yg!{QG!IC<!WU70>u7y}
zS;lW`ivx=lX*-=zn;i@3sKB+J_>t;urd0SR1pjmVT{5c{&y^H+$D99vd^A1~_45{7
zS;OVPav9|Yt}ZS19-qhT_Lvbe<Dn2z{0h*{zOp!GNFzkgkIGhB5-Mh6LMN;z>?w^{
z`v}qG@rY`s`X?N?fQHTMEqFWVG&gBJ*jd-%S!Z@?WAeQg>YA5p%+f_vtw=s$l={32
zo7#8HxcgXuZ?I0+^EZ1Mpor;-_&x?xiiy)jYP{d8b0U<IAMn+gD9;7WNe4daxqpnO
ztQssI{TL*JFs7DeM^Gj;qy#Y^RVsD!*eZ#nM$%%viH&*KfNh#WcabV>u5i3ZAA2lm
zuqq1_Ys1!Sqmi8i{!u5Pi9o?*-aacu{;Sjw_f~?eL2N0m3u`jCTV1bssTPk<)0~^j
z6f2D%@QiwtFs=3NLJFwTi8j8dB8B%&Io0MT%yOLD6-dP?LGK<uk`$c0C7!`Vnj+0`
zPx$<^2E^C;3W~O#bAY=dJ}DFI4&N!4h=oTlnj!)q;dJ@`x~_ceJBhQRKEUSvfl#e_
zjIOYQBk(J_plkQbu%Q~iQsRR)zLTbl6^6HurWrj;F=*R?3-1vf%X-(@99;9SXVr35
zbB3@p7}xA)rrLw}5lL#NzgH`wWfL(}5iVaVbdmEYx;_pr=6}i{&AXB@3K;Ct0<Ud;
z3ErBpCk&)sYz^)JS`J9eR%bJHn67M&J(F!0(a5E!a*g0F`QSw{!retJQByo1u{gbT
z`?6?mw?A??!a-hc4c6fED3LxVR|vPLhK%J*WPO!e1GECD3Ek4o{TrLP#;C@WGY64F
zuhjqHC<l{9ih|QRf52a)wyT3CmI!(;{GHk6U4yG<DD&^~)q0H+n5@*f;52!q!C*VG
z_GRNsaUpn2VGTks;ykA#QAV-;#~-j>JSuX=go!2kINHQ;r!NTgil=|3De39;9-XJ+
zN=_mp_q0t34;Drglc{dJkTUy9LE6r>8zEic?;5Qufu(UY$eZ2}LFo8`ew+RFJ*)+7
zKP1ahx~+zpVG>-vEgc<zkDG)OoQcZN^Qu>8ll?9Dn*8vIh4)d;>4+cOL=yEYNw}Nv
zhhOXrf6C9*vyUdUTK`?p2`-w|(Z3hY24$IvL80bu)UB#e3^-^@5b#E<qa4Z53#NF*
zLmDWPZ|ndelzF5U0^MCL3D;-vcu%2|SrZK^-Tj0O20QHGZv?ndD^Q=X9*X`Me9&8|
zk-)luJYW;!RgBBH&VFm<AAv{bAS)2!o}c8kIM0F7H_yF+X&_6R9FK%m6gW?DCAm1I
zUQ`-QRE{|ze3OGj)zVTHF1&~iYK3C>4^w`2s=yHZL^9z`ZMhdS1lH(E2DSH`>bN0N
z>PAS~1L5s_yK|*5fry<1vcMsU3N5~dA;tQ`B(qHkvo~ScpF*x(hQH2MGWW>K_iMot
zwGI{S5cPNfn|SABa3*{sxB2I9Kzc~!O2m!>!mCaU{~&g3t=4y&9%o=QJn|mwB_wgf
z7~Vf_bpnTII~1cwgX<x{#5XrOQoBMuir1B5v>3}eA+5EwRm;t(?m*eIjAKI-${ksa
z)RnH6LSfQ+-7I;Bg8`xj6o{j-K$DucnY(=a^JsrEe3SvPH5v!|j%|WpbylO_rqSm0
z%9CNowwu5qr=ZV&5P@9E+^mMS#H`&6N<18rq87GhKyh>4^0R4f%j;6R^^|I^McId>
zO274AE_&lDDVGVO^df(5o}l%Q`JP|lvpaGT9W&X0@OTXeoyD7jMWN^52HB7>Gt#<d
zD7H*wdLZK67B`^Buhluh%X7io9A80w1(Tm)KH$)x1=|o)r~NY|4wt0W2{SpftvJ%k
zpKgsrNQQ2FiHeo7<>({jy^UcAqyB4T@Rg731>*7_WVDk;l!1CC;!#lLl3EFp1FK@@
z5zEv7N-_ctLSQicMW4o~m=7YuU7XyHp6f2<_&OWC(emZYeeI>t<KPPD_AzWv_k;}4
zp|7c|(DH&P3Ho2uhm)N*ZpJ(frxZplpRlA!|EjKwGs|c>`r{A8xjOo#^g0+SM1r6-
zK})E%di@XWn)hJ&%A$+4i(zoFCkoOruc>@Jg@`4sGoX-V_)S(-tp;pz!Jfmm2SYvZ
zEIm+Uh&Duo9EdCrR83bArp9Qkq?R{r2>j&fWil6Y(#W0Nq8n_brcx0uxR3d4iLJhL
zhf&_TZA;-#A-2h7Sz)LYR&n*9SD|{?YyA7zc=zlO=!*~;Q{4}Bb5;lC?U;cc(G((u
z!2%8kXe2~G@iEc;bSPmug2)k{)-jCZ^tMaqpr;B)4m;A9Cjai-`McLc0_WavEjwsK
z6KAT)bN`tg99siF+fZug*moTUsDXcLzbymnvK9b5#P#Z2_M#c2$~X#|6~?jhcVtSW
zxY{!$SavV*`_?N~2m{C>4_;KJ!E}+to@Q)w2wi;kB<JK*WzMc}(Nen7HPxQOM`A8#
zPqo1eAykzMdix9mqTr3Jn%Z)YnM?zB8Z|??N90UPoTug1SSAW&9|5<iWn+@%L{ZxK
zLiRE@)+W3740__>Sm(Hl<CDaDpFq}regS1;N-+y8&28E5TBmRn(-Ixw16+6N!Vd7$
z&z;j80GUn5D|~&mW~5HDBIF@ncLxu1RU`{IAc>>ws_kqprGr4{fJi$LIf-(6pgJ;<
zKm`U!-M*)?&LkS_Bj@fI-Ih03;g}!L>F-j*yhkfSq0>4*!ES}yVTBQO5aT0?H|q5;
z+JLT))9n$gAd-XsX6-ehD_Lz9hRHu7vfA*SrnF*1CuitnVgdOY=w$5VY3vIAjhrXM
z08w3@1F$x^*xm0V(U@&6R7lKs4!4KuitA6!^wvKv)(C^)@Xls2NIu*-84ak6<rjE<
zz9S@ZlU;6CVh4XHgn4%9-IN%Vr3@W~&{C<yFi5;1G(j}8<U&iL0feC9y@2(h(Ut7*
z^QiRCu_p@;EXBLDh=8#=P(gA%vA$-Ap$B!usVaq?HXNz6y(2PF@*TAvi35hONzr_8
zp;e<U9ZTj0t-0$jiII>|s)dOLS=;niXx{eMA!H)bxpud;17&+hq+L!)h+RD5xY@9w
zooPdeLw!T;)l)DsE*06He6|cbSo4h%+!;t3j-V!&Q?*?ywbkIsrSn_-(rS$edE)zA
z*c|?SCIqqGuvw+f*Z-mde@{=^g*r|ND*vEz0a|&uAUu1XDl~Wb==k8$YRap`y}}9E
z1D6=eGrO#y<%c?~ZwM$yG`O!Oe|&1ygrFUx_Y>6GSb}Jq$*b)J^g=ZWs@xwd{Lb8o
z<Iu`Z02F)og7A~Ce2lee21DNZqIvbb#=8Xtq_~mr!BNv31IJqo+Ha8vTE1o@3TWAA
z`nlS9m55uy;mMr}U-6!k7|R5g1m_jzUBv4)M>MC*B+!@LC>ppODa9_>0Ja8Spm{KI
z&Kc{=AWkLNfpu2gejl-Wlw9?5$8arb4f>ghkf7!lmn(&iH55m<amGGPa9ecbwUche
zbbeJ@j#HU&WQH*f78sHHE;j)9>q%?f)Z9I0Rb@1IyVpswOLGHV6@L{s&C)*6!CbOR
zP=_z|YgU+#PJ#k8#8LmYS>yD$8WBv_E!$3lzU&F_=2ohwVD6-d4pNWPHARMMS;4(a
zIZa(%!;Gwp)0r2BSsz2O%4I|LyPMOF&Td|HGUeFy1fP?M(&-hozkU?g6Ms6`Q&JWR
zXCD-@yr%~?Cjgd&g#4`a;VKDPlMmBOd~7D|?~4A<gOJgRvs4;Jsn3FIfQD3PO@_E3
z0(((T=b92Xvjip~ON}&^wb$o!dBP?Lf=xwDwx6dvlk{T0EQ^3|@dILbJ~VY+LmXP>
zT)d**$dvKf*hYrX)ASXlpj6hM+ml}b@1qfN_#+oz-z`amd3%z35d>{{cFBr4BsB<u
zRqE-~DJrzx5QsC<&2A&Z*ly(mQJya>=3Ibhu^xzU$1aHGQ1ct$ldAwH!FjmXtyYnd
ztXHXMY7KeSXSRJ9^L>--;F>VlmSZ-Xba9Hmb0?WeyZ9ZaP1M!EKV>UQ$Cpu}t?nOU
z{33>750|UtYvjCTa_tR#GWhAjW!rQl`<;cyQ++BI9j+r2{wnj)w5l}Ojc1&an(F|d
z_IM~y#&|?|U1h!w`}o?lxW_FeW^l)^PhZhzaW#__4!bwNYhtdNg|_7ccN>(touf$V
z;GZvS{Cq;z(Ay;fxf>>}XH(JQ{_00qrv`>y@!-f4=v38^a9ntX9}Ib&Rp<Qf3NmH}
z6@RTZq(<T1i9OhPx@*)H0iq!CcY3FZras)JDJ5X<WE$YBsGGTjnHl;;P>+&B_a;)R
zFTxIDDy5>s7k2^TJZIn=vgHMZFxOZZ%=KS4b4~2D(agiwU`5OGx5)%=?YTu;qD?3N
zr}6tlNc(8<tO{j0O}HTMIcTD3&3v{wE@I3&yL-k?mi`vpNqA?Hu<zw(#HrM`6<oQl
z_&4s4JZbBs2R6fgCB~n2oQ<Y83CK<Y8*4=Rf|FWqY7!QnYHhXpKIu@YhjbM9XyM3q
zK8#$^+)R4un;Aa-N%&<h3#VP+cB!T=lfn)b5>wd?JH{vM^7e<`7V#>7Lc-c~f}xj2
ztno^3cu-YxA0E>IgfTQjk<&c~xJ=6*OwWKYA`vMKHVd)TdP|C#%91ms18Mjv<GR*d
zcrm;NK@N7zZ0JlcY9%oXcovK(DYK$$jz4Sy0-)7gBSO{M)Jdoa2HgkYI}1%fvBKPG
zQT#o8Sj&3u3;F15k{ZaA=?3r7)SA=ywFOM95|p%U)q?WQ{Z5dllg1$H#!qC{6$04-
z;h8Y6Qca!1$0Fw6i)eRCsekt*QZl?PWfNTo*$`$|EQZuWN;mJ|OYfIN;!x5yJ=ozt
z1)R>yujnSzRPVaRCr~WiBbBZ@34rG{2}!TT<icC${AVcjcfi}()FS|MN^}%pD9_fA
zEJiQ~Eyw`AgR+V*-YN~{TIVc&GnV3uU(Zk7=4H3Qi8wMzLu&eQfpz>7wQImNl8$q|
zn`wg8;xHY!z0*ixKI>mtyYSLX<o1KD(8x?6Ya}$4@4?;4_49_dI?-C@W5?CK?utP|
zT((xT4C>`5LOOWJq4=*}vIR>s1T5V-U?*MQWI<dLqb(rnXjCVdIVK3jEiNulj1Q@L
zum|%=qsz?F)vguIXU?zJX`0p9uXHS`a=l7?f%s=v0Ab&l-O|cPy#Oi84W@W(rVNF7
z+W@N&yQ4wOR#9%uCsXsA&B@}YK8@6XnCv&}ekx|VC_+7rz}V*oLa0*^c9JaOfJ-jm
zNB|Wdjb_cq_BtLSPYXmZ3UVLTb%tOKiX{Y%DBwqo2x_NjVWPnC@n&+M@Q8C4EJkKQ
zPb|o>jc$%hFiCI<>rCeP2Gm|J0}sUaD_*4~RG9KRQZTj%34(-0KpFTH3=`8#p8z-L
z>yNrM*-?G-%Sr5B!n2!L1G8A&^!G7_;Ju<_yK2d5!{W;4Xo1xd?G3zmgU~I}cK2)S
z8Af!sh4^cev0lUzl8C*j!{Jy}W*RE!TfdF;Yslf3YAP>H;Til6R@<ssO@B?p0>4EZ
zXYb^wFd}V`Pm)1@oCvh$j(nWmBdeY@;@L|YA1F%17I@1V;IabRs|J<YZJdCk$KbL9
zy0b|~bc2MF$${bMDA2F80=*XZ7b=3&G`jH#bbb8SkGie$)BA3aPffnxVBt-FXc}cr
z;3%6Xx>TUJ%~vpxResz7sV=F%qFTI`cGez{aJE`QTTz%mK%Y2$5bLRSL$;yx@zD!3
z0BVkGHLr~(GC`nkk)Mp)-erV-yfDuzpA5pb*PI~YPGKu$T<Y%xqc`4c)F^oY!|WzY
z_GGB?qE^BcoIxD_L<)&5!8?OOdD^n|V<`X!t*W}-rR11n!@x_n;QMOrCn#n=IUC|j
zp<Ay5HE4H85(3l2MN?zag4-;odJ%);MP$Gq(&SM5qkAs88bh?V9j=&ewJ|sT$W&Fl
zul&xXzgtNiVwzyyF6AtGn%VxvR*D0TMsBkgh_96p0lxt3NT1X&%~ZgaCsv!>*H?IR
z-Wll{{PO@3-B2uh)r(Vu^?ssaIt6#xAnP9H8*{BlQGjJqb3i0*ny7`bZvC%aYIOFL
zI6Syv2v!4()R?73i6I)x`6A`4?#O}cjn(crHKo`E%jeko1ibXP`x+$6$MTXg3&Ycs
z2hjG+Z%qWd?2FvD#-|-QT=9Ud&M`P<!xM8uKRj24I^A5$GD^t%lvXYnWdkQsB}-}v
z9`4-$yOV<Z_pjbZkCqK9YZO~BN=MWheAq$PmEM-`9>^hM>yQ-2NBI*pfGWV<kzw|(
zkoFRKLH7f#cAa(awC0pYte!VVmIh3Kw#lnrhIOIe*HYmlBQbjVg;YWSwkmJQd`=0y
z@PQ{#e@%RLb<7jW`kg~CP3dWXC2bV<tuB*&aoj>)+mWj#(15sdr08Vg>t{2PQ$O+|
zb2{$e4B!y7o1HvRaJ%gy<p3Y`XTNaTgMKtNRUqYqL}oWyi1s}Jfi_f4;g+>xdq76|
zy|b&>$e(7Zu1{*TiWacRUhd|8$%hXATxJ7gJUq(6V(~TO3^w$!K+o5549b#&1|z-S
z*VqwqkhnTfj|ZSY2NH>5<z66AAX<B<wgY)JrF?>Z2QJ2W#{gZ`)(OYi`h4Yb%8W(f
z?ce;xA`+*y2%<kBqa!ej{6%(#%WS7UARIs}U=NZaKH(n$KA)x;_8XB>p(qiKGLjQG
zrGE=OylF&Df=0$6s)JA$!pCXX(<z2O8XM#%<S4`C2nwo9A4#dvmR6l%;jPwOD5|*2
zmS#T?CSqZq8=R<}hOKs1;^gnmRm*>Ju?JfPu^VUn>C{B#r;j|J%-Vwwj8`LCxMkn?
zv}thODRH9?+rrqcwT05>A0u{_Zlvz3vcJI760?N1m5Yu^j5hC%B7#c<#<r-IQG))y
z`sQ3?R}(Plk<3Uurn<YBWj%tdBN^@3%WZ?lTW$CAz{)kIiZw_Pq^*z42hXIc{WrG|
z@s{GTV(ljYqH6w|B^2k19*Q}O?~JHcESg@UaB}H6hqR#sfeL;E0-9q#(G!PtT$OiS
zj)jo7)i4x5st9^#t^)uuR%QH|>y6=F-+jFI>!bRG{d2Fh&uRi0JF}PwZ$-)$jOj?X
z%_6L>Xyay8jLt>Ts|>Oh<#!2=HRy6G@>vvA_;~R(>%|-6@MYTCp&s5_)jCUwjo_TN
z;}Y0fMR?6wE`3h=PNmkVNPBlYKR20abS35G{kVo>dmpDk%udv=1C;UY0xo~lm-qVh
z@9&it9a)BVdD%x4l)9ppr0-mf63W`lj@x>rICfK68!Sf#&R}7>e!aN=`}7%UtcCjI
z6fkZFcBrCEAG|9$5=O(|u#AP(Hm*i%><#`fdVIle#d6z|qoWA!aLN_CcmU6OIsAnh
zJV<iJrPa&nF)YL{d0c^7{M*^C0Xj035%SpBjdEkdVbmli)UYiSKVCUh4;-<C@sUT=
zF9ul~F7H-~>S}r*|M$5qT4if5ICOn1Xt1;PM&9}|4~8*lS9&Nr&A7bV4mwup4wIPQ
z#dQbRCTi@+^dNp8k$5w(JNU}d*)o0-O*<b7ay`loAx+6FRSXm5P_F8)rB>RoN5P68
zg-q5}6zu!Y1oK70A7ZgN+1EIULMm#8AqhiBiRE+&?rzswH6>Q;)sP@;Q44X<1M*-f
zcs`s%8mkmWf!S@RmLGkKx82e$m=U*=veEily1Av`HnSbUwcZ7lNmE?=qz!?D&4RW6
zpnFf1=BTq#FPL`k(!jk~5!C!8<n(!p;s<zn8Uv0h=q8aQM~5K!e&DPInoq`^^RAiZ
zf!8w`kd7PDAFV+cjcILvHzLF5YV28T+D>nkl2%SY>XIP%$EXK~y_ksz2#Z%8JFula
zf^>jpAopOBa(;5iApN#c8{z93a(R^qPK&SuVLFVhf>}hI#wX+Q5Y=g7F@uOfnFDGR
zfSOB-JD-BYWTuZ}3Fj^jO_CL}i%cVJxE1pLD?H|nQwCG8Ti+WT70ZC?(j{jS!3S)D
zl#Ew36^)vu%3kC~xI-}Me5fbA$%t~@zgCWd>*eB6p{0Q}*{bYj=VSXXK11C2t-#^V
z+N*g(I&m~q1L2+bMhVfcT%>|Lx}x<7^T$-h^FJvy`;TjxGmI+^k5fx>=gR|BxE+92
zf*MAxkpGi)AkyCC6qN<%wTm}G%8-k`e-(>%Kqb*?Rz1MMRmL<$+h79)17Kz{en(+9
z3GLQwejMRoyij|;ti^cyMF8}k02744wSZeA{<yot@T6wxbO<xH)V}dLcCo$G^wkKQ
zo#$^rdh4ypVL9bGpiFRB&17rf9l_wfT?T7F_5bWCLg4=(eD(hHwTkralN6WftRvK{
z*(8)Q3kn}#^XI<y=4elG^N0n1m1R<K3Af%v?>b=vH~ZAEa?u33r<zY8!E38-5lV%|
z$@8*174dD>6HqUHwKFIA=zaU-z!v(HC<?<hu<`!KU@=czj=r}s+<5@egjL!Rr{J=Q
zA<y^cYh|G)&dJOR=v%!TvZIhvt-J!(vhuVSs|0VKDer|vBHxB>cz_=(FP%q>E6JE&
ze>|aRbRs>%m+4_ypC!HT<-<b4He!SD$NJ@kSMmZ8kgmO5kPOwb{Rf56fJ?mM=b?F6
z$%l(TftebOHatAQ{k$`9q*oNENHfoTspdVp4Yv=BBpHH?!_McwZF)&a=PsW%q_Elv
zIrhZqV}W$%ar^Onbwd1D)6q4Xp#k@s?o_^S*Xkg2{`A2a$Fsd=f{Vw9yLqET1X2_o
z(=+78s9|k6rZlbgO^?=TVkanh8_|UhM_Cf2F)%1TV<pWls=-Fa9*UP!3{j{i{5TJl
zn90(Mv4^{mCjH$?^134@Xh)Wr<;_Lk8oZm*7U#&rG#U#x2PgYGDl^X1`qNeG)qb;p
z^t3AbJ!@_Xwz5+z8KJQEN6imLdFq67g~!_H77`}3P!}X5BTqpN-UupO%vw5Lw$W=G
zN>Jw;nb%^H4-Q4jZ&n7QJG62Tegn-bpzhj_F1ibR2v+Kuv{|?%K-RMKp)YCQ&_WY1
zNKgFl^CtUD*2E*-SL-0DXE9=)qVm6oCgKJG7NzOy^L9b86=j+X@zu-5e91JhjAnhE
z*euS}8Wf8>^8DD*D?k)vn+Mb+os#_mZ@&1SHgu3hymqH{Iw^WaR{Rf_*nGf#J0yus
z{4gppow6t>L!dk&d|s;d<x)CGZp{|?Ejf26LD&L{pa-+*v2FcWzCG&&F+#4_Nc*sW
z1_d+w-n^WshK&@~0QaPs5D#tI?G*Woe~QM$HiMa2ZWat~zBl1L2!v~Q)Mob}F9SIx
zbPNduEpbq1CM{#g_AWq@{Yab9-=xA~Gx&O=cxW$1XCkre4Ob;AwutbHuwXgU&QNxd
zAsnH1rJXd79MakNQ=bGKV>i|ytj#7I5I{s|-0utqLyOf2TRS9n*W%2TT1mk2F7TUG
zQc2i4SBXH_M`oL9+2iDpYHdNuuD;&tuIXH^E&Ya(Z(%G8rcoW7^gw(GQm1Jxq$J}E
z!#sa>EWg*H6U@13^t^{XENguIz5MjruYH~|UdK_dkC~JmaCF8_87++K`#!n~47Ju6
zmHbdz%ujF{F5osJkh1+I)B)iwMLVAZ_}jdtNz8R;WB^x<zl-VEPk-D-q=-kUbqAY@
zaL5aQeUzFsU=iHe6m<cFU#(wh$6Jf(L(l%yOQ^nD-Lpm15|nx?uzq@Ur9n_iFJB6-
zr7!$HQ-NCn?Jx|*dqNf`=|FP!GXQOgOPWUPu}};l_IHa(thY}&VsTHbTYB~GNCsJ&
z2!;ofz&=r#Q_?p6n|sumxqwyVW)UxJ;JeRU4Ypgav7p%@kG2<IZ6o#Qrv42abu+S@
zit*D{8b%CGB7xA#?zWM}N8_l}p6iVwkZdWBvGxxCb=xIjrX?rBTtX+)5AWIxTr+Of
zn05wv3{d8|3pOQ^XG%%i^X~RsQ1~@H$gXympo4xxL=ADM-E?_&tZE|Uumw5#+mInq
zc+xL<a!%jW=^la)bohbk{!TewU}&rSMpq^xm#Ji;!~j6)za6$cyz=_&G%xF)T)nXb
zZl6{|2lS`6y^@wBSO}uPyN%D+*ZiSkqr6iE&0T}ja|EV5w+?b8!mM4H@-HGCWC#qJ
z_PGNaW1@)dxovp?EVX{K;YqZ9lX}K6?i4D8c_bnP3a&i;!2Nd_5!qW3l2Ka0QP=9j
z%EHM5aqQcuCh6x#+;IM0?9f*;XaO$2D7ngQ7A6wTVRyr%JY>8*IK}-)aT;iMiXhig
z=Z<93Qrn~euY&k@JPVikK8RZ6c{aTDV~!jaRLZHLvzosa$-KiW1*^8E7}w&qF;f32
zcud>%auj^!EfBsoVzlwfeRK5^?*Zhu0l%RYum8{l$9>I!3Kmb<<al6~fa2#>5^tp3
zli=56@3Qxu1Pv2@QBZ3_r0mF_AV&?*nI|E-1={C~5cV*^IV+oV;4ZYy3`tMiXjiRN
zcQE;)1vh1;oBgM87ex4m9fx0Ep~20l`pk%4FA3Fb3r1UgO$=Y!y0=cjQDbNY!#rJN
zP^a*l(2b5BT^H?OY<?*?W(+NZ^km&3(Kp2heeBB|LN-rIRq7k~wY3WLWt8(Ho`7vQ
zA&Vzn6R(HL$WSI_8>zaZmq`xI8B}=g3OFI@Fij=95EQbtq;6sTN}{BzQCGV<C;D&B
z={dy-UA>DAUfwSFSwjFOPvgcFyVjy$9*ScLZR#gIdq+EF5S=MGgF@1F!kV=NaUV0<
zRH2~waxvx(wc^N2Fsr0D#ZkI~cHMe$y!`Nh3lckhp2oS|7`Fixm@Kga9U4%C)AA0Z
zOp*=^f8{)}%kfK2sm4;_V57*B0g(0o6hV9NF?Q=fblooEMYsc?!mzcw8n9<5hUzKt
zFjq~?a6OU#J1gDcQk~RbgXz_0&~zk1mBk=92Tbut+_~Fr9ZeKI1h94JT}Q(K;*cSE
zu&Y7{ADw5pn7HbE0Jzb2T-uTQR>`jgt!<FLOZumAT08c4KNCvRHAmF7$HHQY6Pp|t
zjjQlU2<(9o0QMUk{tTW+!PVyF(jAOmzl$AhKq!H^GL5f93;fMU=a^ldj1rsVXpxI$
zR_8ycW7-I$ryi2nI}pe955U~Yj<Hl*sG%l2?&JK73g?E9?;c6!t$(IF8bWT%s*RJF
zFB!pa+r2GpQgr;%#7pFzHGrJO(g(v1E5;27$))f-{2!2=&>lXP(SiL5LdsJVzF)Ct
z+RJUnjzn@O-eJZWCTP;Ln-sPhxOE@?E6<{aQ0Wpp`Derh*OzW>=F@6tY}SLro%`?f
zWvd$=>VLvI%$6+V4@qE@QOa9S6N+qIIq*RM+?TU{kl&8UZN8CF8=^_<#<TLDF-^E@
zeRt(!opK#3SIPam*Nm!_{ambUmo=4Q!o5q0=GVm{uzg8e{9P1Q?t9>A;vPT&OSA0)
z&6bH_m2|b8M~7O3F498>sl46)UsYxucyyn1-RB~J`-jfQhrwnJ4fer1uQsK8P<MNZ
z!c)s~{HYS<4X{(qjTUN!9J6hn&$eTTxA%Ka0Cpwk9N@3k!+4bBp?GTMlYjHoI@znZ
z{$ax1?!Jm`=g_^UENrR4pQEwCIm7d=afltyN$i5~CH9CFET%3}9x1hYSP;8GU7#_!
zD9|e)(Slp%>9G1Hrbp7{9fHVmi8FzYO7zM9c2g-dfkJ0@Q1VLK6=#L@XLWpc4eLo#
z!OD?31sxDHPwOm8+}+ZWp<(T`>=$wL0O)I6Ynv*(2nKW4Ss_k06je%vZ00uUd1eK)
zf`cZr6C6%<!n@*;i0Dazt6!C{)Ht22ix-bVbOg3VZOMFzw*q1g0KHwOy*8d0A|t>C
zR<q$B2RUXHE1ia%1CDd{SzkTWX=4{L!z>DYomeX_DbA=HBVe*qzB)&7y$GD0#1W3#
z;88`!w8sy{**3!WP;Q}|Z5h@jB1<?W1JP8faKFN+NZ(7UH`Zh|7Mt4QNC8yIF(xjc
zF&o`5qy&2;bHd~>3!g1J3kQx&i7vYK3GACa(Foj;J7n&>>~T7hos=Jk%W%%aS$v20
zIFIB0$C4V=eBlMzb+rWN^Oq!};uO5@6Q+u#F);&+FL=T3qr*;KBCbdaJ;-01+Fdug
ziR+)2@MwxYhy9}I*WI1sb9dPMIa=u{7N<?Cojy6W9y}nNSA=P_^4xQ4@whJ$zRNx2
zjlwe@L%Kdn2IQLzgUofekaDUcTI{1TZ{h#aFelMb88B&tM;|oKrmG(#3za)Mll-dq
zbO3>i1lsZ@WoTfpErHXQU5<<=*l<8JajB*nmS-jyoJ%zE4SE@PB!Q2Ug(nTdN?T(~
zRCy$b1c+*hj5E`VGWKso4~S&BEdi$3UN(+}J-4cSQue&DOxGvBxq?lR_MZqbeHsNx
z2TVH{Wq+Y)*7LFRv2a!aSzuNtLX>5DDM+zxaf@(~4CY`AN!b=nCpV?5vb?8)Unb`Q
zK7X8Xke_v`b6<LItU@!T>Rg&+4Stbpw#jqnWV2JksJzGlQFjb<7Kz-N89lcvSdR4d
z4FDm6Rih#XBEqmJ=TM}>@6@~6(KPy;GfgaM;_UF5h$bqy29`S@cFZG3tK(uXF0CbJ
zFV`&GW%6}rpMu`2pv)|=y^Mm}iaKYKKaKws4}`V4)r~hN=M7T1If*+~^9|q8ywCVT
znK}}2{e$5g+G(n7>`WpSrNrLn@PUqY?T~3w1A?I5o+{#%Lid#Ym<lc>x0@`IJeXg8
zaDjVJvB?3<*(p)#`nm?2o!_%@a605331A@0(+kOMVR#f^pdoi$-E1gjaB^QG=HyWS
z{k)1N+`Dl)L8{5GXx{__8;ANkc`dWnAcibZ!fv#1LB<+sfAc?}0{Nx1?&qk){(+pa
zs8_e}kISmW#m)oEpWD!jQK-leQD?f4bTRi?DKC=Y71mTtL~xfX3sm&3?Hhu;E$bH0
zYPf)(+(T$(3BPI-egVSXQR!5{TfvisaCU6mOS4_fK#O~G6PM8wXp4{-9q3ac;-*RA
zSUF=4tao<SG4Cmu#L6L4;N`6j;y{z+yIKK!!5u+C=E&0q!jmxrb0h7sw`B2tpzZvB
zS9x4!U9YOuG-jX!b?x5{H;`+6i_Eg88TbV=<?)58Y#ak;Z10@cU6_5rxJ@Kh-l_8c
z`;lrc8D6pQt5U_dF@_kAz`xfMpdZnSARd;FW}nQs7gc)sF=W>5_#E-N8MLJ479f^M
z;ba#=4b8vVb?hpld@d}|1>ZLu(MMSU?&8PPG?3kKhsq0l)E)|{`9conSd*Y<F~;JY
zt}GufA}FLVQH+-feQ)bX%9+BOmnA=ETiiuhC5h(i(gv3J2hfN?T@X%HVWP4AUWr85
zaoh%vM>eZU=M0wRU)gqI$s|1?I{Fd^=9E%khJUT=)CBkD$P^ct>@vJXAB|~e1$P5%
zrzk<c28noZ#`7oMc^qbV1p~RoyqW|==I6H<Fu1C2!td-ea7wT%_~5j>W#{%%#8R%1
z*-rwi^SuHaqy=i%jij(C3-;J3`SZJ-s&6$2R)keQtHB28BGj;tvY5YuO8G?z{Np4!
z(^x1WfCzX1o^+@Vkmqvu4nz05Y;~foFWzNaA2R2NnJ&I=<)Qm}van=_Rd4f!QHqCt
z9H!PX)2q4FLWF~nGzykk{ha{%Wi8zvZ%t@RRensWw0U$b`7m6SDTy!I^Qr}JO3P>Z
zrSkwa%0pVj=q~cXQ)5~==%=&cqh{C8=mJL&FP@ks9dHJas@t$1xEK=R=ugzI9RFJJ
zcCpQmyr)*dNp}*-)h?Wt3n(!|9W#+Kg<&aGZ7x$qa_Z$xv6L<kjCER*S?*Pyp>gq1
zlCa|6xq*}u!Nm>zZnyAD>Q2V#MsPE$lf}i;!H*^-Mn+q@5!u|Qp9doecvwgR7a&FU
zGGt~Z*?p({1D#4&F5hco6DqgNMY-Hj2k1Db-(#TJ^H*}G%5+zyIrtp%AIEMLpW!#<
zIrTh`@2pJ6A!6+(uRBh6fC)D?B%~kIneY_-7GM58u+EX|R3U@eR<53ZE0q!ImF`EY
z-4W}I1!{^<*TQakY#Dl5K6++8S?+EfA+>SJ*I9H<IRusC{$#Wy0UJV2&~nkNCYire
zxj|?s?fY<~TfpisDExojblZ4=Z7V?Hj=ZQbBSL!c^;ii6Rre^LJUR#{nP|m8kC8v|
zG1M_b_fqMohT=h5^0`^R<@STWOQgfqB2ONfow=DY+f-=OSnItlhBjsfMi?7zr79Yk
zo4kqlG;QA^s;+`kvlre`2_&TVGfHZfuzUJV+9IxPC8;hjqQJn`VI!}ck(AMzpiOYh
z!(8p3(R_9#ZYs*j#l0tU*U|Bf49sS|T0KQnaGJnpB~BhAR)H2^Yf%oczS+y$&1JP?
z{oG-<YI(hS3=acE<v-qN6SH{BUe%#n!WZ(^*+PE+#AQ@}7GOE_Ozr^l_>oK9zc+)8
z)xUoQ!96Pesp}4<MyuzIg-CLx%DhIosT*``Zu<kyOz2i6?U1B+Vo}dYXqM!xYV&PJ
z)*`GxQbmQWo0Dxg_rX)loHibnjgrH)Cphp8>FaJsG&#q#;a4>uc|lG&|4|6_qMqDf
zE@;2mda&v?UU+>?q;1okOY{L6s0D&pR=aY;ghO22;LSUT8dYV1@d?3bax)uRpsV2D
zfxKISQ?91W_*j*az;+X_!a<aywB?Q8M=T)UlWM6s-fqF$Ot8W?P7;7=xpzlr^uo+M
zoqoL}gf1sFpd^#%bc=4e(6ydEeiv23PquY9JCzNH3g{e@gOBvQGIxrFhV0cIRQ^rm
zM+Z)JqaNm7?|`}J?*8iyJ$~TG+W_<h-0p1yAakG`Ce{A{)~Wg&t8$)4L4j2u;(5TH
z8d%h06Z2MAJzY%VfeRcXj;Us*U}uK&Ah|KeQ>Zc`bTJ9iql0_@=W0X>6MuB<7_v6^
z2dPPjq2x*`FLT50^_U(J5Z-f;AF<j!tNL5R(4>G~n+59@CGOKB`ikc6WnMe?hhf2V
zflPrZ5{p`h8~kQwRfyZ@y+_~eQE)bDe<g$?GbA$8?kaabT8T)8fk1k|TuD(RUm8fa
zTQ`CNe4N-6F#r(qo=COd_FG4gZ!`EZNCvpDrIe*x>YBYTYNOTf)lrC;*ix#CgT5lt
zG6ua(#moAZ*ms)(Xvy4SOjP6}!noC*cu&>76a#z+x6_T0@f`((D32_B$i36<D@6jj
z^k%^oTo2lCd#i#`>1GAMa3(8`)ZZI#kuMB#-1^Q=2wAeqHwf8v(>HQtiSh@sn_841
zw;A|FANh&}=5RO1w$IwofQXG5(JJmf74&G|f_y%CcMRUlk1!))3XC43vd3x_H;!h6
z+LT1+H{)8#Ch-3v4eSMNMx=J&?NG7EELad~(Uv=#s}%JGyqntic-T%Hl+uya$dzjc
zQ{VWSjiw*0t6{wYsyQgxoqCo6ZxUZ!W_IF+2c_jtX0`R)wp9%5-srwNXdm(5qYn8M
zztB6oVa`I<%T8BjOv5twkHPmcMWUBMf>v-Oz^8%!8r9TIO<`$5GC6jtsBMnY<v^CP
z3#S9ecB(SytHOwMPxXDdJq;wq`)SVOMwGdi;js1}BiQo`z@TQccUnX3ck$l1;YK91
znB}@bPj*0F2IVgw<@iW2SV+Gd@#va2y@<HPiK|j~ZdKy7Dl`cL(SQLE9F80O%vn(A
zybvHTgoleKfbt`BAf=)wW4X+!QLFsF3%W{yloN}Su9=Hoo;-_cWxS0uC!{n!GPxS;
z3DYQ4-fgE>+!46q;y8B)d#06$MTKBA4aG?ooYtQ8c<w5;txv%xlj?Q&YxJ7{bIFSZ
z+uv2dZCs~5`47r%!FQ*T-&9_{@WfYtla^)DiBEUl=JYQhJJk{|CP5*A8fFsj&BP2X
zgFrW!X`Y=W!(Pv2LUbU(oZLp-?s=$1CdTL(q|6~L9+M`KQ<5WFrx1-*w0axGc$fqN
zC=%($a1OT>o&B?L&3W|`1F#)IZJ%ZjZGEQ66&JGt1*BZ^v{<`tlk`vR*sC?+EMr5t
z!HY&91UI+cn^ZQb<Z9?NIf_yjP+S-ZEnl@td60P9b1c7p7MXE8iuM8f&nla$Fc$2i
z<|~5E3np04s=TU3J%@N#!8}L1&p1;kmyWqByz1m_#0T(pDQY~$v4Id34JIq=g!tNU
zM2|)rFM3>6#myktkVK|J<Qv}s*1%$l+fJHZzqKo_DT5|~<erXC(i*;*(a?kqiv9R}
z4D!8y<ZGIuV~ovOxD8$*3Yz&&2cHt#+uz?AK^Y(zlOfLOd+sb((ZzNnDpUS+jat^I
zme1)A(z)|orN*`Zg~z*HQ64_;0S=?0neXT>KkokXNROnZ8Z1yiZpq|lD^7gEz-}@Z
z;I8}k1%0MnWf>mn?Z}ElsY_<0h5S56c;TOV0FK*76oA1LzOihtIA+|RZ+_Enw9dAJ
zrx-99qkf~eS$Q+(Bznu7z^nssfLOx17>++9o9(A#j6spzfc80A(l%_mB&Io17WdYq
zuN8P2@RU}eI{}9}kV?l8AE3+Eqa11J0cW!TS^6?(rLMW;x@Fm6BVu;b9m#BBn^(+V
zE>oHhgp6O9SAbix^VrnL<C-TA_fT5De6y8Xf!i^q%S0^6&QX@X3_-1Q%G#6Up~1<@
z7GhX+BI5|orzhe7TDu;^zA#K!pCYB*Mfnw$9>Z##d`a{&e<M77-eXRN;?qe!S&gku
z2C-*Y?H35w)4PSL$KL_R^jMa^$EbDz-yBZFz>LKTZmmCetyP_nE~vPR5^9W`vbn59
zMX_uU!M-VEHTsk-)pqO*Oaecl!zwD`z-@yAE0TfASs{s{mSKVWBQ8gZjTmpp`kKm_
z?zKdFJ*gigyZOjaUS(ndHd$!r@TZ%Cep-8vNvrQH*LDfQBlOpbR_Kd_Tb2@|vXX)1
zP_4$^@%5mdre<pewS;$%J}NuRy2vcAdB2s;BQFL*)!+z{uo@V)dIGf-Q5`J+(b4qY
zLDqANB(B~`i1DC@JKY6HVC(UagR%S8n?OBm>BF|MhQ%zSwz$pp8gz@xc+I@J)SwOa
z9P&Q6dF!!}v9hWs)>^13lJ!r&ST{Qa?0V=v5I_iDB68sTQ3bVY1+yvpR{$VVf`;<C
zj-gJIu<G4en!tH9K+lMKfH5E)h|qOOVLdt}aEeo>o7`t?h|;K;UpsdW@r-$5ts2t(
z??esPS-vkq&I-Gn{$_Yvg@oBUF7w>z5RHyWiXhHtvyj1#7?Zi#M}KwAL;rY9*Cv%J
zCZ`6dEioz%-UUE5fbw(RL~Z^UuBx$AuOi-wha1TsV|z><M5NX>rtykdfsC)y%ZfhM
zb&9nQ+-Ej5)aAx3|8}V3RQ<P5VGf1j-I<HmPg+RUx*$y@_Fvp3o{918T_w*f@rKwP
z;>K?P-C@}^{FHGJi><wJhW^e1Pnc|WZ{9%`X@>tddxt&Zh~?r32!=!L_ExMi3C*`~
z&Evzcrn+zwlqFg#;qVlZYZl$S(5e#ohF&Og$5={I)T%)ipR|+9%EffhP@6MA8*Mv{
zw$lrzkydd#WU{o%H-ZTkR8F3NMV2K+OwbX-m~(lR;t@+_5k7O333ZOb?$|~T`<zut
z6L%j<bS92=Yc`gs4BgXp!fqm%$VOxZL>rY-0&dE5phO@tUdu{(t8spr128v@>PI8O
z`rk9Je()YMN#!jRK9g6t9}XR6n?I%e-y0?^9h>`dB;8~L-@NNys8^EJWWayr1WmA%
zU!#9F*Fd4MYY;Txbign|{nUv2RwIYUR6aWxK@)BRsUdUDW07{T#2YrI9C<r5+`HwW
zv@)6z1LI<ltbFdgT45U((uA3gF|_fQw-U-FP{$*uo5Jp*VMIAvLss+#%cyq@O&<^_
zN@J!;jY%^w-Zs~(@8q7Bdtzg@^`<m&h#FHmU6SG3Fs9~pY7|CScxQipAF0dVVUo3h
zto}nIlfM&=Md4tv{l1xYB*bbY^95y#dE~9~ghOmmSs)mn7;OY&IgraJ-L5r^7?5LY
z(|3@J`x;%PODBiGF)JBn9Bmdc3sk_2RaKDUv`3F^7BY~aKqHe`Qf}b=^xLf)>&^9R
z;;txjTQjRzW){nYnK95Ko9u7TN35H>=HzL<JdCD=L{s}WppWT;m|5tPtT&ui9~rEd
zD(89=kb7a*P9!ky#po5ChHc0xX(u5_s^1IFyOD5u1%DK;q7bcWp0cm0vLk7BIUxsN
z`=9|ruyH8q0~`<fff^dN$?a^WY<7TVfRryoHoJ5FBf<IU!baL-5_2<qGT>j#<XCl!
znbie2Q#*ipHNOY|{x%93ZZs7KZ_N-09v*^0umFM<Z@e_A?zMnAi{DARf}-}gp}mY;
z@Z)rlT<1Erq-r+U-&}HJ6N7E8dyJs31tZW;Wb{L;;6%rhl}%L~yc58~a=YKdPf`Fo
zA{I*LPb+fL>sGl-AL%Q+F^`KF+lC@0nye$7-S&l39<vU4TqpiguurT)QtiB(oipZk
z&fZ?Cgv_7nGC@z=m_d38QJz=H?^&&N<xE>e!pQuVszSL4@J)Wn!HMh<aB7*TS$zk_
z`p(Ezb#=_uxx#Wg1S@YK6`4oHv2YbSgy$P399wq9#XclHYG`~;%frH-veSz}CBt!(
zFOsd>AE&9E8lzDdMN<5|g!JLj$Ezs;a_xHShPC!~#<<N}SKCTTz1lirwATdgzh!_g
zTK<lriA1@4hLGxdOCgr&w$PBqZ@pn82E0Dwph`7cu1FlNeY|)M+jlc|VY()dH6_V|
zzNKaaUlpuz_}8RBl`k-NF$CC>Wb*7bqFR2Fh0Q6;ZXvYmr{y&C)7v(YB2`2V*<@?7
z-{>0vz%3q%{(gn?-5m{3*geM=KCT~Wh~>Mp;bhpp9vTgE>~Hw9+HVB<Hv1i@jjZcj
z1b<e3%LOWIy(2Eg4^}&mLo(|uTT7VB#%ni8CUwZd)NT}rLF+C5*+sFG_Bc`VG!X{I
zHu;Bs1~UW-u_$coEJB{n{bOh<%sOB=9zj1?Amj9w1Q&O3<%RJ%=83uCCqh?KYlu_X
z=@9Eazaa6she@v;i4Hv|zzhuDvVF-@G<s1ddAG06dJ;@p;t=2Emz-AhRe_*>DLpn!
zxM)-BK0Y-dYZI`#W<FRlphM5Ogq+0nMW7lP&~BeY_%joH!SnE;7W;byPz(qSxO-;H
z)Ot+ZuzT9&gLC?z+IWw!%{C8>5HWr85T|DxQh1&;RAPdrua}}rsR~H72r0&3Dw9!D
zg%JZQxy$_I;N3`n(lvkS!qIZX$;hP(!v_9r_9I54v7$P%PcX~h{}{apV@>oUW&5v9
zpNJ7K%FKzL3jIwN!reK|5UfhJz|JSm9q1+096APu8?)r8Ookcx9vnQLO+v5@SYe1@
zX{h{D{As-3ytW{Dl8a(qpz05k>DM2kr3Emi?r3MFD=#|o<Re61g{`RQE*nTZ>%A08
z8@%5(nh2BeA%v|1CRjy|$H&`&87&Q&X0|iR$*WbH)4dB7DIJ)Yk)Kg$DOxx9q!r&a
zVp<7W)X!{dXj~W&eL|4LtLXl&1ZbasJh?u44a%GNVq0)2AYo3b5zgHT(98d5?(i*X
z!w^Brh#+$m#KxXFYR`a!M$l}cu+1T(QlSJARE~lH;`$d=Rf+^rHw9Yy<Awk5(kLI^
z`b&955E@o*_K86uL(sVXsNxJxep0<|OVU}v2_p(R`{Eyb_|IJE?lILu(T#RvP{tY$
zOZa^=q%X#C*ncs2Kk2d%G2z2LWlXPvc-@(f$%Q_}*jh%-Ka{kNr38W194g1@Su`b`
z*ekyVrk&%MC^`-kDa<$by5O_Kvtm6Ay=er#Swz;5%A>fRU1IazXk52KLg)}(+o4@t
zC0vnnc<f6%jNQ>TacixpIs?h<Od=Yb_PE_anV0I+ytqF7l<7zT^i!hFz`E<q0ApT~
zbdJ+hsH>^Cwq6rOasdB70KkI>Frw1%M-r}%L3$#R*9TmdR?JWjo|@tI>lf}-np>k)
z|5N*(gv}(Q0sH;OjahHQn;M8pJV?G+5h8Uvk;qmg2)w-5c)`Us%H5fngncp+575HC
z4|{yCBm8R#yfNNj_9d&2PIJHJcL6gPV8Yvja`>7x1VX<Y=U`c_{nQcw9k};u0Vo5{
zg4P@7Q}J^oO5n*iNF4ZkzJN7btfKM-=4@Y{^&>3U=s9RiZy`nFY5D-RO2H<olauKe
zd3Uc$4@>u$YlF|;HP!K%guZ3=Ied55ts$g5Cn<}LC2l?iaZHFEDVzXgcwp8?u-6nq
z?xfR^5Qg#-fr3|BBta!K)q+=ugxXx+s%cnXWt;xOkATGq>#0?y#3u|bPi1gLLtAQ9
z3J!L17l2<WrLa;ty$s6h`CXX6j)g1stJ|QPRtjG{YTSCZ*cu`@gdnyX30uO&3E)L|
zWT|E;1n90?Ge?npQrS!#Av1%$9L}PK4TU7uEd3U8#ddW&hHT$<_yB$$7z=0WqaU^m
zmIV)_dT*moXYOx)!2P&3&D}3PXI9$Zt~*!a{6%SqtwbWqKu_9j@u88>AsUQk89lXq
z8uplNLXOV>I{%Bc(lO0U6ZnuE-(~qUxLu`ZjvC$X+V#8W!MxPFl2g}XVNY8guB{Ew
z2w#5WsnwZ8n)D77>CQOZoz!qQUR?_WZf;ExVx7q~NgxRG{(d#bYSg*<QJX_UIgZhr
ztnR2t)2l3u1@+mXI-F%#Z5d4vloY7k{)i~a!`(EK#XRHqn@9}^C!o09UoS-6u{K)N
zyase#;EbMX2{AJg*69|+c2`>J2|`)~3LX!eZr?9>3kofSxur%ja^fJ$sc5o9V2Y01
zzpSq#s>@5pw+yKh?8vZ=!n24Bk!OKj8f)H$%q!`hiPq&7gnV1kAQ!?fEp@#3Md4-}
z+YJ+{m=HSl!*S$8P(>RrO=;J49XdlZJh;+!n6In`Vr@S@tc+Gd4pS6lkqe)wA}_ev
z9vT=@k7=dMeJ!j@Zvv}5I;23B1CW7#o%2V^jT<Z$tVW3&+ki!`41>i1j2hxSjp*ct
zBf$L0q1;y!s^KRu84(d^7A#Z#!T(9B%Q+4+qvrpF{v}Z-0Um()EmY%u?X{ha|Gltn
zIQ&<zP<AKR0}OFATlo-Ira@tV{wgm+j9yJ!3xSXm*+i#AukVw9w?3c}rO_GtKkubS
z?AM%w4mWFMw!LH-`GA)ZeLH)KtF)+tT%-dwm6Ssiaw9|*HeW*L2Q}z+Wg~@#MHZN4
zyIJmqHeB<?P#D}*-+E!vyx0EaOz9jUIJEj2JGyJ8N^Ypn{(7kj*{M)YFr+vLm8#|l
zNF?Yn?StC2Z-AE)bOXw-#lGc<ODd7G81sf?5B8~oUp>u`5Jc@N*kH6>5qZAF=MLHY
z*c4i;@+$?@u*)+tk$79Wd>jdw+vU&te;TFm2=qNL!}hLsZ;5sg^=dAfK##LwA^*e6
zE<)E{b7yvSAtFI1oSycm@}vp@A2Y0}s?=uf;n;_}mcfo^6m^0ri&9fa(iOV81D1Y+
z>dmq){n|B%B_7;BLeNenmc@8Wx=lk<u~N<f4m&95G;uPC!s?n5!PgOzXp=Wt<8W~0
zTwq?Q+i{&Hx5+pXSsZ&uB&q4vQ8=rOFnDvNC|%qW{MkLx-AdqK2aSkGlGH`4|HP7u
z2zt)En<P}t2`3suFL#T6+sx9nq>97lGtjc5G}^nOR7tQ%SC^M4<<7=cc1h8$%=Ihj
z$;XTzsH`L8Ed>UkD$Bt!oqIo7^9ZBph<-7<iW@mTskA@|k&QdVfAO)x7ZA-quSu`c
zolp2o)E7?~(&#=(&vTK$;qqs;BJ9W+_rm)mC(HhEE%N+v$UZk-j@)yB{Nm>*h;{Qm
z;#vrNGgknONH0*t{ZK?qmnoXmTG?=kfGBbGO^sTC`!y~oiHSb8Lp5y9pCW0>@zHT@
zWz2M_DIr`p#u*#nt|k36oCO+3z+lG;kN}&l#|RXW(H;$<y=ZR+M85aXYe$4!TVKRY
z7PV>X%Z8&?nU-y@XI*)*RWt2w72k3ZRZ|Wm2k_cE+QfxaDorW`PoC=1BcKnd>tl%I
zB`7WE&qO|^xT|xKG@nU4c4bQY9;7L7&a3Z}x0V(RV>ov>bXtX)|H_(P{k5fyv{1Iq
zZ;J3XW!uc}e3Ph?!T4A5W9ylI>~~a6Mo(~ByVy3HoXh*-7v*(b@~_D!3WgiyhAZWm
z`#;N03MVqDRuUz*%Sh&#BcHTl@0<gK2%05J;9Xe^x;tE<u=N6V-XzPuety4fM9$72
zW!k%iu1~yz7I(2sXAPc`<9=VKATi&`S5F!s_a4`J8tmR>%u9ca#G2v2*F=K-6deED
z!G6j!EYwaf?F-twSd%T)iQMjw3vD&8CI<6Uxh>-eP}-*rSH%%~iF;8cN;=;2wn>`b
zO+h#ptQ|J%Q(6U90tj=P0F5-Vtw$M-jM&myxh6SL83tRlUOE*Sff*c<UaT@<(_V2^
zQVU)aoi!o|u$4A<@cN&oYP9Zgkz>;=R>5<gcX7UJtf>xcj+^%oM_8H4=d|FTYW)&N
zh4NOYC#ros`P;C2nA+<!S2GVdBO9syRpE%%y{_ou4i_*DC{)~6^G}IV(W7Kk4N5c3
zB8Gj$a*uf3{IbW9?Vr6oXt=u+J!y|isY0YLW^z)W3U(HIjJCm|*N0{rLnxm9HlAip
zpsvdbF;Z+7@7c{*!=I0)gYfiiQO>Y|(IenbuF1z^`>Llqxy_!5`z>8Vck=45Gs<}o
zv1S-(fk*F+P9NWr!{MX4+DcC?ApoZVN&AKhyBF+0BmPG)wax?+CCJ~MCB2!<eMx#j
z0)B!U49N?z{SA-7><#NAFA&w?sjVPxf)m#<<f;@3pId|;s^Trksn?Dt&P=-jE&}V7
zya#u>eml!qg+#={wM9x9%+@b|g)l{;7#*;^9urYCP-^@-B-|9@80^Ld<z8tpcI4>K
z#go5%mZI$gs#ZeKQB3*~M_9GZ+V7s-9UKF1tGiro>)Cy5->z+ju`v;C*;^BeLZW}(
zQxM~ttWK-Y%I2W$%yv7zYOu&^JIv{LX}F~JKZ$(hMKLj;`l=safd#w*^iwshTN}S#
z3A|syt2k<oVLAZ{4&SAUHSNt_rJ}_!iCz8!>&H&RF6}HZh^?&0k(XChhm!Q#?bOqS
z!ow{58kmZX(!fOp6H=*9ht{iwko0oXkfnpRXOt9N$s9I?Q)J!8!PQZDP+P^gV|>W`
zcIy-~k}rPF3K(kue3SHV7ENkA$nGhF9-@M_o)ZUY^`9s$n>^kc0C%aEkt)>QIaGs%
zWcL|^nUY}8fVNL%eW-P{Ib+FSCdxqt(E88FWjxWpIiKC|bqJG!9(yAU9nD4lo+n&p
zo;L(@(mHGnD<67@;-P#MNCQ}TuUUPJ9A<4yJs@Wkv4{Jqf4RplKsh50|65*MZq_SR
z2nKR$@j8a~0I?vfUw@%Sss`0@daXxNo1E0L84C48;ii6k)Ff#=1T`!P_ej|%kjn|E
zy23PV(QrKguJ>N!z&DDwFPzLufz&zVTJFH{60mAn6|}RO;i7AMqka`J;`ZH{N%%-$
z)@|~nH|Bu-S7&;;H)lFa&`8`I+mBqEYA;KO(Kg=!F#P##Y{JW_wEY+)_&LiWtU@y(
z+7Bj_jR9zIuWUlt*JJ3;fyo_Z4U+)mTjH7{O=4wS1Gx6N_A3I~t;%O-mFUU$7#$$C
zFoFsyTu++Ylx&3654Ko&Z<n)rL@fpJ^PctoXps_mq|65|!AsirVs)4%UbH^3`F`;|
zRqklw;9XgSnFtTqDAa^S-*6R>;Z%O%P5_q|B_l3ke$nuEeqIt^p8B3`i><<CeMeG&
z5q4w#<z=F<S<$|=Hz_*2!IEp66!%`>nWaUOSYR1yiN>5Sct2|4T2gRgdRxSLGA|VD
zKB;=%DqfE+r4ykkYtacuf&QFg_mv?1H<bT_{0be!d(}&>mz(Z-oMMrtCvYEH^5TGo
zs;?#=B>&41&qV_6#@da#Os?b1eNkqI$&jAA!Clz9-^C!)binI%jjz{HSD7oX<nGw1
zC&;gwQtdO^2o>2G!I>ZN`ntOGilzIE-pdSt@-{a;z8oWTCVmcBtaag?fYZpJabV<*
zcu~ss)BLx0AEcqypsMn}l!i<g7O*LZ5UvAIPx^va=E6(=H}7X?(CL9=HT)NpG`V|N
zx`UnXm?pvYyXu2V{aJH+uHJkZw63x6r2o&vjn(|#w+mAj&`Or!!p`ZA&0<z_idK*G
zq!7W97f-<YiAQEb^a&!jW^W}|U5<IV>L6JpM8CmMedcqzRvd39K!)RKg;KgWwe2%Y
zbX>`;>^TU@lG;)vABDL4)~f`Z%BtHwrK1pA#F58?Qc5$vsEcZRku4_mq*bO)H_68d
zzh;C9o3jaawWaa#NSbJ6&z;JPjAO=jlHYqn1(J&K1zhf4(&&ny4O<P@{K#(F6*c^R
z0OZDD4oMGBqCI-ot@@a+5#L%#_mu%-q_x@xAn!*yb!4o<)1T{T{D>ET^`p#@8XIbm
zl_4Lc%t}(MsQOZRYF9hQ7YRrLnnFZzPc!h?<%kIGY>%qFg#OuT>riWQU;bcRwe;a!
zl?~mqjghqRb+^Gl&*qnLs`@`zRIdA)q$7rUra)x$9ia*n*2(4T42^)wABt~Kw|$oc
zaF8{fQAOxsk|tz$#s;}7!kw`F7|OaP{1(57IND6g&!EHxY*=Q&WeTQAWE8YH`Mq&G
zdlHKJ^)L5k0Vem-sSYIdphsvdu#R*5rm(<R_LPzffWIuDKK;XpXGT6=)|}`>L!7y>
zoTN|Ke>io9&PYojtyz@E@+Ux;U-K!Q-`E|GSZ<W8nB%${iuK@yj4AHlsrFiREhnrI
z(fipUeEC=uCFbkCzdoIV(YfaAk;?ZPPzYRaIr9UmxFMF$Q)qQUf_lzJE8ydUL?!}Y
z^qt#Yb<I&Of>z8cBS&tA60E4s5MZ^RlD@6mp2oq(KP%BfoYW{CWQ{Gl7K(7$WVZ+$
z*!oaWK-lExu7S*8J_RNA-w4Qj<)8Kew|?AU5$zrH;RqN|7M<>ESx*Zt1XGV)CQ|p*
zP(v))(~Yem+75MV@^Zz=?y{M!z9y8}pZ_B-7=uE8V`b3Y&3#XiSAL<t;V+}C`W*?T
z1EM&Ec|vrjWimK*WuD^%DDt|_T~3lWmLig>6X*d71V>wdm2rDb8M+AANl{%#G~2`Y
z@*H9o*<>vi$Uk7q7r>(1^>uVFQC0i2sq+(EIqB4nUW^bt*m_-c15&yzAC^1&9B%4R
zTCd0k?UaSa<iV6tZUVO~LTsTBYdO{yt%ElP8<PKrzu|vX6tcYuXflS(^%6T6CybvV
z*cY|<HxPvu1E@{j&Z@`e{V@VHfbN(uI4;hM%DhR$RZ&E^Y*c|n0n9+~jqWhROnFO+
z^8i`wLO+D?k;d343>|Cyr>@{VZ2zWny%lfofw~=Xw>JL*^K->H9cZC#F#r;=&^2{q
z(G3JW*+uwa3LGf&Zc(NQ7;(h@U;7MXH8)7xcd#k;30|I9=x}Hmti^`y+Ja>j7yIDl
zE+zbP_(^BJX`|_JLFZNo%pTPps7X0aD3_ZIzOt~^phmv$;a|WqE6&v(9_Y`SYQ=>{
z5Rj=IvLUH|;s~<wzlb5tO~^M+E$Z^&H->V*-y2UxXzdkZnjh{Y_j$4E`y7<UJqgmB
zpdXA%kREFRlC8NBOTfOXv0JfRA6KCu|9%u>i%_zT$%JH)z9sQoX&CBO<Y<vJU~Ia_
zV&v({IkwiV*9;ytTYbHcXXp*luYo61``o3Ck7E~~^q|QW)r?{+9WQ!^%dIx^uweC>
z-w}(khRdBij1+T2xgqn7_lMhw05QQ_i|<}*Qa+U$r~vUEl>h(u>b0NCBP`5qoO+fv
z&dH^&zh(K{;>1%O>J`bz!*$zE6*n+mJ1oYyf$=qFKBG>lj|lT^SXrgLO_$|TS$cr$
z<jF;nFqY!mlJM^T$LW_0G%CgpyH5r&r{;H;5)h<zZwoV^Vcl@@SZ{L`0jx4T0K?Vo
zUh(6m?6D7a_J6o0PPKbx2bIt7=k$-yI|w$7dpkKMd&_bdvQKVa@1p&1BzXf~x9t{U
zz|{VP*^ukl>tem-hROjQIK*l`dthhsQ8f1LvsIGdg;i>6NMgpJABWjwz4En$0zSrB
zdL_$`-WY{B%txbS27OMJWep;(ZZA`SjWz(ZdRbgIyfQdbA_3qMW3RTHMGH^_f$M$_
zQmi!6+@SfkaL(<tA=T=>#acVHcv{HT^Oj|>U*7z{?cg*V6K52C-;R@)dMxc;uNf1o
z%p4i~QxXyig%2$QwRGG!E#P+X@Da7jBlu^_=@rPqzrxEeEg=8;9NTEkyf*DsX;9*F
zI7L<0*4zoij<^0^is&xYOncBUy))>t79>+RMWXZhkLM6+_;2-vHti2JMPYxwo#J5q
zAgU}{DHK`^P`>|19VMCTYnlviuRbKBW3j+4ZVk&>bY8Qw5fr8*{aA2hxuoHC=Owt7
zcVGwQM`!r+F96cudXU0vIE?MCeuFTajn;Oiym=O`6vp}<Oqc%$Cz%BYr)M3orOo;^
zs5vW8#l&U|C`nCzQ!W?y`RO4Y-HYp|sB96;q1&|p3wwWmnfb-z>*kNYWHp?IpsWLf
zh**Z#fRH{<A}EoCYDpD9tMlmqzKcV|sOorsdXBKu2O_;uias$#LS~M7NidP;CVbk7
zl&7SI8O3r5!n=axjvt#^TylLF7(*t!t<y~3_FIGk+Kx?UJK%8x6UCw18e`q$Qj>yK
z#0;Qgz-{b1)L2~*oI)0C@ZI8m^1rd%=cScMjuFY9Q%7mNS7tfVo^2y`6P1RW`=Hc-
zDTj(*TD)2LgY*&KZ%_V{xX^Sc_SaSn>!a4VPf;VWoxBRqw4{#P!0rnge+BiLU>?io
z0@Sg!i6t<X;dmjINFWjI4(%Et^IEgeV7!;nYgq+&J--XGs?x#-ygSBp?AZT;M1;tM
z9KqmBZQdsdv%{{grbi1uYZ3ZK&+NGl&RuEg4-<WHrm`L5ABPZc#szP3W2&)9V)RqP
z>+$s>U;6hf2~I^&L2-MFxVTw5;#G;2Zh-h2_~Cx_%OB52Q5JZ~j{Lfz$API4Q?E<#
z`BA<uhEDpRPBcNLl~nlxUKbNDGo@LrLdT_zPBST(f?1%fOod)VE5`|~X;EY4eHzwU
zU6i%ta_vfyg78?Ugsm_uew<6&dwjHSa8g9-j20vv$3VEH3NCRcn5l5r!$SZKEv<Vb
zTQm|?!i=FFN4Nz#=rO|19B|v=3E!UHe8VIV=-x6Q@jj@Cq<h}IHxkMUuOmRAdQUcH
zYQ6O7%V&3N`2oVVLBJ{sjo6*!dHD|9ZF|)~Hh6E^9b6HG+q#m-G*X9r>rLYLbh%uA
zJTT<ejAc9r!gjZcQ9C{0xiT<GA^&8;oBsDB{O#`-ciP1S;$b19V3AB#aP(B{EwJDf
z8sPR9uX7hMG#Cea#BJl|sS<ssMa35FxYKD;)&JqE9&h5~&_a9vF1Sf);2!qV)^ePU
z5Ca2(U5j^DxV7A+j10r+rWmfV-#r%$;LK+(<uqBGJhf5>#cdwKlypqgo|u^L6X3_r
zV6;Pg?P4Q)!!0*jiqX?TqbnOsH)`jHYg*zPWd;2@Q%X;(QgyqDa)p8^$CPIMm+b#L
zG-b$!tS8<mhl_;nX6Y}Gjmrr{D#Dr_X!LmdMUz{L5$%FOcP;JoaHu3Vu2V%@;uI(g
zh_@c)w@k1$-tky}W8F4!Q3_j%lUny*lA1dT+-HItbwz{Xllcw~Z3tert^_whtee`z
z-sWa)pDB_jwBEhaZj@xFy>Zm$$K?C|M`9J+#2}Tfa&WF4?u~q<UY|v`t<Q(~p`7!E
zI#IDlX)i~M2v@2ko{8B?D;5DrPAz`$ZMrS8yP3n9Pl|$?R!x>61g?FJkL-zx*4gii
zk_kbcs?90@NHP6YKaci8>m>BiA|1DZ$Eu~Zp$z8xX+fQ3V6Z=tAk^{>s{P>xvzlYU
z8Bv{5_GQgnLNTXI2tm4mt30fLSs130r*FBnReRN8u1MwabVDOq_ZL#Lg;-u`?BC5Y
z$PlPXr=g|&quDlE?q&duCJ1ZH-|>)$GQd3rOg$N#w?|d^zH1XzYqM(u>t_%Fa9%na
z8ig2}Fbql5#HPArFx*N1wsjq$3#@DxhTv8r!PaJh1%AH3Z84`$xxDF+24=fYp|na*
zU6X*}nlfE$X3_iethH9O#OFga>&X^QFYMbGkAo9d6XYg*<kcOoCOmGXV-v(aFb$TQ
zgcHqF;`?rq-$t7h6_M@En_(eW8u0})Er%pgpbmUI&UH3+z5lbE<IBoq1`J=qS}Tp!
z9_b?)s_IClioeb~Z5|%5+Ral`wSI9Ma=ep^u}&{i{YyjmN^?*)%?r?WW^9cT9V>u3
zmn5S@@|3CDpIBtiUineb_*Z_cp`Ix<rC;{sLdnQX<)nbls@8rJfL?lT>LZ>@RJ>$M
zOZrz9@Z1N(dOvrmja)RbnHdy@rWtGuQO|^S!bRW3zYENwkGEk0b!9~FM22VFA=@O1
zwj@B)@jcfrZ~7dbYazeW5K=Q*F?#A>n7$rds!ldzN>qcm$oXN0+QB)ZDFKs#Kd{Cv
zbdB|qY{!v+K0hd0S7Gg%Cwm@MmvCLiGq*du+;_U6!(z_i4)pK4<Q?_cWN)(<%!9dz
z*bW|BBOJSu#IT-V=$uC6S>E<j5%iFlx;*hXsY9Lw>v&km_qKEO)|>QRGxs`wB|_Zk
zf@kO=fUS01?xPsMrm?G3)0{4r(6?~0dTb<A)_)8*-6v(M+&BB)i7s<kFii1?YLGG#
zzC33wAaD!eoI57Nuz_d*Wb71>DmX9@DPri{$~cJ6zkui;k<*V{np5jTKQI49j;LKw
zK;#ndRBpF3;}=b8R4jPBhqpp$%XTAtK*f4Kq)=ZkSbs*GsWs&fFk`D8e&iyR-@+X8
zmkQ+FAg(A2Q1A;l#HG}4rrEo`x9(c4lLUIf<o!f#FWHTi54Zs#fnIYjmKW}G#H{w^
z3nQ0)^p-Y@C^`r)6fP^H7o@s4hCF_+plczorn!mN7ZzvUxx_yxAM$nSy1X_QvB)Pj
z%ojEFFpI@Le=}V)q@0(`{JWF}2fQ-;xzH{%v=apo+LtS{jYgxHF`-g)4+BqO_LQJx
zyXtcSw(jI27Hb(5$~Wk}0Q@_o=SJ|tMQP-qkYwVNNB0)$&d;jXa>ocd9cpw3I%Ubl
z<q1iBW`(LY(0H${rt><m-)h4P<P=iXBu-C<aX-wvtL8Labp?~2>hy>6Nx3~81LJ`T
zjf<c^!j_l^!b>;hs5{Os<sob&ZMLqE>93%a+p8-_fJJeI{o;x#QBy!2S7rZ>Hfjdr
z(tXJz-LScpZ7Ql`Y|ct`<lq6(vk}-w#+23~C{_kSXq}*?i7`J9>6G|11J1=Mh09$M
ze3D_!ulyDnQ)95$wmgbom4Fj@C~}mMsVD1@9{OwKRz#FJl(lOO<i$zTv@AJjw?lGC
zmk<-Zeev5$=d7>O7a*X%(_^Kq%K9%~o&T178fu`HZza$=e55+)ZA)~Pvv@a$PZ*Z4
z8hzfh4E}cxLm{z#D~Q^6HWXDs+t;o-V#8U!Er?K&vg4wVwbsSOSnP%{T!VOHIIJr7
z*|y7Rp*dvhXW=i(c)EY^Ey7)sb#X+yFxY+xNEW5)d${K5J6D9*;kX~#L2?-wz0aou
zjJT&>yi(70W}%+C9++cl=lcQx*ue3_+yS-Y2<~q$Sa^ojYfl*+QStRhS<EvWU;n0h
z`jYMeZ5Z2L4Ms@$`kSbjfV)jolsl=2dFm>vBPBJ4iTvB@;`&#nL}#`~B#7N3tYPzw
z@_xLvZaYMvHz8(3kozfq4q4C=c_@xe@XqYlZs9arZ8J@eU&fZNf-htu6Ed$W)qk<t
z=FEC{C|X?DU;f50UClm@>bjC*g(#bAZsBaK`~d(}9^AYS6W18E!kULtE9e$Or?Iz_
zJe@Wn<#MTrXFjPvch13{oRaU9+?4pK3Ajl!ediR7-tJ;Qv~C;~vaWvq1$zC}=!V@h
zcM;<ycHzQ>fp;MZ<bJx?zKuTV!~)!Q^AhV=*0stYF4h?}1Y+O=MMx>8%VLYVvH6N+
zSuRV)Yd$UGt`V=#55E>YV)5RI*+dSCr3$vOD`jMu$p~(Sp0x(~it%+Tda?B>uVC&O
zb6_2Da_!`A*wA%+W^~L>@vYeoTAHTW0{A2(gZ0Nyn?z^YqKDLE<bpZ?5UQAUbBb@T
zjj-nr>$3~?s<b!U<MOD79WX4IFMvYjCV|=`uoacuiwUS5rTb9ReO}-rOHtME5C_*f
z#Ou#xeb40w{98M~Ss3DTaY~n1Z>&6@7`bnx#VY0yVyc|CD9|;^-N^cB@SSDJLu7u)
zK!VCO)wjBgdq@p9E$}n7Dp+b{A{`Y_ld#upB`!CaI@MG3WMIk(WGV6`PBOZA$Gr2H
zb~#k$hk@7Qj!M*8Bn)~{<;vVRLXR0+FUXfuYoI@!oG-8xp1rG8Mr{WxT391tRTMuL
zkNc4u7I;}2aQb5TbrB_;8q)S}n}>9?rAyKZ5Bf84XE}3nALr&(QlP)Qke<<zPz9a~
zr%8*yTTD|ul6%#hQf8vfY$UMMZ6DiUfj4}XuXW;Bs!uLxe@Nb!M$6p^M(-QyTT^~>
zAL`gzatHIY;ZZn|lfA0O7^(?PA%M0`Kwdg)7|#kM>ru`b#%rZp@f8J-vPnAz`9&|p
zJh=KxL6iT@injDPK7rR1q6R|ljeLDk^TBYHv&0gBI0go2>_8(iwV3_hf$y@hq&=i=
zV!9-EyteG)iU3RmQ@L&`-y~p7mk{fOV|a$ckUx-ITC%zN-mV+1=iOsl8);{HHG{FV
ztYFvktJH2jlBR})9naQVWN(mBHjJM%nrm-R(Su_UigXBe%k{qsbNzJG_W;_SRl9g1
z9qY>ai|e1>BeBSp#Vh(J0GxU~T-q5^{Qm^cL+@PFhg*cYq;<%7TlRFieFN6YQh>K!
z?zSV7?XArquVF3g>lHT@2JOE>B`b~cLy%;gx+G5&ous_A@)PYXyf8w15Lyb+!{wy1
zMpr>TZL~JbBgHW9;KO0r(D8E|fp+JY1i*L1XhFDvbdUeb#7@gxfmHJY@><YBY>MR2
zaHCAPXN}Z$!5d5%82fAZ?N5^3>ZQm2RRtkE@0^XgjhN#W&|iI!J+slCF~*aJBkux;
zQAu+Nn`QFx*4#L7Sf;(4nh(fDVao-1ej(PP7`Rt*jR7@6Z9ia&Q!J5}t$C6i9Xhn}
z-abc+q!u&XfoVS*3{r%*!yn`B@6$YBTHPuiiYhB?k0B;XQ@h6IbaI1Ij>Q=@aJy)a
z@hsH;Ciy{ij-eMKw!Tp;ffhrL$u@FnO-TC&9Avi)aj;n1*bPG;lv?-Z-q+LtMPp4B
z!<c!Y6>!DBZ6ecfBKa@a_TqvCZE38pYGHb|-ZgGkBE(mgoRQQG*q!wsZ0R_Z+M|$V
zeaC55$*H7yK|UN&Wk%7IS9Pmd<_qu>^;=Ge!NQNnZkE)&TBw49Ndnxq8@Bys-dPhE
zjm9EC@F3XB`*n`OS%A_7kTGQ7YH53-k#fV`Utp#i+BK&4W84+HPvfTSwPkbh$FXcz
zh(xH^i(>{=g@Y0V6)pVRB}Mocb1?hbWK{rRIZk~iiQf4($)he;#3e=7`s3I2h{9{0
z3a~5}!R#R@jy)fstCD3@KC_#4zKt-IYI~-?tm}?&Y_fPV)+CyFaqU|)2K@AMVAoi5
zPY#(5bdyD@y5>85i4Q&SL*bFKAd`?nNVoL|j)aodLzsEIg(asV(g-hia{x+S-I}L0
z#S{~k;HbD;>ka>{?HAL3GsouuyKzDo%Ipc^rzTc%fXpjRj#YDCkMXqmAjpnIq4>12
z3;jbKv#l4rQI}zl9w3As7y-O?e&1>7iYx0mSz#uQ*3WptG5(pJK$IVh%ceqwb&NpA
z82k>Z(BuHw7WGF^&A#oNvXHf=`RLdAZ}n%RW}~VQvz!sv-uxDRuR05!ji=^fB#e0{
ztfWW(FDr6K63z$I7{>8g6wT7Zw;ZdB5zsk!2vYaxTFfzMudQDX3sB$btg4~+VwZ7)
z;R#eAMLCWbIF>ycl7Ex5PSV3-<!2N-T|xUqT+^aH(n7m<>=tUT;t!B}a`$SSHq4Zz
zz$sr>jG?G#$rfdfY-QGS;E4OguP@QUz#M!|MANx%ANh(j$j$eqXjkZG-Dc(MFy}Z#
zO8CXZZ^N@1YK|_oI3gaF!>QH^FOTuI!z6I2Yr<C813Yz+B<3I|teR-qw~0!juM4aT
z!+*N(rC{%Bwz#TvXmJyS7($Y}ChTTM>ldCAaw5geyv$qdtH(nMyLHd`A3l6Ga7uWL
zGQEfA48|hGL8#*5r>Lk4-`gIt0Gi~fu)}~ty-@;--#`##U^ag*vL}oTp`?~`e~-Q-
zygsAIYylZbn=MCLd*0_$xw4yh@t4ZyjTmVVrG7NREg5Es7}RHPt)aSxz<iYEmS81m
zmU;ss>l$FDOA`IfT&Dz1Q=SRPo-h0fG7YzM8r~^iSAtejXT!5hjy^Jrz4P56N*sN0
zV{ZM*MgumTJj=wdTXpSHti8_UHsqyRG-Hu|xY9jp|NE&Q;at+u_e)y+&<^)6v=Vy=
z`BHA7?XBOt_hL&bH-37iY2j)eH&wr|t~7;06g29CTvYE0YkjjGx)hbqVQh!S|EBe4
zqih}z3wRo<>Fz7vH$0alZ{ryR_mm*W@G-TVQCg51hqqDrVAKQ-P8T&7bwju%hlCS6
z{7t2&a-vqwjXxFFdD<O0L*?6lh$w2l>&U^{@ut!5+5UfErMd@L4*vQ=!|&q+R5nSk
zk+?aV5!=}njCtJZA;LVpK@l1Aryv568(dwu076`h&r&iCSDIfGpgV_5Zb@=a1k`Hi
ztsn_*M3Md>TFuw!NvMCa|8<?mmlgvHy=mi}V2J_FibC{G4#lX==WaG9!z4?bmwjT-
zBDLUgNT=)sfRlV+(o@m^WbTFm4HoRa7x+VBo)F3aH@aQ(x&Hq?EBXz~5;QP=iXzDH
z_E`%(!!rVfK_3%hb_@D6^ew*vDG->*sp=S_XW=po#XBxKAEfeju%uwBXKjqdX(ZrB
zO9J)o#MdQw;laRbN7J+Cp3bfaPB#bJIzqghi<?Gk29>9C#|j2%3al+fg@Z=R6g)z$
zN}PQ(m8L(v?#6*E_GD;{_3Q&2aWBC62sgDvwOxV+wDJ@needBCXIX#*sCzez$N#jS
zEm%w5pLe55Q6Go5sGho^<EB4Z%9=5-6L4>f+hx#tL>P@OJ*@1=os1)tw@?Zh0ifge
zRns<N&w|KbWQ^YU=E^n>aO|OhkVX3}vJDLW6;B5F^*^c<qVe#u=wuw*^Ds#iqFZ+B
z#~e580OXyPdw<1ndSt}g<9b)%^P$jy5$-m0dA-<1Msr3KoXDws!!cb1%zO76Jl;2>
zN3eKA(R7d)!GSOsA~EeawxMOhmH>mXMbF4ZXTal$+}4#6Mq9gr!|V^<P_P5=Wyq9-
z9x`M1{erutdT=fkTk#87r}P|%b-Wl2JD*Xz88)UEw%p?vVt0VtpUAR%szIPlWYaKO
z$K)~z47@vzpnrtUaD5AtrY=m2wGsJh_fe)7tNpEdg4<u6Dkv8|FG%QndN`vl;_^Tr
zV1pO4IPIcx-VkKr_mpAWh578a$jetdAp3m0<|~-nN?Tsf%M4H)x8lW9?8*(8oU?xY
zfm#eVCK8&L=11N$4Qmlu-o@c!QEj~#lV0_!LYpOg+K3b^JFEmvm-EJ}E#FKw%HWBj
zHkk_n0TNu)qMSM3TbnudYNeQc!HUeDGG}5wNHBVp$&6PV<-7FAhYhVJ(rUfLfzMiG
zjly=^ng)C=P=TJ}1$l>+P{;u;gOC(Gj$sSCpK<+cYRD@!Pi-=H5DTOW(80y>^23@9
zXe8YX$!$M!sDHr?tu=72CI1_&(CTGaK&;EmWU}awbOfZYDrXhGcg0O#D+*;%yR!rG
z#3g+o%X#x5oHQiaVNp3NH-QN>nDuza2Yn-%L;)m`p3VhD;Shd<b1x06(v!%n$EAO-
z#7H|`?Nh#9l&M|;p45v@(u_}d>Fa_LDf}YK`iDeDmCh=k-rIxI5m;i<@^_s|a6kY+
z1@$jY`r3`8{%UL1?H<dkB$6!dO4hxr@sXWR!RLJ@pGq3>xj)${ATvG=<&AR*H|O@Y
zo=+}o0iToY3Q-tsN}>Db)L5lk?{vgvMe+t}nxTt9S;;xn{Z0ABFOp39qeTwx`LY_F
zhHOo2I8K};YUL?2KP|>GV*D^71!x8b!`uFr(FMpCdz}jZjhMM)MZ*_Mfgl!Y-n&f>
zuW8GMbX5=NqyCS^3_u%Hzm0rB>oTIpoXvZMf;hKk?5=1A9tBG_6?kou-5`lFrz#oZ
zVjfM;NR30z&eflVDl^%nMnlV(mLnzQjtQ@2;b1Z=(UcgEry=P9E#eLwG~WHtTFh2+
zcTB`={{NL-2a7V(jNXQ{NSXkSn!|+pu8bcI7z57?&`x!b6my%uk-d`Kue5CzbQ_s)
z9lPBd9d=v6dtbmD^Ybk=@?o33Igxi*G`*V+*`JgcQxQ*eJ5mZ6hqTS@&Eua6`>m42
z@U`;z6w4*olPh}U^PshzqeY_sL=oe&BN5MQnp7Y^g^xl_FUc$iy5>_e?k1P77X7W#
z|J8v!sO9u1WvLz4s28Er&1!5b{W}==D|Wn&2*<mllvoL&?FKoUHSECX7t!o?I3GH4
zrV_Tj`kM>e3LQa%&{jW0bQzro6mLm8cw$*0%c>)xR=39jo$EkwO}3VFla-6MdAUN#
zH7e4^EBir{I*h3H1<rtOO8!*0m_M#Yd$MKr8#PU9t)y@JNe~;U3W`wcPXEY-29Qsx
zaLm(vQpRz1aA&X4_F7F*v*~Sz)uz@Z9<+<&W!$N$|C_DWDRu9TgHy(<z`#UijM7B#
zw5&7C&wm<oZBeQ{id0b%&s;65%*uurfw0n#L{K)CC5DlTsKV&eLk0JFh$JfB5Vh-5
zRKp~e7~t-0@mCc2U#(F(^f2ACOKAaDzUG8S{kk*rQ%CIgx2<j7{cyKyLIgcCaV+%l
z2(@yL)?nVxo7~pxBp)*5kM|$U0tJH>Gf4>fb@<?-@@G*ITuk@GiB8&SiNqOGvJ!Qh
zuy_!OSox@&nYcF+eDk}rn!(F3-+a^JDhcG<k?2}jEDeQnyJYI~e*7RoBJ<0?KqCUx
zxI^zO-MR{^zi1%;<~KTf>`!5n$}3#Dqlm#5;!vT5dWu%F>MXj&MDEcPh<=@;TA?C7
ziC!p9(Q@!Xuvwj&frkh^z59ZA6l+q1ndI@mI)Ch0Iv`)lQ>~V-fICuE{etU>0E;|(
z#KjY4F7qKQ9{N*LDt%Gi3TW1mdYBp?Z29p3TTzH0BBDk;y!nu^L^H0-ZX7yw&p!q1
zJ}9KrwvT4+{i5=OWK?+_dX~TNR7mp<DW)pr7mYgm!ObIR7kB=#MkCq7O;%=4wY9w<
zdjY=|fVf^&_I?)SEBdZE_Qlti89qfaqbJ7cz9R_Th&-YI=SzVAv6Z;#;E)xTWCgMv
z?dD$-dH0~aM<f<7@!6S}^uFdZ*RFYt)9H4o=b+tQ7sxY~JH7w9F4lYF*&+k2O;4UA
z4^bk)$gX(O{nzd*GeJBE8ApI1F%#n&=O%jq)N6q)k$<V(In+7HB*FyLU|x_Xm~Z7z
zV^j9OA(7|UGYBHytajCJCrYGc>i5<U9rs=;-I)@mi9#Uw)CtEjK<g>1#<D*_FWm}3
zT#E>CJLPM>a%GESZa>T&<uKE>G7At}i4=QkoR{NdN#eC3snGlEKzM>To3w&_kqD1&
z%;te#Mv6o7<)iz|hF#hqe7T`kZTo+$5(n(VNkzx@Ia5li{{_`X&h1Cq%#YJ_n?dSy
zr6kVZiy78r4Ph7HYZ2Op%YXgq7zM$6WH7W(hUjkm@ebL;E$CR+YBR+3HSbCQ){S3D
zol%R0j1lX*Dnq^LtQ|9OiOH5XHE%?=`2q~BTrPU~)DEPCCe}Gc?zh57Ggc8{>lsiX
zb;56O`0wibbHACY?6mpCl(~o#4Nr1dlJY^k9oMDnQh4M|M5rvPvPvULi%3j8g2{VQ
z<BM02w#+6AzJHbMhjDRjUu1NcC;=Rj%Z34vsf)#Tr)Fa)9V0AnEcLz}=zQ8mj-N=T
z*7nu|e7vt+mtkJLc8XyCKM+rK$ve}_Qm{i?Tz=)qs#*Y^AsTjADHxb*^ZgmY_P(L3
zBU2=#kNr#eexhj^*41Nim!Hl%^~iLDQtoJvV*BRQtmo1YC8h|RutLc&jn`8rMRrnj
zOgxt!EXV6#fiPNcUnLXAelPs3rZ2?!1oG?S?~lLSsQOOt@5sf);2%G&d3j2ykjO70
z?C7nW0UF0!&v%n<*B7Sk8}FTE9^Q1xE7cdl&l}4^d-lK234Z^w6dnemePaP8w8(_{
zz?6NKHGo`P|1{eEd@ZbM=c}#S5^%Z(T+$FlDlmcr1+QAK>%Hx!5Ye2PO(-M;-(BaE
z-JASfPBE{(NVgLqZ1>E&x8nf|3zJM?BNSstXjSaC`~uhFqZ*gk*iMpOeZO&KEEa*+
zjvs@RTJEpv?*>|Q!Ne2(+z>2=^m$^YyME!g399U`Yejic4#WajJEcCPZD9D*<x*}n
zwa(A>%;Qi%vJc#Gz{-!Mvm=l0bQexGa687Ik@>1Q@>AkW^n4k!LP4yFjaffvPf!aB
zGKQ5Y_+5>pbxf=Bz023UPm%rf=Az>02ZiEul;8F?>r<X|3JFgmsDlauMC0IeQX@Nl
zL=x4~@$1AthD%zhVGXZ0fE-7|{Z#(SkvnuGb40SISJ+pBi-voOEaf?|K%ohcH1*p~
z`G(;z@(Bvs|3zqdZ?@%XbAr-iatY{rz5BhBY-MKdyZ<c0)+H(C_A%Qp-LY6+4Xsck
zE4AQcEZrge%^2*?!lU716dpoisX`TND$T{5ziQD<bt(mmr^_oen~B&h7Q4tQzIIwv
z(bnY)ofN0H7*|Dn4rOqANhwDrX2L2NARG&}d!F`r&sQnE4tPyGb92JlE*lteQi+GQ
zDZ<(n-aL7T-z1dfg<nytPomT4H)_~72PD>C6C}YU@%EP+`wQCuwL_fO&XuzX%}^B@
z(soUDw8E8e6iktn(O3pJb2}r7$){g1ee9l#{WxZdVEBB;dF)lA5>I4KqMv6C!i=Lf
zb2|K^HmzjQY`hb9o}a^(S?@!FV5qi(_-`Z$?qJbmOBs-&Kxj37-WO6RQAfo~mM9vF
zXZr1qJa;jZZ_@(Qmrz!L-3_$4!XkskyOa%ng<prB3m`NTzU>5F(E<@KRolV=uJS7Z
zem7IuR|3k;<8;(P%<Ii#N6iXZfc+>k=JX$J?CO)jc|X!wJth-oTscHW5_#^pu+!|7
zQ#WJCH*KVhuDy0o)qVA1LXm4*2V|uflhGJX-U{`KPfYiJbp09qpy9>wIJj$9zB=G|
z!!{m3{fC<D?G5g8X8qn{Rz%{&>h?yL?_0^8RB_1;Zp`Nq?s1PgKs0!gT^r!{zF`3S
z`kS&y^J-6&6BJ<)=4l!4NwLN{Ea0Ku46bWUbsQ;2K%N0iB16IR#T0)E_wfcS9bLKm
z_x*g*g{QAnID5%S5uU7EYZ_<?nbq#EPYR_#wu8e-WcT<RWFVrh+cJmxLB@|=>m$?O
zoYG87m#b%z%HJm6%Y7*WT`>do{bId%P-CSo(lCieBzjzHIAp#8B)v`ORrTPu0;0zw
zkS^s2l}y{I2FA5s0lNdI@CFd35F&j(XWZ9baurao%G2SQ>nVxyGl`FOpD2%&5q6!S
zn%doo86NBZU!652Tc3%KFzS1hXyfi#*j2d4S+#79*+8S067|;Z9pmo8E{W2Ku1O4A
zQBE{0??tojaNo@t7RMH^OE2l8?}<`w-zj5nX1=Owj_RXB*qnH1un$;bsA?&8$9Wnx
z7yJa4TN<27l})!2hdse3unicpm<qQrXBvs9>L{BR<v&v(f;R>3__c@6oQK43g`rW5
zeTSKKO^~bL-3La>SHbk|j=B5U%mBaQy@ndR7Pe|Y>m-{n>@ri@|9>yFCF|X9+R&@D
zs#L0_{Z7fjRRSci+fEdfjo+(5v=SPtfs19Vy4=W~G{GVA1^gh{1@NV}`M;|>6=W8o
zm2hwgb7dP}#O?k!ps)hw|LIe#*AGaFJ@d1p5-`UQW=3@|U@S`ryH4Y4ll4b`BVS#&
z3b1!>V&F0|(=S^&+P|Q;y#lQE3popAs&~%ZTj6v4z=9{5B|;r=;+MkrZuc}(RmZ<6
z<rx&6)>wqllws$rfV!a7fsHcNYLa)OD1S&KKnHM*Hz+UVU2NqBM;~zpC-Q=2lA}&g
zVLA|=x17<+;KmHjad1cPBvG&>ewE-VaYBJ1N6bk&L`GZUF~lBe+UYrmlyQe5n9aoo
z;OI?an`Rwh{@l4MsDYm^(~n|dCwN35`uSncR1kv_0!U25b`hh`CfI!V4@~@EwdrY1
zCE_(41xHRpWGik+49I5$$Ixs)bD1f6WYe8|t1A1vex{N`Xn>!<ap=)7+GbeP(cLc9
z&Uj5y2P}`?mj?r$?SrmVTdp|ANtaiTDmKDSY_J$hHEKT1!`x-tcg2x%VKyt-H%=xP
z?LH8~=fAMJqqnLSCx|hR9E>dW#^3=syd;wUOUiK*D2>i9FNX_7ZT{rUba^cfCl$z2
zVEJLDikIe}(znuQugKw|#N9q7KVesK6V79~*RZSZ2Yy(yhNv=CjJFxbDlgmXslF)A
zh3*2UF?zQKwI3D<i<TEOW2m!~|FSV8A8!*kh@_&SEq@dye5H0C5YS(+^{ZxF?leyQ
z2ZXxxwntI-x4P+vl^bJ;<@%b;yT(cy^1qXngfq4E94IWIl1q1qS5F~JXfe8YOMYKQ
zG@)eTS6SZM5`{vKGlOZwh0@yzrE^Lx4Jq4BR=&RIA6Q4|J~oj$({8QH-=mGCN%K0`
zmP)Nn3l0M2Y`B61&_41Alqy8}z2E8Rs4Pkm(vAdRsQ7Zv3|avmvFlQ-d`tb<FTP;?
zO?rhbITH^njA*-cnDA;=%zPOOMpJmFG^XZjQ0)OG#0pa?zcwk}QLP+4YP$3H?9P5E
z-+5eb)Fv^eS59lRgH6*AbI<)Rg@MODnh%Pf5pZv0DoYwOlK`C6T2s=ln4?Cr#Zag<
zzWfG3VPbmm@b8@_gCP!~sm(GC3DfdqKB3j}{a-aD4_#2*WJ*Ze;gc!%c10xv0K{qG
z4@n;>m%0dNSk}C9rZ7oqYOso?&Mv{{h{GJelG=1i0>UJFu$`aO_R;~h=zmv@ql|X}
znLROn)GWSyb_pBhQZ)RYvmXXf!aQJiFUY~D@iQ=#UksFk0cER$<q(e1U?Hrd7iJ;z
z0#fvnmn!*KaMj}v9gNDGtxyMw6}BVZ0RF^K(QA$-*dR5zLB?f@amT=f-A97c^z`Fb
zm#bU_t$HY8LY+o*F2*bN1S?A*<zPtiR!CFyf|4TZiBrcPFjkR6^^TE;t2Fbe;v+CX
z<ue^Y$nfeF46FvnD01Rn*H(Lxqf!2fwp=L=aSv$^HuW=jq6(V=hn}f%r|1B0q)xG#
z>J<8Xp(4e14lrjoIl(zW6$-1iqD$Zk-Lzn1YKF*+x$Rour(KB#n(fAVqX-aC8rg5b
zF6Nq*smJ>4W;jNQFc0NG0{hqAwPBc>dEF?ck@`n_A{y@9pBSo}pfcGDZPdo#lIQ^D
zLx(6l6I{lB*}#CWK4rrZ{*Iq48@R1YTpgAX1^9=MxOy~gynloCdpS)Dv*;1H%aZrT
zF`dg-Ci5X@{orU5#0>cdK|TLc9ntHwp)CtvQLpsKl0Lf!ObB(!`GC!0BFy^9j8JZD
zHpP7RhYh86<%VoN(R*88aGIr?Q?wt2n-Nm;!yv3FWGzm7pvzGGL|)n>q0Pubw^gYw
zfNr+Td`SC_q25%7o<iJqAqxX)vWO}$2v`l86}JB+EX&bEEnvnM0Ed=$OReezuM*y*
ztL`E|K`1|-6XK~ST!WD{9OZwle~*awlK7uKJacYUP--qTDOD}K5r3zh^YM%bh3(Zj
z$pJ=|wBg@<vl|~qe1M>LE`3Pm_Jo08alUBn_nxiGJ!8aRBP*hf<~-|}MrF#2SIKZY
zOw4iyf@0c*E-1cJ6;h~KxGo%z8;trvGQg9?vHw80jZHAm1SUis(d*e(`E7|-zxwqj
zyH@S>lHwFhI;ZV|!U%Z-IZyhC^&e}ae|Pd3fMpUIUF#;2hep~rN6OFmfL8`k<sjdV
zD!<#dxcTZ%>0_PXcY!LVK!fMNdBusy_8-QiG2|B+QoXBkxJhvxY^oVBaT$~D+Ndm>
zWRjTugG#Rayw!Y%>0ty%vFmbAaaWb9*AlivQO1?xcKK9XiL0T|yVqj&tlqKAUj}@m
z(qZRt0bCPNs7Oy2mQ3RMN*WcK30kS#DF;_iabHb1_q`L)1yz(%@A3j?w091Yk8Yod
zBjPG&{~`@NAW<)CQf9hiY+HRJvr-}eIp9Fv({qlAvUHjPqZ?w+7U=dN6D4&CsDx&3
zWOqD!sZtWA6Oy3p8ljE{P1Ys@2ef<W&Kn%q-B^mb7)v`dD#U!jA*rzxAWR40sC$)*
zRmJ3n-o#h%r^kPg^|?^W1k!_EU<(X{0?%y9AC-sy7~imDQ9qraqlnfR)S=4Y!<@Fj
zai3aj9bzgSNRcbXypgH8b2YCCm+_yFlWY6^h<BPzCjX6h+WHet7X%w<`;JjXC`RE`
zPa;f}i}U?J&nv*p=CGy7^<9PE7g^#Lr8Ta5DrM9Z=8mmy%J_=%`uoE)t<|kLwh(?%
z46dd-F)s4<?#~FY%A|0r`#;lt=v%-y4_^r%hi<2kB=zL8XG|TY#&0e7<{DEo-szIO
zmGO4_V04AU!%GI0D6bEnGzP(^N+>Y3sg{WheHpV3-uIC+HBno`tcuAb4&O8tsaGDo
zFarYETDAGNW?MxlFYIO)+7As`&mE=$({!b}_w;VE-K@$(<x@mSS=ba{2m@2m*WjMC
zq39~f@5pT`(yGHWG4xY>;PyWc9W5@FVng3a@hNPS{A#$X(C>h6^JG|M@8i~T(6m}>
z$#PDptV$SIXZzR+cK~M;r#(D4X1<pN8eA}i1G3@_u;zLidI3IAy{TSpz_ZeoXba-U
z6}D-S9wE3!mYskH#o_KMr&p*yU(HJp3B><-tLU{Mzm%S|L4h?gD&g^|M@Q7}VNMY?
zUhw6Jp6km#f^w%OQ9QG@j^FS8Z9T907jHcOm$^~Afh6{*J#EitdPql)@V{PElYb%E
zXzOgsK%EF#E)hi~LkP<84!;?Mc>Cl=UIT-`1-SXvMe)r?X=UG}ohW>EM2D7n9#rhP
z3i5JI*(JFSBs#!07z&_Bfnw4b_jH99jxP}G#DLiJBhkfO{T6M1z>?cDFY_Qf9kpbu
zXRX&;d&MoWzIH9<*f+|+jmtYn(E$HH0Kfoad3wuLIkrPVA#7aT5mGmoOa%fZ;N|x<
zqf}8U3$`Uv%-X$AewAr@>Dc$*h?ZPO%Eum&3zFuvUz(mu1=st>#Hm)o?t<fVSd4+D
zj2GqqH**i0%*Vz5F`CQcEVTWA2d$N}(EZ%VOToAdJm1*fQ<`Bmb27+Bsv-U^J)Hwf
z@<1Rdc(PCVzV^>Z)u@&f{ZT){P))5T3p?H(?m1>-bPCeVOtdRQ2K$)Ly_Wx-A0Hdw
zi!V8{ok;xh2C{Rt9sdZ-8MrFA4);erdy1l)a3BeCRqnadl|v7X?pv7xdS%ReB6V1w
zO26G-fFaOwYZzD0d7Sn>5TzFi=#m()l_dvTUlG#f9kL<THBS9uMo@4VM!4%D>3m-M
zN46OpH7TWb<=OZmxFN4~jQaWOT#Gz5XgfWNh$gXx)A`XQwH2v1x+D)xS*Q2AI0$Oi
zg6&Nv@ppJKbO3>2RfG5}!N*s|hyQ5?&|UeZ(F1EV%Q^+%<+|~ofMk!@9t^L#$g99?
zu%Rm&%WJc<M^wkUkzmlpA4>c-?XwQbV1QBqVUrMZT%3l92qd($54L*gHaMuw_O@B?
zit~ul@nImNeU?NNHup{_fZ`_9Z#yP@_Ch8uFP8rQpxLcAsaWd`Pou|{j{SsER(JzS
z*Lset5CqLkr|mAFi&c^Kfs&kwOKR~}H3~BXBU|ipZJ*~&EF)Z+z(AEImhjWTOO3Mt
zp+z_92^En}e|WWO42RJ(f0l1jLf(r>cDa+D>@S06Mm`R(l1I1~w!>-LFHAdHe@b;o
zUaRqPQB{CjRcK+_RRCgt+(?*#FNHTGjyhZ~$gwd_l8Xy~pqlg@<(RjdPaZV~%x3wW
z2NqBcGBzW@^Ybp4zDM%qh2OE8QeTZ({2a3GkjvB~1DajHHUi|q$Me>8bNI%>e2z>R
zC68RKkDlB1BNmU|2*HO>O7?9_B|Cej^#6!rV_cyPlNgFWXUjwgz@_Xj`s2{QeUZgh
zm_K;HlQd5-Ff@4F501h1M_Vh<%qIzaY_~5tIzS@vC7i;_s_pX~Pb8s(18aLh(lj7x
zd3U}A)jLYt0yx9-wIS6A(JiSaaQMgp$f|BDVzebys?LWQAB$y_fmVc_a1i$9!32zf
zz0oWp`m{(svz)<guh{JL)Ic`!{Wf?$(qErrA{ocBIMEA@{%%57JXm!a=?8EgGXSzV
zgvQl<gB@7B%7qC!_CNuy{73_?l|et4oX9mQygJ#Ro)l`ywzV$qd-#j-Gm#5y_qJnF
zQ}LjrnqyhZlZbGGTIojAd+beC6j;#YHd_=0Uj0*}nZ<{AOM_`Z4xSE8AI?FZ@5j9l
z2;9*~*^gvZr^b)PDttIn<SQvA_pE;}x84W#U;J6pnOGus#0iDZlQkFK%#?kdQL|_w
zp}(5N@dhx|$K^jrNFD*~vsQ?8ezwy|7z6t(Q;!A-nj?cNM-fz}W@L;)T7`xs7|9Kt
zSiv!kW1-3S<APncc9v*JpGlEEvDSU3k@Q)T37d=c&56d*Ryz+b);H<Dos#n^GCuZ0
zu;Y#u%o&&JzF++V&<k9k>P0sVQY1_2a@{;vFV0YBmDMjgL@}(5AkmY;tQvP2yW+_@
zlB@cBNq;IjEw`DR<4GkJJNW5lsyQ!N2D5(wx(Pd91uJctX^;(gP2SB~Y#vO-s+#`*
zna_Xxf&zOmo364anGoXIRv)X1$1MHWEUuD3(i9Idh&k>U`20}#(eeSUoDUk(-`pKq
zyi<RAn{R>~4(mF+J)?OzqG=5vOT02g;RqE&Xt;@+b9fBFn)0h~qQi*kzC;vkaYBRs
z_k~K*oI5YHl<+lKPx#p793CFTVQxQBZvLcM#2<B0CN>(2P+%`~Va~*z%8)bCQEs0w
z0M6P-*%#hKueG|8&u5V>bNB=Yy4f(S8G9w!VQr=^)E5M0&1aerK&sK#fX&<TXO*ne
zG;}J`3D9WwhOiJwop?r2AX`?QO<i|ZDhJC~>-FFNgMrqe2larG3o_7w)2epA;d=|I
zpWBquuEx=|`NSyRw(>(2@W$qO)C;%S@3ei_M_6`~L(Z;0D4GFTMJM+SF0DK+3UW9E
z)H^Tw^;@c)jxP+`!-?`fdBRi(m}mT4XzEgu8=*_RbJdQ)I~p#kZA+VGVA0@XDaXjC
zFpE^{`>$b+R&$J=ScYyF5pG3|tSy`m2BIivn@TTX3EDEganDv~r_$r`v47ucIaOP~
zHv5vLTn7EHmozat3*#p?R^|)R&BHu}3|W_SUiMy|Xdi2>Ic%XZJYAEL`2o3rgt~)O
z2v|4(CbNra$9dY%nba<*kksOaqP2rzNbKVpt7Sa@vdkFcjJnxqbE!QkuKG`t4w#!z
zNQ7ts5niR&xhnRjtTX=e{T4rjBSs`;Y@0#xT9fzR!1*Odsn#CAB1oyB5_Y`8#@wd8
z-AV!6pQc-1M4Iq=4UESVE~`{a*#R;SPFImaN$#DnxTu&@KnP(s=~$+l0k9N61`F*c
z$pf1y1*xDD32I~auLAUeX?7~$pEfSsqX;G}{2rj;HCSX>o=lCZtSC@HA3;9JZA4Vw
z(D2wKyq-Q-8#^n%DX};B3p7NRRAR<wvtV0{sj`YJH~^6yW2b%e^X@#A@-8hCHffZ?
zI<>ZABsBSsTm}N4mVHGAc?BL>)Ob_Nl8$#Rz~*0XbW;aof-3Jc(fHC8Lb~{?GGJZ#
zr)4TU=hjkMN2WQ7<?06*+(oAZlPtd2@@_7hxJJrEf36<_*2=@y;7ax_;agAV?m`vT
z93^wq2YPmGe5djuI;>1&<YmVj+Hv^bnI0OuHanm@p(T-j?d>|hLNU}`_>@&4tO%Qw
zF%<YPK%`l>mWsaJ&<IFxLn*z*%JDFPZaC_g_)?^jQg0kVO~5uzFCaFv9CI)+F;jgg
zo}NJ3CaP+PT%e<EF!B-dIl^q#1Z6yp;z3Qb)&oI5G-fj(z$Pu_lWUME3T@@eub@~0
zz}!t!ac!QLd8f^JY#qPMtpFA~{`%AP+2E8eudDiN62ys)HNeY^t)UA9PG23$zG~kk
zvtAuy<yM$c;~{lnpyZ71VE{t$Q^G$=bcvhhAJ@=mKO~Wlm(TnLS3Ncfqqvg+w6~55
zCzM5FSUzSu>^ra2k8kb}=fNu7&<nVrDoOp}g1^HFleu(zw_L<V_R~r_;KdAbV!wVR
z2#`WdwzxSko9uL3r_^B3=c}hma@E4L-||FDc)RzCiq~TU`k3d{sc+V92P?A}$+M4e
zvHkH0dW2G<B}j<?<hrxlnJv}<UTLpZKnp%M2YbB_sb!!mRL(I;j0!#T;W=3?8M-AD
zIiNE}mcB(B-W4FxM@^({Fx$vfy>ci|X6uoNoJE5Oj8(^uzCXlN+w6ItwM_pjd_!jz
z5VYX#b46j@2Ad{ZuV;;MwgkXpZfx%8brSNZv2p*8l79!+v>G$5f|o3}BlR<estL4Y
zuFh*1T(|xVm{Rfx4nEA>I>5F_#JvPCgM)s!^wl0@4skMn@1?!Io2bvq5M#o)uSd_9
z+3O8<a$vuhO9jeW;<00upw@A5{K}hOH!CtB;SPzmiz&7SDuGry$RT6K!~rsTIXn^e
zlomkM9=TA_r-f5e{v}PidsS&S#kn=7$98ko;v+>WXSpGIas|dD>@&iciZ7z38XnP<
z6)*4Es;;Fo<W@_ee~hk9@VjXxeR=$J_*ETqM_680QF+5jatl<kqz*C@>5I)LB=T#&
z4lWGv^Cn19yW4SyT*ksnPeT4RYg4!t!=+!9fU}V;tg<uD6W|_V89iqe$R?%R2lK^O
zIr&{!Oll$BHzStT-DsY+-k9Q4hGJ_g2|t6-dl%%jO#)KK;8H~8H^aQ{2v1)dx?wnI
zj30j|*-n31`a{n!s=ZIDV3;qw22{Aet4DY+-oQSDb2@&%qgWEgd%Awg3cw0BP3Y@N
zMBdl@nZ;<;Vn%)I0+je*h=mYMCHc~aNOu@PhS^*Hu_Mhb2NOCV;kp$S?XV|40y(%U
z>^*Sum0y0BxT4w2Np5b>uSFX0FVN+EWQX^fs8kpPgBf0K6h==Sv?0w9xr0?aoDT)}
z4~oq;_b@@Ryo8W8sXc7V0iK<t{{l^OCr`dXU&SUXeLrS?qi^_kuH|td2s4RzaMT?9
z#QeX0bKcm6Lgs~lE?j#7wCIdqIa<pfiy?0iZuGe^t0wkv#9q2}z{Jyy?_<)K62taD
z|7}0_$*UNb@)Qt3&<!uNCSp3@(sl#)>owPhsstWa3vDmej)L-NzSM>R%So*%gFEU9
zi-HyMLGs!~+kB52>;;?d%i&M>_3OU&J~S){5~^!K>?3>_&DuG!@ikr((xk@@#_ugJ
zF6KsXn}~TuKM5NaRkRMk%kRk%Tb{Txm_SgpCC(YN3P@yXpav-<VXahB2s7QB+7!rm
zq7>v8A+doQ=_BH|H}6cnoomH3@P=9HW=1HgLObilZ_ERoY{^%LYzSLv4R1e{x?_TS
zFT#h(W&dO$SHcC{VYJ@?%$7t%YRa|X4*O?XfPs$=3u@14m4#063Zok@Z>4C33Wl;k
zp%{gWOOk<9s}q!9WKxvgW%bW}W5i2aA9IFR<{&qLmMx-$2uqsD=EhiX$tf{KFp^b#
zrq85K0f7H!jp<g`H0-o$pzfB`c$SbP`v7Pb^AV_rO<2aeb?};gCp<IoX>v%gExp8D
z<fTku*b~2WZ~#qD6K0*c;@c`<rxo+8^V|bYg)OzAQSqx+3=gnh=_o?{-M^%unuc6%
zy*KeDv#O5VO`Z~4Dlj3rV+gdn4JXM`Iet%#NxrE_;Mcf&%(!QDF;4{#hY(0y<czCw
z4<f|CY6m+EQS*M9$WlMBt3A0+9@z^B{T9vV9Gpb>lXn=QNNtUpcn6o#2wt87;c3RD
zd`io{stF!W%ra9U<4u{hSes9<@HY#j*2_mUz{uaT$G8|Z7#s^q`-+<qpEDqNn0Pa(
z6}=c<Xv*g_UFv-3UF9I2;aF=OxMJ9nhk*=(kFTU&<Si=jp0SKbd}Y-$uyQqoiG&7v
zQmzHZF!L)a<piqK2OZ8b=vX*1nXs<-72Cit?}-HA0xLnWcU14gc(~X=&=j8a==gJC
z;R21TdMXPZN0i|z!m_E^+&WY`Y<pA<F4oAvtLU|c_0ZDY4KC8+7)N|B>3dq4m%!G~
z3Td%&x>J9kF_*SO0aKC0cA03Xtu+@t;Q<Gv^W6lb{|`+|>_MhJBM$X#L#9yGOcBMn
zk*e`9CHe9j)LzT*f7ScaSd+tWCROE3`_aHJi#i(yF?HiBdeTI#+~=$dLJ0I*mo@8X
zrdSP!59wc#AWAA%r9LPaj^OS3!EG;M6#YO&eVcSB@Tfjw0Cf>_G-}Dx{sp#w$2usY
zatV2rjgP7t@Xo!>3N^3zydXfHaD0vuI%X6gAX(a*DM73IFu24b(+(s|@Hkjf%IpJr
z7}t>oasR3wP)Oij(v?OB?egRRR2KXayGZC@nlielNC7i-P9D5KjsTUu+Sid0zNWXm
zy|U>?t*TjDV|jMuXEaqlwsTinlYrk9gp=@hlKiljG>ZD*4rEN(uRDYn+MXwMr5S!M
z5w+)h+55&*e9J+MoXaUSx5^;av_=RX3S;`|*C_eRW_+wzH)FHz%nX%_lby#=9A?X0
zzn|ul6Zn*LOmgEcviP_=Xt(Si<<PrsJd$Zj)JRbBRh?B|KFX%N1x?FarS{0&d^*nc
zi3Rllig^j4k<O~Rj0P@snuuS$0TCP#DL<F=uwWOfcT&EM8bW?g59AhxlEmgyjht3N
z33*iro-WFqt$)3iC@Q8eT%<#?6JI_o*xEw$AMu7thL^t5AD0KdQH%98d>68$g)vvL
zwIycxoK6yQSib#KS;Hg2mCaRm=L;q;&^?RWw?c>025spg$`;a!9Mg;c8ubPDW;4L@
zhUkeafbOOk-LB&ZD`}SA62EG`f-5|Gb%NW59nVr+T8eie*qrxQ+`V<6)=Q;F7%_80
z&e;xU61q0>%-vjHFlZ#`R8p=M{mKp@Q2RJ&yQ=&CrmYGo1zT=u3DM8#H@MT2zQWG%
z#(XaOT9A=U>EUlbC-CO(nAVZn<tQK8X#0uxO`W<pusIv`iS6}4(5`tcZ7ChXA*I0B
z*#`sG*!Q)`miUJ=i5thbmh6*GI}pJG1Z~hZ0p6%!w(x6+5`P5oJ-D<)c@d6(3>hN3
zFm{@-`Bngd_!LsM{fQSt{O}NluI|ki<V+NSX}K{ye?n!O`?M31;pw5qf`o`F78!sh
zcY<BoM5?y2^EqDKT^Q>vn0`TYg9}P@)g7(>@S<0V{F?zMMNI94e+taG(yk)k-&_XW
z!sTQRHLUABj1ZI0)HvVF=i$fX4ObE-oiO!7;`)ho)ek7a-6oSB`l;S6djJrT*KcjO
znL`$it8c&OtZz062PTP$Hl!*#k{XhQb2SsthL5Tf6LP?F_xG{50b+DH<|-`J8*G^2
z_ahT>VdR7^DY?B(c=2cj={Tx*)1QkO7w|q#<&M^Bl*w)}rNf8$5w&PrU%&ea+_VWN
zi;7q=R`{56oShq!Z!dr`f`wH_<>266Lc@vW9}MxY%Hmg)4~?D5G=)u+2QSsSembl&
z=sym-^0Vi9=4~c43T<yI84qv^wIhZb&gv)9Kxw<E0p=(SZH?=nsly$8rB6^X^m>Fk
z2$uJ}wmU(7ZoPQk|2#u6%79Q5`y_Wbyj7Q4n^}E{K&?PtaWv_{M0ny{b6Qw(9cQ;R
z3TYFo9);oCf$Iau99$@%!%*GD#8<z(79j)B{X)T6)ra@~4sLa4WzxzBTCqKOASCaD
z<MRxD;#K1<#)L*!T0>>@J~&v`Xs_;w3$qZ(9q@Uj(Q$ZIjS7QR3W9-lv=<3O(o7BG
zzY|gd6~%&G57mGYXguXAF%##SX|o^rM@C3B%{oNR0&%e}NFoYs32Sc9d!hdgwQuOS
z{L0Vo3rA49m%*J*%UXR;3XBJgxJbT-O7iNhS%`re!^ag-Cc{MHa0CQ7O(|`O>$8O!
zQ<(7EjkUB|U$rzuK56aq!E{_4mYNW$m%mEvU)vaz(!K;7sa7H*QPf+cC-s;2Kr2_q
zOzuPwAj`)RbXEb2W9nUZb9VGz`ApHZ!+}P7LrE2za_R8!btr|HFAPb+O?XoA!uakg
z^~GXn2+>Q7O#Jddu3L(iWS`4;q@^H~w|ii{0}x5I9ux)uB)aUfp?!&aYCJ8XIO(xZ
z14=U(sQc8Z6=_#Oy2dU759D>>FZ=9Ggsz%#gM1JWy1rFxNco;61WNdQwE~sw4WIW*
zgmN%U$&qDJfKUAnZFH7u(F)zTq)R?xPbAGfN6AaV8o(OI8p?P1q;JoIJnJ*?{#n1%
z`2&sD;jL+R-`;*+aFJqb?wvQ8DgwgWJP@zaR}_Hj<npv<{3QOC!QJwp?boDbkI7<Y
z?bW>|ExF36mW_e&d)(<cChnkIc-eW31_z^d!}eIGP>`hNeZrVdxreU_X>5;yM<&qT
zle;T8?H+SBGBem#5qP#2T(pE|G!d=Y{K(8;fhMRg_c(mcs94H75wz6z<TdK)%NN?P
zu^E<ohxPcdb%A56N|ddmrH%<Z;L7K(RSDcF@>?7!=rJlTG3Y@WmAh1Pip0nV+wti1
zrdxtf?{kP#%N<y3!_@s#u1w_1r}H&+DvrWCiOF}$@}3kD4K7FO&QkTd#D?EL)^mj1
zKDr@R*H%@XT5TbPl^c$;HTu>!L+qZ}7PT&N;UBl{2F0k!mA<943wmeX*N9%fulsG7
zWyf_>7wNfHcKXFxdw<h(=dapfR+m5n|J567x9(f`C$M?zwn~l)s?A0zERT?O#1CWu
zYD|rnX;sq<_<n-AvYPIS1v~7X()g>28|C1tYl5(WHR-AyL4h3*6Y@OCPszw_GA2to
zu_mDppId#^ff}=3>Vs0=RM|apPM)r~R5_$+a{b|6NFM(Um`g;uFk1^~mjYEXI01R@
znzjm4uV?N0Lsd3S-SyXk(3}C0mXS@;_#WHnq5pt{i(*(!YbYlc4K>dA)hu>uCulGc
z+d3?v-~6liX8VrLW{s<rv}4(E7CKolFehsg9vh8}y8mBntWTIOj3pP1i29vAdoD|l
zrAk&wE*}EKx>k+`l=quV#m|`u!EOSZB0eElI-7N;n}p`u@>0cgdho%mMqAQ2TR9;?
z&_&{VXl{;%fEh=S%OuFOx)I@C`MNXe8`Bzi)rBmss$vd$^lTn5KC41_14(Ez13o4`
zcra(2y^~gPr{NSYDn@Efdgj%jC<kk@Q}_*Ki5eN`)MN75P#qOFEA+4bdSRpd@f$rO
z>GlYzSAZ26o8TAA3WCLs4_Q*erG8-u@i$K~q*Fg_N9d)Ig3jcU-{n0=A0z?T=Ni0=
z7HlcWhh#R8u>0)y{Y!{+A<8)3RLlU3q&Vc=q)2??E5on+B16Fsx3gXTFe=B26>6sk
z>n_tLq%;gWkdS5MEFCytbY(bp8R=yQ9j3WDYZ8`lcIaso{U?=kU%U{%#DQcsR+><K
zdcqGB4<tNm-24q3WkA#9-r=0Jdd(aBL@{88A!IO9Y`<VJ6<EMd&Kn_|l!*hBTLWCd
zD-O{KcM68t?7n5O8QNr2WWplH>i2>ra4G0hM&s@p=*%Xo-#BtOt-nya02X<695lhg
zEd>JEb%DE`;wnDDcaE<=;3sLE&v7F-`y9DEeE;|32THzD?IyLIUZf#$9zw_g?`|eT
zt1*gZ=lDVZB~AZP`x_9j@uEdUJ&~NZ=(~^hb<tJV&Jinv2;w#6%r!6;=Q8e~|CS`O
zRBL-7*_{aj__uT8ab(4M+#IO4a4V=?l5xB1?JtR=W92AruRy?6pu7NaZ}3>KG`~n#
zq&n|kYjTtqTbO|4B|zMg*Mq=!MZM519x}1Fx+Eq@tGqDa8$!Gf<%~MCdKhJ7NE8$=
zUX02B8AKmEfmt5{o5(CT9{MS3?-+fUqk<wLsEbhK;T#wr2-^t#lKI-cb|gMDY64P&
zrRcTP$~D|}Bu|11G43DT3ex>C*7NUW6itzOW+xY#p#?1Cb-cl}$;IBj@uKR8`c|Z6
z>W7CKrnU(5oMlUHq<34lT}3u*32&*WEQsD@7@~fl6vlrj`q(FY7={>Qxq?AwttBi>
zPK;$)W2vJGmAQ$ZF#h?N@yVzG%df#ZC{(W3UDZF2(5{ISAK*kAm#On8Zg{IjN$v$v
z4rFf49jlf{SQ|1A$qAKPaIpzZK^W9*(1cIly^gk?=l2JT^Kn_t<nbhzkr1h+hZ9k0
zpbphyh&uStQG`(JN^i-#PH9F3Vg6VgyJ!VKq{!!*mQO>@lYYx&J#O{g7Uv(0>c;9^
z?cxfw$D&~c)!nsH18zfKPrxcYn|^Fxui+Y&kHV0nY#CL|M6k3qOCbJ5d?wpcD^17_
zwdq-;CCQU@1Od}dT};l4rwD+@ij?%;ko4&pO=y-hTTe(u$BIzDpJ@5Zdn_o}McXQD
zw*k%}&9BZ?sG!s-@7hGx+tJ_WOE0)R+sytx!Aot&zSAg=b!RkJy=EPL>g9AIE0VAQ
zMz}38aI}F171++j(NBn1`}bU?3E{!0Eg2W6@SJOhL3h~bJseBNd{;~q$x&v%qdAt?
zb>RiT6;KgzocU$uLKmEqL_u{TG)fyxGysRcKRU@T(hdCbxqd^12S&o7wb|0IBwJfI
z4e=Fzisz9$r<%Z$lW*h+M}EN3^*97a9gM<R-{V8h^<eA&PWO9uVSEu=Q5|T{{7?x4
z^jTn3Mw-$Ho)buYkjQJAJhe>FnIDhB`-Jhx^BH<s1*W)0(}u+^Cra6<dBq8ix8q~?
z9|}#=rH_9FI>1ZZ7e!rc&xi^-PbDopu<1=UZO?82quMvG>s90k34S?wCibrCK|RtS
z?KX4)-R)@d!LGxvA_3My%SoX#3r=$PaKpSIpmP+&X{3@9hK5;6t$%NDN8i3`MkkY!
zcJ)G{W+aPIFw37zsJW@mu6%LV%BD#=5t4aC(rd+GB!+cop7Bk4<yx95K304VE7?OV
zJrng~;2sy6Zrv?i+l9FTi2RpqFDvv@OUiK{IL+;FH!>D9>VwsZaM`N?_7wyfH7RBd
z6>qarra8&iXscrdGfF1ig`5g`Af5XV6v_v+8mO(6M6@0;1D>CY>C5@_2Wlw8lMfE_
z-f%>0)dW;t6D^l~vPg`}^hJ8S1%jWpr%B`$@iizF(JVZSM1S<A2C#eE?a2y00>KsW
zB5wUmXa1ALG<;z4@moXXDJM=O7Yqt@{9Hja%CZsaVedRty`d}Uur;FfQ9V0I9%aGq
zj~+qxyfZpN>KhicJw|64RI98JXJu+-nnBShznqoctLr&SonhN#sdMhUG1y$E+<<9Z
zA81gFod_5#-B^JeNFmw^6URdCn@L3Fuo0r}8Y>jrfIrd%cvZVPO5B?_Yr@WRA-@7~
z;iHq_r+zJTKs12kS&hXC!oA^$>W(<l{gUIRBn<-MLZ3!a(}UHL@T#8t5Bo*ob?&~9
zkuw%gDxGPLHuqB?%ej(A1=doQ?eOqn<KkETD_|Kca1t6fbE~S~6DEPWy^%6cS9|iu
zUlWrixpON%jRjt!3Fe;!n2`6;-CeQn%hO4UV#{B1rR))=0l8ZriUWt{S*~1@0-P>;
z9@gIRgQed!CR*Ygp0dVEeY!ZryQAnwU0xEkG$tx(!s?%i!DPkdDcODJ`0CO$g!+O=
zI>wQ<?!k9Ig}A~}9sXQpHh}%RbgW{Q;XKaiT)u9w^ID!P1oGTXmFqbZe4@tBN4?~l
z=Sc9^e#@uNYA}z+*|xV!nT#q?ILoX??Mg2SGf+3pSxw?M`|m^j6+n>1q@;|3q!Y)0
zF7;pJDbV>SjOlcy8jL3ybM&&&pZ0RE3yR)J?mDVkEY8`n1mCm-493o(qs5o(dO@{7
zl3Knu+A3V_F%UwezvA(b@}U=ip3h;2_&P}3t%1@#@j6HLw!19R<}W!v$to23BA1=S
zB^1>8=ZJtk6&XN%23CJ~{C?O3)+)9QK39)ajq-mO>n~3Ny#yjnDVrN?gx+fjQ758I
z>C0?rUPZNqjVUQE0uvl65Yg{sf0FG&Zj;+w#)s^O|Joz<)w3&!BiMMh^k|jw$0w7T
zx*NPv0^rF2pIV3XqweX0=W-J9p*pW{KJv}k6(!_kZ8?{dPzZ_Fd#9ak)nk9oxyC!!
znd30xf+^wQQ9!?5GaZw$wAR#M{_k(L=P4oWWkaO^4Xo2llB*$u6iSAY2=h`t^dyQo
zRAIPVy<;h+lGK)GmI|3Iy}G6A@4#E|G#cgA*Bxkv?~JSROHAmSEq2_Rq2#JugpQ`<
z{&X`Nl+Hrk({}<p`P7^f-n~55uu@uB6y-cSWzy6>pAf+P?Gjg`a8l5wgbkxIciC_$
zALi*UDvMd02O#y;1=g+c-Dy=LyD4+hDWSY8JRT>P^na+wLqz=y{4Yd6IFmJ_?$tD4
zw5nsxi^4LnLeLL$PKQFIK7cv*MYcK2_hgU#P{<-V`-o+UINhZjU{7{4&}$1p(XP>J
zgR~h1W#OkE1zv<cS{OtCwuem$TP#T$iW4-cT?>*|$lT~7kWtd#g==q$g(;!qOq5Dv
zfEPzF2!pXFINNt`{EJH>R3F8V)03!`9@2kZ7)aN9H;)sj04J!7Bp9x+BO^(*)*Mgy
zr9<JR)(`!8-V<W|3Q0)_rL-r3Gq=aUCTSP}ye*DHn(7IFG@7G4SHc)0uKY7O0StO{
zQ=Dp%i35?sx-$=9hvlHtD(zWEzAt208N|S0KV#LXC8VxhiV_myLjoyNHcN*PP%&ql
z31wqb0~B#$_-TWo2N5fC&U}IYDKWNdI^$Bob}ek7ee+%ZC{Ls&jc${Y9C&o;yCWIh
zUD%YA4*Ddj4#Y5el^CTyr?rvI*v1-9An|<8_<1r?5+H2Ek8}9Bh{^&PK|M^^-?!4z
zh27=0)7l*E<%D`_*duM8ObqpXM8e;Bne);SJ84V_z$^&Pre)5t-F;gk+C1UYiyK<!
zO2lIrcf?7i01FtnQ6`XK!fvm^mozmre$_{cpBZc*=&38GM>Bl&9>R=vZ*2Pod5{`+
zxS9MrY@!y!UMHewdQebY6%@!ZKqB$!Rv`vD5XkLY{XOV*ZF{FvoYEAUBYukz(!1aP
zz>0T22#0JM0oWfkbAg@9l@Az8p8b>nR{y#vZ*NMz<yF1eCbyS%7?>o&^w#?z03#N>
z<Y)OY$GQDP9g}-|-X1He8p3uKbY--@`P|~hZg363io!#1T`*{3zZ;e8mEDy|*``IE
z;rS4|dP9xK7(Wg=fTkSNLZDgi5nt=YK`3}t1Osu47VgnO6)7Np9`+g71d$*lJSjaP
zaEZY89~ldcPd~3gE?|#gr)4uB;6#FQh~<zFLeY1hZ|py7C7sk6Taaq|Hrinz8ig}E
z4QDAZEYM&-=uGWnKH`5ebu@CJQIgz>iobvMeE?*kPujQuFq?NtDV4va-HW0#ALgt|
z`Ddr1_&eZ^l`p0d!Vv4Oz72aqd~4!{v0KLd#;Ti#Sl<zxLvgJ5*W+#SFI$?p{P5w{
z6{Vko&v4Be@bD|tD?kI#H||u41=Z4`K^W9^&l&w&ZOhYHYnHd-s6XLf_>Y=90YN&E
zMIMsbSAk|vFkn?3@skY@eZ?p9n9DevRago{2fJX(+6sEqPN}C<olW_}SFY2jvjQ6z
zerPWoJ<Np2_M0McwN~3lEO{7lK&lUi1S)lh$Ptl_!jPx9ghNsfnc*>LF5(KdH&<~T
z>lV=2hGm4tckOl%azgMN^Oh)B$r*|W<D~`c?BWpR7Qy2IU~&FD=OoIw4BZ!7swb6~
z;=f$)k?17kgDL*$I7(sIz3-f4j^(N?b~tm!JV?BB1s|k-g?*4=uo)6SO)N~P<(xNa
zPYd%=<3|RW^X!#(pLGnISbn_LsC%nZq|`gW!4z-t^{%iq<h~nQiloEln#&}PEbrs3
zVzgfI`e{PfRv?wZ4DQpqE@J{ia|Z!#`*LkuLo)_5ESI31i#R2MDC+^166af${e3Po
zG8p<H1RLQDy-RUJK*Ow4uTGm%#7bz~vcVjeZn!-2FJ{27|6|`S-Icl&lzj%Ty()C2
z0aT~uRzH}Uj^j&6V-02R7Nr8kR_VgV2OuM@Ts%g;?1w`DkcoKYGmH;_HoErA@Zil~
zgHIgK&D^ZMLFpH&^Iv52X)h@BVwWenoX?}X9UwGfA;iXV9l_s_BfPs~P<nzB3eV@<
zK+B_K(1b8R5L_e<qw4nTnARqKfl^2R3*cDlPhN&Zrfw67B6$X07i}@z7pL7?O%$K#
z6#Gh1W=^)#oEC}nF`AGygU(321_O;bd;cZ>{zXtWRcamPa@DIhY;mici(rZg$iEq?
z{&~%vGvRo+;bQ{aA^OuRTz77F>sGabwjL3c=6RYY^Y723D60jzJAGqGtm6<WL<;RI
z8DWbH>@?Oxz{qfWU$mf$Wd+^zUHsl>BbxODw8vNm$Gn(cqumb(><X-=#iX}Rr`$Hd
zzhI;>qTsU>pymDqta6b%4iFcCD~dgyy6h040+P~D%uHope;+GGK+7AT1D3*Xuj>6V
zj@Rb4R%QeB-Sgn*&PNR)W2^nWMHhNEJ*r?!IDfu#8}Rg4<;>E1uEXpfOtSM@vB;NJ
z?vQJ}CRqk}a4VezzIbVL!fD)#-@#4do$Wi}cc4zLY*j%2?xOX=HAolDtCz+{ZJtsh
znm2`r08US?@C-C&b6r!X<RU~{I+5VND!G*raXFI__oNHARfcX}UIIu3kodha(kE@M
z2jV1QyQLUbBDr3jEQEpO&Kj08Tg?1alWEfce+GzJ$G7PSpoP+uo+Oc+>@Uo&c!6lS
zX{Rq0g5U~n?VAmXa%^*InOH;$ytTmvMeW|zVyX80hg2rc-YI-mH9Q&D1p8hnE%F6N
z?7~AyA@=(u-kE0RV1i|s4TO+nl%nfoj50t4bo2*H>*1Ux@spM2dTzvL;OXUaS?P*O
zyf)6&M003CW3HG8?N&_!q~lUVT+}x1>1Va8{ILeJ$_MH_;PnV5q5xl#xciGAMX_6A
z5?vyhHXC7p?bI{}+7SB$yI~-6M@OF_{W8=Pyf!5esqvfYDksQDKI{Pav<-Q8z0nzV
z-C}s5?5%A&Mu_A@BG31OXSbW8zc%9LTRS227nXGH3DxZomqPZmA)D0e<{x>g^C^+v
zKfY&k77<klSSNSZYWdu@p*!^(DweJ;e!zeZA#GE|S`Vz#ETn#fsK4@5uL|Jfqac|T
z&>`JGGY^&M<5E>OCKToe<wqIZ5|tf1G(HBQ^vNcbG;tUGO60W|1i|5du6})%5ei{8
z7oZ#e-k+6~{Ht?rTCJqpQMsM3NL~$BKV&Kkxf#N7>XJIomlY&p<6+0MPOj05F(1?A
zPpYshE1v9sn9@qm1jBi|1nR-|-gszYh_pOU&W+VVzZ8RoemK->Xh;8_32HRI^3~2k
z0DT!Ur9RyHv2i`sMJD0Xd3aF;L6N$;YD~s#%Z3Ay_rFj2>uH9K41zXmPp}a_w%Aw8
zAMx_q+!tFpXzuDdg9#~yW*c0TJs58E6Z@tQ_J&lvQ}}(5|6cO39JI>7=^Ri^6Jg@P
z*B@ryH~QLD_K_caE^Yz)<AIX@L--#|TeY*J1K1HThD(D(H)<ao=`*a`=<swA@{Wi}
zbNw+`=E;?wynp3tCoSeXebgs8z)7>P{<7~_Z85V!0)U4}LyyRx#x$ggT0UQ{I$m`u
z#x5^(5WtaF?ylndw0OZp-YXGl>Gh)Duu>b#WG4eDTTVRvQASq&_ceEWANoiIXdYAu
zFH;|Igci`EkLw@lZSl>4J-jhJM7rlBQF^`QdQ+0eGKL<>!||#wO^KC5EowHd@)#8)
zm1XYhFeD$PN+T~m2{D65bQwWgO{%tbO$|MDBA?}!+BDJ<(r+pmb%CG+e2m)>CW#Nx
z+G>KU`j9Morzn~K0*jv>+^5mj2yXnF8OuiP>5Fdc{1m-R1mqNiZ8E{8x$w9+RQpXv
z$uKAPrc5*INRyTiC}C!0omoAhEkp>f9!m2ci%EAK-%Ro>qIn*BC7N7En{xb8pgIl>
zhnWKfy+3rE0OWKBL1E)G9qvHf(L2N$#=yMv%NB+XRBD<E+L6>sZAKnCUh;Y;!G~vY
zkvgn;@zjJ?>%8qzD!!)>NsHuKozX?=WK{v>sKLO+Y@8K<bnpUoVNgilw#%~2A4}B?
z=1yy^T|rwE*e+hw-7hSJ4*P<GCupqmBd%Yv@uASZ?P$xKg-Sp@r5S%L80pT5M}hfn
zoo`2047ibHztq=tsW6z$w1U2G_4h$54tK~2xvVscp-F;`N#**&FN}npPDQ$NTXG>-
z+-;A?p~b^I<YRY|;SizeOO3|}9!aM#Ag{w|T|Z1f)KP>^rsfpi`^?7qX3j8madtxV
z4Y6K0G3|n6a^dUzQkLuiu+jBINq1_^ZOan<WE0506Alwi!~F&#`(yLM;+^jcmh`|f
z9966tN*pcVgLgnD@Avvhh`n?%=zpjp*H4;K_-A5Vy+hwl5<qFgM}`nLsBqPVmew;t
zdvEXpsL9A1r^XR;E1VGHTI=Uwg{fA}gF$4kPo$nxbs#UJBtf&Z>+%iPrC8>;GiRS6
z1pBUR`r{Cee@@43f2%yiBI?VI>6yX3XkZwN(GgpXQb^qW`wi@IWFj}wlS(g!r;!e@
znzqcxzEAFUlfKJ0WzdE@UH2t@`hx8fY$UFIgj0|8)r7YY(cVJm*3`R-2%|B-vR#8x
zX^7dBq)$T!^1jvh3&5;45IUk|>5brXJYwYa3qz>!5^Z}-V6X1z8Hnmtaem76f=a8d
zb-8|V?nz5j*=>F}FS~%(X`jI-LHgjlf&Ql0`R%N5@Rh)|OEEF|7P2FGu8`i8pB9tb
z@0jP7<~jg^SYvNrAEE?6Bc$+;qPqXmu<?o2D3Pj58oy7p2J}=d03MIj`k~zt_E&CU
zoTi}#u(L?rYq+i2NKQ|*2E<iCyp@4x{S)X-2oKc;2{e;Yz`IKB2l;4F0P|}}t#>91
zuu-Xu)zvuY1OtOq3J36=$@7cW<C?!7IzHXPpBd%8T4PCkCd~i1lWZ;)cneDtuWY;{
z5CuI-yDP<EIPU8ZKEOL=`EcK(iX|jOLfuoDL^a{nR&X8~I_0>t!`i&!s<_DwXEbQQ
zV}2=9sX8CAYLI8sjN!;Yd_qu%YLX_*r5A=CHawmQh6sI@t1xUx`U>(fw181B?+-F#
z{I3%<r`>r098xC1d{|uGdzfcM@16Nb+AiwInB`oFtmhLBwa8&GW?4Lp^N#Bg;uUy<
zaRBtk|NG5-qCD?2wS`?DF!<^4#RAuU3O4ZVJNL=oO_?^j)|oABvv98rcnn~RZm_zZ
zu$jzx2IHY@G9Y1+bJvn|L0Ni)ky@45>w)V8&1v4%6mtT8_$s#p%))W0G)b2$oD?mO
zCllo)o=<i1?!G<dg;yL6=Sx-La4>ar1VY3yj1pizkFAulwzCO6|JZ{hf*s4jJ~Dv(
z6(O9hGo1P}UkpJfzR0HYDr`7aq`414k@zH$nVhFm`qr8G8SKiVcbum0Cd2o#eUi%S
zdjd{P)rxm8J9Y?-5!DV6>4^D6RyQcPl#yT4)gR<7kzu8#hO_j4e=|XIhvrlW=zeSg
zI!i@OqwcA(znqrm>Nor2VZyrz3CtM9B07ff(<$5GI1GW>U<wBtX?H{V_>M!S7H|U<
zedaN+MVX=~o5qrq;tneyh*JcW-YFJOu-{ApkUQ2sG~%6XJ6CUZKiRCiEw?-B&}@9M
z`g?yi!d|PQ=Pv}eEbE%#HC`NFZpft0$-w2Fa$`o0Mf}?{XU~EH@%zZnJ>DP)6?Zq7
z(o{IC9-#X=wVu=72gJ2uAsptEEj-oM+M{1{YxJ)&Zqm>26ghZU|GVtvElD<vji^Sx
zmCCh%FC|3mHZos}5#W!qs@U0mjFRlZUbp0f!v^{YdD7@LxLA9}5g(-pfNiO~&v;gh
zoGYNWm|+i)^ZD`c2n3A1nTSFzK?CmF3l>p_Y=edsOlY~%S*It%^LtwKZ-DE+_2I9y
zOEpZR8qiVdc0~f;4kd&?OIFOes5o>c<;W}=IB0qy?f)UsSXCOzr7^`#YOD5w=#jf^
z6V1IutK@Bx!>aN)xtYgIL;2@{4;2JYG=yO=*LMyIm#^_vK(p=9t>kQQmqbs)C@w{T
z28sOZXK!w_#!{iQ_|PKfVKeb@eUhX01qDizddD9RNZoGchRUP<nGu0>)n>nhkIqD!
z*<D-qG!H0%!tr|y5`J~Zz;8VqJJKYg)nWhmwucV7Lrj3KMawE^>eTo)3Ftxyb$juQ
zyLIQZ@)nQH66g(gKN$$a$(=LI{OwD1v20EH=?;o#j(4RR@O1WGMbppVTL;5TZitdY
zaWcK8I-$xeOg{@?BK>N*GI}-1a{VyPy6ec{9gGBl=}@Q2miF(_Ej0m?8SP3k#ie1d
z7>*P(G^J=3-NqkjFzgP%GCcr5M#3FE9u}1N=f;xrJv{Jzl`&OQAT!Ure|Z9P(<Qh>
zjHrrmO-9CJrQsr|QvG7vd%haKx`f*m_Bg^y+-dR>AjWFwsKD?dSyZ|v6jdz4D`KZ>
zlX6_XEX6tIcqQnYcB2=2<B=BKwVLDdGjA$S%682@d}mfJ%ASBqJ^-Lb4m=tG687*Y
zHfDy9E>eCu`NmRtu6)8_y?{%>2fwC`3`F*7jEU#OsRzbZsXo5@-*|x7^4~mFNe51$
zSoI*BBSfY%L7_*3V)UnLY9)TRnDTA%w%2Sn0QupTM}Uqrd`Ah&NO)9x_0$VJ`w*Nv
zH4f8^5Cu{n+M>wEK&{JJMX6T=r;hCxcV{mur^btd$`MS-b`65Y`ImE++yr@l|GAEO
zv~<2bTh5%{z+p$RkY2gVer2CysCn8<I*9?UPQ+ZA(_WDU;<}xBr|3By<9l2wn>e?a
z(jBRd_)@<k8EN$lS&P1x8Uyr}J}jn++o7Wm;i$<3DRQKOrmCZr;(?DqX`^n8dfV<r
zt=2j?!{^F|b<vO@GmylJz(`Db9jl?$ErXIf&D%NC9~*L-9B<GMZRdE8#LE9B{$T|r
zLnF?W60KfkVlZI(zyqX9Z#Y$&P}5|mfHUp99<<Z}RB(W{$p}lwP#BWh>6m|dYJX4J
zvKx{mt_<`l9}T9}*4bA>)O@oE;D=g~_8*KBzSq7TprVT*sj~Y(CBuKAR#h&G0Zx#`
zR3E?v&cHePrr8%<ogG2SbVz9Wk2R?CQ`t8;DMZ2S%r@+WZ>mfa?V#Gma38$Hh4IfN
zLvkvt<AIS?=gG6IgSI!%zfuqk$~N&+HNePM!15O@;3V>sl|}67CkVtlKTp}JLwRb}
z@PkQWZ<PPwlx^92#yPksACzTyUqnDE(ShrRvto*tLmu@z6b2lcs$Gu1T67j{_3v7c
z7~uvBnZ=te1|A3iu>pi3ZiOobt_k;O!A}96-=jR;7Q#<9I~uMKrc1D^s8Fgy2eAb?
z#<5XN*Nn`rtImPLk^HI~ud#Ctg7)fw4d7lj5O`wV!+NdFUqbJqHH7--wQIFgIx5ln
zNiOSot}ksq<W88-ZABvugo4&9adb3;R-k$2S>}USzX#?^%STfjMwr8*h)%3kFX-@E
z9Ac4V?!RDlQLGPHNKbCAg}L!a&c;^2%pj|<^c##O#&`%*+GbWplw}qAe$EP&8Km}9
zqr*uk!#|9oUsg&P;B4ArK>px+@RF1#2=PQCk-_5q{{TMZtZw&!-FDRdnuwLi;E%K%
z<Nd4BfK3FHVsf1F6aRg7uh?d=0R!y4AOd3d89X@6z(4Z=t(~fU8dz4Lbc$d-WGUtW
zJ(K2p0!pGS*;zv<A2;rZr-zZctP&35G{eFLV6;t-8z>RLa<P5EUunRF_lW#9#t0Ho
z-R~lE;=exmY15ezWDGA1kyoWsaOz!_?g1T2S(1>uvm{tMdlk6M$57dSBKpKbL9~Ic
zZ(>8I*+ZX93Heg*PaQ^&PQ-1d!2!{gh#(J?|J|#SHRqI>mj~(_kcuKk0^^kfFs{U-
z@SJkV(K0uE?$1UT9mX@${zg*1pRTyVlR9;TX;M6&?gK=UyF~Gc+J}cJ6d#-}%C0}|
z>VJgF9)dOKYg2g+e>46(fF$1gyhx@)wJ^uu9QvF~Rg*qse{fLl{t5Ml5{jZ$x9&oy
zo|(GEur~l|Y8EXQDPJ3C&YNRsvEW`$906&y`QzKDNssfdEYX8lv_kTEbsb2=I!JMO
zu;4LS`WzAmdm5pr?MmNIEM$x-Q1@$`bkHtLb1JfB$y<suU7CG@0WVFmawqCGyQfZX
zMU!6uFyo<x4p)!SJD@_$Wuvp)4gK{jsa)gXjd1u#pj1UkHJxii?^I^ph8SpsaxgHS
zJdoQmWq({70r`4}2WnTUI$njsAX?D+Z0Jal+Q*@e;#vAhF&3vS4r^e^7An582s=ga
zWyUw+QLNCt(y#8*<?ZOzazt8}|26{f>Mzl&x4M2fK#Xxn?g%nQo!J6E<DY}Wif`@*
z0cFd>75QBEU<Vpxkj^E2!Nc43oek~VgC{}%ty%m?>MBaAiFa=acEPY}fG5$!HAPzn
zevGcYU_sqvMyDWsZGmov74`Kejy7o;OK6x5S;{7T#F|MNS(?pg)Z77-M`isL#%F1L
zz|$T!Q3AHquuFo(V~xj5MO1ZjogC7l6C0JU$ykRX*E;085%6hMq$+W4eORz+C>Une
zba5b2mE(FxSiR(&fqCd^IE?HVOPpg9wUsLm&sqdgHyxJUm{iVJ!QMcX1$XTwV;q;|
z-NiuCa^GKh0Xqo*{W5IlBSxw;gYX)=Gs47SvH+`^mX7AJ`CcZbV4a<PccDj8yV!Hs
z((0tI%;fWEaX<{AK_gyPuywX;IA<o^wn)RGdl250k1;mOQHV8Z{tF{SHgOjK8k&8>
z5)vUEhe(d-wN&#`W3vNC9<-+R2`v;t!F{WW{K$z1Bl<N_0?>*eNGkv?Azq99$L!gI
zr1f@QYe^i+!TvrM!5{Ey<!e(PJP4<#bs{MP(p!SIXKHERtDAtaV{FD7oXfr_V;U<!
zLaJ1RbgkR0v1s9c8(R6o2(#<xwS74M^haUX=eFSriB8EoS+1gdTCZ@E7P~}*00fvA
z&4}mv)DH-DVCT&|@QN7>Jr#e8a3*KiHBWiw-Hp0{IaTnjX;*bav+AOlAKbGAjG2lZ
zZdf%P`3R@mdQ$oRDEg~|2`u|sdQ3SzW>?ase59Z{2a7ST2!k)}=KbEAM2AoAb=EUP
z2lE4@$ZrQy*D-m1jxtsa`rlkh-t=*~uy;xP=9NuLg<2M*RjF992WV1n=f1RU%EdJR
zi)N78Ps%{RdJRqnd|x3tO-#=8Ci@%!r^RV@=qyGoT|4U1;|!g5J1x8(5-^Pp<}J`c
z(tcIZpHMPDq~kA$B_F{BQ0Tu;t5jXa3Np3fPyd%-b+}cS_06z*YH{$B5O9XUA6T*7
zyQN^m{A@c`nhkCeIy}c3tj%msdFR?}hxbhK(7L~9Dh^B|V^o7>=)t&lT#Zp(+MSN!
zGA}E7y2k5cDG{+A>ye@i%vM_c1!y9-MtDF%%yD*|qt+%AK8*WA3F`)hqGaBp?OP(e
zto%h$iv^%;nR`Ms=b_zleD5=l&-2Qh$aM@TO)^I*odjnbp#~PF=Nd|kQ!ny<3gM|<
zOqZFmvf^9{ObyiaL`QtqKai!Zk>mG%TjNOEHy^za2V-%Bm`&!gdrS`ev>%QOw7x1F
zRYr1!ZAs)g0Cj<#O3U<uV;5Z!m5cC|d+!#L_^_5~DNK~q292inY1xzKykvaXC?^fA
zOh>82lmGc#<OnpK(_C$o&cYjnP1QSrR2f#9x*xoSeCZbt9pJQ0XD0aQ$UUi)CIz<%
z=UH~^V-Pj%NH-*)7-wR;=3<6`umnUoeB7jcbW)R!)xgmM*(F9Kpp)+ssRI~KmeoXB
zgN<``nmwZApR`8D3n|oE;Je~c97T8=4mSV~Sa;bDgE~cr7SnD?lF3H^ph`@Qnc689
zEB-A1#4{PvS@CU#Mowti^j$O;%|feYE&;s{UD4i2xvT19tl91h<`k@f%jSib?9r92
zME5{a1FzN>8~s$eRgy$ITLd`Z_i#=+z$8=4b}`agAeQ&Y4xfGM0UFRB;GBou+T;Ek
zCCyPYQ93TlaGl$`-AlRxn=lSSZhz#!yCu%;fwjr3)17(b=HJ-P!J_ZSYS((27PB>n
z#GO5|qDj83zvmgCQKJJ0ZqHa?eBnD^+DWW}r@1cl$Qi7h4>ZDdZqXX$=LS!RmB;h$
z81vt1uXd7)4}4g>b$an^6#gv5ibqv~4=|9DN>Ic<uHxlYV|Ljuxh4A*mFP-P_hlDF
zaIlym1BVRY`zD!H$nf{+9)3G=OVb&X1Px<ZBg`zS+R2<^lshQuugYGuF>PW?4_i^=
zyY*0BDieKVyS2#5IG*JY4aU6^=jWPEOURA0DSiwSJhF01>duYqefmZ`nF!Ws)sNKv
zHMaX|ls}m3!M*M6;t}haPaggzvq@9F6BCE(tN;Q){l6ANe9Td)8exENcDb_K#=ve%
z=Pxn{^Q@Fjcit1k&G@rV8#<TSFnklbpFsgv>qgRs`cL5y7r%?X+}_uohpYN!l}J}L
zVnwtV=%bfV5sncjL6P~cgxfPQtpn@aiY2vk15^l5n<gFC<G**_d3Q~6BHjGI5|JMp
z@@|?rUL;L6yciLbPO*jBvrZZIunwo*T4HvsK#L?le*>fiva6WCp{hhDN`-y(l42Sn
zmz!{W&vIjHZGDeEsY6kLfeQZvCL6A+m%Tg*QB`G(pHC=>0ATg)hb&N9L7R*y^{Qa+
zMhjhLM(S!mRdC=(Dno7jSeT?{?e#ZxL9O83w#!6J>tGL+rl`oE|8mgNE^pte+7N5o
zXCsp?i)|q5LQ&mP22K6ar}b7uPUcv*AriOMYRl9Sl9sm!xm=J$swR6x2isbQBY}bO
zN9?fFw-&n7>o5MBrjZ1b|9NE~gH`^cB(39H9W)9-TD?K-fUQ=+>I6!KBJNdz(P#G!
zoI14pQsRD;%sU*21U=h$o1P4{B1`si((J?QE1Fp05ZoY!bc_vD@GU(H$RHQ(70Xt7
zWWEkw=;B<kRejb!tx1}Tf1{~OHA4MehvYB-XidEB3rxa>_d`zl3Q`WeM~P!)QAz$K
zRvVj}=Ra7^$Z7__LiE_^{J)aF;2%j5!{fK4pd8}4%D)1n6J)_Y<W3AG4Fj%;N2D#O
z1xJG)^N5f?!P^jg1(Yx;#Qj>bJx>V)g*XW`AZx9A(+yE5^7IUxFG4vNT~`Pe*uq`T
z!Ug#xF~RKcQ2a=jc-b+Gu2Gy0A~F-!fyn96O;sq@*z|5RgFc5pO8fLSpSkdo3h_Ps
zwcVL+qWHejTmP8+eRDJ*V}9Yh5sH?jbsA2n;Ju|pVgY4x6x(V!xT{i%7+Y63Of}z7
zjX~kE=6=kZIbZbafsw<%iIO9Hp={z9`ZmxMDBrleW-k4bo+JNtIEV#*(_d>ww8Vf}
z@R7!I?0uhcTfjVN>8kVl61o}B;EJ-XYU~TY^~N$$blVc7=GMGO;t5^O@(?Y7zcr&!
z4;qzq?5d!~43e=sr)iqtxCOh{R}nO!+@Q{xAi#s*xF(hRk2_##7{DBgCg6EI-$=fk
zpE?yWEpB0EvBIlFr=fb*0));Q(FWRGZE_0+zJ~g}<y1tYzKmXVu8yXV*{|0c*~z|C
z&-yU0jG;T$Sma-YzDfjS2~1d5hGwa>5ra2GdwZh;oA6E94Z@+LPhU(S`x`D(g7tMV
zUx>ua^5E}GJiE${WdMEBhJmr>{a#3}uF<u$#5<qM_P-EK7|=EnoY|=rKDS;>3Ycv=
zxsC&NBsN?(4a!w#k{C$Rf%D3SbgBEo3nu)^Z@_?R4@Jja3@LTSLH8&2i}mpmhBPYM
zN*z+$-sH_I2Aju(Py9d*xcvI<n?6X!n`fdzwb}cYep1lBIL4Oq8$xEL>v;S{1l87h
zs-!?_W6<S{m0XN$VC&=sVao+*ZzmgwEl*NtZeFCw+?NVUXdO`t^V{`(4&v0H`NF}v
zAM@4HKuaX+!kD%FBQ(SNz7&h~BQ+rLK2l+x?;hfc2Q;t~AQg&seIa=>*NZNdT+>r_
z-CQ3^W@M0)M{c~i*g38o+F~N}SgI!xK;`v+c(fL{<0q^1Qy4#OH^$;F?Q!r);|Rj=
zfdib3P0Xc?SC#4OL!|vOR)wgRa&hN$o`)b|d^WY#up4WXe-X*^vJbQ3qmca*Wmn`{
z(ocwfRkgZq-!U~1WBqyVQkHlmu0Dx`kyt#O)GqWLDSgOnsgVYxEu@&-U{oLefNF#c
z2mil78xU&svX<XjCp)ffb0Q>_v<&$#ID;Ywi1sleSxY_mRVN%_0Lv<Z{H+s1S0~-a
z8P{OobDho&=Bt>#<ZP3Zb7Ji9HU_R|5pxKuU_-rGu|Nrg`d3TK&S#OPXr)ki^hS_L
zlkem|Sw-r0F)j2ZVv+M{PzFph8X;y-BkI4Q!U!x&=(POQ;N}O!9n~K5RFBkEjS_aP
zO(e`<EPWAu;^tdv2xWLG*s-d3?t(9V;ipvz>Lh&IAm|`!4>3!4Yi4*DuDv5am`Q`^
zxi}gK$j7oXkT8xn4yBK@fKEPi$d<6A$hpPk{>S2{l3QE!Nsh?-Cl1yoLTo9Lt+}#g
zP<KBg%@|-2jp?j%s{ru6^dutzUjgCvcSR~~%mxKEIH%KQpkX|(W%@42)!~FS_^YTc
zHOJCgJQgaC+-SZZI$mDjyb+1E9!Pxz+#KP?LdJRCQNFQ(Sk}`p@4CR5Oel!Fzp2(?
zzc`yD2hO6)zmhSY9|A|f1=p^OK=3_{dz|EHsF5K$0rSiM7bgCxY`-r%)=m*+Wl0VL
zFnrC0G1d~+y}v@TpB)ek1DQ=w_GyvDMNo&;ha7#ePTUmGozwIj4J*})@JwiuKdisM
zoY<(o3@lT;m2z%umDG>5k%9EYyMh9bSN+WI91yEETKw+F8p?|N0*Vui&hN6XSqb5U
z_&Rau{$u)<O%Gre>W36{?RNsD&LaTDek^csqekN=o>xO|rQTgzH19H?)+4sv*O_-^
z!s?jw#TC}P;_qOuAP4qB_z`r6sA0G>Z{<XC@^4{JVL`<jKuj>4kZdlYc?fAXj^e6w
z^K?^lM<y}SKV62k-5pcx&Ee-GK3ASMhifM$m1o-D5k7LMZ#!yJ&Uh}flF{TBf4n*x
z)UG((HUbdoWc-D{Kf`w(E8-pFe#7fymYB-uAwEA@6YN?P&Bw5+59Vfsn>TAr(w~j>
zo7k5wE{UVHD{e;oBm7J8C_8-wZ#gyAi@CC}9|Tc@aqJl^=kB^(Hu|`I5-NU+3~gY?
zv6Atm)FCD5-~vRmfrV{9jWQm5$VQUFp|i(kT96W&7EnA&cj?G5RdR_k7Y2k=Objsi
z=17b8r_R}n1Co@TZe*Z7oY*z2+d(=mi~sZi6rgZyg^my0@F_C9H9$v@D)RGjM6l()
zbUw8jPQ5hCuU<)(92V=A<{7vrj&e5|*PWBUqX?TO0nzykTj~>8@G5q}o&!ZK6;FPl
za=Hj&tGI!Lbu=#k5h@mxSvuZ$&qEU|43R20u<GZHcFeRfiY?-4=}-MWrrzk)`Yn=l
ztnETfLP=Lk1L-QrxA*t%fQ>^ImL=mxMEuyQGPS|<8aD3G(SOv8GBN;~Y@@xLM&=Iz
zN(h**|JAZ@>&8Hi#n?|B>mSAJ21dq#eu$a{{{5P3?OT`!n&l4^cBK+6{ocG)za^^|
zvh5q}l}s*rl4)D7D}UuY_<<>TOGM&fZ#o9b5Jv;Hh1O?|U*{jIR-U{R)_&wiR5vvy
z0rBkSKA!ylOzf?`>K{2u)K4fs_eVKbra4n(T1#vZ%N8R{?4b7mAI_>1SfnA;<Z59v
zC~<>^ABVuN4ZS(vPhMHx$0b$CqY~%g0t9wGEC5S>Cl@2&9$e_GAiV<Mp;y`T2dp|k
z6NX=*=8oePys2CM4Mm53%FGj5+Ejfj+;@b0P{z;dV}hn{>!wUoss*MntgKhQyDcgB
zxy%UCbwqsV2Fk-<h)R*p8L)&OpgRyhLlvbE*8iXlK6{DV2D5z4c&Du|Aj!D#QFH}@
zya4<<?XWShh;a2~fDLOc&;R}o)+i>rUQFC;Ws@_fQemMJ0%}x`R2U%x;1cdXgXZrC
z2Ki8x%D+a$ALxTIsCMrBGHr@yv@Dbi`k$<a+9whTq{PT^^xOWy`u`6^0zL(azQ|QR
z^t>Y~$AwNa$6u~<IkjLFWa)<zxg87|shZsq4G`!vHXVXeypn+uBe_@?41b!o%zQ`~
zjT?O>W=sCN_jvVhhHqFT<vzX>b+WvKQ@I~2uEyo&Yt5Z7KtY4C&h1nBp`u}!Q3>o$
z<FHTG$^1cU4di=}Q1j>#!e4<YaE(U=&gt^N!3O%`J!@$eh|0I;E6e>%zS0U%_DN9l
zV1zG|xh-L8C?vbCvY<C70-l6y;Qo2@RC@!mv11Sgk&hVK|M*;nOiGBan6HYp{vnUD
zp~7Lc)!6<nJ$8Hmh>PDPhKSnM*PMz%*L&7y@(Z6+KFln#<U*ip#%_WZZ9gL%NKjrS
z(P#5A38xJ#g>6^>u^BcECHNTeYf0kL&@m>9Wt{<&<CW+WDsn^+B$2Mn0$Yg$uywQV
z(*j+OBBTgmhr&WW@5;IlnC(F5eQZUQ>h@6Zzj?V?IkNXt%`Pw8%G2#9VQSqd67ubp
zLXj9xA-P=UYq0?|@4CNIe9`Y~NuW*#82)M*z^te#tbM<`#bsPL`yB3W320k(TTanJ
zCmjp}Va;bMIr$WsHPD}YzO$_!aoql6jWP^$){2rhi7mDs=z=&^)16EvR29T%h2JlS
zgE9;X5g5}X^=!7IWJdO~7$rmPmhoNgYTa~14r(iBUgX_7b(F~yCSc&t9|L72Flpg;
zE*AmBCFqHFL9n<E@~Wvn{@%^mSB#{n4wiyD5;F!wpq8xR#n<2j++Ld6Far>Ju#m;-
zQQZxJ@~h$P^hVcix5=?NO|GtBZ@n(f$a<vrrd!y{1mB%e{fE@vhWdARm{}%@n6-+n
z4hPtOXif$ew24e$c`Jj$9|LOS)fJRML9qLyGz>cx>ftXS$@fHMY`?Z~wIu<~NG@fa
zM_e{KDxm>%FYtP-A9IgaGeDy)igE6_EKNqk{n7}@m~h?2ZHsP$L|X!frCI}dV}%Wm
zAy^$sV4ey@2~~s=S?XAVTsU_$E+S92+#ULbQ?M!$a>!-0nvk|H6A`yV7lf0byzibN
zV2>WqMbzh0<ou`l-Nc16w?Pwy+aLi_*%@n```K~)e96+nm2ie=+3T7@pR7Xx1p|+q
zTwsA2{&V7qhOAJw9rGyn<py~NNt|i3=qtKYAAQ78`|g~R6t$XkaUDo*&PtMRdr@}0
zu#nloANP1*cn7YMzx(*RH^&Q*0H>jAR((CV8uz}Oa2&24TVs5#u`VMC&+2nwar0x(
z{JoZw{v%{9SegYjVm@M<T|nu~67w$5uL61f16BWLJ?g9oul{hK9nB*(l^GK+NIpd=
z9M_J^Ys@ArFZQ175s`Sa<0#gHpwq(QdS^M^+bqI7kd%<qPeF{d!|}yds9u@o*1(5R
zLvNHkV;LO+0ksZ5Ax5SixA=Ue3E{_|1~I<*;n^kFCYZx-Arp*OAbMHM<Qd9b9vIAr
zeBulo=zYWtuhljzWj<9E<=3pP1b>}vaNc0agu;n4SW+Yb@We^>u7tD+70G#>ln&*B
ztIU0^*9!a4Yop04f@Nqx-t5=blm_(zOzBJg|NYJMXIHIC=u@xc%2C`*Pi7d^LgU>b
zIh4Ilz;G<}4|{?i2l1aT)Sl(h9G__b3=i`5RFYy$OMk)${MODfK09nzgU!2*OFM50
z#;tdW$jGUmLu82p-L=@Z#k`ZDZox`|90dgg*qT=VI(*F#l9oD{dG`GncxFTHdz=#6
z#$rBS%FOCz%5_?Eyy$}HCk=XLST22YWD2|S@4~|Pu(0MRV>zDLl0A&tAwo$dP?ETH
zLj%w=ux8`3HBCkf<m@(aK5y*tZ)IW88>&6)cw;u}k)G_8|L`=ubOm8Q!sg9%9ZuI|
zg2=#@L!b`aMq6m<X%~%DMrW7ogSKU!;arl)U6Rc!TvZ5U1fptOaYQLrid@UOwV8PC
zznzty0SyMmHzX*9vDr6C13WOI^klQRW>8zPTRTG&X1sl-&yfFB@7KPi+m#)^nOQD`
z1uP9rAgp$L*l{pK6ejo4<Ce9N255HnG7R{6kJ&$j)K((!T9_lEW&}fF6-})mO%ij}
z`p=^@>utxT!9dMkv1Otn2PsQ~(;+EJC#au{u#xix=d0iFXCb_?Zzm71jWNeK`U`W8
zXi;cpK9-m*NsO7TR9kXDR7qtm(1sQ3kQC%1Jqha0tLzG!z(n(|cuuRt)R7r^Urmvk
zz3BwTs)W!#6I38i9;a!L%$QL)+R{E!0?it412z~#zaQe~MZm)y$sK~YjQbeuiGdUv
zg?$pea;PJMd^K!w@}9*+qzf5NH!EPutAF)Ilf2_tliRDRBRKtMSN*SL?cPH&w)`%S
zj4!^S&{Z2ho?h>VuvZ-Kdy7++A1_tC3qZ*V)a_U9WSUZ*63?BwLa5h@fZvk}ZHB&P
zLk|O(?B%!&FYUQRCg~cuXm}<ZosM?Gl30ZW8nE(gz(&?LYiK@JvNpJgJ5S4))B#et
z>qRTJ_rPu3?1oiTL@QlIAyxDbp+PSBA0Hyo!0_|qge0>;h@w4}tsP<rY8a7M77xM^
zDoC|bZVX~JzSRnL>iv6Qchd|^Un7bR-&s#c3c;KT>*NtF(7<=H2>m!^g{3kvpfE`-
zfx0jqc{#&L`n~K^dp`NK5B9s?dWm_2XEObY8|w}hRrH9J0z>mUXGnRJp>z^jnz#TT
zJCACsr(Qx<pSQ-ro0+mm5v+yT4+!pgi0+8l4vbQaZJ6>Wuso;LLytIOO2VYO38rfP
zciZ6`zA**z+bd)!hKK2Fd61dvmNjlhlIS7A4P5BVn_+3mk(ZJ>V8H}1As>{?-6c`J
ziU%+Pv_&?<yEaem;7ufE@uCq)5C-^G{80b;U#%H3*Nt|tacg-gIZk9+aB6Tb=1+Q^
z`h5RwfikqwT?2s0+;DPfx3;1yK{62_8QMcY+1GEZF0X?wkY*zV96YjzY_^9y+n<#z
zFn=mPbX|n}d%?{_<fmy>YmcZ}Y{!d8%CHRPD(#FUIF*+T8{lAGb$zu{SQX>8y}jmI
zr=o4Mw`D5s)D&o|t1OuAd$vCxIy?}YhP;S_S1oXA17BpdJL1?QVeHK>F?)ar<Z%1_
zuuQPxpd?Ot0{#iuzHpXl9xwA~+<8Ms*4>P(vvd+#_Otj$BhEz$)Mw2xky^W)t%fFP
z8qSf3tYbG8VS3NciAYQQgZ7l-NAw=~WN6kI;1t{8wEM@L5$qp9iEFRnGk(j<jZgdN
zOAeKqS|=D3zalRHZAI{dDwWu`PCkEor*N)D^m`jA=Ytq(^=DpV;!#5_LW@-HICQQi
z4YyyPFfggS;(XGiE5Q~qlbXG#*k57=*kK@){GhdR1H{I7TX5@3SLi%UQLv{VVvnxw
z)puuga~3#j#Eo&GT~2iyMXDLvL`v#;o<#5169x}%j(Y3&o{Kw4X*m6)Yn3#B?Ga3U
zkUx<XaF?@}FYm8*h~Ys|2bwqqJuTgaBPL~VZt|tzV-^&Q=p?MRcF*ckZoWh)PTStc
zrsBcv=xK1Z*hEGDTsaxDkN-Q%Y{Az9>rCqE%u0Uu2sf6A$oh*0!p9gJwbAEm@GUs(
zh)~Ju0(dCF>l+nA+XswlR+F<TD98=g<Venf`sV*z#>4XR`MHyN0JSGU+9j=okcks!
z9YX)G=%?*#h3mK^88(!C>#bS5Rp1N0ih=%wy*dA)3ej*q;1;v7h}eYu_j4{DJJIK5
zF>Y8ce^qF9kJaFuDavB)KP1n7KT|`Rr({zOCB|egOO1Fv)JPQhK>s|bCPm_O<m1J=
z#8IH|rreKUtjT=Jmfp;!drG~h1+LoEx{<x>eH=ZfU>>C%&O>5S`NF2U;l`tI<=Z9e
zQs_sD29ZLnV@R+mM@r2y$g}f)!B?bwM7@}tVM^ey3e1u`Lz?zH_<)iNm+E+H-ZJZJ
zo}m1uP@9@)8s(?*Z{Plb*$5yqUU%goz$-(KkPR?xa65-;GPIM2(L!OWzMu5NCs%}w
z%fA2rTQL3EhDFk27V09f{WW$umzCI1NNLTP+r<WNFh+b7)ZE6OZ@Vif7V^BDL%D<a
zRB8z5#m}%zR?|djBL}VVQ`}>zdz>e}{QI%GPxT=ze@bp>UzCOx_%j_JA$=G;#G`vE
z8RxO)h+s9u+)Ewm=E3cSnnF3(zxcm^f*RBEn<hF8)#_i$whzeFZxT07W}KgSFWMML
zdY(*(qMn-&bR`yY)mn_1!m7{5{(_9@fl+{9G&y$RP-o$blpw}MXbf$czvi*2V)}C)
zO@}ncClh^2jkUWVO(6RjU%Rpw7ZQQ&aW7$AU^OTuc)d5dXw83T)3kt!hOQ%Pu%~sa
zo7O`Woy{!BJ}!tai@wOz=LB~K@5UIb(=_}|olL_=e?^pj=(zjcG?i&b{v1R)ZgwgQ
z_rs;-+5CVwXt#1@q=haY+@>3a*5c_zXM@CJuWz!06U<uTBOw1t)*GDNjbi84p-8oS
zq&m&G;l;kKU=WlX?8M@fuOJiMQAw5jI)773SLiFK@>MuUsN{O}lTqyNqgj*I4b@QQ
zo;Hgk;o=3%Y(J375T0@ADPovZR0^x3ycKS`Ib=rn9VSimkH6U3_M<xWa%`q?gI!0?
z*GWw+@Fph((k(%7;zJ4PwtKPzs*A14*eLl+Sv~4gY_P-a-!`}z84yXE5uj!EU8CFB
z|2K#s&G80phbou*(cagcmI=-l@&hgD_@4Yp<E;f49PDs<FAsbhkeR*o)^<<|Fts(x
z`q){TY|cZeR7GaSbJ}yZEQt@CMesrlnXn&nwO%sz?&5Q@?gH~VyF0+Gp)l|nK62|W
z1Tqi~rvt)X>CuMN$heq81OCjq<0)UBf6j~K#pvOwq>@13!RD)o+!JxekU)7ryc38r
z6%rDPx06Bd06v}CvtG->N)Ppz**J7db>EBl7z)Ra;Ua*ajXVrcX}{Sig)uuPYsQ7r
z6A4WBVp^6-fJBXcy`=e|29@!{FM@dRYG;H2pD?=`Wdkp!vjq0`5{J>eG8@1Dqm=F=
zinj*$P3u{N57)pyZ`Rbv{^l|++q3PYz^S)^ZF;kSqNHxfw)9fm_fq#e7)gkdA3A%w
zFCzs{s^Bq=T|s_4Zgtz0PjXIv<nWK56#`HAjkdY9^NeFJ?8C{tLLEO`W~^cXE<~`A
ztI*!&j!<o0DCB(q*m<iv*<=^__o!#)d~Pq>_DnnFtXw*TXu7f=bCb&_c<KqL?+9ur
z&iZKZw_`>fm?0fQ#sz(}{mL-e$zMwn*l>zBgQ2D*KmPU$alQc-4WkH<`F2rNzn18G
z&&?zw@D%+#M~G`<h?_pBh0+!VT@6V{t)8g<2{jTFUV=9RzAYd5RvHyRGm19Br!lLa
zq?9jnHE`lYrtcmzWiuxRj=iFJsFG6?gyZj^nGS`ql<>JM^_NZxn3Xn#K%qDq^9aN0
z7dUVLvg0I2e5;I7oWFHLO`)ZSBCm(QfR#iovj3`!*HdA8&+Z6+I-&K|-Mdzk+l;zO
zR>62mB~<c)m&8qMFzfx}sw4v_?H;^q-r?LqK|{XoNc|BjQ+ps%xaBn(==b9}RTVUj
zF5W!*{ODE7o+f|TThR*m9Madp&g<TSTt=XRt%Jw17Fa*>EyrI3Brn&*X&%MI=b$B%
zPlyYJMOgHQlK{6oxK{1_Vpi?$XGy@^Y~U9d>4M;BMk`E=ldVmnMxp2cFOaf={Owx{
zUjBZfn?tEY|D!qUq}5>Tkn|U1_f&2ofS$s;kYHz!q8`0pHxH<|sjuqS%m=wVh35K*
z>lp*<lR`K>ssF+CH)#<^t{kZ3+33wI^UoMQzRderB2~4PX}kVU$KoPKe2;P%U&dg=
z1^(lMIWagmD_!9Kdq1jn1WD=pCzEPFcA^}@wM7x;kD9iF*x2v5QD?+;vKBPa(N6o!
zheAUOk8{?7`4Nceu>4#HiRvl^ZpN})98<YPdG`gO4S(#gO;?1`{qT(%QoA)uZGL7$
zBFvFrWD9-(ew!JX!0@GbT*S3Sfbis-IcZ7gUYua3)&>K%hR<f}9l>0GeR}A&P2(rc
z)??hiR|81d=L31Q6U);L|3BK5B`>{2ffZo~U*Pw?Iag4AbE*k%AOS~@Kh&VGyE)ps
zr)KE8I`pI*(d;*l_NDEBo>0Ipq&4uOVFECs<EwQ}ZGIgXl&`29-=M^{9}A|Tn8@tG
z`@`naN64IZ4y44eY=Mmb^@iyU<jgtEnDs6qm|0YdHUCXw49qpyL-88%fE>E>X0mnk
zA|eO56+Kr^1AHBZj%#>kNNjU$)%kq*1G)VDzd5XXzZaq;@7PM#9Kl_7FuI8G2x<Nd
zMSYET@O%C^I(o@w1QUeFlvSON{9p_Q!W5-nc(hvhbV%3pC8-8Z5Bl(>E4j7-uC{d@
zfd_A^-%SNNiq*Co2O{-%FL{b7>}LA<EmYoQa8D8x6{MegsYMQ~)*BNUW82UQS?aA`
z1mri+e(Tyahb!!F$*teA!ej<Q=Kq9d)E`KoFJ}onlt=3B#5jU#CNyIc40>rNO0t%O
z`0$i$t{RN3!mZl2tLBo;Xe_yb<DIMW4oT(_MZ(JaDzJ;ZmP6a(`*o#W5h!@z^GX(f
zl*E;KkxUdkk>>gTGf|~W8}9}rEAhQhqsPTcnX<aWGubxB0|j~ZllgWTqk2xCBe95o
zWG=F;&TxExyf#yt_R6h@Jk8s8He8=J<^fPQbbJhK;o0tcI8Og`N$B|($WprRr*o^Y
zj8+QGVb`3$_9I3qrO-Ms#)+*c+(5i;4`40}$K&#6S`VEut-gjUJC>6haxaA2x=|e9
zM7657ofi#qko=_w4MEG%MK4#<U3V}ZlP`UOgTGp;*-mT4xv{iQ2Hb)m(L9zydzXu!
zVnJAkF?<;kWciamLV$ihWQSBlRhzE?Rl@$*Ata~mW54DcVa9@;jL#paLzv*8l6zgT
zbMVN7$<+*W5lzTRob}ORX?tG#`#3rn(F@@Cm75*OBKp{6L#rBynsnsPnK4{sY<DZw
z;#)2v{ufJzqe`dAV=bRK=_cDL_96oL6)YHD%*~5^!N1~SV#cn02?2HZob$WLYT8r=
zk?t?vj(mf(8~dPOo{~A@rqsdt6Ta|dOC!KRX!1&qL^U7v!>aR%qk^Q3iHDHWmy`zZ
zuOc4!^H3KG>K1i%BQkWJ{M%X(+qe|Pcj7R%$MlKV-75-pZo~6a+h#$d(xvgR{7yR{
zGad~{5#90nLD(AegU^uY%^es&9NC?t9>@WI)y1o5a8xSec*#>NupcIv2?7Wil={}<
zX;U@r;|i&w2n!Qxj69&@bT9FYR%^<+QtiNeK^wk%now>H3s}{lWz|R!;5}@IGzMLL
z=t7haY&x*E)1;P+sjD@F-3Nc#`t8wiAQo#)tHds#4HmX=z}nB0af*V{y3PD670FfN
zx(v8~3gDPi$*v5x<Dw>4W0gY`xMO+zeX8*aSLRb~8g+-&C6YC1@k@bqvz;xzGuw~C
zXKdet&RTrKSODL`&PMxifp?&Vql$U+HpQ7eSv_4L;U$2segeQWkR&|gpv~PbF8OI6
zp*m!NdL#2CmAI{k8vYuneY_{oUvnLSyO6A(I9P-gCVMJJ_R4NvVi0OchJx<b9{^;Z
z43pdeA}qQG`_>s1{+^~St;rwgXzn2Ji&ON{j)|gs?in*~E<{(1qlaIZCnQMm%6~d#
zbOQ(LxPY<GAPlTq`<Q%3cl>23{PhG{w2p@Xx}`sQHrb6}{bSxJpIEb_^;<u}u9wp*
z^xq5Uk&38$gt|6rivb$zGCJwcoDK+&g2SECTzi4gY2Hz&B|Ly)>Z-?Q<hS60`*#wo
zNP}vOZIOKIvbWqnr0Vcs*>#@W%|Aa~q+z_fP3eV35Y#MWraonfT@Lo6QkGs9_NC?p
z>DS1hi$muv@XCRLmBy0g@%LH`DUkBE%WTtmnllfEn<lQ1n!g>eWbSBiatVgezEW$^
z^V(O`fiPA}aM4zdX{Y&W`EVehhg^ZczEgl>C8rXl=l>_JAIwAaAhwYgNkdEYYWCN<
zM^i@$wp5qCJh6f?Caw<|-IAtlqFFffHG{oAMRHJ@j9%pZ??h$O8_hSEI22Vok#Qe;
z+g1PV?YQnqTDo5eLf|_6f7a>~&C_}V_?_7ld*e?J8J7MDDN8HYIr+<Iu{GJiay&&<
zg@mRuLb8xNT#nZp9=87g2iw8*Iaa-W#eRf;_in|}7=!bp*mN?5ujM}n2Dp8*hij`W
zjQ<ZSQ=xRKN6%9o&#xIa9YGN3j8&PkPSH(E{0jC9x7`)9e@oq*rR4Po(a@uOJ4PiJ
zJ7O20zj(y-{J`8DX&g7Q-goZO0wQ8F4SRJ&em#L&-Cmt?qv7Rv=p$0Rz@VDwK&Zi3
zLB4>X?Fqz)O!6P7uvHD=JDC!n$VV11N{;;T5Ra}h8HmO`f^JZDr4e?60Mb*1ZZ?NQ
zr(0Jia@h`*ui{CuvWL+0%YZZ3s$C0kd&anSG@~3uR1JAKJ~Az_Ntm%w{zl%F09tL@
zoWzmRV(SBFdWSf>sLbr(^^!j|V92N{7|DW&2_)c;Sp^DEdAT(VWCBjCF=UDpkkQ_b
zNL?FKOrNzohakSCyxIFMTt*Y(karew<Y1yP#l)8s66=ovt8ZT5DFqiBfD&`+JDEDz
z^dM#_J_!8K2#N_|(_<vM19W;Q*1(0V1Ylvxkq>ZRJy}pMJ@3r;(d!b*v%VK=D=^X<
zb#iV%^&npWr^L-)#&*)>)oID?T<##|#qz!-QA?TcnP_c}zy?BTk;qqd<EKaQA~}Ff
znQa@w$ga_g1_2V8!i`+8riH5L^C-JrV|S!b2p1wRQ3onMcR&v6S@!&G9X+<<L6~vC
zz2A4xr)NV9DebqhSMjI$S&3!hN`n<<<`n%yt=$+QTREIFXz&thvIeQ}m>lsO5PB^I
zBDK@dj5Y#xv;f8k`G4S@XzPlWmJs?5m><gz3_M1}CkR3#!L+ghu=RuE=<xvd9*^?V
zRl49J=^qgw<48dnCXGV}vFaW0qf!cVWryp4tC7gX)&6JdZtKo<&OJ<afcYvxT;bE=
z+4~vsnE(As+`!t%hGBdYCDpUW>j=0+kc&$y4oNiX+p2bw!ra>68@T*@RLBL~ucK_`
zoWN`aP560At<6do9{tICLI{jb`36+_$t?rxs&92LE>zVG8aMJFk*~%&sKG|%897Ic
zWY$0h-o#ZR&9Zg$0jBPr2980Fvf;jc_mh_g!;zz!PXtd79@rsnerRK3+Tu9Fym}y0
zhx#PFI?D2Ber$spGwJ<5oCdI`@`$jXNJup#S%VwGPG+q0>GQg#5#7nWk<Hvxc2=&Q
z8kn|*3B-1#-myQC1Wn9Gh>AlxhpZa!&QcIMn;iHWF88ag9DLIFnPHkLwNsJD$*i?p
z=N)*|Nn(SN?P?)rpSpz4EDPWpVbh#a7l+Mm5FSYjP{Ts2vPdZv){k8xk3J6DW=Mrx
zC69%GCFN$nY0y0kq(*2&cWwiT>5+gj8`+bS0_R(_-Jx=FiM(#u_tFK+e&2EtAm|_%
z3W*|R7WY26-B4P>`!0CjD}c*1Rv>R#LLTuRs^^rU`UiA(2<M*G!$Xmixu07H{nqdV
z)SGZ2hJQJlZ@V-?GPR)dpb$Q6(fF^EMJ@zeq!v)IDAGEy*D2Iu?iV#I+CXdR*yUr(
zYnn5z6AR30AIBKFoDrhM9}CBVdNEdlQX$L5!1B(kL}<h!XVsQ_9+i#Kh44FYWQD$Z
zo6Ave=Gp%80T`>7E8{W<3n~HxK^zel2r=6X276SP|Drn#(T4iiB|0+E7w6Vh{gcaV
zc|lPCyUFJn82>!3Jf6}VfEEgwCAn%3(BiDHER<T_kU`Zu737djS6O+i`tB1Lkx{z$
zVl;bhskJf$oA%K)F;+I{xi5`;Q({=k9}Y!C#IJDe0~Ip=5lGY2n&^r(xlU!5*Q^P&
zt$n3^zMxESTvs#O@>o2FbvF1hE}0_mU$><p+dG3))@lv;jr9AhgjCB)0qHhwYsrVv
zQL4;{Mz_NsKqKPhOGUirr8wPWE{CR|h=)OouBP1%zK_@>0G?}o{!KK`9ik;0hXL8U
zRs-8!bxG7VpCi;&M(#k3?XY@PZrq+t*dnDIccE<vujP|Q>an%Cac&8*9Kn;ki#|Z|
zbjXgjOLkZJ5b+QA>stw0ZSTxP@wQTx2rAS%^u?{$>V008C8$ltra&5}19?A2a@;fS
zm*b6B&)AG)Z{j1kSJqh6o6t2i21};MGDePx``?EA5SU%-fxaLkH&$0LC5ZB%ZL4nd
zZJ7lh<ww)BZLP{$D=YdR=Erx-oCm*Mq?^?XFyk+((YvW*l~O<&Q_GT@$*QDc#4Oi)
z4{#B|*s%A5R{K${?~$K(E}Ml$v(+XOVX+^DB&l!Xu(X2eq5;1EbFiwL)H4*N)0rsc
zbH(8?7i-O+GdV%;km)@EHa?i;6hLj687xXeW$#q)WPcHr_L<Db?;TvBd&0pfosN62
zWuM5$U)1hIeb5}_hRI^^QvIigv<GpNRSSksifc;pQDjb5m2Qz1xU1D<>ftyJzm@L0
zV?lWA@g`>+O(+F;hg+M9t1xtpHNFC_tVDUc!D95C3D4_`v$aR+BWOkXe<}q~H+lFQ
zRRJ`%d4V32j;T;U^-dTkX!;<;X){soLu!<xT1SOHQzkR+_s#xy%i={teOVns{?1WE
z=srISJSBg<3zlwp0-RPryAC?lWDx~*RawU}4YQ~5`+P2tCyCh@r}?UNb8>ESeYbOQ
zRwz$F=MxgW$(W=Ij6ABz0dM9g5Loz$N_hgCLB5=YWe9#A-R6N9*M6SRH6)vZjfrvX
zM%TdtEQ$yDn27>J@mzw2KCL$0e`|=HEbzs&?V~RDXYEFn^hOF%FJh2BWq7)WE@2Cp
z;D&!vUb2T~MB4so72aHmYqOb}yMv(n-Ms}uQx-a3a=L9zTlw?wy@z3<Ip~weW7qbs
zjHn<Snhq8)gsO3<{_RnV7?~cuVbB`n1JwGU`tgq6-V7DDAMu5PWQ<lzWCT>smgL&r
zSQ>TcGJC$ZP<^GyjovWuRV_>tBgWmPBIJ?6m6c?;x#4+e=xHXG<iO#~qQwa%zg?P+
zSP#MT=4_~uXP+0Q<SuORRv)esGnU1v?>;s8ztJ94CnWO>CRJtCvP3JSdMY}diBFt4
z_kxLx6asco$`6q=u^Nr5jyE{Nkes`?S0Df5MSG;T+51wB3vpIZxRqCDASA3Ck|y|+
zs|Zp5Rq3s;R;R5eB|3bU(R)1@noV?~oKN<<$9fs}D5>hsXocafB8*k{*~oluyEO`C
zAv~%^2clbzTwwZR+qLm~k+v+5QlWj8S$t5?c;Kpg6QvNS8sNQ2GH&BlseK&MO;#I6
zpjshzOR$s<@+X|z4Lns#xA5N$JrScyQnOGB&!%#`rO)aQ!ESvkveE$H{gW(%E?2#?
zs~=Zr%c6bwy+zSKI5e=(f1oh$^vjQ!!RjzjBB2dVCbT2{HeqU3HL21<i}u>sBSut0
zI@T%}3g6Zd@#tE){ALDf1&{f=$6A3C`3fstY2!vlD$U5(VbW<;S`N$UE(XC*m5{07
zNRlxKfO3Yr5YVA(Xa3-8D!@7H+Nj*?`V>SHVlUFQkTCUSwKFF$3*5uKzuCn!fei{t
zG<f0RPu*ycK&ZVjpTZ15F=%ro;dwxvEJ|dsK^me4`0r?hFGvZvEiB<dszQc6kM`@-
z(T}1_>ztY&Tgjs+62<CpnxE^)bZWli(A9+vU;TA7r{L}P?jRK+ufa(R=8dd;iz8X=
zKECT6Nra77O9ao*Ghw<D13YuyxOEE}G%{P0$7aMDXZr+8Dw_3H{(2&MQ>A<t=+Op*
z+pLvXC5a%M?H8kW{df|y%{Lj2LP^GhQv`{_0_S&KQ<I;Ly!JXnUCpUCgm*0puj!A6
z;#d(#xU1ZIzl{QX$mo!)SDG_;27uh1_!({w73>r>hTxC_<<LfnoYV80C@p4j{dmz0
z@DvZt<;Ds`cId}N#`AZuYs}*)=3zmka*R>$(Vf^%{@i&W;`rg7nNX<+kxo)kNTsZe
z%hk2J&xwQHjEe5sn}6VItP5v#l_X?v%or>pL0YIG%&-AQ&DC(hFu3=*ax0C(Tyw43
zChcFuvFQ;w)Q{U`&oKm#SK}NnnL|NC;%T-bniz}o0W3R(L_y|S3#LwMDROcoweEJA
zJCU@4P&ojgNk0z`d)nC<N!%aQgNdin4mdo<M!5Pb_PBx;kIuD{#eX|6X1<Xc$#svk
z_<d9p7^+R_EwX(uSWH0;;q4yVcn<Aki_@TSOzPRh7RTg<Ngz^^@d8Zdf7g#p&Ut2D
zDbC7xLJF2nW`JyD)A5P%@aEb{h%8C5&4$A0>pDCBWpkdepUgF}2iq$NOt2pbB9o_S
zzuRAKV(P<p7b-VTv-n1LqpF)|F0+eSfO6|khN3Qa%@PzCyKOH7^_LU)v*lEOZW(0Z
z!7h-%&+6B${gv1Y8mRu)HN?CYllhuj$=f}51_CVFh4ywCc(~liLc_+6V%ZR#wJ?II
zm)j-v3I|V^poR>V1D}o&*PTe1>Ryvy0_T9q*aLq&Mkbr{<+vRM_A90oPCHBUIrPyx
z%SXDq32RF+tKEDvO&wqxuO4P9-ATy82nP2-%WoaVG^HHc&qQA70ixP4hG~?1jv=mb
zCXto9$J_GL$qzra34e4lbcnO&wMn(bNB@ct&r#b-X{!S~m7a|Po}24oCz*LuSI<OU
z(6&#aK9geCKYCK~Dr0K#Om>HJCt*CY!52=Jt-4(|d*~FR9%;yZ0Sek;vX5f$>p4UV
z0MPqsoI$GX)3e@F(AyR3<x8-f4V_#fWw_0N%i56dEJ%D*2+Z;(ktOvsB|9xiYFe{0
zVJEhObc9iC;Sl7TV9VM21NyTru{6~9ZPAUZ_0JU>JswEzQ_`f3Mn)6ntB?<^;-xnU
zTP#WS|9u}Y$$9tF){^l!&_D>5Z}D^ir75Q3{3t<v1~;x>yKG)$B|8}CSD!_DG@C$k
zB6}u;)`K~N)~wn2_X*e^Jh#%$><2j98vo}lL2GU)N&#D|4)q3Hr^F8#x8y)$DF7>8
z%WX$*DPUahfno%Bw?IkVs!clK>J+}rSJqIWvW2R_j}7Al<p&Kz>&d5;z3y<B>Z&4i
zl7Y4+)ZhW18nRYoQjm#|Tv4S{pU-9?WaGcOF)tc&hXTJ%8u>S~xe4RGC1H%109Fz3
zucf1kf84Ki@L1oD3mj|F`nr-lk%Y`EinXc20?>3+`aOv|#051!$WXhQit%DM^&{qB
z3zFZ4gKZ?KY?tZ+xh{jYu_M`}pSE)nsFAxfl)$~Hh{ZokaXoM&1LPaGUmi5?vz(Ic
zAa;*lF6Qk9`LtZoR3z)Rq&bbI<(jwND9+O8w;LzQm8s^*X+CqprrRIu0Q}I>+=1Os
z2m2bX#(8N`=2YkbUZehj#w$6*(`jyliO@gj|M|*tPG5OaV<x@4eplr+6mg&Gc|Bd-
zE6IDqN)lvQET~SW0!(#$pMd23@7PoT2&)>sip(WoQNGF-7A_gS(M_eTlOk<`GNG~$
zZ{U~3`+U6f5V>as0YC4A|2~}R=LH8Yikqwh+8b_NT#=Nmj$4&9YQtY~*=IqEgI;c)
zwr`2AR<p$=)^;jn)8W+xD6HOdC_ge)r00wp9>|=sMk@$Nnz)S6>Bcp%gJ%Vel0@sL
z)pvJOHUB@%tYlqrkCJs8${$txWa%8?n1&71;z--rVmbR|px9DY8c#4&Tavni^hs8D
z+R`OZRyssJ*K&lWF*U$jCwq5~Z$-DsU<cCC25iOucO7Hiv!1RdLK4K;a`*;vakb!`
zLAMOClp_vMH^}Y44hNbvH5e|wr*Ml9b4pSp^C11E>e>p^Z7VRn9Fc3nnNR?YU%uQS
z;@KnX6r{+mE>!o(;HG!|v|alLRmMKolit%K3XG?rEO@bA9<fWT!*c%-S<STkgkTB`
z$<cje7XQz_(wYa#VgVN@(9L<aAk(`X4?O^YZiWkkfFpoDxU92(>WCiD1B&<+iI(8#
zI#)zqU5u8MX{vrPb3F0=&6^5Dx>FI7GoL9FG_9Tz9yf8W=g%>?V))LYEjc`8{ge1o
z(u!MtC}7z<%O;uuY@iayBFuAMxt^dK!bE(S#?#52s!LE6MC~eGvGPc^S6WqYQdHNi
zD!v?%zL6Eir+!hATM8vXOmn2k=J)((gq-)TF-3K>9ga;s<zuvO)I?r4E}mt3s=3|+
z6sNq(3)|Ps3qlnVV^a(Z;3o$5ELqLqFE;yE=@1U6D#MB=V;omy&^k#Q7+^o=S><vb
z55Rw!MOX;c<??%sfdr<UN>GHPbNf#=<gY@notX$(zgfgF#G!tJD^m`OW<ud-x~#w=
zpS}2Lc7oQh2&>uJssnuNogK&~NLoA2T}p*0pvE593i8NI;*bCz5yA0UVEnH!0}Q^)
zgA0YYAes&BhgQomyrrZ?s;(c+902&$b)Ay=X`a99F|C_~%O4E#4}nF`jcT3r(im3~
z@T?IZFl8ue!#ylePyE$tJ3;!vJn(ST{u%nq<CsV^&@{V=SIK{GVf(ekbjd-(lR**j
z6ErIixX23}7#G$0@A>Yxu);Gm*q#@4meNufVM~-gscpnxJ!Vv<Os-v|`_-SY`<o0Y
zA-?FH{53)^^13GhK-|PNEMrZoB2oGW_CZ%0+spWisd1eZBgqy~N@0<{;9HjDus3H(
zG;JP2TSbqAM^ZvzdDl4pI1*?&B?~ZJ;mii)JtjX)3}W?LDZ^LwO%I@r;eK>cV@frN
zfThrVdBHV}W^Bn$AmLXl_fFYdnIqejVduy|u3#5rH6_82MZxnp!aIvk<TJSvvn<il
zgjyO;;~?O&_rwn%_S|po=d1W9<WgkA56^&<`gnC@o;<3M5+}kr`_9q(z!^yj_&0dg
z1V*#AP=ohL%EvEuTe`Dg$nCBntFyMG^L7hS3$=5tDDL?D3Nvlqw4<Z<wJRSwiEH9Z
z?{X-RJDJxkfMyhFdK3xe0(DUm3k{de3c3UnZa&1r&5@F>ThjvAgSLNzCtKgiXXh1d
zAj>{wW77w(Z0@FNrhVt^#pdZV9NQjL53%#-&7u=<cxhT?NbV5JQV{BDx5QhX(2XRu
zL?PhvkP_8nd_rK%rnQ%JAqk@$_ph3e_dGjr@}P7LezXq>tU|7@o~I&FjI)z4vqOTN
z;?l>ez!vV)TFhPOSXYxl(P>vhGb2he|0bxL8iDsXk89@Yaw$wjoB!Fj(kBU4*0rn3
zf_E!Qjr5P+Xb{uLn$YLiyVLYF2N*asTk>L@AL`=Lh_=3s#`F-3qiv|SXhfe3;^6Td
zpU-s?_V3dpGD;bAw#BVSu&ub^9G)+r_>%=anPc!NA8~`d$#<er@N=s|p2J$B;cR->
zh<WS<PUg4FLuI%BTXKe@b~U`-V41Am)-(@?t_+J?2Sx72<nB)wAnl^EPj6Gh+oZ+>
z8)Pu~c!1x}R`|*{3B@xhU#ZmRATVw~kF}%m!#H!vN_H_u5nvZ$voLbF8|UyR(We3_
za{)CN#{+(SZPx|N52I&kvIP7PBl>(0j3NNvy$nhK)m$^$b?At6Oh#g!?!M2{EIIYu
zlX)#`@=lhhbAFhLe1?Jnd%Y_ZwK`uu)J-6)w!O<j6HBez;0${QE8iz{8+%O~5;4$!
z{adxkJC_5~FKiz^ZVK`JSVVAH9vc}zA2Qzjq677rU`QjbRn3v>%!zl|GRKO|0RH5D
zDfmp`DJ6Z8PEpl|vxHT1e)guMS(8|Vshw3xMN9ujkUo!JL1{lbU&zcUJ7;lwZB2R;
z=SGf5T(CN=CD!aL&35q&cBXowM5-V~>!Uf+%zlPoZfpzvy|<vAeT`Fa+|)4zB0rA<
z71rWKJT?Bj+`useVjk5N3ROowH5d+|5Q(fuXpAihzj+lBZ`*3o0g3!<qzlA>pFn=R
zLL9i_9*;$<2vw%ShUi>@<ut2n3ZO$)17XXTMiI9t-dh`{yISdaBiUc1SGCG=w9aqB
z4q+Vqj!T%6CanHePXG&SZ+)BfX2GEEop|J~HBe+U1x3`I{e0Cn(&Si4sma4b_`rDb
z8bOz2UbjfS>5T6RbpxU!RFOm<4l?`;lOP<mz+yq_6h?TCa4O(T{;%dtInu(U!~X)T
z?<hj_T!k1)P;aFV6<B*@t>$>|^0dHf&&>|p)gzCAjrwj!+k(SopJ!0btay%KiN_yS
z(%l#&^*x~OTlY8$O$&=ol2;BP!RbWjq*xLX$8m%c67#>7#rkyU&k3G!E(E}Sn*v?q
z@8eu&n?&HIP<7dycl21-a0A#`Sxd=UHj|KMJ+?R~=D5QDR%67Hrq@(K_3$zTzPmHP
z%d_P%F0Cmuq5I&CWP6f*a)S}m!^n0(-xS_d^SqaP5U0H0Gb2mbd(O>q7I(P_py{UE
z>CG5HojaJ`Q+GGzJ26swT));VfMf5cyLdhha0l@jn(HBHNNoj$Vo+2c4(%9l_YXv2
zrYLBlYR_A+iy;KsKbOXZh>hJM2qzvOg3tIRmP==ZX<I2%bxb^WLRu`?*;50R$^&!*
zqD-UVRbyi?)5y6eVO0t05CtC^!~7IvFQ!N|sy@OBInoD}UCV=^V8Tt+G}r#EENhPo
z#}*xtvh@=;Zq#$3giu3pxjQLAUvt2D?k42TN3?x)-pGFX8n9Ym+mO)?uRs-MXd+3Y
zjJCGGi*`qir+%V6PH561x@5iXx2f50;G|3B7}VEDT-i`x1#0+9_hs$mxmTf^bk+Wt
zmKYPcqKhhP7acga8b_<1+OxfN78Cc)Fb6%{*13XXA!ZY#;R?(;zW(G1tGy*pf#W~R
z=VL)Hb;;y(yhZl=id+kfs=HJ7ri1$SdcP3jI;HSGTHH_~)~8Exgrfw6L!CM^YnLu4
z8-J-~mJuC?GQ&Z-bJe0>`ZDL%+94cGX8PI~xMcAp=t04LfsZ#qaR*lp%D49#*XARQ
z@B?gl#exyqVzKKQ+3mszW#=2-Cif{>QwP-Qyxat$Q0w}ci8N+)L-3v3jt*LQuU$5k
zDmCLgBMtqAX0nM{NsM8g4!tJvEUHXrLD_%z4LZtL;s}YVz+UAnt!*(o(Kt9CSN_$S
z?DrR1epz2TSxI0+=plaY@rRfb8mQhRSZml7U+0`kAO->eLVHJM3Ry-9ehEMRbGLBP
zy)1HJBvqg%;g>Q_9=5uFX}ZRRWnjBKGJd0{Ak9a~8o{38PH#*lf6}=`iPa+u01bpj
zOQP#6#vF!xNeXrOgC>rf?+^$GAE@_}lp_5WLsDVqO!nR|&y!eG2GI4+&InoPVLn}*
zWP8;9Vi+qCifNqJ)Rj)DQkM;~aH0>e8UBK0pKH=aeeS^L?l6R^wW2^cY*!~!K(bP&
zx-?jF`G8}NK_3KOx^NDgd4Mo*PzXop9PQGhUX_*#T*x?>-*u1C5OAaWU2%9gr~+yV
zFN*Iri0-V%9Z$83F>Qw>AtEk+OA(IQ*kYbgLTt_;L0Wb{3e1$2*OI}+_Ga^pk+5~N
zZf$GXq@dQ)vzN$f_!l~E#vbCh0UT44tvtO*cn$jZim-F*IGMBK2RPCl&?@%fGOpQD
z6uPlYx|B#3)|T)_ze1me=rj=f1~~n3<%ti=C&8#lZ&SS6b`$|R?dyx2QvS@?4PhVN
zzJwHyGfm$DT>8Dk)i<j=u8wRMUk7aHF>Q)iN4kiJnT|+Gc>LZ-PVSZcI=<G})~HkI
z>eNeDN;8e=d4)=EIos!sK=;Y-bxVLU3qP8(#`&(W@9;N2AWNB&<ee`Bhi7auAb7Q*
zYv!iVPu9fKyxx3>;Tfk28IOw52ipJR6g^2FG#g2wJZ$r@+|s{M0RKM#z)zuzL)u3$
zk_vR(S%$C2yueBX<stVQk~Y+#(rz!&<?%CX$p!Q_k5#PL*&r<7bqhxgLj=baE6CRx
z_LBm?)E*WRBXjqV+4>mT%_+Fwi_(^1AaNrAEL8EIOX$<K6&@EM9w62o{1legAGZmj
z=Aqizco%Mx?NRdDU72p*t8S7y7`kh!J_%#E$rs^@melTQ*p7XnCB*FR#R?TB^7*@j
zLxak&3N=qNRG0+HLbx*}Rk{h{S9c`~q4nGFr&~D<dvU5l0#No>ecTFI;`{U#)Jp8H
zE|^o2T88<(VJ@hE*`i8h<M1LR$bsdVxT@_$A%?xTDRh*xu2|zdH&ow%*`X(>tiINo
z_tAv=U_k)r2bg}S^lzYh>^;#Z7`Oz%Asu-(u#2se!3`n#T`*weE`k(cGG^R9*A3=`
zCUkR_Xf@*U<Tp0X6OoD_#Si!hH}jAh`Wc6hAN#`ikS;*&u*fNZ;+ZXkv)2=xy<oP=
z>d8DzTv%k%<@jwqG7M;v)6!64lOz2(deOhWG$F7?H?CBt<xBt&2egJL>Vu4mTyG33
zzd<LrzZe0kVX|0@8aj3r%v~Tt_DI#9!IgMiGsscJotQu>firXP{tzhsIO6y`^2UZa
zV9DhAYq;VrC?iO@pd|loAbXZNm=1Ezk*(_RyH-u3?6%2jmua*CCRn+@T>S5)Up2+#
z$!VmBaF{ooygR(|bM`!c5j+uXWTtOKOHNA~FAh0Xx>hVrFhYM7F8R8js#PaZF^krp
z4QN~^^xrqdwzLa#HQt><o`?5}g=9q&1a^_E<P0cSyoZP2#Q7;-GRH*p0=T$wB&&i{
z{a|;(3>LSLM$P%AWbQf#6XxlXJEZrP3Xdr4mZqk$lRe^eUW}g;{<D$)L=@!K`ljGU
z9$8^^G&OVn^l&Z`(r%ve-SZ*##iHwon3=^~72S_4HDmb@LyT`~-uaGZ$^0olkbRN!
z7p$49&j%__y4~<;t;UQ^ATukyA<PpAZJGVlTMqP3StpxCjUW~NGh~oNDPHCMF+7-n
zMoQisgc4H=V_T;n)8A}ScKlJ5{z=O($%k#+<vV#3($f(mc4iI`xb2hRlTy|3{-bF!
zF)dG6Wr$Y-Z*Jp1briI~;fG!Aw4LOtTwnJGojm+@+6dsTAUbd6h!rwu%or}B8vfdC
zND4o?LB^Kv$-aM#_~$?z9?NY0=GeOu)Q*KcD4?{c;<HlMKm=Eq@~UI({T0Xwvumq$
zDWZRLr*V3vkh}d$IvOmj^V$=tc06uK%uH>GlYwAn{WvysBP{5BFovn0zf21EfXvwz
zn{iy7<PUzjsV>2w=q!DPAX>mp{$&>dZ8UpnMY+lr%Vrgq@Rcve*uMnh_Kv7G_Ik0n
zU;U)0SIJgo(vyXaLSTIp&3`M^+8$1+N)2CU%u4X3$9nuXBVigwnywS<y|ECSFhRG^
zk4%kOP2WNO)`!4SBWMAceW$h843faNTME}hc-NSfaYzp@mvd0Hda^FD`sj0GkVx2;
zZegi#SuSaZwhs#!E&ow3te$3g$2r2zVnZ34M;h+-Se+0n*gJ2A>3=5CbUc`yt@3mL
zh(ea!i&1&7ff)<9f1gQv;5l>WhGMgDcK-2`oj^2zn?)Q5pY#R$Dje-pfk<^5xv-$T
zjoQMhg#C{n<pHSnSN1w)-~j{iJvyUe^?P*TC+P9ND+OUMuq(<DJiS=05W$}`&Ako4
z1u%Xyj%BDTE`Gtc`+17XGM&_l;h7*I)2rYn4HQQUT=A`YUc_(grOW)Rh{M;f@C{DM
zWh`UyTbeHE?R(gJ(b)ynV)>eEt?k#S`!N5-RT6^43}MtEsAfkdNqKZ-zW**Qek(HQ
zvQB^5_P^k&*tt_1s6{?$7D2h>@(X(k<vbsY^s(+peinjIG=*JKZW8`PA3PRxTNJS+
zj4f59+4Fw)Up9KWECc!(K>wQH5YN!Q(26Ktzj38h(+nm|-OKc3=KHBd8^ul5a336v
za<K2>SyAR@3|R&gGe%bal+Dgq`$I6~_KRGIAcU~m)d1P1LWK*!n5K!{<QTBW?>m+4
zu}{=yk{^0Z$gNe@q*=`F3{l+w{m>G+<<M`491Xj52j)I=jiMUK<`3!D-4+yGWqeH@
zlaX=eg|3gtlCAPI841yyn6b3c7n8kKK(1pKZYaE;yMM@5=`dUrp_`WM>c;}(A&Jvk
z?XT~YEhAG*fBTtn=Gd`5X%&1gqSMNmP?e^nMStXSz>_^1@But~qgyML-vA?ESnR$t
zO<#vNLN$7{Xy?$8&IbHTR{x#Av~-@%&|G$EE%ji94isM`miWgqOy@Rj^PttwTKhM9
zT>Hb*NUa50$3TjDjDZ&G$;_(c@)d!!xg+9xS^r)8qskKQf?E{uaxsJRI1K-A`}bnN
zGqAy{6hUNYDH|<|gFKcZVEsq{=JPjYL-dm}Nlb;^<10Pv`|L8Sfh!doIgkZzCei6E
z`_IuT)l}~f-ODQ%AaW3*!SA`R(2&`YJ;uv@@2)g0fRX9&z1XR%jGR}vo(oPk*5Prt
zdg|@<qYAsjfO~A&KFp?7vDyK9IJ68<hN!>|@`NCk8!SVPjbbR~<;)iB9oD{eb)1ra
z#m>f<GZTp~`qza5Q~V>!S8t`4b{<9b;*0jWXnv<%W3xBGY}&#~#s<39ZP4(Z%CwbQ
z(AK?ay}u|C!n=7QS^XJy-gJ$ZU{Xo+;;?&sR@9qN-+<jMI-~DpB*{e*?QLtJH&%e%
zr3gMm;`W1#Ac&GIUnI}iI3Xv__XbW8&qK3vU5!5Et%p>$>Btnus+^TImVRm_o5}j&
zk3O5)Z*!-?)9hlGTD!o$GRT%D?q*yH7GCuV6=2U<cU8eBu<X9I>??F<t;XR0`$H}g
zZy!vCy!Z6`dyI|gD9Q)fw3kMFl4g}pdP8Jy70@a6;oM)#)Rdy95v{)YuU+1}SehuF
zSnwSM6KYp@d^FO4s15{OFHJX>`J{qsA1npa7uZS@**b1eNJH6&P>B7~7IEu@xre)p
znzmPN*fJmITqy-BajXjb_Jqa+iKc==fK$FB9KhuU8k@>wI@6|^N+L@H^^uAX70}Q3
z>K1xBZFR#K8P`|SbJ4)a7OiETd0lM47RFV}N^X(InMz+^v!Ple&~AfsYJ5aHt;7UL
za1P(;few@BjiB;B(&Ed;6Z=YE_Xh$`uEsv)lvli}ADF=UBI5sGt0L;!l68NJXru+b
zg0b5C@@;q22#cy2(kcQr$QI5@HMMvW@Ut_ap&kh$trPBW9-Ejjp<Ij+w}AxtcGfv;
zW_mumItm5q-C?;0L{lf;D8o<n{g5ehW<eRn(~e$jT|(avTbm(6pf>ZGE;)-ZRWwPo
zTT(OIcfz=XK>7uBLOF3zbRi2}eUrL+#urcoSQJyVH&M*uL~1U#scHoY6>g10#|pZ<
zGcD`VyT1cUAHrgQICjUjNO=oxa6cBRdz><tPx3q#Oo*|Dkac6`r28*oyblsl{aXHM
z5!wQbb(h=w<PW6AkCZ8XWMMbhjvcD-OSPc=f%hI1N0>Da?!Hmk?9lsm7dI8%qcnJa
z!#*ZJRkqWmFo)^6d4eYZ#yI&U*<3`V=X+1+#gc<Szy_1=NmAUjs#mc{_4q*ekeZ0G
z9@2QLBRXl9!8$?e-VRC}uA8OZ&>%58&Z@akxBp#c(QcBwlbRe)dq4&qKhgJ(HAt6a
zcRI*FRW%@2V@$YB-93x$h#&>{9lBMtYo2NmS<A})rf8?0{U4v=HBlG2#IaP^K66ig
zin8{)4Nr%}>A581!1~bzT&OGG`vlYfFWGs*p}XRt63YpqSWjM|OBhFLO;9XxJ!oax
zqiZs-nF<)DpU)Dqq-5|U+$#p~Js;R@6d)A~W-n8JfCjw3Zfv6O-_u>-uX)dX4rZi&
zT7v=G=b%BClHtd5^}usKFo`<VO7Pk*x|e>NFK>Ytoq9Zcz7)l+kAQpi8|VTLEBFkB
ze;9|QF_a`4k6W0ypP~$TGD)77r2BuUS33EN%fuY!I>05dWZK-ew+#co%qLEqwch&1
z^oYhm$f-Z~TXHj|wHc^Xj_w#kTHaJeQH6k33zYy3EP$Qt^3RKYBkX-u@19L8i`#n{
zc;@u4IlvYt;eWibcO*R`7hppXSEMB^%Z_9N&}_0^y*^mlGW3+{h9Zu1=Ffh;W7^kh
zd5LL@euRfQr->GA`I3!7ho*L3kaUQt<#mO*mf<xl58c2fp3@-7JzkvBCheWg_LMxA
zzLE4yr*>V7nG{-wc0JSQPMMg^I(uQo)X=Bl>gP9N7J$dnVF_^1Z~T+mIP(MRORf*x
zK&FM3$jqy7LMpPxX?LF9jEnLAf2N*XmqhAg-UPH%GTw(c5w-)e`MX4;H*0D_b-++*
z!14I8RlIuaJH0I?{SY>oC)3K!xa(Gq&6V8IPYYTkI|HOPeE12jOs1hy26D2i8=!TK
z?G-3%=X&y9DU`t9A3WA_5Hl@v*}f9tl&hVXsCq3I^IOZG7qVpF^oeD1A$XK>sUC95
zAVVh&Grp(Y6CIo>Fm@z1)8L(ijTA+a5U)*)#qYl>b22R=^3F(eAvbq@Q*fs-B4O|U
z<SlN68+>hGWz@N4N!03x2UXc~yW0oxhB{(PQO)jF9f$`%SEVnjX(A4$bfJ>64ug{T
zRFKq5ZCa1Lk;xu;R-1{&Wi%6U+P}g|Y?7DIK~#ev3(yH;MrIYV-q!uN9y{gT8L4hY
z>~T5{ad7b+4}0aYC$dV-6cqpt1d?bT`xdn5jP|0R6D>4eS1k-J`r4x=^NcvywWcWY
zFxe>dJYy7N3W<iotOaMAQ!D7(lMhZb_wzVmX5{Cox~(5I48TkB7Q^BH_x=^ES`t$W
zYo*&8wnFKzTI!R~OyaHjfv3PJ!<Z_M>3rfsi$;!z$B$q-4U)6MsFRM6r_n}_AI#h!
zaHtK~mo~^WljqVcZ&gnu@g{#gZ0gC2>j(oJrNAo619B)2dQJc*q1KQ41F$r?5x<SU
zdY4H3jpnRtErT>qxmHx(9RjVw)~=Gf5wR24=hCu0FqsC{uy(mJWL4)fIwOeRhWe;r
z6H9#Lom{2$tZ}Y~8LvlLX$t0OUZyKGA~w=m<js@uWop-@)p*}dge@lMAJhA;f;JK5
zXJqrWO(b;HIN?I>x$Er(u+}=~8C{YcS4J-h2AW!=EYI1{xbiT4yT!fI19Z~odj%fj
z%=8|A<};LGYx{Yr`lAl!YV?%rjp8~5W)gcY+Ydto8<qg$2aN+vxWKf2{VU@^4DZ|)
zb$pM6i&?sS3W+2M3`PZgGq^DNs2_E%@e~mhX&!TKFTAGiePej<77iNZVpOd~2d-j2
z6W`6O0H__nc)oMsdjP9`o=OI}y&d%1@izLH@OX6JrN^Z1e~x3e<J{iHK~w?-q9b9-
z&2&3!i}*9;z&g*dd{BY?w}bO?JVEN54(ttnV?u!a9yW_CnO|L&%5-hOb8E`?MB(8{
z)b%upN!B|W*BEzxo!JQgh<q)Efj)?FLd-ZphSGx$m($QdgwTA1V$$}d2ZxK%=_C3`
zlG?#{MoKfnrjuz<IkmRw=K(HoM3bX-bV7M+2OP*Jk0~V>>olf6wmr$_HZxxLDS~0C
ztc>CJhm+K>Y@vgnE~Yfz1uy$Hqe|=&V3ul7S3;R^x!O3sL&gR=o%I&j9unVa9ynED
z2Bc^|23EYx`wq~aEuf)K><>hDR@%1(tk&N``(;&Z7u~?9F>dt0aW3{g`5kVM_h(Pw
zw*3^$Ee2VHxvI2`gf4PXtr9p<@-te0&YXxj(t=?Qg8rgjbPWZ!lZ27YyfE9&556Hd
zc{ICg@mc4p_GJp}i-(ra8QmRx8xvf>^i@1$&wptS`?*0wyu>K=-!or-3=x=d+Bh_|
z)@qDT?6E#b9sXhD&V0W3_JVb!YE%ojF>ONBH<o#;L3I|Q)Sq7D!CaV4&N$eOsvW%(
zPZ?*etkCu$_=2=^28-Uj2KI_pl4JCo@-x+Vv`O3Y*koG3qSN?b$dZ3doiYG|5_%!w
z`5`CkqbH3Wd<w2{M(FAuFUHmvVy9w-h(`oG0uX%EVop2S6XMt>#~dw<MxY?*cRke2
z`q_|^nl(S&oVE@<X$e5OaTUrHoUb)f^hw)J*8|-2mgV6QLcVjuV`Gz35^}>1opnc^
z<!^P@WJ-eaCa{Ii<_y;p4Rz;7YdT_m!|g*1w6nSxAx7w8cK;Rx5Po-X0R-mORL*WN
z6+lTu@6Tg=?>P`#S^C>fJw6sA@e5^9Dx13n2<L+c;ept%rX5oZ6eZR}iC}XYB{t+q
zu$5}!f6;M_uWw>PpY3dpyoiL3BT!j;;jsmpHnC4dcy8QwVZ=J=)I?w(<xbKqm+{Z>
z5#DCqrq&6Q&VjV|kb#UP)U>vL{lW^^PEDuMnMet(P~w1AWKaIfBX(+3O$G-+Hq!15
zV<qE<75em99NjwIcJyMWH2??xS!^dN0#kAKw&Iaj+^jQbLZm;yH{5YRNdX6vHcwSO
z?|l!mi*0jz>N{T8SPGNQBfsK^!&2s5#rt!>$9ymS{n$K8QHm@fW-+i597$Tb!rk#H
zoXnoL%y1b<yfg?K;Hei<Bj#%=FUa5EyY1a#PbK(+JQ2#ki@Rur6kU8gsh!-$@LX|%
ziAN4Z<;xt!1=4&)wf6iSb}Fj2H+(O{qF;P7{=V&w@{GZ+V)1FhY>p^+xKMgChlFtw
zx;ao+pb!&N7DmYy>+G@iGMsjwUGA6o=&gPLrn`>?Dr*`OA(w5_a6n6N?kAIhLRge$
zNn;KJOqQ#a)x+2;uX`0gH&#>g&1enNUlBwK-aT`TjKV@JgdYcXP`b*4gN&g+f6DhD
zI2Y$;)#5W8TfM4#m*TReQZ&B`h_s_Y;~($Qf#-)JRdBRb2pGT3SB0tAeJprva|7x0
zDWGWAM427xC~=>Ze^1##l^|~&+N<6=6yRK{sni1Zm)%f6UpeN-x9v!w$Z8z<FF=Z0
zZDRL7T9Iqxv}FN!x6A%M*4vOf=mXm<=aQ>-hvM_BZ<ajsP@Lj@7a|aw$30_-8Nwci
zoX22ZQAJTTuoLf39-GG6^7}UuJ`xP%pBR^Rc;*m(FBa=27LTVJuS%?bg^+)ycBxh|
z(&_3Un{U9kv-{I8Y3-VZJ(IAe)F3=4+zapYB*p`H%U$C~0DH<5j$)P?@DPJo6Y_K;
z$ck^DV%?^Yp51kgC%Y`^E)`zQw`^`}wbEJd$ItQTCve~BFhlLX&)&PW0<CPCTR#F8
zdvW|M+F<$@86I|*3s=&q&gSbaOmzMQ`SfBKhwg8n!ExD)Ki@LrP?SBAjIE3}ZGrcY
z_P1T@K@Py8oTYTzX$6WNKXY@uu`uVjyb@)FvwxXuA0zfMB`8_3t|aP%PcC1kDzcwL
zv%MQ2i6}?n!NI)B{(Ibg8e@0WApE(8Gpeq!GIvSxx(aZ3K69iM97FD!*yiR0%|(qS
zyCBNfxMOHr7g%&c>S#mjn@$BcD)!PbndQ~J;XI>bTJ@snz^hNvSGrld%`G{&@ls$S
z<cm2zdoSehhad~Dy$J?b!Yg8b3z9$aKgN{68uTUMK)(0h3(4y0*hLQjDlI!`k1+<P
z-V2u$UeF}JMtiwA{k$~$JV`p&K^fO$EV1VRSTOqUdbV%qDY=Hna+E{-$LMC`YGGgz
zdOe$dOOFP>`Pv>Oa6&BDSh9QmpR$Scrm!Np$)@dEf96mSgTap)L$J1-S2m$8aN-0+
z^G{>NxIYUeZnVDZ$d{~_%=-GtJMhVixUReOFOb?h(cGhElq`QHtgJ#SbC#w34*Q13
z{fCa>RIq5Bb-$Mun)T2*_Gd;8^}RrIpOu?uszN?aI<+X*<fZ`iuMHgzJ(s$rk{nt|
z<K-9{{ciD$`dywrAKbK^^$#+N!@p1v)V{F?=z)FgdSh#d@sv*q^+}RC=kZK}+(mGn
z{ctp(F+XeEFP6zJ@-SJ92w|?R>SExueqv}`^?P{=sfV4h>6d?axb0LMeK&M)Db6fl
zxo~5BAthAjt&ZycA0|uD!GE8ly>)*yGW9qwA9y%F1YW|DfA-!Aqu_FWc8jJ}Y1E@%
zg8T4@a*y_wE5L85^V-)&0`5Sy<M4J#MBC!t8Y2OQ8W`>2tT*Q}>D~MQ%ile$7Y>pj
z-MK)a_`Ycbp(q+k&YDQnP8m2vaG~J7nz0PYBb<w3(S7qd6Ol1FB%%^WqyHnVQw*P`
zKnOY^2nZ9kye)QvOF_+eNi_|D#-0xYnQrUilPj}t0>c4YGBh=*KGjOb+fk`8f>zGF
z{i`PfA1*s|SsqGyP;y11A!D$@=4XS1kqn;rCYU1T_U?SXagsxAbq$r{(H%oK<UW5z
zWFx7?tnv%zvDt<)Qt0m999KPa**3_Yv$#u~!^j{j*@WXg4~y9c(Ey1h#{t}Y%A8G#
z-UL6#0Fi;()@8f0)&LRi^}}vc_kQva?J-TPZ4!X;;#@rzu_b#`C}w%!p3nOfe1;tQ
zZjNzhIzB~XxPA;{G*JtbP=^Z(D=l{0W>GW**6c{6LYuPeZXPw}4tz9Jyz*W&dI|5<
zSlf`zBvn+)gfK|}OOfC_4I9j&|M+9abxhr<`64?c992lG%VH!Vz{^B~)E9oatLv!I
zCpnpJcIx~rBVZvBnv-|sNqd%*6MDSS)Vc|hO}`a|8_9e~AN~e{wsG#}JRytpZUH6D
z>T5G%u5d?r>|U%WfmJ4m?;d5JP{W4i+^LTFJ53DHR*NX1qttiTCdW0w9>DFo@D-oX
znsUl%pCltUBNeK9>1^4az9wh8RW3h~q6%GQ`7ffy6^q~UJ)M}%zZ09hBlHvthWMoI
zh>OLc@FNos=m_wD>`@oBWFKLq^32%z-T)@(N)EJ5LWT}uBfG@VXbPh#K0M|-UXE_r
zIOj9v0zizQz{jXqy!ySiB)GF^6y`|Ev=tJ5Ts7A4A;%2Nnmp5^uHutzSgU<Tl;8J|
zI5pjFi#Md7I-sETExfbKu#IK+4u8U?#AbSRo9!s_V_oDYV*F%JwFfoFz>PxS+I!Id
zlUm|8fCkt~dcM#u2F3y3?G9ME9C%nM^+~~p&q2<Cd|YfGN8bi-k`Gz3^cPhD&<-b^
z7P1paryu>)AIK0?`q@KFbl=ii5uHBQ9bc+Gy^RLm%16Vo%ulM%%`!|F>!ng55mVQd
zAjLyg@}75g9m^j$E?TUkH_)m(9AjFxml5W8YG&%4DzRD<?*D75Py;{nUSRb`RihZ3
z-f$lA$}SzT4e~r%4!ZpnUY8QuX<f%Eq0w--e<!b|iAh}$Dp%o6-7HHC4m|Oj4*>58
zn>tReMj+%SMVV$zFMeh{5}@Si;<|D2PqP|SaGkR&+cem89LX$~CNN;i$$aY|Kk)u-
zm2GXdVTMgT0P6eap^?nkk&}1&a)LuLbc=fiq|5CJ(K!F3&-(ip3l2Q|iosQ&{kXoK
zM)hXw$-%e_^`~)?ZflAGb^aHK>i^XYt&xhhmY=Mxcn+>QV!NV$9+daHb@0*<Rd6vs
z6WaQ3>d$2PeNMuQ5@8w{a)`Zrct|nPs1XAa;mD^I&c>-j&rBUDNq*&u6EU%AQnh1V
zRko?weB^NvUfP#pKC9Ot9U!)*CDg_TFuZt4W_+~BRC_yAnlrEG@Sw;5M()r8Y8tJo
zZS+H%k^Mwp6b|9b@EwVf&?`KQ+jO=vo!lW9@wA3Cl~s6U0%s3C>T~`>hPOQL5qP4w
z%g3e>6_H*opVj`EsWRsDbIwi!45<HntfY024$<6%mNCu)QUKI`TMO|0ixA-VKk4L=
z>izQNxwM;!9YvppcbT!gN|5ZvD0JlKL0;;1^4No^Yz7p633)CSHwu2Xo7K*6)p}Ve
zqToa7&Dag<u#+X$H@<^Mh-V2V=fxvs&EPdcV@0o^AdA&!EKrmp_P4q$h7OK4!avk^
zQbsQ=0MARAz0y2{ObfeEfAaD7ulzzaqrh%6ok9l1>`PJMRX{?rji8TW)exI7iY|a?
zHe3cDFx+HWZOC?UP|ZvQ*r4t?iT172f~$hLDt**Lh39Y+O<z1oypd_mD@^bH<5-s?
z7TuyouBv!?UZ67PGEiy5{@-)kPXU@mc{%uwQ7Kr^cHhAkaU6L=&w$FDK7U^F8e9v9
zI`r!A8v|e*8o*rQNsILQhz8K#V9g~=^(Zca1l{dKIg@U0?&O1w50rRN8&5R$DCu{L
z0c!FRI>nsSC=3!eu#*MK^WS;{Xx0xmaEK-uX2x&|6dE9TT8yIKV2Z0UFj7E6gbTH;
zH=F^4B{HfurMuR|B=yu|AW*aEqmm*1$X7F!g@iYxj8sS|+KPYipCs=z^uyKU?Eu)7
z-^T55$iMLjy^XXsBPFPsq~QVy-=XShT^>&M|4gSwk_3y*7=+rh{11k2LQSqC^s3=t
z^Hq1YOZqPz#+$~dE593C;;oTqk;xx)nH^KAC>V~qnX5nt<O_T+2EI*frpUrt5N@Qi
zx;w4;BD_f(RBrD(T3Co81Ac8!i22G~Lq!%{R^Mh8&q#vUYL}Uf5Q@n?T2TI~?=Xno
zHV|@GNiFsn8K4dxklXVW1%tPuLqs`C*Hoy-$3k%4AgX7H%<3uE^4Vdah&CQ_Jd}}8
zE8INsbS0+L4|+CRwrHiJsUoC1<g{F3WP#H8A$0G!7Y^qJ6&$;MWpW;{Ixpyg^85Pp
zX@KJ`_#e3Bbd>@D1eY+ZDnzHsmG{<<jb{A`0~+;cQ)u&&9k0ZQ;5<=!g4;9Dog&<v
zXiiqsnwH{Cf%4ou#Lyt+10e}AR27LcEQ-7b!t3?L%&Jlf00(uLNJl8c;-7|A2`4Xx
zXAx%bcHs`Is*RS**tLJZ)xu`T!g#$Qm^Fd&S%I0WKmVR`3q|OP(ytK^KFEZO)@D1!
zN(b%Y)sraowhodjURB}U9HKjya8Vb}_Aa%xa%Y23#v($-2B)S<=w;yESBcVBUubcr
z**ckqG<N{(@3>iCy!FX9!V%E*nVhvU*@{c!o$71##lJ3pXX~krtf?Cl&_P>5S*lb1
z-~;_9uE<{e7kO&o(|a><<k9-<3xiG7Dtg(^iUF5{mJgGR&R`o@)*^p&B4kt8RW)a8
z8~Js7nYvGmi_af{wXAj`IZiL1ow~#&+*4QTN1>01efDhhHRU?`t_pmndz1{ylf?gJ
zfQPQ884?eaG+qJ}t>-$8&#|v_<P^}+^jA}){iTdvuR#%G_I$x5uGWR29N8AHH`d}@
zuaV4I0EYAN&qpM94Rig5sv+T4U7n_N+gom*!g6S{(Mvd;30)Z#*eie)4^{Ka5|*>j
zj_1;x{@rYs-jY?^cTSwOZ9GAe3J%dk<#)LyJ5=~Qn81lvSKSpF#y0nBz@lyhHSWt7
z#|CB-DT`YDxW&B$2H7F(t{ArYGS8)i!Q69cP=J(f@c1>!ETlY${8$(HCCAc2WOeSS
zyU`IQnk=I#BKf!`<ja-)G8b>*x*xaZ5jvG|WYbQ7BB-DWGGE>a{Zl&VUcaw=3^YX>
z(&mk)=c74=ydv84__s%gGcBM)>cx)-iL}h@;Y;&OJwQb`THo3<Dm=O!?h#P7UNr0+
zu|IryyI3Bwtcl5x4d*`bma8hOSFiSj9pl&n)f*%MNkJ*!2H+YhIQ#u6<BD4BrFwrb
z|2liE6brIaU^*~95-6Km0+v+INJ?qp30=$;j%%^Uk9No(u2{yMmCJN1!UdVxCZT6b
zpK0Z%tFlKa-0DOrUufU?J_>@vzc2o6{|DJxkFzMr5{=fW`G-Nse0gbaF|C0snXrd^
z^$h%@qR8gL0@$LKB&DU_3PTeJzN=@;6o5YHQX2(ZA+}SLXlm=xpkL{LWv%vd?f}@o
z1i=!=fSuhx#CM(;f`lmdyK7h;{MD|u3cy!^7Q=o^gaZ>eCUv{yLE}l-1ORzA3oF-7
z%Kds`WttxmZB<)C^1;HI|1hytiYr;A$orGj25&7v9*|Ua@OUdo2d6ir$*rhWh^rQs
z90L}nXgx%pt)6?K+}sV3rXcy{8BkgfH2J0}qBc9@dzG$2wSwEZpfR|SP+QTt*T1u~
zp-HFmz>4r2hoA`|d^CWP<x;UWxhkDNL#2yqZ4myNT)K;dFr^<@$KIvSiN*_y9%4;;
z_TTgLzWvcxXfKF$W~Pu3-iffaIVWs#%2!fMe}ajlvMGFi#!t|a97CV`0T>a|U&p7v
z?<2A}YUR8~zYrFgugxxqib-%u{6DP<E<Ue{sN87iB(ta}5fRN%D}|OA#A2Tj@(a*5
zYGF!)K7f@UFTWBqbj>iW%J*VNg2wUMSI|wfmE=PDyt;S13jVBw0tdG;8;Iaiz$_Zy
z+J`DaJ1RxS4YzNo(hEou;X$72N7<O%XKkbSKOJ6Dh}nDih+huglA0x(g?!OVQlSru
zl+L1>a&VLaM-yq`7L<>lzvo%X!S;2lXrBICM3cQ5#D-zq*WOOio8PU$P(1?Kp?H3z
zn0tcXrAe-e3jAimsk{+fQejCgDhd1b_|_Asohw~ZC>XqXosnyF*xWq1-Lb0^rl@*o
zmFrqd^YaS|n12C|Pmnj%LFwQD<zc0L(hNAv!!DSU4Fa<r4A(-gSFIy1q4jz1C__`8
z<wWR~Bzy_E;qS}CQTtNdvs5Pe%vd#TzvN0m{nP4P;FLj*Bm1Y<Pu1H|XuX-Jfleie
zsJ}<kO%XnG)Z@5W@8?FvBDA=L>vbPj=D1~^*0>zl3AaL;0}>jSRmJw?IAqy<m6!Mk
zpD#l0W=~x{{jDzP!{yIn*G{Mto7B3ma}`Z5Cw!LzbWQNk{|e(hBm={MnO7nH{62XU
z4h6|IVUwXs3a{DudV!Y`?!6aeA5x4!u<!Od7K3`EMpA}>*Ph#~8hp>N*S(1bszS{f
zjF~mwdh`Zvqx5`JApe&D6&&Si@Ky{?8U32k+W*MuL>O<$t=LyQDog})jqHId+lovi
zcH=dcgtp<u;wgU8A<5UAxY5j5ef)VFyLq>g1X7SF_{_pKvmW|a@{mXOKe(cPMhwV4
z%DKKwEa9awS5%Q1E*-9dR&z$WJr-WEIwQYUlh2U3>NgzCr|GWJZ9B(#kF!bM7ySqw
z?+0}(T4Z!!u?ym@-LfFdY8?TdcK<#?OUN&N=nI9oi1vyT%xg;>+CkuQooBjz04=uH
zr72Je?kHfi?C;%?H~TD_=%E7+<7{(XkO_&8pGi*zgU`eGVth2yH$q+yJGV(nLTs~0
z{2bjc0~P&7_ti`Wt+;ZJ?bL{s;ysdgX(Ly`d1czb7Gi=BZ!5GuFAq3SVvo%`OOq2Q
zTO2Ya*vNI(h^zYNDn~bEt=rIE?Lm?z>BT+UG}>C-gAndz7QRf(1^%A=y_}jp<-DcV
zbT_8|6Vb2>gLz5L<2B?HQyY)sl-m0CFu`gQIiE~~0|lOu?Hl0$RkuoyRjR;_1<7=b
zDm$1C+w4`Pb}2!7F<H1beE<D^y%)Z6{jz_!AM8J}Zvwh^oQde=_8wK4FAbM}*F<%E
zRpQ2RdrgZ9Cyca8ZUvPPfpQ9w>JoJQIF!R<Kz7#~8e8BCk3D(D8+WS_WqEU$HH#YP
zpKZLWm?k6Xa|I}8k<|2wgA2o4_kGAn*E9;2`!V5opRSP%xUMCuY5r|tzvgc!cbG02
z>VW={LXj2|d?8Q_uZ`EqTWnBTi#1qkt?icoSRUL%>i2##>hK!)?Yo7`y6M-+xXCY^
z2q#uMYkVD|Gbm~Wf~{IK7s4xjl&gPMv<o(Sz7J&i4(Cjk|Hwr<BAIN*hppHQuLcR|
zEY&4pI|n6*965!Y8Uah-*PWF*%{pd&u<7}G3u(Iz@uhECnbW}bR~aTYHL)!0-{<2K
zE}r)E&FwkLogTu+Fud2B5XTlmXTj0`>So~~Yf3Rx3Ap;QA_#NuCu)IAebz~J`7X=J
zBB3iJ3$h<AR~mLPpvqU8xkQi%#nf)UjgH2HtS*mUOLbS9VS|3o5ysv(Q*Tvis{$()
zEh^pSs+n8N&z&QsI>Gsa^sxQoAksScRA`M_UwUU@a+x|gWb5e#w3&7|?xR8NeS_s1
z8%0MC<0}lRTf#UH?ZdC&6g7V?9alc-bDJFs<_dN)mwnTzZi%kB9aZFHu0j4|x5e;E
ze=ZWi^V$U$abD(K<RSLSVu%*Le5`dR@8Lw;IYBw1i4gam40R^hpl4_O#}=2uXcCMY
zY$8kalAc1rZOcs7>>?IgFBwhZcHwmJFfM}0g#2|!;;*gHL`7;9K=~3!9m>l2*#4?o
z5d{gBo?(68Ag*h0kU{!$Cj>E32+DBEp6Vp)s!Na*W4EC+gSEc(MhtUHo0xHFU0AK<
zrIN!?Z14cm(cIs|rHMI7Uj)VneS`EMyu{>>RTeUCw81cSl`ye2^LN9HG~*zs2AeDe
z?0|o%)1(4nO?Q4QFx7khq(l98+FR+LtebuzidvdE6Z8@fewsiTwRA^<%V?>jFOScm
zKLHPAtG8~Jh`V#2*sjBID!}94q`m>7K~g6{N?51lcq)#2V%?UyT4-s8!f5(^SWWJv
zzF-p6_wos`k4>&xAj-_0xdATlsBm%E5kUI2sFgrKk25H-l{7KQRuE7@lLU(~VlMm4
z-si*G&o@C*Zi*wWSOtG~`=}ble(It&E}3lu8?Lob|A*vAUV~8`gvRd^C58|AB7zsW
zO)Bm^{JZFE08&G(&t@z(_Xd`kG=0;~jD`etla(R!2Ej5jED@3Hf_}c{q_sv3B4zYc
zPa@ZZC9?TCMtS>sGXt9UhipVkXT#|oL7AN7jhx*MOkd+bCY<c6{1UTGAm$9}<_>dS
zHg8(X>TX=9c6ZhwCgb2hK-nQZNGcGG?{;3BCY!f{_8+<imogd3kP%V|?cop->Xr~o
zbbV_|TV7r`3G_Q?>pBqtuYf3Z;mH1~z1szDx-JWzkeicU#QXtw<1NKkGQVVeZDDaE
zm;d@Jr{-Fi5!F8e*G)?NNiykb*oL3plMWSl>e+y5-C0?Zh1WS<PYI}Ps1i?`r4S0P
z^ho=h>y6n}gVAv#5N6?xw>OwctKvtJrkZRFY|%8{g8bIr*CMmAo<cZBLixYxNoUXy
zIqOZKgkzvwLp%BCx!6g$^y%!MU@ilW&6a3r!3Des=RR~*@c!KVVa21PQ!!6uGa!tr
z)@A{ABjmhwfQ?dMc|CC2opSY&AFIEl!6)7~ofmz8rUR*pq<c&L%+U`EkIkZQGY!0f
zO5ju`zyxMUXu>!Tx$-S*NCtXzYI)4-L2?lP141XX5Q7OFm@f^H%I939FU$sK1e^vm
z&r6SSl9LwFl~-_HhW2;x%zrZ7wX)s1z?gK2v`C(YQV|Z@{E7tvM!ZS5<oM8FF)8jn
zyPaJSe7S9)>Z4%rN(@PszS_2Ng8Q%@Q157%@li$JELD4`oG`>gw|!x2^-WbAY3+B(
zGU#W-;KKaxpl4E@$b7M2uk&bK+Ol~h%kXC{X0S4yGL{2YxBK_;EvGu&0-30S_=ENi
z_piwwZc)@M_ymGS)$;%JMT?Uo5nfQ9hQ+8(6eO{0e9H*wWrWDZpW1+faJL*x<Qcv{
zx)d05x>UO!cNB5R9IFI#V9JcxMLxerv}<@j<FL{knWr=!C*Tdvp1dK-PB1fpm$S2a
zc2p7C+d9h?Xugq!>vrZheYH&q;y~KiKa}bln7s!r8(O75D>Ok+rTxQEFv;K~ik_G*
zM?XK8O_cmDN>o}!1h+V^uBVpy&bA`Qo}~!5Ed`$nZa(>*d7Nkx>O;aKOIU^PV5p2-
zV|1RyZn#nWU9wJXELp25BGazro%x1lv#22IW?W?lTwwb1=<^SmF{2!%+!(i`F5{_H
zW6~%m(pjpkLbGf3_UkK@FtXQZJ@xnRr`;}veknjU5HL_W$847Wh@XeMlXahp32^*#
zW*5mRn!_}3wYJHB3B2?k7$>K`Gh!yYeTNf^q5t8jN;r)(#eme2{9{`Oe@RGUd$i8Q
zno6wE9%VvF$C98rDnxSzV1$9aZN5NH9wI)+D3a&F`Dy=j64RZY;XGaWzG0EOb<lC?
zrVdWGqlm#f_2r8c{7TFNl@lYfuCcCem3+=($-w&`UEw%&HUC=BOcj)uVO9&lUbHAG
zWm(?cnEf{SfYIcrGw|WYxrZhu&2q*S46(hmXvnmjtgDv`iZ!c)#pZ9Dv$U`_sU`O7
zp7NKT@;gBa+^crHqi^7hkHe91S{m#-#h|D?q2%>hA|HPYUjgmwY@5!_6toV~Vf}RB
z-Cu&E<pUrDuW%{AeN?Uu-IB$Lr}aEt4ET*kb>PibG<B1MLdzi_Vi{XgY^#3+s!^1R
zH7L_-wVcw>rr)#Ya9^1iJ-N7+XRVD?Mo5h5qcfyM6AJiOpk#2WK}ynrkB{L}j*R|^
z+>i2WonOmdj$65R#tgMRkn72o_i)674tZT6{O4XwUocUReb)IfN+=Y-KtzQgX_nX$
zk_#0^pBB<+-+pHT$=Bgcz@sr9W!RH=pCpKb@)%X@1(_k1)EWM$s!IYsg+iy#(~R{2
z3CxATd=E9<>-%>kUZ2$5{Ue7DF*m*b-8@t<^)_j*KQmkZRqj<i*;1SxwJ$j&wbeK0
z^3Jss{dG_kmy!RgdA<5MQ@)%+&`yz8znX_}PR0eWH=gzGvWH?-biNg?W71MsY6$T8
z6O!Yn1cj<HoK+1y8rE*Zn?Z}O6q@J_Qo%9UtL772lIR7M4#rOE>~U4^5-|dtJzj^!
z*~6WDwHA4sQYFW$Pj?3*<AT1naeBq>`0U1Sb`3onOW0KmVM|Unb-(f-HCPeFc@3Lm
zSM{k}m?=6#fQyxly4YHk$>7=_T{{~nNlqir|7v`?recW3wTz<{>uxoCq~M=Lnub4_
zD^qu^#<xH$g0XDNLdzfh=@Xdb{1IMV6&{-lN6W*4EU3<6;^cUuoKA#<m5=R~Ehiq6
z$NtoZ_RP|xoHH|{lO!azR?ZNp&2}2Z%)f!}37#t3Da3sYnVsn|jncbvUf?(gU}($l
z7tYj|VABb-%+vRbN=HPZa_E(yXFEPIFOmt{R;A|Dw0NI*VQn`+Kv~LbNtzN>!gb@$
ztx0YGYJXEj(`g8r?zopUOUdKdfd>3{B-N^8ewzukO<VcPiW05A7Vj!O-6G&MkH~kx
zSPo~Kg4aij2{v|D7Sc7H2Yy~*4Y5(G5{dNQj;GGwZU4ShAY>TZ{!EX6$wn6%#8NYQ
zU)h6v9i%_#cgQ@3IS-PTKqF))xKpFXaQ-h}+dHu-`sZ{#O4`eFk#B$B)nA@c)lqNB
zX$vOm#?qD}WSk$EJAz;>w~AKP5bs}{IyDkt|I4uN+wIFq*G<1s-ubt%wo7C@gNQ0&
zve9)$P!_RZrczY?#W^?&<(X9zM8+DQ{wMw1T+OUfdZ;2y9dH;`%q1%kKl5?dqh%fC
zS?CokexA-jZMglLeBN)g@hZbjRlb_$nbEXgE!9pVJSa-)2VDJxgK{B|*^2fKOGPb&
zc$qp~uCt3~MxphH#M}(bU2jN|kLFpEWx3lT3zqUzpKR7F_EFrMO?~g|%PA7mNL#M;
zr<&oP`tC@wS|k_aKx%a(lN-nHBX242jH>2g0w&Tbe&<f8o@X!$4v)1zN_|PZWRP^&
zNJ=H4F<!a71XeBAngBd3s(Nn|Ei#<Qrk>8NxD2N5Z^67bW_SSQFR}tc*+NgFa5Rzu
zEx{Q9e=ir&gu=mN^@@$ro4#O(4ZU9c(t%=pgm=D<E!l^@n&;YnAeN*-2gx$WP*_S-
zbE2)uVzr4xw7p=H@qIyK{d2~8K$K@IIdpIh9R1Ir^-$0Vwe7>OkZZmXbj=@Q4fviP
z-et3g!cxo!Nz4Tetd!%W#B}O8jKQBnH^)c8={LbJ;VfLil2|IGY#*i}y1y0NA+jVe
z0&eD5s#jl(3CTsw5MANlN#Pym^Z4GbKOsF8k(per_OFqv)={iRp;BM=_DoidGr=5*
zmO<9KLJOK6c2{K4M{;x96=>T8vV(17B|=(ez3$1YT(T#&E0`hf0}K~y)v_@>g4N&)
z(fAyh%4C?f?5p|NeIsLSJ4P|1pv2pR(}>797%b*d1izu8QgJZq=&08ruo62rtBZ)Q
zh-=N80CtICdwoRcY>q3*U=j{jGm@>jR8Q0`X~i#*SdL%V*N}2Ajo5XDZVT0|MLOrn
zrc_&Po-Jt4XY&hX8kni<IHCk~oS5>lKDG~4P6CR|;?vdEV{83afC94NXS;sA*PWS$
z=`Zg3z1jx1^T!}<n_qCbJGEsT#qAOA{b{^NDj!bv^(ZWMoWjZvwT%?4W6k12&lQ<o
zEk87(uAkqto@F||B&<X!PECy!ye+1Q<d2DGO~8e8%VGr1;bMYLDvO>4j2XTUl{s?M
zEV!s{RC&+)r@pEz+YQXQ((fspp#=@iQ=J~ZjW1AkC!P>T^gJ(cnrIXFtkuMk=!p$&
zsLG62|MkMV|JG3~A`N5)K!8To80vua=Eg!SETH3Ya*fzOj?!oc7hMxy2wwIiknch{
z>MR!k{oRbUP4198Fi?-_lX6q}Cd8T|2R*%!)Oh%Y8A?pgOf+tvB4X9r8~fm(XgPEf
zc}7{8q=n$|hGJf8kYx%<>lxTjyOGr=_$8MdW6!DZzPMcSU8{e_#c)mMf(71wImYu%
z`6ka;h_4SzR4O6Nc9`7#xs+`iOWM6a$6U{bjV5t*jXK!>c9ck-P6<HG@@b3LV~6Vt
zBwNP>^RUP10heyIXjYfSzj<hrBo^;O>5V7QBN_c+DMBZp-EnHCztqMi6S79=y6IT4
zQ;+{pd!TZaC>8XoAMp|}eTANnS|FeF!a<kvk7vS~P0)9bG^@YB7&41Px`_W$BZyI|
z^-?{A(*i{yr@7Hr{4+^n!O20t%)V+Wk$9bAd^yIhzKjAc6E!9p0JX>t0Xqt8^DyhE
z`KX&A5Y{xev<jW-z@+EjQ&*u^d19V>E;FZDgeusei;1h*^(5NZ3Yv<slkIefct~=>
z8<<O|rN}g(n}T+kC_)3Un|^|q2Gnu)-{TjKf`V-KMlxB3Gqs*jCY$#8<?uc5=MI~`
zRLh%*pD|rJSnq;~p8uC!OqE~aIX?o*pN{1$ZN+XAD3MH9^r{EjdrJ8qzw?AnCNKml
zT5(;uI02;RJ<Z>YIN>%Fuuv`LqI|#fY{6NYV11E3x}x%@Z4&fNMVwPc_?e^(E?^~V
zsOc_v5_QFZrg(QOvqs>DRrfI-KamCcY$;~A_h=d1J+NZ@e@C+(<Rn#Ds!;8j(bi^q
zfI+7QS}5tH&hvNvDY;oV?go;5wN;p^KkyCUf+rPAXoX4(y!9=;zSkp903G5<<rMti
zHgl(AVE*NMTn{@{FVzc=$<;U?@KCE-AXZfTH$0uODoNBD$mro{<ch-m^za(*6FmiX
z;hVF#1Ft83)VE7xV+%qC>v=}#5OyFI%$qw<7Yp)AFBx@4)_EY6V9siFr<3%NJx4ds
zBN6wdf$<30Iob!xb<?XV3Qb`XaCDfX-H=Ek^;zfGpo-~P7>Ox~3bsIbs`BQP0;hQ8
z5)$tRZTNN>m_+oYM)%?IwmG>Fx1gHVKzK^REORa-3|mCXmbX=<`rXPq6+U`%!Ivtv
zZ)}s*k1D(EWF3XCJsQeNkni3IhK3p$OiM~l<hGp-DQl2)7+=~bX0yGvg!N<E=m8Ik
zc-_uCSlf%Bd}kTQ8AaA+`@k~zV63=LMVwZ`_mw!G74sx|PWDbcPo0*2bRP=hoiN1H
zSPgNIhgr;=f;8Dbw=K7k@{paoy#|sCMYiO`%oxG3F*4W_QHv?cw9QAcs)iCb`@@d9
zDpY^`+Cvyzs227H`se>ehwy2+HK5oOu?yHKOpv(>H!QfXx`ImG@GPVuHwUb%aPFDP
zk+lV|OTX1as>lx`AWu(bgp<S!3Bn05Qh`yS%8%h4@WWEO`*8HX;N0~v^%FTk-`2UR
zdz-a`K9i_b!}L|7mswZ*VxZVBu;y>9%e`bTHs{1hWoGKKHd7-~kLk?mL*nkkQ~~oW
z62wLY(3>Sd_(wouRGwmq0-I|S_l5<w`*Y0>Lc@>=H!G$*)!y-Q*mh2A2O&2Px@{xm
zK6kWb!!(Hnba7VvK%Vrd$dKTFjQRg6+Yq%~)v2+H##{X`<_i&mB;|w?I2Kzz4?s@5
z=g(WV)p!lsIt37ivj-9Cu^akfZ{%#^20xo1{z>8~V9kBK2E}GVD_UHPxCl%G+0W-P
zPc+(Yvj2JY+nDqZhc@XoRqb$OK$e=xF<l{u7ICMsejc|ZWo_yCN$%=rW6O5sj#ju(
zf|%3Vmjpl3YZ**89C=_sfUwnD=m6NS9zKC3>a~?Lnv6gDsPD)LtB4#<(zA5bzm^^X
zI;A)}mhAVnoKBvM=o@Z-hk-=1DzC)|^#=Xm)a?y1_S*;}>$R57JL_UM*SfKpB2F8O
z_};?wTp^>Y?DV#*%~529Lu83-6ux($1doeo1vMWTY`hT!nh$1_8*_Mjc(iO_KGYR0
zrYXV3246D#HBFqaA3%$(JQ~iFv1=eS&1dOs$SM_5rtlt)=C5NQQN9C?eqt6P@zcR{
zosP_)RCL4nHJ9bTBbJh5(i1UY8ig(7OA!@Dd&nSL5LS$i;*korz8|)32Jw?hl%Is`
zNoV8<AJ(N0{=m!doN=8TxrfIL2(lt>BB8HiToiiPsm6owDB^Cg_32zK!Jn~$xi@8F
zWIGbJ<kKYH*C}nm>Jgu3wOo(1V&tL@doJb=F21iw`{>oYOIPfXkoxm|;@Z*?672m>
zmH*%D4h2ttC+CZ*Gn{m8276_wv*xdBm(m{|0pIMPAZ1)I!wlYI>Uh5Tfx-9}cWTdX
z*1^cEP{^5G>dUusm0c~Us+Swzg*_Q7{X9AMD?vK2lE)0tVh2i%RwR&zb;P&h49N=<
z<k?ds0DB3b%_3}}2JJgNFtI6!Z!lgC+5W>l$%FQj3Sn#ElR0lxFT-T{aqux53tnQM
z)l?q)OYEb@B2*-jr&XYYI?=XDj%N_L5ERah^n^3QJ-`xYWEUR=Dr@b)|1Vik51J{y
z7ijW8_i@_`Z~Ff9!Mr3f*Ko-cVt;5SoY)?+4Ajv4Ur|ZH<toFTupX;cGNs%`m(f1u
z;wfWTBb#Wbog;#>;($rBP#2t0!8$c480h_x4n5q=G}6`7<2BiOy7S~hyk=4*B8^&?
z-TBG5ikO1|;NsAI#ETbel>Rj9mK|Hf2kVNWI}XWH;jSen0x_k(!KeQgO_|(b$Xhu>
z5!U0^kucm^QMD<P=ZTJzqu+LS+*((m5#DsU6z#Hx?{Gk|{~YySwcy-DUrhzo84D+N
zW8q1`^0N^~?2&DVpjt77QXHiG6ys*;+M_t3#_4Ze=vz)<)zzby@SO(ZXt&Q{?I0%o
z=6PbXj6;iBd~v6?6V48HW^AnI^O<Ku{?N=dqUqc}aWlkSzWQG-yH5sC0zm7VsUaVZ
zVx7f&n?z#1-x%S!#0tkSx$8s&{XhnoaAGW%F0hA+;U&55?-TDHw`h*HCG6p1^%|+Z
zj)SYoqg@ArHw>R3aGz$J`&d>)m$b4G_P4vbi-Lb-+Xr=sMELp{L?M-Sn3@F20RKM#
zz<_&6{N;aVzJlc96?Ol2F9clR&FrB6uQM1<c`RUbCqEH}uT4@II4Im%gR8=L-kvSb
zzIaHY>fWD&qH|Ny$fRRS?Vq4In>nLr$|!?*lwgHg6jJhBXC69`U|S*E<km#TvXleJ
zw924xk!r~ji_S2-Mwj-yYS+p6I*kHHofpyCp$!qg1wN@bxX#o{$_wYJ-#KB_HMR5#
ztE)GP$oa?3q!K#M`uYBIP4k5fe*&jhub^Y}-D`xpb*{iu5WrfQPOA`I!S3od;><J7
z)}ocHbl_)Fb~UP5yaE{|Z9QQ+%^s8_h1nu~l87^;&xpRs);3>qN);5&&iUIVYm5@{
zlQ7Fwp+19SsZ*pP6{@19z-Mgaa-AXTt}Icn3A57mgUrFz8McD$m9rSTU3Vy8afeIp
zNgfrp12`%tEB4%Jurqh<)&}%M_bpF4Ejo;miFNW{kopLADAJ<lBYPgmg#G0Sc=8y%
zpoLg*s?+Cp)7mT-AIwvFJo1T^w`U(KH=+mZzEw74A+&_(o(4~Z<2MNj<JVO}^NtNO
zb<&L3u|<%=y>t-6dwFeZu%q+8Ubc<zwpb4Xlwu66>UML4o^+fEpCoLTW{4@NR`<)O
zU1w`4g`3}6aSlX%^Eh@z%|G%SKIXi7>X>3sK`D#XcYi!Cd9HJ>j8bn`K=yq<h6)Lv
zWJEbgf%yz=$`L<~#yV$r;<||yZK(}>l>~t$miV#tdMxcgtEGw6cC3~Ub>#06blre6
z(&s#F+)?IzWQ0{AJdb&}6oixIstA2iwXPf`gusT5e!F^q6p%inbQ<#9JA{2(AIv>C
zZI0SJgYlOenKg8-aIUCqgeqtxzff=%CQi=w-6fCXSlyO%?nGG157_I5*hRtNIEQK}
zCV)Gb^Ko3gZHwL<2?5^oN>T&G^HCAPA){hSv$Ah|RFU^Z&#uj>Y-wbpc~wOoLFQHU
z?^J19)E;i@%;vf{C10lZ7KmN|68;%0i(qdr^qy{8Tw+ZF`eMBV&%HAl_U~UI#1rT!
z?5izr+DC}nA*ruhqi)05XP<|`_PIPI7uB7*lD=SK5s}RKLj8#ycvXcGdrT#=OqS9o
zsP1Nus;2b45Wyu88ryjSRbsIAs5i0n!ONj82WIlUD$PGc;7mYR3EAcn6+`L4w>8Fl
zLzp8n++Uitq!|8tyNHASdu!CUR7Ux-^n6~&oMTutU}cYb;ISkt$VzT?u85^CFq6ng
zcA~9*yNNSGKBodHB~z;se8UXv$iUunMQR0zMJtK7C^&_pf*w!?t#RzwJy^~~it=DV
zyUL~N0992X0P5Q4EBqs{sX(Jr6M?tjoyOW@w@N?oBs$byADWy4W^OA@n#Jpjp70hw
zcU;h?LB+rvjFELxtBh!s<?1-YjU9qaE=Q>DNLBpvP9C}MIskJ$eTO;~1n3O%Jds5p
z6g)}A8*viN#y0h5JRcrmF<_zX?=8Lg@Db4`t2E<9hr$F>=B-mFP+Ijs5A$bx;89Uo
zq2Q?|W(>ir5!O<hW?%MTMZUuXt71Cway9QxdOX#UgnkLby?T%j!QWxu&eG2+hjTD&
ziB7YXmh-NNf+ifbdI$7RbXg=RuP5LEBt^olNKMnsgD<-+@lWK3Ek=4dfOdNJ>t>su
z?z1C30?SzcN~T(X6>5|`B{0YUn!i|D+lM-b%&sP%7Mlu?{8yzSg!S`L8|H(JM_wKo
z6<7E(F^5c;MW}M10DTzl$z%#amS;sMhgaXoIwP1`86!3GIdCMOBb<!^GfN6h*nAqX
z*LCT>Q5I*Jjj{^6{r>CH=<BsugCf2)V5SM-NcNm8_$&=q^`l27@-aTe09OvWt(&sn
z8BPwmg?E0MtEH9rmb*)DdaTilkV`%20S(w`YH(fqt<bPW!oEG*QBgxTO}Jj`qa34J
z*y|^V;*K*+nmm`#M8TnY)GRUd57UL2fqg3oc(ry^=`$F*krK9)%S7k7m)RRNA{dvH
zz^yJx(qgIbw{I{+OGij^QS!dw&M|p#`zsO~8`sCH3m3BvI291H67XvP{ch(wejaJY
zb~a7C7-Lh-g@%z}@S7}J)vDh?wGGiD+v8U(Dz<KnN+VDr6fg=e=Z)jhh#!BEhIiRC
z8LEiDJ!Ioe5%g|Z)_|o-=P%%C@MhPb;M>>mcBdU9=rF^p1I}jCR}bg8dXL|Br{+|V
z7I5^B9k(gCJT~2*bZzEQC%Z>IgRHFKi(J@;3?Fu>KJvi%*QSTPh)l6pemb3*s61j$
z{Ee|iGO&oXZ|<xf<BT~N?FERf*^c)A4(!%LHdAkdrG2GcH>~8G`@}k>$hn=bO&5fR
zQ-c-g5MR<LeJ>|XemxuQ&Uv@uP4lKPg7W;&*?K-KFb^5!eNb#z%4M%@YsfS|cc8%J
zsCfNA(HtvNN5t9u@CJW8=^o#NvL$CusbVl3e2v!wFF2a0`NNTm3bc%sLPk?bO(IlV
z>Tx~%=WD;LJ2p0vTZ{&QlOgHsmQ`oC5q8LLKPiKm0AU&}_&EB-Bwqw-j2#VA20+rq
zgy>h&##;sl&nkMd{dO0GIyLfYe&v0sgt>|r=X$|s;b}ImBs3tTD}uu}KWS^Xqi~f9
zVQ~C<pJw6Q*q7*fZYJ;SD#=o3ANAL&g)p5kdwdSVJo$+5sb3@F?W}25hB%(+psUC7
zop+-^qffG_g(|sRS%LszN5S?}va;kRl_o9kPA8>-b*n{6a-*huRS3Y{Cu%BJ0cqoo
zQEBG7i6KEIY>&UesbnA6m2!&nV9sLnK6GtV-U=o4J?3ae_aj3gqv1Vb7DQuNRO#=H
zM27ATyzTKdfSi7l>oZ+=<+m@j)_hD|-8Q8d12)<tfS*5V=*;;f-XT6MW-$B96Nc!l
z4mR)IGrcI?ahwXgYSIor(9!vigqVQn3A`9Oc4Jc6*1--4)1f>LXW=3JIdTuVy;=hR
z=6oy}17sC#3^u9NBJjz_Tv#L<HR|rlRJnv3d%qxwA1=+cOM^x1IJ=xc!+&4bXOl9x
z#HeqZN@}di3Zg=(vbw)i!urkoMpTsWr5K*QRy#i~(>S~`qvPMfHh?LeeBFWavwdng
zvvsh;-pTA-mER83-)+ix3gq>d?yqr1()`{#JpzlS!#R-8e!Pu}jF|_ib#}g%|5g6(
zKm(vrOn6N)uH`|<slr|93l1}KBQu7*jN|$_a?`pEx?ACrxrdS|l(igWRTZYPV84Eu
zgCjc9ljp7%w>Q!-?PT<wIEiW}zJ7bESQKChX8y57aD%33k;v+FNd5Fs(v++lwYs^O
z4c}sY&5eDWS{*#+t&ecu)nC;*!`<Bx{bZoyEC-X7sxbirqkU7fnFQfll#`T)QQTUP
zlXV9VdvQwo{xB$xj3_DU$+l}dhdRM^vR(=$b9+%WZ3vfY#^b@{tdG4KRFCyN7lGvM
zK6QIA&ctlaiq-KfBd&|kO+JZ+#Dtr3qkwhtb(XVg4>uQM-3|{+1Pd=AR<x?VoVE$3
zj*DLnmkO@!;q_X)OoEm+N{Cl29WtXx16{?TI@}HHkwq`Y9UJ%&kQwTn`LwrhZP77;
z=zfAfxd(E&fad76amP7j<UfOylb&@WC-BV-y;#H!`o%nzf#n-2<ME6D<3$+6jHM*d
z)GvVJOkfiXu+i!IKmy%18s{b*GPoN@mi~46bOzw`st6jQ>gBTZixL4Fd}vp|ld-~W
zPEY(_52FQy#S1y^B*G<gNP_xWAj$*1>Y`@>B#M#N?uygw2=-3=bPWoLp@=9&QifH~
z{uBPCkD?|Sk@U}XD7JR|E799*hI7)dj6|`U_8n(>HV&}(Ns5@uX(wM<kP#}jzhQP5
zXmh7nJ(~nx@fQF^3~twyfYpr@jONBDcq$_*6|oW$k6QnF(gju0C&tyD!F&ew7X0xY
z?i<Zv&;!1Y3-0~n!}mGcnS=P}(?o@dlZ21Jltuwb93tB621l?DCVFqIveebg-pwSi
z)v8;SRb=8h{aa(;Ft<#6ACEeCr(p>XH}SKQXxLDq<wH9V7v4R5&`pT=@JUxFTB$BI
zEu9U}gF9XOa+=OxXDB)vtQPj%BTrwBXObz{%fwkVwA@(%GS6dFgjPCN)>StT(I3A<
z$*$l_qZf;1NP#?TICQT?gQ}Knu`X{bQ5wjCDQI`Q)^6nsoRO!3La1zawAeKk?`a(H
z6f+m|hARx-9YB^A9c30_iM+jbLK{?44l3k%&9vW=*+~q3Kpa!-LXO+zx#N-*ctvd~
zzqmGcSr;fZrp88{IBw%ET$_FdEVY<}_?06?eiIp_wL`Peh2xc3Ih_GDvqt3}S_S(>
zC`>hT=|(Onb++W?)Tl6@t62enjGo{EMEeHj!3_KaZV#O)cA_=PmWPgcvh0|d&ckj~
zs@+}dBP3ir^d>m-`(e6yjLS$-6Bf+>ymOo)!)kie9@l|`H1Nooo4powsCbIvnV2Fe
z+hKM23~(?QE7P?3fk}-iNWFqY)wHD5D5HivchRMuyV}O9$^-jV4B*0$O|?0UbKwM`
z#ArH2QQc9Tg>cUGDCYR^J|ah~hT-NRuta7p?B76-OS|iRYP1+z*j7vpBBl?U#8YXQ
z-P%Ys#wR!k2Ha27S6`l+QG0TgbtP`=A@y1%S|%|X+E43TezSxnAjBXbyR?Q-R3=o>
z0mSW!KLZo^;u2cBrx7-BZxyoX{I<n!<w);oAxblX3G5TeVZO4?l31@tN8o`)Lh62I
zlRCpW{M$lD)hDdvOWqOr42G*|)+krMqeV4%>8*9{L_qFGUmGdOJKm=9OCs<cgmupB
zp7qoyzOr&pF<4~?{@wwz_M0`Ox|uM$p+26-yR)Cz;PUy4wj2|9!TDu?M}mmvalY*i
zm0kWcq%+!7bI5!B+!lx#QRFa8Kb<>vTf?64rRS;_N}g}a)+MJArTcLLxG%Yaw!5sN
zMPba*nglEw6fFecyicnBA86Sza1CSQkH{s|(kLhwS7Or&79&Lt3O5-3kodaJ;r7By
z-}yyshT@j&48k&B%er8!P`TL*EVH&~GbiPoU_|U7@32A_b<2>c-~4-R>uARL0X<(F
z8NbWya`Dg7h?Q_ze6gvaDddDF;hSj>S2?(j>}ztz!Gb@&BAeD7LE)}rlmT?Hi?D9R
zSz1^X_*ey;m<tTnz?)jkX#45-I<ji;)Ic4~#M+$OAwtz@#9cHIlOYiO_gsQWCl5k}
zY&TpaFoueS){X$qFZ;3zDrN%*HTSxw_!Xj{!BS&zi}qcp@<yUQMe(S@=2d=jhzF)C
z_G6_nTsGfi$GC`3%;MG~Xk4@K?rSj{Ot<jaeAi%;53)ftZx;jvaei?*0A<F1kj7>r
z@V}qQzihGg8sqzqlZ_+I>RKBvtkN**L84wIiY)E$-~u=vKmBjfP;Zyu?lATQkY;nX
z+e!g9Aw9N*GF*XMrC-f-?osf`-}Tv-N%sFngsbAVcE@;*$Sl(I<RvaXu;D|#&0}rX
zh~Jftdt7o-b@?cGa0_xrRPSLyowQ45?22kriYHgCgYVfxb%`qjA2B|{C-^Y$srVtq
z=#m6midT8d9^O+>=e77yVsVsgYtnXo;E;H)v+Hx$0K6kJ83d~UlZSH9A6JNcTO(<H
zf@CV!J)+@%B6g7Gt=kYd;j~HjCx;FZ*~zfX?hd)FeGb=)4wZ$!5M<v@uS3U5ghPl@
z$j|YJ+t#=Dbn<Dtmts7D-XBC{@BqJYG<E$IFqXT^Rim@PlKm&o_3O@zX#CTXf0}Lb
zr>{IOjbs-{j~nl2NgR)Pj<#{UnX)uBcpw+Eg-_9-rqt^<b0};(r*YqMiO>SHZPUvJ
zRT~7#FZU_2sd_FN`Hvu6E|%=gK5wR=26`e0U{_ZIaZbC9pYw}~-gOw;STMQPkUs3p
zwgra8XgBpw!jq4f)1rt4wP%0FU^_tx*fx8Gi_8cidLEKl+tTlN@<7Ac+j+6)5)iGE
zOOw%=gC#3jQK{IzTspUMz*6^sV~pJklvv?NqI)jb*qw+By7VL~eaFM6A@3`CIuwro
z@&X|^9Ob31$qYrFxX9g{bbl*lt}|#qeZXixG~56ZupZtl&B3f;TOD#rQ9yrNwozR>
z;*<c<?esO{z~83{T1xep(%~fufp$y`2{}B0u5C=XVxkHNDoc$y$Fx7Tg$%s0)+dUz
zn|A86E(CmAA#L1lcX3)zZi(Le9`jz2_*+n*dox9mUEzHwgseGpJvK&(eAL##v))qk
zVOnhU1Qs8fbPM5=V0UF$Or7>sb4faH3brpjeWFcEX#9v*rSnkvLz&yHIrpZ9@?|$j
z%m-ZElG9!}zdkwV@N~5lzTL6aP07|=k%w?U&i5crZiF9B<_ol?c<<>3$J`2`pUTkK
z(>VgyhNbnc0`jSzHGml#_5ZQs;9xvMXz>ITfOj(dEUMNvLqbh9g*52>O(U2r1nQo1
z!=v4J#*|Z=dhodVGNl<E()W-M;f!jK98>u?29J}->TUSt=xTe3j8J24*D=|iVHV%@
zg@^BM?kE9GXy5QDo>}8nhPWMBR*WyyX$}^$RxhO{x<Mu}b}lu&6i#29*J&56MTbpF
zX#T`M;$iOs8kn9p_VjF9IKv8vbE#`ZXXFQ(0}kz#e$d>~IUeJRbE-a0S;7A7Rps9>
z>DB^zW?-H%N)soha5dQn%s|!5b#+%a3s`A)X~=Ejwpn$$70%Y=+aIIC`3uj-ow0{{
z8`0-mkO@A+c_xu=O%Yrv7POdHxvTsDH8i1NZl!M&2Xo#_#My?-=rr@L=ayN~;wktl
zc(}v<l)!vmBO`=oOa%wmQdF`(r4<;~dYETqtkAp>M;XNAn~x=J3hJn?n&{J&cX?CR
zv6KWU<`8h?4wA@XgCVXWm?9?zRPYnv3kwGa^So>A!%meqy_m(hXd;EIN^Lv;Xhw4e
zAp!KrAR}VQ5&cjN*F0POmB0`KA&ImH<PnmImg>m*Op;fd@DB=<JB^Pams76p`0o@%
zi&zS!f4)ru{THFAZ;nIb>T^9_^z8jkc|~!an7(wGSUR})(NkXMCG#N*T!oa$CKmkn
zZD=pwkAdSm!!Ws<-NzSOcdsw1Z>G{iOv1k(M**lhC3%`>FxpQy04JeWVni@08RQ2B
zKZ_FO39H~*7)S;g*^gdL_r^1O1+8^%ZPlY!!%sI#iAYUVoKgLU`t-!bP|_N7@oDNv
z@B2}gD=hc|MyY-S_h8)C7WCGt2V84Ho+E2%TQEY$3i$&xDbGU~yroPkHKhsR*-?lO
z0f9>_$OxP6f`H?T^C(_MzNPFtHVhtJ%F4TyN&6cY4Y>oxCg8)Yg`mFplrOi&5sP!s
zmk@dJ-{tOi1S0;zIE${@Tkvx2A0X;;nWbY`6KQv}oLFz=aUCqd6}#tzjiJW~FADN-
z=kfE9Ea770X#DQaOU<3VEePJyp#e8=6z@o5_oWYgzG{Brbq)yPNqtNHS&YU)Cm=?r
zf}lxKyLM}K0&V#fFF_?`Sp3(jBLU6(V6j}_4_+&Ov=I_UlO585$eKWW9d+2u>jP?W
z7T=!WR9&soV|=nc5PTph<lNPJWgZLz-GU#-05uPiSm9DRe*0~+V8&|gjc!2ZO5aM_
zG62?P94sl=UM+nMqa&zY<Nlv&{9`Zo62p1C4p{wwnb7;!76qHZnOG50@3NtTv^WVo
zCx8T}w%!`Li1SU+!A9)K$0qo1DS$ufF7Qu4#LIQExch>p(j|B=oARIoKOmyOjm@%`
z4l;gDvw`^%p>*&-3ZLPmykW+~?FqfTvcn6kG;_P<^>x44s<EC!@6C-~4cGFXv;eV?
zj^Sqb$&6<@8>Hcg4<7LrLSBdBgAS%g6y$S5Prq$Vc-iZ|^<zr#Rtji&+bH=MhRKD*
zcruTi6Ngr4t!H;%v2cHf-;maG;o)S1q&v%S76zx{h1B!wJW|Qsx7yb6%tC`0&n{{r
zb98_U>gQ%cFWk6X1>xSV&`gV!5<#<kNnHz3tdDb}U(0nlFV+e^OG!^-O}ijT9u|^v
zOPh^Vozd1J)gv)LKyg!KHH3ehA2CJ}WhpQXFf>RJb~h=DP!|F{u&Zuv=XGIk_aX-g
z)LVZDbQ~P--FM#|Zx`JLBomj$@g4<x82_3IFf>dtQi2zmq*CWFA;t$}j#)=LPQ{^a
zFj2;yw^~j(3}3hYa}l8Sep^f)kyriDcUz~F2Mi}eT=Rvi7CzwE7U}pQ@Zg&ZI}1jh
zd%oC!LDylAdZTrp1eDH7`d<pINE1CEgt{(qxPa;{K4w^eV<sNIi|IBX0|OXP@y?2<
z3%u|u7h@df>V(!ABp^UMKQixRdWrLh1)-1?40&AhuG0vjjEjVwHf#?ae!9=txlq%e
z@UT$XdW%T3Q|V*Uzn_uhL1@$344g{qr{~U)^y*tb1u%h!cqo9B7*zbI{C@(pPq+~-
z0;{GD9ZiWm=YA!-<ydWxY1#U>*^-IjB4&>vwcuT<Qlo`)VwqFTGt4woGP`5AgzLyw
z`-xjwG=%^AVZS#X*xkwzZKpV*?UulO`)=3*Fj-WtGN|1&IuX$(;a0Xz&jMg_`J%(1
z6)v*uV&j>o`Qj-}uP#YZzgbvJ{kWNpmbCKJA5r9l$~GUR8y&Q|s9v_RE@yjjzUCZe
zCFmAid?|#=HVEOTsF5s*-v7{prGv#k_FGZoX$7$1P`_FiYyeL8pUoeXy|<S2pf8f`
z%8f@{RTrnYM4Ia~Sp`O{C|KI>QyP{0nM77~|K~)WG=2M~ahyqHR?LxL$NVgYC+)kL
zKm=1(@GQ-xR{*Uf2UkJ-=u$%AEmovm5vv+@t{^X=wi$}a4tc{=vEaYR6e^#}fdp3M
zoPD4j<>=|8KN`*i7URs!dr>(PtZO_e%zqI9%%%(vBJ^!7=qp1up94d@FQJ+pua`|Y
z?B|6D64Y8G`8+ho&{9t#7>LxCNWJ~%a+gi!g!JJgRX2|CCsHVQ)KQdz;PRpk)cweD
zD$dZwE5N}zymBD`^W@g=kk?NHluJOHlip_%>)(z@5b1_BungPllz}8|QldvMso}eR
zeDN<LH8$o-C=CjGQ^<7<7CK4|b8Oxm)zE;A{yWwiEG!@2CN3ndQlP5+cNsM?vaC?e
zsnDE)_^ob2@PC{!v?Wv)H-)Dvnzk4gltjHQ^^So`fjB`i$Y^|9Ll##lNmOoJjZz{n
zD?(l)r!cS~sEB&4Tj-Igo*csbYN~*4#5JM#&GbMgeD5=)QS%42jwYPO(IV1)Fj&V&
z@NaP?sYcUx`}}{i+Z+eXru<SnC{E)7*S#!zSDL$vjb<J~P{Q8C)VA>XfBFm9^y09L
z{!XRni&{Ihc-eMbh+@z)00|zP0DET~*ezDyL!QcZOIb_iIp7$a(&7+gy^JX)hH>;E
zVX)59gKl1l$-#KdI%Uwf+~4l*t#^0tMwd2`N4Dde?f`I|y;byWgN;PX%Cb(Ys~gt(
zg%i~X{Z!s~Ew&HwypX%#vPacVoel~VR0}*BV!x^D`qzbd$?p;@ox7GM417WO3~w0%
zBM9j?=J`>~o;at_xM3`Qr#!7|qn%KLfLGaXHlu%!XwTZHDMoD~2ZheBXQ=4d%GCe|
z7(8#Oe0%tuwYS}5GA(oVyLl!=B@(#yhmfYL8DhI6fdJ8<&a3pUHV1v2)Zcekmh(WD
zi_ORqQSQz5YmU{%_SlsjcD%s75WFlVmeY$X8d2$xUw}HQFhI3xnB+6cM!n>nb0O1h
zg-jNnQ}<w41EZHQl8|&`N)a<PtdSLBbJ9O2WZ0^V_}WWeai{lsG^<*R0`x;;LW-%0
zAfKlL-f9yc+OhI!gtBw=8czx*03PJ+10JU%R}I(V*2U89K&)_PM^1?}1)M8Lf|P*Y
z!T$Vyi)&#>ek3m0qc|c`_J>ac_0%LK-u+77;z$$;=^CKc@Q?OE;yns$T_6Sx&(jhL
zr)*%CKqJk=_CJ!3bMxMS9J2_;|3RO^rTqKScTrsuaEgnZU2D}IG(mW<=REZO1-o7?
z)`3=fuqsUTf;b7sD0;RN!f8HM=u<xE1-k!x5S6D$F;P!gl2MBhpDNZN!6ALkTPoX&
z%+uJQw<Wm*dGVOg`C*ZVo_~A}Yo4<bMU#~f(4_b$WZgy-H7)Xu6+K=g5UNzRh$Lnf
z=eQ!W&qWfUmG;p0&yM=DlN}5dIZyg3vltl70G^aw_?!L(+Sj!YXm<WYHMAvyC7N}2
zrstzHR2d%}Af_-E>vFvg1L%4f;ZRGj%8i;p;Vw2%5i<{ZF`TsCeY<Hhy89*wY~mCZ
zaoN5EKU%M-Zn|<Qj(};=D)l!7=%?>R(c2P$FuD)(G2U-tA_9b0VXc$l6MxoHd*(N3
z*Mi%OWS>#ZSU64-pcEQmhlS1W<|)@jdS|U75X6%R2YP$8A_13`b=aiA@RxRHn`i&6
zi`{;$E@5f^0sStmHn^y7KUPrM@51iVyap|y(^XA-b%Bi5AQVnaa>$XitU}PV%@iRp
zqnP6}*?h15`~!Co<4qi7EK$e^Ei0Ehvx~ko_Rzw{XT*a&XU|m*FM{1hm)>O`g}SNj
zG^X7bBEfCCQbTT$C1%5zP|&@xJD#6$6W6@=Yfl5-+EI4_yow{=Z|-gNy<SxH-ul4f
z>AbddlwRiwaHXGc{=+j7$4)R*WR4A8SjVDv+9XYpYmf4XeGn^0r=qVdyFCRsBgTT@
zjeYx0;U3=<`HL{Wgut!Bh$`8spG7Ii((_IuWw|}UdTbECZ>oasD46^TWO3NQDw$DG
zN{t>$jHzZxrB8I2KnwB;WF9EFyU6x5Z~Q`Q6c>srQ|iF0Af1>+34|O-+3`->Y5l+R
z2BO|$Ao%v%$vp+()MQI>O3P$?Y~Sccu|J&Yau1@d>X0(&h(aP1?ocW_+@X}6&uS2@
z`po<-s{%a-10Q5NN7FESnnT3RS4YwUBKladcSYFpGa!X<N~(#GMV&c7s(vBv9HmWo
z*m48_&UGgGHjWI|NpAhy8A_CH9x&gyF`Mlarq*^t`dVrx;)q~<Tr4N`H3fg~(*<x8
zjK6|;O}ljx*Z-`B`AoiwV&gXQZRR{V$1JSmPJ`TW8Pb~wa5G&`?qH5O3?4dRVNivk
zg7b2Sl6mvsI&yiV#~>Fe)i9CRXNz?Y+~>3h<ALQ{lof9_F({>oo@6wFmeInm`We&v
zbt*eX9MB5tW(pKF+RUT)sq55m+El2-32^OTHI30qwTj)>Uoh;Jtal8KS@+p9HH4>L
zC(~l9syUu0^VoQ}x#iP0G4dPWRfqmdQVwqO{Dx^9seF!IP&i$&4CA>)4IvlgqcV`X
zdZ$egJB6@cn%^l(*YbPRn|1F{%R+^sRefh2U3gSdwT3(DZ;+xn`Q|ryxHd;CMte?;
zhL}*jBpS+W>6mE`AW44&#WUkafOGm9_V44D@dXrTjyl5T4(-vR6(;Pqm1JR5&hvj+
zk^C}=*TJsV*g&{mJH0K;(EXzq@AGo&Qp|s9t@<n6s1+Ps|MHc`MckSMheKeL8Gh66
zny7VSLgXLYeNAE0pzvn7VlCD;U?)y7OzDckO4>}uktcJ8t^NEkl41|LJFf=#`b{R#
z-q4aZs(BUqMBJWp!gb-p%E))|K219_PPs@7l$IpXCvj$4OpvAH^ZbP|0a_W=K)U17
zuwHGv2>5ccMR*(fTX{FjHZsyyLHH7=Pv!OC+`r@cUQ;R0^e4zeUQ=$F(+xd+IJCj%
zx~r0F17mJXEk`moK?E2TD*S*Y2u{_6_P7GYxjjDeoQenC%wU!p-_-8jbEJCtaAtrp
znKBHjC+)0dXFaNVHUTKVw_6Nw449+pvK!20j`q*3VN>b{c-W_(hbLFgesdu7d`3E&
z!jF454(jEvCf~lt)XAmZABf$;?a-1JIz6&1wdHYJJ%FjP->PI_Pc~1mEPtIKM`_Ms
z_9Bjw)OjQLV~$+D=jz=Mz?qKtT-+Y~I}KHf^oBb<&h*lUC4A{}=}YJzPDIP$^!)no
ztW2k&a|Filq3q=wsNen)Y58kUfFn8~&oMK$R)z-T%U}I7y@}16RcG5nwpc!(?~R%H
z&|XU!8pkCOtXQr^H3^ROL6~X}1kL2uwNU{_GZFWuoM+2dpG+)5D@#G``8$?aI1vxO
zbx%)z-6B|f?&zIa+X3(;EW>Gl<_JsTKWMTK!Yn2d7Z$D9vAByw<MHogstb~n-l-Py
z;dzhHx#w_O?QIw76KAlOqrLoH(E5fS)%Tlf`_PZk5a1|{hml5vt*tho@%Z|1Ci}l2
z!Ovxqb7SFR?}`P2pP_L=NZIO#9sscDnqrWx<77L1Zc04P(=F%R2=qxXH&sF*e|fgH
ziW#S)A|wfeZLe$<{_&^x2|AzB$4>0r6}8~u+>f&t3>4t+os^qMRYlY5N%p{dUqy@@
z*1PE1E+}NSnvau*EVY0|4|p5B?$@~qB?J*mPtEDjR958BRpIOi9d)<*2}%zo8^plM
zz-qwvTzXN8x$MtS%>CJz@Pt;l-|s3>bL@y@SY2r9ob-<(HMbM$VFs&#+Tqu`;ZnRN
zB?!s~6rKiX66#L`61bl*tmMr6lfbZhWc%UPpGd^V^--utanSR8nFB3dn{EC5<;!u9
z4<5Z3-aF+hMVy>N9>*7yhFMkdEst+5IU7o;1hXNG2Tk%zgTZr}ZaS~_v=peI7K~MT
zd+eW<>+tk~Iq`RVp|K2B_O&+-piGaI5t%Bvg{5wEkBk7-H3+~4bZ!-#C*Qm@EaG&Z
zC4w2{cZZZ3VRPJ8C;tkR@3})G8St5Xez0YXXy6<=KyHwfsW+ePgh2>AVUV9ga&#jk
zPPMGp{{I76_uy@+uZBaF=EM{hCudRiC7B2@8!Wnor&KQ=ivCo_sKfWRjYd|IC-!it
zN(BTfSJX?SFRoXyeQ}pA67CrTP>P3P2qrm~E{1M$y!@U0Tl-e6JhhnZw!M$OIXq=A
z3Un8d|59_Xa(^@>Ft?QUDN*D-gjn$8GIIs$HquXOEW!^b&auQ85rJHyGE8U^GA*5x
z{@^3@!<_GSdcb5qBW&$zPs7H$*jU%Wo~6|^;Q+^i1lOeQ@<D-~TAjxgzSQgOX!XUt
z;Bc+;G{irnmtbZs!P7@T_r|HZbAew}yWEtPzZi|lZ}okgnD$KGNeU8{k>Ld+-w1wq
zn_-OW&C3o}(E9bDn2ulzwbXtod;%J1RQkE235K8YCLt4@{y`9FFL4ChCseQp)g-!o
zLYZc{Jt0OrB=}sDQ^)}g0KgMwy6k(bhGc*(6^`X0EyyuMI>a#SQjqvL5V)Fz+rw6F
z#7Yn$WOWKziF|Xde!}8(SR>Ktfr*Lh+))*%d$PO%Dn$7SoN%N$j8i~6g+l+2i^1e#
z+A6avM+5O388op(O={_hXV4#4G&EXY@{ND;vsjea`a5KgYX9u}Pv|DRqqEp5)76lR
zMFw+MRXurfDYkwN>hi|`s}W4gPv{kSE12=gW%S2VyV+K3^DXcWlaVx#YGmwN<~~k$
z<P+S)K#Fmtk)mKy{fBD?y*8Z+F!tyfw~zAV@gId*Lu=L_#fu$Al1KS>>C=h4-`0X-
z{ie%z57#`#PbPuU;)JqJLX{+SxmpOFzYAm!KI#X7l4NMZtqL?c=H!gQD1YUrbI+<B
zaiKDKy=2VhkOqQKGhowR@Gb5K(co{yscr{36`1@RH<7i?NE6oM{KJ53{F&_;miN7}
zqG-t%or~rI&kW5Se?`}f2qo{u>7i3T4I+=O1`YxTklNt)c=Je%iAP_Xpu6X_966Or
z@svdf$d(<6Pg0<WU@epd;~Lv3ugC%fz_Iy(??q<DlW14Z6xWJt>!fxZ!={j<j**N8
zHmx8BS*FsHM4k;t2pSnkce2du0DHm-w#?4Oa8qhf%iq*k#U1OJJOselGd8My40MGI
zFPuce*K$sN+}`UTt(_Q*$6nCmVgP(lnML2#4Wj50s^pDPUaie4h7_M-&9mQLpx)D+
z3n&Mecf_KwIgA(rXaySz7&pAjbVHt9_(L(U`NENzW$Rm^h@06zaa+bnEFsRjZ*kFw
z)Av(Z@qrTnAlMVZ8{)ab?3pGFv-iK64Mg?IC_`V6GU-{{=pZV)>V{SGtYCHrPv_7|
zntld&s@u{NDv(R_oSbr#Y^N_JR!nCP_sOno>zI57LBl{u`<ayD$o4CMeL&KeY~dmN
z@@Myw9PH9w^O=Lvja@`Q`L^JIc;1z$rKJGuW&!lj($c)ylL<{MeN*wqeu3Dh_AoV=
zn8&bYuR`{WwHjS^3td>Yb~<qrJEw8+!C~HZEHL+O6tE=mW<sm(H%3FYWDzUa7!%`&
zPPX(lczk+L4<JDc4o7yxxtC^tm21PTPh}`4_2AdyQhfl45^w>1<9qJU0Y>les(mf4
zcorY-5Irp&!GE+`mMU`enx-LS_R29G#|g-M0Iiy68OcY5_8WUA|Ivn*FQ|y?q=Rk5
z$WJDr>O`b8XEq=())#2k_6qq#9ep~9pdOd2(!IsY;`NAtg%6RlRKmf>zx^^SO}nxp
z>sCNmyp=e0Cs}%;4y;4^q-llL0=kT)LmRZIavd?nj2bguTXN4(RNr^Qimf-Nk7H60
zrzdLM3r8qRZR24rr0mgsefvtkU}ZkwQx}_Ul-Dj&k<PmV@6!3wmYnKPhDKo4{1Hdx
z6^3LdehAGC2rHO=@?#NhI9bl>w4MRV=zgz!zyATWW5?4orDF37R|Epw-B9~RC7tFO
z$2~ow&XQ{ho>#&NMr{rxu$$a#MTma#pw=U(i~V3^a=>&xw$M~0-w=`y^8`7dvg&!N
zC5FqT`T|#TWpk1WA#A!Me%;^nx8C?*2Bbd3Y<6Le)SCVd$p`bO*5S+iwO$-kx5t4)
zg|X|z4|O`;t<MSxjrLxTn%kKT^YmOIY~HR^)on$(UD9OoBsO#_?ayD}ELqt*D-_(E
zIfWD)?DyT-`?gzq_FozE@XX-&zU^)=aHm^Or+?j1|AZ>+ZVsh22!0PPVL>#ZfhtY`
zT=pM^I*&{uJKexg)~TVY_=HoaR=xvDeeT;X&%;G7oz)`!4xhN)D@A;eOaU<TB_}-r
z!Yivm-BaJPRWVT;GKAIsMB0V>ao60BdoxG}POVKY*F>2>+a=pElz#DHgvB6zw(v|q
zi_A_Xg@pvaLjyLR4*szS#4ALttWw*3$A%09!2e1*HjP>EvA}wQ<5HlvLf|0{rQRsx
z;LbKo-d_;Z)5sr0+?#*Hhf!KAA09vChRbtHgDhW@1^6ISn~l_GcfOiMz6K31KBNy!
z?0fK1H9>4e9gQXyR1pWE|7A#ySip{&?I9IRFWmi-4(BYgmdTUURjNeix0R@~ahj~-
zd?SJ6upgS_62|;2A_3-^Bw7D7taSXdQNcrRBMwyw6a08PSw-1+dPO6g4tDi|CK3RI
zqp4wxi1bnzhUIsu(JQ~mbvsNYD^B2!wS#Rw`gFT1E~io^s%zBnPqs2DQtNK^Nd4bh
z_5<@PMbD$UhT^q-lVMFiiH*E6KQF>8&KF9Pe;EVPMWhefyl62QZ&z!cfjSflgN$qx
zY-&Gm3pRq0j!Q_f*^5Tk7vA$6!c;&eO;peLO;B#~!{LC`uuphk9&rYLRE<%Bh)#A+
zDd#+jVOA=Mw+dy%!Np$3h^ljK+i8e^UJjQy4TTrLPoP6zYw$oPj0_&dv;>4-p6BGz
zu@@yvYbk9|_z?kReEYiS!}fui$CXDFnM1AoF(+f|N24zjxMAb8n`q^$>8_Y6%8;3I
z%$y`dQ;tm)hFfv8CwGVk6~@3vj%aX;8;=KLmj76lm8T}|K0$UBJY?c9VCXr}Wdsxa
zkLD2p*{>B@PALIYd(4OK&7xnDzeWsOw*PwvIn8U?tVY-E_-A*%J>&WEnshe(g^{8q
zsr^&@#lS8Vc9qUM7`Ii`HgSf$ry<55l`6KQkG>Xcd&MK3+-^+ISF314*6-tFuz_4+
zQvypZR*`$#014T)Gc{SLQSRq>0DLLlHsSq!I)tJbU}QgJTx?*pN^dpDpF9z!FIJb#
z%K`IDnT^x6)PVkSH!jmdZ1Y=QI|lJ_&f6dK*6et4%`|B*!^P|@hEQXZg{-K<%snPT
zfOY;zqPLFbo0?sV795izy{9@WpT!m%fmP+WlhZFN%mfj>Zhc8KSgv~Df^=`E12=KZ
zKGgYDNo#va#`z1%fd{BAw4*i+DSaw&X_wAbZE&A(HI=WZuO7~7ke5-WtJ-|F=>s4Q
zd+(@9-?VyY;R41ovCjqug+rY!_zR`5F$Hkr#*XzJG5#lMC<>gnXpa;X9&R-VYU<xG
z+0q&(XuhHg1O!=D+RC0Ke}z3tt$Yw$YA<$sO^MY4_<jXRWBM~iju{3|(&I}>^{8kn
z--J@YWi8b78L)W;4|8)nKYHFc@KIpi&JX$sFUF3o1}ufBWc7(`w_6F;kk~N(y&NUL
zzOKW+ZGU{o+6Qee5+eHbbwl`c-lF&xV=wn1O*WqR5mj@#PQPpzWeI1fW-grmA!NI~
zXv%l7;t484Xk05ENett900GYNiay%#)V0AvNn+j4x0>m;s|9IuP7P`#M1rIL#s^X2
z%P6Y#8wLv~fmI1Q7!xL`qLKb|vd#srx;(yE4hBUL)mp-Yi?UkA-W#Zjyvt6+I{4@_
z6bUgQL-K^jx|=;5Q=K*!M^lEN_P<c!Cl%F2_6=9kM}<8|fis)}I3~x6SaOVm1IS^o
zQnWm+U7~FoYk2On*9frd(NX((k^xETml^!DPML+TyfT@~uBG*dg=gh(A9gkIhxo3#
zrwFhl8UwSq>k40?@P!9-q^IQ3tJ7`>RQso%8iQ@)*&-W}_7Fy9QdcvCsdqJdO%6qC
z^%mqlo#qj@b`5_3M`4V9LO#E0wqm?@!0cG0=_Ht@fM*)etf>Tc-W0}GQNK%B?XwBj
zo#yk2?k8?kE=wwFfcKit&{%33W_N14&$!_;3Z2dxB_c2Stf_a0E+N^nf7f^s02HFn
z*!dl-n8S6(x%>_yI}S-r^{?I~t0EK4R_g%nh%m9~w?FKXBAcd~cKTr{vu`rk_y|U!
zZYoLi%9-OXFRkVs2w*TdkBr;2VT9mzrjk_&oNpTxYLJ+S-)Imz1&B4B0)IXz$ls6m
zlHuscnl~$%Wfxq;Q4iD@EnT0*FPjh(%U)9HlT;L@6x&FCihaAE?2nA-m*v<E(!SS$
zTUi0;ZhJ;oBGYA25A(<Jpbqt;6v;0A%*vaDh{d+Pl%bT2Vx>VKpls`D7qZ{8)ah-7
zwZJy6;pE6Vd!{Z}?|~HDlpG*ugCd$gl+rfZUad!((@vKONH-#qw>proZYBskRVb9y
zA$WnJe2!{O(?ufP>275ydwv=Jxn>fFqIZHI)P;fBnbxu<*!0mM!8LBJbEC$CPD`+p
zUSfcW$7ne`1h2E^jNw+gFNt=%6!g5+dopvj*_7sdp6Z_Aw-MFODi{bT6)CV22Y`om
z>d<I8YR2Y>+1$<yLQ^S^WfYh&d%pzc+JzJ|bS0otB}=<4V@y*1E_ynVj$G5wCErf>
z-ek{pa!gSRuF<de0m~#721YO>_46=59pPkub%bWYgt=-nt4#I&J}k5ucC{)KH?p-M
zpn}raRYAY%%SaaP5h702wG*=KZ~QVYW#vXXJKK=?;Ob{XDO1IF^oDdp>$5?{xIc1O
zQXpIM3nbhFlcioQ*0OOB040hA35@W2+vu-JkX0UJJ)`tVS<_$0!un)NK{8ZkgJHW}
ze4!-itaoL@4eAr&FfX(*RFyiru6?~fqKxDVic=FqAA(_&&wikU${~cGz8(_cmSo=%
z&vQ%49x;Z|Z^XW^5A^f_g7BpkdlNM@n6a0&8?4dzr&cz*x#opax2Q!iKk$Yzb^Bc*
zj}6Axi~O+GDf|mp4wdGZJEHn|fI1FNmtE<Fz&*sA$EHepG)^^p<13aWkqDR088%D$
z)2Kcxde-)Z;$?UF%>xa@tXFI^a_pxcd=6Fs`o;o4q?I~CMsCs5N~;(ktGk<zZVE7^
zp_Rhi5j*#39iaO1#rd?^!hT*tiCq=GwUMrLLBf0ShwGP0EUR@44cMMhp^Jw)AZ~Z)
z2y*pK$6~>e1Rf%~C%2JUzK}%arZOp+TI<V37s88J_p(<Od6ERRqeK6I%a(wgP<|>y
zKWv7sg^1>d+h^7Ek7(z}NLhFpU#!M@xGLX9R&@kKghO~1;AN^=*QRS}WZRSjFAO#5
z_4J`V5FMyN7#Qfz<b;wv3{Z@hQi^>DK^iJgy9n~Wy3^)?$T=Of6BQ8J9kf`)xf<V6
z9<$Q-vfu`+>~w(N63nDpo--K~CQ{rTdS%VTd-6ks)-3-slqtE?DTSYUw$SSG-zz#c
zQ{Ci{eQWQJ-U-9Mxpu<B`_z?NMzuUxi$!hLtS^(bmIYr{4btd~J!*1rA|n8Tk%S42
zM7Q*<=IR)}>=^yB{%mvT<~%}71~E1S(-{55%Gg@+C?>JV_iJL)yHQ6eU1cXaMSP-T
z7Q~BdtxKxeGBlj1Vvii=6XwuS^{e>1E@3OTt77^wkS>E7e-!+Fvd)^4Q5zlJasAT@
zpjY$M0jmz1UKb$H2aXnCK0V%Nl2vlin{j2l9$DPjv}zmc>#CAU>@X?x+Y&{bD3<}m
z-&2l^2;+;pQcPdjQDM&6Z3ExzggKC&7R@#HA|A>?dW$<MbpT3^AUa8G07m*zYZi<C
zodsC$sITC?&YdiJur}ZLsn9Z`u^p|#E2i2k<UXj~T)n>7-%Cn3qO5%ijQLY#(iBf-
zacBub(l(}u=({0qXBdr&%;y^s6_?$cePfs{2H*|;=|;m@d+l{02d2@bMd6T$faQC~
z?%JUnj9iJ8DRi3)peUQ=f#Il<+`+FN#H>es{Nk~JwNsHH1UHGG=#H6x1#Q<_{{&P>
zLHVJj9`d)m+dTe7vHm3~H*CT&Kv9-1`^Gyl^b^x{_H@JH4FwWeWpl~3-=B%E))_-T
z&SOfTB>Am^Bf!f0fGefkuX54Gi@`}>lTDq>*q37U73WGAD!K4VJdvZAg=)z#Nytc!
zdcx$DYDL%WIN~f)&L;n*cPHO-k>V%xH?f@$F0w+7LMH^OgdPF7{5E45Lcp!&fAlK3
zJ4gs;KR<uP{WZ&(fgRt}Yl^*-Fa7faQM1w_bjMLhcvN-pb8yTay)xa2(nX~3$L)9R
z-tz>*NWK%Q0FZ2rkG_vNt4`S4IHM>TSf5~|!ZU~V+4egVI<+C}FTNye6}SEwm^21P
zQ`uMMf;y?dm1ZyQ$i+iC`N9@{xQ+?iQFb@hb<UPo=eALQfcXwKBcoDRV$nO}vsuR1
ztc}kxYM9I))%XK10*X7nx?><33m}GvTQZxGDx^_ZCcr=pMWda*QO;SzmjpmW;r_i;
zI4i%L(0CSeWd_@Kus%ep`+`sd`z|qUT4abdjk!dZ1(KaiCOwim{bs*^ghDU$STKxw
zX`qkcc<msxU+u1_)rY#JK?xY@1H0}<jnTs`LhuvL4K7=Nw_#6#fUH<ci7?j`&u-r2
zcZ{t*%@QklGmf2yH-Q&_mfUYNTlp|ut+sm;TteK}D}ApV@5qSf3eOHNAVTC*D*V^E
zIEDN2zr@rD&^ccfx0Ch(0o6!)%scfK47h-#&@D<CfX3G?VGvVjt2JD7=jbmjVBE3#
zrP+&O^ggDoDwLd{gPXt_Hc<FE(DsbMWIOH-5gIZ<x^)tgS`tDtx9zzh`y=(55XT;#
z(7kRayX&qTZ9ods^)*{Ps8W0Z_E)ohfNGlOF>eR|i~E6qXRZ;Ip`9g~yW4C%o$kF7
zk&(>)BzhtzFX@?`M3gONoPd-t!X9-<9-udcI3wO0;j8puF6@HMt97-&I>>Wj6Fx%$
z`<G#0!ca5!PcWlZuI!9&S)K={1BfVFIX3(n4xvPr^QF)lO#0#7KV{8AyAb|aDyW^;
zpP&E++c^`VSO1N!St*+rWl?OZ83iOrh?4vwm9a00-v*ttMIRs)1W{+`-m|M7WQXI~
z1^|H(l{a1@KEU!v=tp4(fH(;cHhZMr^otNzNR^;PZ!*^_&Ngn`H87K1BsXdgchB0v
z2D%8kmn<R@dzI+C_AWtWt0~`zLX+?il&qk1yQ<=(UdyenV|`-Rh=Il%NBGe@d`UDM
zks3-$UWai}+T@0peI&IC;3u$hl6^^fe@51TuXotIBy7~OV*YX|_)~mF0N{C@GM{k%
z(9J!cFH(@x%<7#*Eip9CEER05+aFaXl5vt^*<}$?1iSaLBxfVgY(v<8Ngk>%qTj<|
zCT5O)Rw>SvQ3m6G(&BvOCN$Sk?#ny(AI8a`xFM1h`F#3^cffA8afGxNjf1vo5c+VG
zH6yj`n@APQX=NtWQF`dOV4w0nM|<xsL_{wqJ9Uoj5hJB@zw{<SGodFT#BR5J(Oqfa
z08+F9@y|^0kI(sWD)Wjy8M;HOH?5vd!)sFj$i9k1jjvHxqEN=Tn4Vri=wN-XFuhR`
ztY%6ScQep4LVf$Ipat=@dgI(d9^C3JJu*e}dF;FU;Mt>kzQB;e($w_&ZuIKh!aib}
z(|&JIJY)R2!r^K37@yCvhGLDypS<&cMfkYjHD21a?gyS>E&UsRBS_o}u4;q<DIuv0
zdM!^P8gZrV5!Zi{ZHioD0~gyyU6zcXc)2Fgk(f{^0tzZ`8Jb@Igx7O7NqA*!y-wPq
z)N*7!EYis$90l$TbY21=NBg1Dr}M9MFJI#?5OkY4ebA#mF*Me!(3;=qL0P@OjTMZY
zP6FVv74upixulP1kaC`0FffwxA(d_onmL5}5_lDXAW?vGm#HDGp3be(OBqj@5T78T
zgoJyQD2PACfz*Vds&8JP57~uq<*tuidXiu!F(q!Yw1~RKdQdpIMc7#O_-u?9K-U0V
zXfj>0{I&5a+#?^w#pLoq;NrSdNcuP07nm?hX!I91@n%&F)~U>}-^iuldjw;?TNq;r
zqsnLRsQWpa8Ucv-Jr};FsLcA&xakmE590pj51tS9k<uW8&gJleFg{;4zl=i0By|C3
zgBvbBnVqm_LvO?zix43jkO_(%ZCvC7^IBkbhR}O8&OtlDB^-8!T$*7S4Yot<Kgbr3
zuhtdXI_9@K<cn>v*MQ!(r;R;Io<o^OYpQ!*HP|7EjtP-0%pm^gRw$RVa1>+sQ$}ER
z!I&v<0i83`z{!d7M$o*Jo?+0KqwpfsvW~D&4uGTwhUk%QRjJsKZ}nhdpJ4@qX9BG_
zO*2>zflt(JMX=mA`JF@~hf2In`#(@U8{kln164#_8L%3YiH~jVd&JCK7?o%6jc!#@
z<&A#7+w)5(-HH_)Oe!UkW7WnA9vzOGy^;4PF)t^>Wj19?)7$Qy5IRrB^Ha3}ZKOF!
z2^on8YO+)2Az@3o@+)dc#mgtWPCXji@9A0p*fl1IpBrgOzsdg{vwjq{tnBTo8p;*t
zFRIGN2pYu7xE1GjjE0J;Tb@|CFNWP0_~j!3$9%Xk!g_(LL)D^&=f72Pq!P+Sw4S!s
zVpz-rXt@Qj<e%2R5zD<RYM<M=nDW<{Lo~EL%6qi+mJqpzt{J!h>P$BMdO+c=PQWhm
zz;sqJ0RKM#z!v@&)Di6n!X15K+)+6dN0tjCk`>GR)ImKSYf*(@K~^aYc#T7YJQ}i>
zP~1qBw9aZWE&f(G)szdRTVH`lS!Nw}SoK8@twLlp2L^g1w$LDJ0-aa96wc)G>zw?h
z<kX84qpI~T6FAswka%~`8Sg(j2fJ$Kp+>7vMlD*Edy*vVP2)mbiQ)o`hUSJds@Sq(
zbQof}VcrcXb-84gx@?>x5<e2&EQ`=huw*D>C43Q`j7<z*)4e@i{!*b!BQjmjwi}YY
zl+oWz3QCG+;dt&2U~OdPEh>+w)!_vapCE*_8Txf>$&=+Uta9k$pKyQHsZASZb-opz
zhU01*3VMi-XCc_Vf>En}-85#$t*^>j<n=MMQFj&#a`B#5ohQ58%?td}K1N;F00p+Y
z5tE)M8Xz$j&(FJ;p4H?GCr}Yp)bp0suRc_BTgcd<Y6vw=GVz>}vPruGyI{Os5bXmB
z8I;Kt`TIo^SuycC!Oh>%dA+2<g%)<#Bh0UT+iw~!{Jv0=STlokyw;SBgseHGkbj-n
zEwC00cAi`RIT@i*qMLnVHZ3o@?BGbxp*Jhtug;cE8a~SWp`YV|L(-$z{@@hMa=O{j
zlAeL+WWp9)?NDo!f;v)nFa!l&&t~~;rMKvim`~Clef{b_`t9sihzw0t5r@kJkKcFu
z0BJ9k?NP+|IWHv1YWGGJDOM|?BfumbvBEmjBMhUSc}b^C@g)WibfxXZ`FhIERLFhd
zOzlu9DfaFr9J;u=O(C;V!(#ooWy$@=t!?0R=NmzLWb9oh3L)>G%D&nFF`{!j>MhG3
z4C1#=Vk8E(VdB03pu}EXu!Pi70#j<`qyrz{yiThk%WLc&c=89`wxenUR@r3Tc0A59
z1F9${nFC48e6+YW6$b(4@)X>GVYdTmO*^1=TjSQ`*SwL@QU^ay%?AV#haq<khpRv_
zk)-LyI__51un+Ad1|oM7YwUfomgWP9tj*6;!9A!c^YPfe{FZ1S7VFQuMm^<z)M2_8
zzzBf-%cXip>_kk2X?u<n)5%l<K<x=5#Jo=o%Aekci-3q}S+6M9cDFDqN?~49L@B|=
zZ7@P$+B|pJW-qnUff|dSFJzVJVu!u_PlA<Cm4mZ{K~LFwr7@W{6t0U#el;na;9cuD
zz(gTH-U$qCAxpokV`ND;=>E|NWO14z!YpuTm^_-lTwXe#bL&^r66Uq=hI^`y7**>B
z{u&2~19$2~PIDy1vw8E!IgGh@GP1C_n7X#OVe^#`fV<DxQ|^<i3Z;dfbgo_QC5i{i
zCbO%9pnFom4$jd=Zu*FLe`c_ytQo7ix=m3l#vyi!C}-&PoxajdHS=Q)arqE$s3==!
z&4^r#3f270B!T}?eIi)xJn424VA%?&B^_7avy@IgTF@OJd%!-B$bNVVBak%@alX!;
zk6umjT_2++u7z@7C2(faD{67H{6St~mcwoD6%)n2&bVks2?_jvw&U^7#iz6=XBHDw
zM{{ltkx1M4Vq8Q}*pp)HBRX^i0J_Bj=&-GCo0jl8{Omv2N}*7=Drjs6B!TNd;1}(X
zPz!Un?Gf+B`g0Gdx9l8&Vyo@$SNMD&bVL3AtbKk=Gu-pT6AF5d8pJ>b)7vrC1U^()
z_2ze^R*IUA%+S`lf0}o+|2}OM_L;FyKG3VLtt%T1W(RO8sri*1zg27e)-?8<;O8ow
zqqW<1DS$khwn@py)iG$I^?zfflktXwz_na4Cg=e#ryp6fIK-7)vGx4d#>S5P$IoCp
zzLNv9UCl}pHLf>SM#!vhC__YK7e<`jBiMRs{h@&`)J5Ccp9zJ|`3lWi=T>o6mEEhR
zgkf6#P!WsbIC?=G0E1%+^VpK7Yl70fW#iJnBA#jvG`L$vqK?Ty6NZa3<gy=?DDlYD
zK!~onsN-~atK`1qa<p`|bEcq+n@OsxR>2)pJ@JQ-O|`Q90G!q#In!)^(^|Snc~xlN
z+8b(Sq8a2exi0^*`e<_>_Et#$dpzzK?9%N(??iNB+iyF!Sx!>Ubr;AVQlY&|sopX{
zf&=+t<Aw^oo|3Gpgh@-s`oN*p5{ekjtaXZd9u|G<9g~H?#`yaRE+I*rT%fd1-stL|
z9p>qn$+zXzAJM1BpyZ}(^=5V3qj~&xG0ieX;$SgfJ+VG&lToVGgD}Kd0lzU;S2WZd
zjT)n2^q<8}h#%<lzSkF6x+T)olXU4<u$AZk4TIClJLR0Hp{1kEB7A4PiA-UL6G0jH
z6#R^S`WnTnc<k0u=RMlxWVws|B~He|=QgRi|3mb#&&dnrpF?VI(I7IezMUeoJhUuB
z)y}DMTh2t7j95VRVx3>)4ZHt;HBYneNX~mq^wE^!vzFXcpW+37#T?{{EdyF?eO<)@
zHP<BwF<1(dcgpP*EwZ=LIzVcN*t5URAfBrK1Hv!MCy^L6HOXd@7jXCLYg*9g?L63C
z9crm(;Ol)dftW{1K3-sgTc=I8%L6<eWtFG?P@LVw->oTLXxlc!zQ*hSNl6vLt$%{2
zyK|7vwN>1>R^V-}(>4EpRNau`o>rH7hHdPFAZqA?@lifr_J!i#_!IW_$a+QGqAyPy
zHlz^){=rhma2+AH>iaAliK5rP$JR;?62QfV=T*TxsKZ(HaVzANYncVP$Sb>r1mK@I
zz@m5*Zc&0)V_w%}*dm8sHJd0nF3rizC+=jp$+G^iV<qVdmrc^=rPc>3_cw^9W)?mq
zY3xOkx!w$_m3VemkD|5o$E(`Tx#15=oI}R#y}vV~0f<;-oDcQ0pVxji-VdHmT%cq{
zoHzKXxJE5;-f7m^EEAF(e6wi>E3g@pu#f|#dPs$4TjSlr1*RXxv9%XYbO38)@p_?`
zM#F+0ca1;8AL!<M39>}hXRMR^HtY~ZG8Zxf%bIy95?A$C0#0hT^PULE_xqqRRj%GD
z2NrhJA5zS>7ywP)IuV`G(r}0_Ns|%Ru6`)WP<Mm?Z(ny#Pz*d&$$Z(5H+#>qx9~tZ
zPuMB;=_knpz(tP@41t@z;ftsht%xcazH4;Vpfkel1QG|=&`UX+p-k2BJWGpQg=2^X
zh0fcRqLk0*yYx7GQK1ayUq@eUS-q9%7?|*squtSg5ry)2qdJs$#nr=+xv^F9g<{#3
z&kwRqU_+4EDs`|gY(3Z^E*8cq2^`}q69^TB!Lk!c(CFVYG48Z4H3-8n3xBCd007^c
z)&do=cWzPG6^0rf>Pt?ef;c=~39?Qgfl{mL4`pJaj3S(SYNGHL4G7oaJ*EfT2KSqk
z-de>q72T>mfoi1C@xG1vW*#swOuizFF#)O(SMX*1PfUmq-95!hD*B0*oVkf)ktADW
zJdccrwyb|$kav`db*>c&?IwlM{4GdjaV)e}o4Xu^dMPaQU+?mM705Ga8twA5e785m
zth{4}+LLlFw~DF`tNxUWM_-(x*oW33s&ZH@%`~6ou}FWLJmWesfPgq|geCT>8CV92
zdno_8#w6B2h5i(WuY;|Mi8ZK3my1zp;v)3~<}rrcD_u1Hy7<IvAhA?QoF-^FfVkNm
z@i3<rSaohBHh?wBVaBi!^KSwQh<6L_wB!N^q&N3DeW>6Vxri#8Ca{+7%uwpGt8|T?
zJ5p;Cb{5SHm%YW59Y}TX#Uanv#pNs_mF^qNav^S*g35Xy>bI~wItjmXItWam*vuw=
zQ<!uh<<Z!>@hm-zE}fu%8eOa}Cx_pNcp_q!qKud7)rSm-f#P0BpR>_hd)-lj7lyw)
zm8r(nE`cL=SR0sVFkT?8`^}0VX%v(DrV#Fb@+e5cG&a>|m)CU>v+mIW*2WiU!6Bo0
z0IFB!$&5OuSI*O%2Bk(NQo<9~P7vzvg2?2?VGb#u;%zK}k~KJrk$>cK$<FXi`wYno
zQtU0jBOLPkm}p#BX8hvBW`-AIPFGm1Lx9vxl8g4p%J<l{sVOiqdguQqkpf*4%eHNh
zl`Nj-`Hl<J>x8n*=+NeEtK1nGoow(yQ&C*YMp^Lv$wY)1H7#RV)Z_0Uo%4Qv5<Mp(
zwfhv@)<_r;fiq9R-~|LvIu#~BXi)31br7OHmP>cim=219jR1uz3tek<T)}?t<j!Jb
z@4WL1?7xgp>zZ<Rpc@Y0;ya8O6cZjy9VXa=hQBGD!~d5$oy%qsw!9;3pSPGP1PULw
zU4Sm9w2en9tYxl%t=cezLJyw0yr>Vz8U^KN8?fJKxf<!_^ZssKJd7}{;zbi3d6zW(
zFvL*PpTo%O8-j-|ULaEaXT-3_JohdqWqYw_=QJGage^zinEJLim*!vca^qAY*iv^p
znPk7zr#5upS`azS+LSP~%AY|T2wNHFux}e9Me79491$tkj&fwO592TfG`~PA=eg_?
zzylAw1uxPXBJVqru(ib+Rz2@+h$fhTKt`Xs#iFR|d!AqX1`*gEmKUs1|C<fPV#%c;
ztpV+vSr@5v2>PIuue7Kci4#oDcu$_4g=+N>1h#FFBDakm)QGyX`;fi1>#74Yl70hV
z(X7=FE7@FaaSAXLgjwIW@sEyYf#H{9n_kr(NOEs)XIWCnQkH^ELV95@^?qNnHLuWA
zD>Ai%p|`HefpEVKPaJgKNu4hi>V4-;%>ep2me+O0m&}g6>+o{H@r4Ytg<KBAM$E@T
zoj&z19H^Rtia07*LMdTb*4_ErkX8akx3`2NwzK3|U)#%5RxKXC)|%+v!=*=2X?1nH
zhdth!r`+73ltmIS0!ODWakd&SIf`A7^grorPsHOmg25QM540XJ{CldQCF)f`o`~+2
zn2N~GPGXA5M&?@tyarT*9s&Js%+99Bbv=uq25r$mN2jD@V^cXm3)mG(g&z&(7Sz}6
z5$^y^JyuhWg{}dnPZCQb?=>pk1Mt;J#TbQG7ufP}O7YH=(spcWYyU$-dyu@IX(L*_
zEvg|EUlj`!(dcM+h~Jxx_NcGguQ0J0$**a5Uj(-W8&*h)RB_BZdzzR9K@y2w3Fzen
zZ$VwkxrUA0&adw4MGB$3Z<T+~U)}p&m64sZVRb2&ht(-c%CTNr(UOBA0%&nxAs{Bj
z<Z>#zv0#bE<UMj+ZReFl?Nl~NjD|!HrMI7A=VTA{mn#jypDRWIw;V79D{ck;=TKc+
z9u4<8^m0ZsU@EO3$)_20y#tNA6AyS5ePkQ<Oix~?E7!E}x9!vcpR2KBMDkVeaAzfd
zict!~JWIt==ng6#dt@NogXxQS`LOFKH&n}~G!hC-bc4axN+5ybIO4Nw;I@Gjdp~oy
zL*Vp2*?EA4{*6>>;Zkqsm?F{~@p&>+-7<JHt(uk8ymS6_`!=^LMLw3?=ahE2oDhq?
z$KOx#1stU7E!z%;uW>&uGuV9pV7VU3Ba+@s9sojlZ@*-1#nVDOwzN6g*sxzmZMC$X
zZuuJ^wMXySuw*Oq-<U0=+vQM4Qk~Iz$>6|AK8gg`@b_y-H$?|NV#4{Lif>G3E8{fp
z9a;bpRSqp_xmFV4d#FS#yper*o_cMYs6^I*#T9&Q__ko@N5Z*9+mjN1#O4Og6d{-q
zAk{hIDi!V%6tl4*=Rr($FcDv!<hXbGzMrwS#Q3P-hevfd=y+jto&bjroBgiMBElgn
zed5)hOAI(zBH(`|Ny#9@EO3-Pw8*&PvqUmXKZcURXtHi+g5LT_`ns6l-vGo3gg6wt
z_14YWvFH@z`x0%Ny8oqY>RM-k?xX5Vyjq4{5$9GsoJp^qoBwR?3nQ10u7|pz{fM~K
z>(BZ`-7k$HrY>NOCw21UirF@n-oQMe5UIKH2lzz@42^Ha=vIGBx2Yp6Z>cokCelmm
zEzm15Y-nmkb?mQ&>qoI9^zcyO(fiC?b4dBNj5yBJXl!3{ti}B_WFe{~%5Lkt6f@xj
z=D!lJP{sqZN*L|OndwU{*h5>skA88ZG?c2}ksC{4h=xDcIpOD8%VR5~i8k3Ladjxh
zh)u6es}=~VW%>^{{y?C*#MBecu4y7CvXmP48jxyx%HgEdQ7I{P3R2pou;k(0WLrE-
zJ)^Vzcp)w5>3N4z9as8Zd@r-%2Z*ajORQHV*A_9)L(4L=Zcb3`&P3i#BSPy=ZEYes
z1ti3)FdB?|O75VPY#qc==TqoEuZHpPQa6l*%&2mjWUvW~O(v`Wl1{7`xwx?$@1DxB
zo8qYUD;iQFR4ZvYWrTm9_`?ZcZ+CQIp)BUwcK=#-<&;QhYtyoH-!vChiA*Etx;8m=
zISEcKYqUvraQ5D>MRXC03Z%nQD5djpuur@1g$U<_WFZ?mDgjrK;Fea$2$JpRNs)P`
zeFe5o@|uRQCZMuJB)=8R7VVgnO;nM>F2}1L!=q2v89p-93-Ud`Xz5HSZkMf}5WB8g
z8&kK-`9tE+(#`h9n1G7I(IcjtS`KBu@5;3$P!qW~PW==Ki<@{C5qwv6nOWwM&kuv$
zZx|ef_v>!)55RMO*$u!L9b3Cv+w>vE6GH2`Siw__Xmzh#b+_(UhLTxJi>Yh@oOV`N
z-Y_C)PFxFi&SrtG!H=49=-HL#=By_kZs!59(c@jl?+^q;`tr?%IM~oeB4%MP5Tdif
z_Q}FdH(RV6mSGb|-RDlFsJ%ri1^h#qI&r`>Kf)Q6-1%Qz;AY)xnO2jpED>07REn<!
zxV2)yAW%KFqo2`<dP6dGEn=3{GuJ^9Dimodk(0vCg~Tj5T{05%iJ7cCgXA$Q`GJ<q
z$jb?^qb6c%i8!2FkPF75rWWOI&w$Qa4OQ_9vv`US)WV>*7!L^qU*(K$q?<wVr4$+>
z2+5<43fL9ud|2b%IYyEztTWMeip60z`CxQTUldMXf+5Tepbwc2a%ChnXDb+SUMV%L
z+S3uxMyy*AgRyg^+J#kz%-SR?3QVie*m>Ph<f`LbB4IA^+7D5{W#u;3hVZBy9gwJ2
zyqS#0nlX@GNM;JG{u{z!?;MR%&WVkigjJmuOSi0F>8_RZ0^H*moN9z#6NGpoxc2^2
zE0Iijg3=y2+VSv{+K+~W5W^bEbl$l_Z8ZEI;-mtgMp=-_(+ZQ+#F(A6@J2aj|Kg=~
zb$MoWtG$~3kcgrMu;C4HzjIoS41;D_nZ&{sceV$N!GwXj_GZ-1lzJtej*dE>kJtoN
zeDB$RSamc*(|BfrHgyP<H{24Vw_QM3R~U>0nM`@cn|^pSV1zGMrMe5}>c9q-$R+&g
zCO7i`v^*lox*^RCRy>&84(Eu-YzMq7hfJr>`!2|Pq6X))Cm^)sYOXiu;Edc^lN(a?
zC<06rzwoqxR7}ta-B`#E+&uroH+J^BNGo`?87#r7Kh;*f%uyDVp_^6<FCKs$4epZ6
zs+UOD6G<HjVjEM3XVSN4q<oQ>BjfGo1-)7r67kr~FCTQ9eM!0A``!H^dyQIjWW);B
z?Z7iyOxEzxt(p3zsGW_0X`tlzS?~EKb}MPQu3cgDFt3{u=*cY?!NCCiEh6{wPRSk{
zn(rdM=NI8r3%Z0vFD^3l&9gjP2IK)prPo1~E;-3fxZ*-04%21BI6<-foNWTxpFDC-
z8feF!TKY(G(P7_01AYB==^fuaQ8Jq58u+YAAZW5Q&&(0Y2@!gg=K7IHK!A%Inju`+
zkSQ0OIlT063Z>=$R4QdJ5H60=2;y_t;Vw5z@xvr)<3NCl@nfY2y2HqL5<_=K{)dnt
zt*Ff|$C&8A9?-n7UGC<Mu>|O(x_AhFMCOB$bAQ@}mE<?s0`y<~yNBoZKwwdkUO3-I
zpSC3wk$q!mrs&659VPCz((6-(?Z;knn(z;AVLi}-<pc&$c4aWE%b~>@bou~_IH|kl
zS4xnN1XxMBZi;G?3cLk{QVpGo!n<G!6L&4(wNao6hm|ZjI22D6DK9<@N4H!6hnWjz
zuVG|+Bz@Snbw_~NorYY0C%el6U<w+4zS<3RHN~#%hrKwpp6t6OV_rk+jW^nCReUdC
zRbi0sxjiSS;5w;NgOb){<;csB2@3?V5C8g<6b5>D?>7c_sfdUl<xeE^w0yR@;cWg_
z$V4-{_Vc6`mD6=VOFu{MOFL$D%>IoFj0CV6huLL!4o;jCF+A6mfd!)vQIgo%L>#Hy
zg}E(vc!%i^8xK;-RpndsOPW69H~s!o*e@4{R4-e?jaCqx6nhZCb#5jTUeOFH6%>-{
z@qIwGIws8CP_;hgUR0%QGdfL%r2&yahtx+F?CJq4*WM57P*e}Yl)mC#4A$M8scuuX
zzvAjyznDc0em-t(!y4mnN7-;(n4A|cl&cF_?ZG}WN1tB}huSz;jAfZ6dkb@UV4Yqs
zft1^x0j`N!-g03igt>XhRp3E|pw9O&#6_@GKuAR5N!YGuqV*kA`N!W!H!iG1v)a4U
zz32i0ZVo-4Wc&9v+s_LoSf+)6!uu^^UlqO}b1!|?F6m71kz~@iRhsK`)q|4k=av6+
zr2MP(Q`b$D&-Mh{^P!J;xo{=eXoj$M1c_*o++o;~cxxttj<H)`eOI`n(Rc3f3aj+F
zEP6f6P3N1a_Ij|svMkGy$Iw^w=!=BGhg=U7@QyQB0UX%h<cgRJy!=Hd?5e4Yvh!_u
z1m`-5s#F@x+TZ8W3`-6#2RnYwnrV9p&f*64(@IFN0fpE&YoMsU#It`_=wVDa6^R@6
zxZ{Dzi|i)c3TEb`Sc}~d;Bc~bW2^)SQj%?@R(_Dpv)6Izg~tk6q$vKxo;`W8vbqXR
zc$b&WboG@HCJ?i~St~Z^dyVeTM8CUt4<wN2_Y9MgBpU$9d<TzF=^n@i9BG~n5J4>b
zp-wB$btNkgd30#*x2GXV5p@k_FIiB6iC*7XvGroCU=_KtMZ7}sJrU6`(cjLQgI!)k
zV};@-8-8OShNbL1T)E)CsL0i(AV>ktw&LqIb&IbFWNh2xmv9?Q(d@fL%{iCjLMu5@
zO60|sG3bp!dY4efdKHMyN)BJ(Oo58a?ESScYqAjAHYW*^Fm_LF=n`z({~_-~9HwDZ
z;XnMPM^+%qH6h`VX^z~oyNf?^l8X%Hq?r0$K>26Ad{+lvA$wy{3&_)nmGS9JqF;{d
zY7gYvkxucKDH^cUBmOOyr~_#!c~iy+v9OEDt18;8Af18WzU?qq#j}4_AeKcmtoP%W
z8&?lxMoBc_p4cY~`YkT9oc*~+A>_Tj)%S(W-`463sO9BsUHb&#Q;1(PBt@5UxtZUO
z#vX+l&$%u`oztlGvIc}6CchTakO>@Vwn}eS5Ish7KS!La2$+=O4UU1t9`Y~ehelox
zn~#c}TsBi4-9t#?kbx3Vr~m(Qy>EpjC9MP-!j0Y4PYx9bj{PcJ_5oLaZ<Y!tW381&
z-?eYZ*U|>?D69Kj?By7iPy+ygeh!L+nK<+sV;g<UyD3ZT7ZvP4<+Ieg`x+(?utYB$
zlI&_*4=>7yOR7$dZA@ib<`7O-%S*V-qIZo;$mF^~ulEl)FO@*mzoVmd<0p;{oG}ee
zHgalvM^3Cl<pJ44nqN{@9_ofKdD1#QeyYjQfP2A$5GR_oce&IqkJjeS`H5RC^7%Wg
z$?)QCLBwFTM%seQK`sIBE3JZtTQREv7RIEP2nPZo-n0}{(uwm#504KWG<5%vy9;12
z{<I%+W2~mu8zSW!4!)xa6Iln6MIH-VH?Ed?oL;7Gtj@RSO{<AN{8|<->ESsbf6-9r
zgFeTBwCv9t>90G}+Pij$UXEbdy8sAUD4fopqVAMs41$L_@5CHKFS^TJ9@OMf#J-t3
zeifzucFbcpog5iV!Rs;hFN%TD)eT{5Wf0WfZDMf{EF%1xwSPff460;NyraSgzSM^f
zMqcj9`mID+byi`FXA+oKro_)B@OE?)t6fAeroI7O*b}Y)n!(HrM@bT5>tCcSu4tQ#
z%<PIfuG8nNmymQ+v3jfe<(IRj8I+Qb2*|NwfpT{oebxh*Ad6;e7_JPqfZL!P^rCJ&
zQ$S<To^gLt55y^-Ps<ynRl*{*lp^ea4WLqoU@0(Fj?>0c2EwE!tAb@II^VH1-iGuu
zoF~yWOEUKt4S@0C6%}671^u{Why>L%Gjg4P7b7aFM#oUX?lFBrY#Jo{4i#9-yHZl0
zrj{parY!9zvKWl^D&-JerA4wNlX=Iaeb$eK3QhT%ZJkvDBbtCf^#G@fUPy0%%LCv4
z1dTV3)+S{Dk1ax;-lx(C+BP8TzPsT<h2;l+$9Xst|GN7jmSYfS)0I!KPZ0*r=?(&N
z=I^Q<dJjRP^0|PV8BY~IyLM5cj!6vyX(4bXY?yIV`Jj{u<h@|dl~cS+L~$IGcDMWg
zmoZNd6U2G~N@;G&CMo2T6{Cgokzu~vU1hLBWt_6s9&&6<jcGw3$G)BuCZo1GYu6iz
z)?l<#?N<7rs{eYLyJ_|!J1gd;qTDHt!<tATKAkx+=G{76eu^gGb`(v9h&DeC{rDaK
zdudN<zMxnD5PYdh=w%A#O1$*X5r!P9Z=YI~cB90*xQt{Kk;A=QqvOFye*%>6m)lbc
z=#`_X|IpMekqwIM>Yx+T==Bb`#|&7rIJpDqHWl6v)(sEB;1|hm4iLWJ;)&vuL%xZd
zYX8tm&1-`^Z2i<!dpfbp1EJrZr27{57ckteLv*fF=}<h!aD63d7n)>ld;piNtAX()
zO%;&~pFlza&~C@eZS%a5XYx+nsftk-O1z~3P2N-5uXu>sipIy9AR?COpw3+W(;3?L
ziBnU&WrU>u)4&mgp)?FRZlm(5T?PGcXe*3f4!fPJ?d@9h1O+xgezX1*_lix~u9ak+
zrjWe`1|OObq^%jY@NWysO_@L*rlG^wk;c~KGp?x`IC9aVaGjSdOduo$iy)9AIN=7&
zGFmXn`}<L!gH0mcNG9%uI#Zfh9};sw6>k<DYR{BhIP53ZxJ}Zsl244LCWBq<6=87R
zRR;zWS-B;s$6T|jdzSGo(5;CN$jl%W`g{l`;(?qQ+dhyrr=_3%)ES!#OvY6T0+-df
zQUzjkX79`{Q_ONGe(rS6#6Pr!{{pl+Wz!)0N2A8`DH2$l)sEJD@JbQYP0dXd(;;kW
z85-bnUmFCOs0<AeilCi|HV|l?uTazem|WffA@jgh@0vRn8NKsc;MH%N6Fc*AEN69G
zwJPs4UKQddUX1LHI(kPe4A(xNY<q(QGV1X&8KHjZp0_eGEcnX-17L5J!-(wEwIif+
zO13X9(t9qwE+$XGe+i_}Wc!6mHEUO3r}X+P6vzLwOCZ69bdIt4p2!wjkmV9@fL}~3
zcD0vHKgNYjX5L63P9`76C^99$v;{GpNG7b4<(a-BkPeG*C#scFY^b6n7hja#EDo5H
z0Ggc(orNP)02C+vFF&g*Pj`U=w)YU0ryQNK>5HMNA}k-!<=;BYn!}nz-|S!v(^bf%
zERO`q3)V%`)W$k*?(dQHozmd2iLebmwQJQDVve;&_G(n~Q|hoPrnVRCZrJi_91eKb
zqU;gaO8GAc8V3;kGQvV*QlcNgYH7Q&lC@r)U#Q}?fGpftY>A#>z=lJx7?<fhy;e}D
z2NfqOuIEFxcZ(#>t%%6#=D&t^datY#%<Aq;cUa+?68U`c90QUoofW^m3N38VX2<{G
z{!@%9u@inD>gccy0YZ&6WJH-MbFOF_io)iHzZ<Xbd%1Y2yE2<`X-)qcG%Z0$zFO_h
z_UEh`hUtx~-75EaQC4wquCQ>mo*?A(sg<-?vVwR_C6t_mTBrW#mE&2zJZD8)F?d<P
z+wkrxu2D|q-bUzgw!C`pHmR-G#|CUYuP5|R$0Oc5!mlfUi+31pvmNI%LIr74-0{_9
zdIOOf&?qo}-oO&Q2hVYRu(h<XB6`15r<LX`3jqs^l52z@CsNxE-5Sm|^{1IDH~i+C
zspch!#35PVz+CgbhNr_==5)DyTy$E1%l+k2Y;pqt9H!z+RS4E!M8(57_H!11Otnfo
zxmQqcsSk6R%7R)~1i*}m8-9worKO?4>vm0Qa4Ra2^<JmHY++bO4ikn@oF=-iK)@$b
z5br~51t6aK1XigUL)b-|>kaEthPxbq3G_E;>@~Y_C@t&(Nl@AL+2-Ix)9^P+?&wid
zuK535h!Ntw19U{seD3?(2%|BimR!Ua#mzlX2oydcZ?6ske)c;@UOl$W84Ig5Aihdu
z`^ff@!zyay={5EkwG=T*#lF(4B*Vns{$&G>NuDW>!J{rfq$3G2rYN`hWHPbw0tVGC
zn7dtc!1dII-<Aw$!*g<mL~MWsUZ|sTH0b8<P|WZfu~kE<!*rT2@Om)fl;O_P%cq%<
zlY_9SfiTrpyge_;6WI2+zt*^%0*Hy&8rJ6x0VO+8*v`(kXOJV9e@1x|Fj@z~3jOZj
zqS4|E3lNo!t-a)40Bc|tYG6@YS?RdKOoxzY{U+3+_vF;6P??HG1h4;VoL|s7U3i!6
zpSKHXpL6#WzC4V4&mNr1W7hhy(#+wSFLMj?z;)%zqqJTBr6ae<4H5|)ttb>thg=#7
z68@dHqz2vkj#BoDB`J5mUuYzWSALNMn#{O}juL4$-KQwT@J`1UPsD)7{}=T_#T@2_
zqoJBWN|e#obod(8BUkFja|wR2ak9kUCp<84+wv6ArM6eS4EGoKM!u_oqva46)*~U`
zY@<_R!p{PN-H=ncUPP$r40s>YQ{WlB+^R4Gs5d)e!B>a547xnx7Fgt)Vr2{~1x2n+
zll|}(r9P^Y=7>~?F)V6DoYu4=CwojB_s$3O0@%?U$tj&9pwcY^&``ur!j^7vv{zDf
z9tE7Q)hsmzfX|P7$Tdg9EeY<n8Z#r{F31_oDFsO^%sV6&qv-FVD@3{=usFka{e&X+
z7up>eaXY||gYU1^HS4A~7uGOXzwL@x0lf1*NeqlmwnI5=r|Avhd#FjG%v(9L7f`}W
z3V;+I^#<oC)NHnkcP{Q_fKm_H)Uw5D3)UJo6w2^wipur<eQ;~QaFkgurxT^z+ujw3
zwomnfXHsp3#zpm>sZ&)Yc5I36NBd;Z!-B3FIOOS2CtRIg0<x4Kj^AMC^4(49d8i_d
zEJfAkbB(5feiD$*dv+8ldmM|@Cki8)n~f-=fJ(r%?F?k>-S};lih*9`1ee&)a*kX;
zmBV6By>VkpdUSv4peSAfO4?Y*M~)h?t{XFuyVF#pjd#AO7U#Vn-9u{^Q%RDXY+hWj
z|M*;cE3|k-@vVtMd#gYOiq}fJTCbH#6Pl{(#n$AdzZtz1KvZh;*`3HNAHr)a@fudR
z%P{`b?7#Q~&A7g@Hm(4vv96Ge_7=eg4C25BG`yNwx7)b1wG1K5p|zRY#7Al`w0Z#j
zSg8&v$qJy+yw_%xj<N~hLuAf5In|;#O~^OIT7KbOS1g8>+W^u*#-9cT&YK~f8<lET
zA*#ikTzv<MYI%am+c4d0)pCIhH&t-vy8VFrzVakHUHimWc&c_;aql=Z5J6Itj*1Qr
zm(OJk+;nkVfkXk=w+_rHMkI}>)AJ;N1<_{)e;pl%FVT!?*AS<P;*EcQ1sJ8Cl7$5g
z{Y)?B=>I*%o(`mrs@Y@<r9zd2;=IEA+0S+sZ`{(lVcMaD;<;4;#5d7MMT%wK7BS!V
z8cvupqlb%p<EEpfP&slj`1nnXcN0JFqmn$rXEZVG&ej<0|BD$gu3<MqUP&8hAzO>3
zjjIVg2MOX96|h3R|9*^(IOE?cJMwBZj>yvVfp#q(SxPkLV8ue&&1S3PxbIKRuWkA$
zJ5f$4D6AiRFd_qg2?%tFPU8*mpjw0bHVqVF&Nrgk59)Fodi$dtXaXzIi>6z5KC4<?
zV?-7uN#@+%0G~H`m}(far@;Xast>LQS$$a!(;|$j^0`Ro_%HZMxW6MnNWD=u?3QW(
zp<s5K*KyL+`8|0u%Ccozs~q~bwkkM&FdTLW>etF~aE(as)mUja=CvmZ6=iMnt`#p8
zc21`0vepGZncWW(V#YtmXgWKb_h!6f`Ek&kRHArO{nX16P4I3VEfte^1Z1ib0?K%@
zy2e#yIt!&W1`2?*k6Qp(qSLqnt%?&KP$9*7GA!xpnXHNqK#v|$QXpSFvU_S3Lv!ND
z8S4kKhb_L6E3Z)rZo8H&XcN41Pb`r9<{8l$zVX-n4s7Vo+XeWO4pCrYY2p;P>Hwl3
zfEDf)v63fNP{Vuu#{}T9)z2`s?k<eN2KP7T@L2{Ef$SNlc0T8T!_Ts3_isX;w?oSm
zoLNud&qR2|T^7Atrj+3NJY>gHw;-v5`<5y`NRjmG@CNQhrSHgVxG}u`>?^rk3!r*6
z1MNg&BOS5X-+=8jt$v!6SW59H-y<~^r%_BRV(td4xzo;Ca?w#~D`Sp#^(w5Vuhi&%
zDYmg?Hp@=zxn2C<7I?0zMMx7vCgLJN)roJr$yp0z9XN){fjK++s?*lJ26B4op{GX<
zSqDr%OQ}=I7y<Udl>qV*T1`n6o`jwmbGva*ibZ*2s;E_j4ir68muYc$aD#zHx}C+=
zpKOhG%=Z_IS>$?=LvJ0-mJmzyc4vYVjz~d3L$q4)<*l1fTODmBCTXthDMn^Zsyy0;
z5S@-Q{@#1eAWVxOp6MWt`G(r;h)<?@u5=zgA_4?HAzox*EQE7C!$XQ8a|fu4?cZ7j
zUx5Y5?s0W0#9O|Q)HBKOGYa*XhRGPy^@AWBQ|bkh3Z>W90Ow)@3~AC@|7mQo#{ZBB
z_*xY0zwRb!qT=%8h%&4k%MVx*yL^V50{<b2m_BUX&w3ll6=I0W-b0_W_?aRdvMeTw
zLES7su`vaVik`-3^nCY+i`3A?DvWbxGNo_&a_5NpLI3*<`G?U{hM2Y_IL3cM-aAyd
zUMeDAQayFk9@@SB)`J&<kVKG6&E#BU=%0soP|wH!WdPikngA4or{>V7U3w^LQT3Db
zbUd0h&bt17NqP|y1yNgg(xsA88)k#LNkYQcJ{$7^?rF(XQUex-y#`RgE)0!PgR5Cc
z1fkP-fin}5RS;5rDKVZsky~a_-oV`cVyu=UPp6W_D#o_q6@Th*1e|Vq2zFRMdP)9T
z`#N8Xo%v^(RXDfJF-(g33WZkcRVTmR%m>p{A<TesI04snhdvg|QR+_<7%2BQd$aTb
zSB5YSsq9#~+NO{pd7?#dhvW7=wsG!+N!~We9i!DY0q0ytrq$<ta*?z*_s2evXjkgn
zGH96gf&Wlq3YnIw5oq@ifjLZ=k}$KIBv&K^nhr7+sDRqN<iBdV8tI(5vM-sDChmBg
zOezMOQmNO$re>8&Dr_`_4^ZFUwlj{W@qwn6$C`DVATLkwBd=fc=D?^CaKoZL`IMqv
zQj22fM@uP8IsL5M?ovkHPiI}GY_QiHt7B|MdF3xLnwuqV`fS<?v0%rMM&*yIWDPUD
z;+SEOb7KHexClpf2(+ev9Fu?>9afhu;bN!f&3#0sr#s{qnCg_JJuL2I&&W>@y@Y2-
zW5sZGqX>+JrS`>R2odK2{n8?<YhZJzfsbAQ2XaQPiY3+O8!hHqwhJAw!u5ypgadub
zd`)UbrdaPj^|7sl_Ynv{ka_$-YXu7bgq-qg%8j&n41G8^nA+0Mr98SuF0QdlKLH3_
zT~!N(m*YwL@#D;|;AiViJa!=s&iHsRv8mQZnulF+wN;R)Dz2!RM)<Phds@cTjgk;s
zB}EKviM+jCm1-8Xe&8$DV;xu$b*GC%ab~rA6_*bdSGO&aRnLx7wH{hS6;M&M!52T5
zTfm@~m>@$%7Y#Fv5Qc8ef<KL{g*z97F-M@sIIynMk*PYE!4;tjIZ%uRg7q`|bOvVB
zzkA&_-o&B6qFwFPQkI56qqi)k?NNlD#SCsLhgmCdTA`VUIw`eY`1<41V~Hx#3z56m
z!>AeyRImr%skd<*&=mh?v{s8*(LsOuRs0RN-@A6J0tT$*f6;Ev3tG;5dNdJlo)<z!
zgCYpUU^%`)S}7a9##qdSRMKjbQl(ZS5M^)}XZSf$AO|T5v9sCA%SE^sB)zC~OS=x+
zuGJcey?yZgxc=AJ3^B&`4Wv~70bMpcYD-L}k={S>+M2A^&V4JCn#rQg6k%s4m4u?f
z_S~9IBN14;6zx7&n&lZmb-q<C5@eKb%XolYsLnkY81PrE7S-wP`G=r|EhebC*PV9)
zyP*Yu6x&I2{q0q6T8&uN@s@hARvCbfh5SHGr5CU5==3Ok2i;i(W5Lt=B_a$F3>*`=
zXN}58(S?Ww&z28UuB&&I;4YfU#mJb$?Ui)Dwwb_CL*QW6e0+-SkySwNkx81-&@YOw
zK@qYrM&FXd-%&{efgAY1v0p>Tu9e24ySKs=_Jx)(uQGDqj-fKKu7lCm40v;ddDcr7
z=f*!s@78RW#Op4cxVf7!yBwqJCD1EwYTd*QkW}ekOB1{i>WDsv0)iy<UdZk)I2Mam
z)C0sQ=+nMg9Z@!mF4vb!8l4ENzfg@>L!gXWTepzA?&%=3bIL;Y7<%!B%)05NEa)?+
z$Y?S4a}kjz%QFxHGv|KvDRL(qH-C~dn)u?~U~kAo7%QjR2-yf*>A~pUWslE1uFlu*
ztV-XVz{MzOKVB)o?fB``3aNFG8&qgal&R=-0>I+goB|4K9F<?r<vvd>8BmOVaLSYi
zOJ{?XIpbn^sZ+2PR7K%x0bw*+h!f5BURjraaq0U;o!sV5*mWkUtyHp97YyVDuK8g1
z+)KvvP^(OMTSmlm=nr3Ks3%rDM+DB8%?1UA>F?gpd*H}M(Pq?R?!7zyyjK~8aA{C<
zN#^tM8#%^=28JdkbhhQFThZdnm@?iZ)2^G|Li<al%^Mqr{OBi%=WJAvLbxP&atFHZ
zqlp*!xx|;1dfnW$pP9)eT$dLr?3IH8a8VPL`Z1>x5g4_52|HjVhU%M(4&{hCp#LcM
zgb(%kMGUX9!+v_=@-Rv;9No^MaYL7&rmBH{Qlew#x-Z<NthLg}lney37BF4Z!a&Dx
zZ@Z2Ei3ih)Z$V@H@on1-`!@3$#|%U>S&#F`I8^}sZ&EUiLWy0G*(03D^6z{ysuJfE
zSu7l?L+`f($yDQdHCi-kUlB*#S$N1H;4IqE<C^LiSr;$3vww9N!D{uA^C#SAr%Z95
z{omj(ZNZOesbON@L8ZPi=8U8|MSW2{yajbrz&_FQzJ@yA>vrm1d#-B#)YfFQw;m<B
z<7iWZ_;5RoOR2EQHvlq(YkL4hFnc6bl^Q7pPt5_UbX|oEJ;)>@kddJZUVMEx_q9T~
zizP{N5>`Ov2m%PR8hrakWPX|?uZSVNuWLgW3>07zH?emlW(lT0zWDp{@<MVn1IZaI
zQf=OGtM|<JX->|$Xb~sn(|Gnc62_@t+@OP9EwlKW(WjK4Bqe19-Rh~#bFud46r`B<
zdHASB8ep8=KugSP*ncsNJh)z@>kok~R+54zs!*F-#l9Od$u8@lIelG}e(2ZN8u99B
z3jZ}_IPD#?j{Z6_3nJdV6kRD;JrrIujvW^SSo#!*RjONDg^QL=4P5B`dTDK(Isbkp
zsBqIPdeU{g<~>|bM=QKG=oP580~%8rw2)x~@hi=oKE>T^vDU5Wv4hDukvaS5>2rDj
z4k|)(T#@BEdD4oZJ@w->t2PG<YW|O3^Uz0TT`Nl6k5J7X1q?3`kAVAn(?<1b_KTG#
zH72lkLilkIxj&n`>s|Gd%5ZX98yaDxIQUo+y(aG@Ty5@aGHlvqwc*avTbgvgoVRUj
z>~v$5eSOl~Tw%MXog5JE0uxVr5*5ybL%o0RZprHG#8z|mtI)31-Ro31zJ^vU5^79E
z7|6EvPL|rh$t67mti8v}I2imRxG)He&UpqRl9PxPC`_UUBg|~oOeJ#gjuMn$S2k-b
zd3FDV>6kb(M8uZlM7JWaH*%Z0NhCthODe@WLp&`H6~1Arh-L+T9M<*v*$rOr^jUgT
zEIwDuohlSvz7bj}>pineOi1|{8fg!XbA>|~czKf&k2A(v)DmjRP+UB%e8zn?j-h{R
zOVh9nMkHx(Th8r{@B#<G=Jd?JSRrK|zKC4=a6euJ7n0CQQJU7Bpzi_svPSCtH&&*X
zv*Sw=fL^mZ^uTqICLeUPJFX<sK{ovr(USe2$I5A;dv^M(5^9?ygE)bgx%=kkcTXdj
z*pF^Ig1al16`W-Yn+uJ~vohO&far~NaWH41t+NpV>xlSU4+ZQKb#D=DE5PKXmC<?M
zg>Y%&w216f_fHSwVlCBto|{<`BiD=SuxLb*=4hEsKn&2P>pY?C$|G@pwq+j)CBv&0
z%E!YGms8R!jMu6PzcL4?kcx{!+^&on_*IDhRShAeeWu7b$PA5-f&~`ob{fKb-++IX
zqn(|J*3U9o>F%oH?(1f+90=>FQ4PKFLD9|8JKH+l?<h<OZja-}>4x=uHSR|g$cWCQ
zWj$KnGEgDscUev?bTsqrtsS^>uug>@5BxNk-OdO9;!fEFpr<J?<-gh=BeZ+(5@MA*
zKgG7hE+-G#sk>qPM>#T9J(WS}2LOeG#3^`U6%<JqL{wl-Coh8p0tu<oREc4enE&bO
z1u2$yU}C!67)`rYyLL^g)s#xz6E#auaTYh%;;du6$+P4;IcW&eiE;)A*{OjPjgQG0
z(}Ryi^QqPBbxGEeqN5?Vh(xP3kBS|}zj8Upk9=QOhXWfo8zH{?8p_+_A{Pl7Lo5Ie
zymAYo?PQH9>^KR*Xf+(d1MRT>6O#@132|TUpg~w-R(jz5rBI5-TcHwKL?&|-5o^qv
zvZ#LP5?QDgJV<gO`r#E(^8m|zJ?fL_v~y~sdgGG##LXr!<oACqt1d@I7f&mrU*|$w
zd)}MBxI=m=3BpS>FpsA<Aw}C6Q*W^EV0jTv9nrV`SngWa&M@yqo+g+R)iI1kC62u;
zc3TC)I`a}`Gp;2P-+aCSO-uY%aY1ioBr|6n;sqV4PX`X<r_fNZ=-pvkLaq^tLk*V|
z{`=f2C__G%R&7!YcJvH*GY@-~xjAB4<u&T!V+LPT7L02d`RB287iHYPwhS_3HlCd3
zUU|+VI=lGx(TtI-JMcv+P_I)a5iD-^vdH1jtd$XvsFWMchT*`<P?2~6T%Qn$Q&7w-
zs^c1jVb~TZ7pqe<+sXimdmtX`Y?O*-%FUfr^j}I{8XtfSuH^5B#vX4L!7-s8N}k*6
za2n>!#Ky;ECJv_6Dh~%LFfydnfo?`*QOE#}QixCCeOJ6&*;v^UNRS>wIjN51!0J1O
z!s+w+!78-;nvKEg(?NOW+8tA@9ffkaTkYI@GiRub{t_s_?OQoSgcqT`hq1D)kULiI
zuwk&?T_zHE^L>ILG$5rZMh0GB>1-nJ3?<z^(ZdrKr{P}!qBFBBk$W!`xi30q0J2xn
z#Kz%56)8D7n7yHTqu)YXYT%4Jo&MM-Cm4K*Sf`1JtzjqWC!^cyS0wFJmX5gdB*(VG
z>VS)7q->~EjmVI6eDB~%>cR3A5`JuUu{g%o)WGrCwBR3QIG8H)Ej;(uGGt?8L^l=@
z%DugrHkC593R)&<uZd5#XAr`o3>iKUMeu#P4Y^~0dEG)N5~41t>M#4+kD7}?ylONk
ztXqHlm_q=Naw~Ca1Zx-v1Yy09_Muw;$S%?K?^{}DJ#Gz1FYmF&uWAL9K<7?sdK99H
znEfgKA3wrJ!{kx!8!`J+ORHb$ZR7iE&<tCBTVz|?i;(dTDS6gfnss7hiJ}g55={Sg
zXiTh&4cw7)ty*UQS;>LFy0__iOyHwwuY3Zf-=CB3n_Yd|tuyt=SU;z|fy)(p!VOce
z)K8mXB0*A_q0TSV#C;_z{l;5=pW8T{>{4$?LwkgQ|7Sn>l8p#|Qaii6DBOJZn#aAZ
z>X!-Km6=grC2+S&jBT7!fO)*#RIBKC5WN^rH`WuP*63i;S2<?+S!mEga5SZq)xd^v
zbI}J@=hTKzu&eo$)DbHTXMEm#D?)${SjBA5Q_+=R+QGuSS-hE!B0m*!Ie(4PznyzO
z1<TNkDWGoMl&8I0<IY!<lMioIUkW;^SRYmSFg>S>A$hlVL16_MlX=Q8OIyZrD*=tt
zt9sDZr9TUOG9!Z{x;;3zX?{fSnj}k4qMPY!PtdY|cH&k7zOQy3HL?#X!-P&116w;B
z9TBB~-S%$QLja0@{Wtz?e$`|)tOphh+*<<bSEt#lmb_Jg56lk|lON+r`B9niQ}&G{
zMf}kEfouopRrX(ve)W$zHz%Xnod9snF8jP0p)fZ|w#gvkc%pqO=uh*6v>MOrZYZ9%
z`__5m#Xd^|?=F)={@#vsaEFH+1K&J{a~<QcY<`39UF>65@7j3hUMQU(GAcs9Jg64c
zX)9wkK@L9McdCu5kTnOby-}8EJ9zyaW~4)yj}e;ehqFDiCr6vqbs;b1p4u)L(=t?f
z>tAj*`HhjdC+)=_Qa0^(h`!@}oTd|XZscJ#1}P7UX}poz@)Y8o3W=9H*CL^<Kx=PD
zW3Eq74%NLzs3?2NPI7BTtIb2SKr<*W+Ef+ayuLfnR}aaS>(6M#y*}O=f3m>%bfMPM
zIjUMQnA<mu2Dp6WYp{6+p113)?4{tY^56*NI7n}RoxmRM?mg+mqGN-HTGfD^%bS2B
zxmOw0B`e1v0bI>|P@04_S`s|j@@a}9X_F|Hr(x28j+M*}N^O#hlOUlSnR_5(rRRO4
zbs$&er>O?_2z^#=$ThcA=pc>l0m+)+jhUfk0}Uc|lr0s!>_p$;JXhRrk>t;Pjh|-T
zg16O|hY99`oVjNo&`t~GTRH)oB?%0*=9iUm*lLa*Wk|EHhthAh7EAp1dfQo{kGqK~
zV6jnwcthopm5{B`@+BQ?@gNU2a*2h~S?#1os%G`<Y`Gi#{EG-~qR%j#DOX#~;yAYF
znf)=?QErQX^aN8aihMZJBcn0emwo4H)q`UCi#Of75hP2m>l|oC_-7m%p1YfbF}Lj5
zLAIA;oJV-x+o<SRQDDmiY9+{D;l{lWBog~$!FaGZ!qJM7C*4@fcJDhK9M3Tuxe%~7
z)az&h)$b|QOM*V}M~zz%cPA+a-VwZv!}>z%gQ%NLNuqr{I0Q|EeqMouetQ?Dg7&yv
z?2eon?zlYIfmedtUAI;Kx?wSBK=JWEiBH+?2@?yGHdoAJ@Zn&7bFmhtqS%{ytgyv*
z(7X40XHKV@F4D6bnXWquGX9#EX5`(djK@i*pd!Zw@M7DnK0YF?nq`wpmh+uGqzz%*
zIz0n}?74%A-sL2JGc9vm$^=R)FWx+#efvW75M_s8SL@1yDe!e5FeHZ>Z;ewrjm-Tw
z-GuxZ9p{(k9*}Wbiii~<?9211R^$I;zw-=|v03O=>^#zis*o5(i|%nf1zSn|m%!m4
za}ZlCxCg)kOqYGvFEk|p2p%jy91TH#%g{6l@D2HA`dD*1(%@v+*?!N6`k5XSbTu)S
z*QAk@@+|o$8qZ*>imFg4P)xE{$!-j_%tUwS_U;+)e`&;<k+Af$x_DM|s=d*m13E0~
zA68BW`=rkasuuW<c&TBU27e9ljZ!G)(^+!|L=jB0J7p_92WM;Rn1+rgn91W?w&2}(
zlb=<A<vA*f>#}K%nYQr%K;ZskgFGdI39{eLeo<=Pw#|DNyCPbG_YsVSwF8@pmJuT|
z%#06kwfp-7^}B6d0RKM#z+I#1#$!c+cfOu8^CT6f(|P$1`gcRPy9+hmYLZN(&@82y
ztOTF~h&=@I$DC!&j*R1Jw#<IIogel25?`=e(lPvw1krI#zGebh@K_($PW>}Mtw{wp
zDhG?+)<x-MT4k@sfi9&R)o3$mDwwCbCeiu-?YAnO_}HW&w@aiZ0<7x=+A-P4L{_Vj
zE9y;&q4UN2U;eO-{PPz{i4+oJU{`{Fqx4iewk8+-MyOuRr+CaX-S4Oaip$X((4h?o
zsNy`2oPN&+G;QZJubkT=I~Z(myYlf@@XpH_=I}UZsFX;n={XpGVo4n11>dBcQ7|FJ
zqD&DaRy~x`5^DbWGX#Zi2=TzoQkFH<Vt(lyqg~wZ5x#`4Zb0X!=ga2qi0GO`&l&V%
z!ghN%H}5dH?5oKA^<`(9{GEYtWFI6{Z(;y5QcIH1h*OjnzL{pdWCb{6UbvI${1~HU
z5dD{mYA65S*&BK+g~$v{h3=Nbes`O{{|`MbA6G?h4I0_0=r{B{1UrPoZ`6X=P9zIB
zp8~6^Ac}7QDGNa44cjCQj;eB`_Dfx}5AkQaZH0(#_g>n?3o;X+t}2GTx^{_jh8?v>
zI4c<Rw04+#3SWFxUl4+|VG<FK`b+w(QFx?AnjyS-mBL@ZL{0K10Updk0k2tT3E$y`
z{#&?U5S0Bz8==dA^0u3<)(QV#%q;QR9=xe~+1=_4vEo^O&8Fv;JYfj<{47c#>I9!x
zsiRL#2wTl7bl0$RbQ38##=Mz_5Qe>oz|Y`?Ob+1iW3sWEqwW4d*P6JzzmbQ8ys>}K
zY)UJFYBrq$<q5`df9&cAg5@$$-P&kQnDvLDSJX1u66fbEX-^vfHnahUF@j+7`?6m&
zeBMO1B0}QEcS2sxj+s1N)v3h>^su78=?JG%a%|7=duUSghvb_5zU8Ioqf<Px|GY)L
ziF)~bq*Oy++exj;yv8X;_Q<?pvq4#cd{A^XbV{32>xV5nP!DhUs<7^lZ#xqYO+Lm3
z)~$~28I*}Zc1*%5i_o~j_7R~^%McsQIt$t4889LU@}|)7jRF`fMj!(v%bhJ;Sz(?0
zE<?1-4{9*%!yR??i>r3Yb#o0=*$Z+?SI&yDo}>5|1tf!|DRD?XQiG>Qr{JHuun3D0
z;^~O4Y_h6>${FJ&+D%Q>znYUYjnYbmMcP2ZR>N=obN8Uf`d}5WIw*Wyz7RZ%Y+DtF
zKr{oeM)Tj!LJ$!Y0DAFC;G$xoxB>h;GUUxb97=ZDFj>KJ1%3(|WEpOjCf2}}Sg#)!
zy{~&;B*m%p!_2+y;5}XrOciZfS+QcfWJcyPoIfCt{79}2Ox2~<nH@QuXKcxHdz8ht
zGL}Ai^8c6aB4V&s(IJ0ssLdn&-UglovYWgthXniOb49H$>k@&b@z035J3@+SLC#-Y
zhu=Y)5zsT%ay)^SS1abA*L7TN4oBLA+^gc1L%5&y=EkQSiRuJqH!ueOMt5xN*I>Zn
z(>e78^9rYiGKb}+wMZ0AKeUP4YJRRWH#}TvWx0F+!gVd1l}IGFDO2#%k260b%J#?8
z+>|!~6B||!D<aMjIAR>CR2qZ7P-f{Z2g8vBNq09&Z=m<4M*Da^6o-jGBGkMBMc4>L
zFP12YznUknt<Sq9@!zd6;o4fNnD^06`8_ByMXL%%hR}kat_?N_K4*UCox%r}<(;uK
zSJy1e&P&FxA~-M3KL5&Y#_N^Nj*;Wy2%$_>fL*DKy$cKLVTUC2&<G|HbzZxB8>*l&
zX$Vq$fH}_%yb#Zi^~$yD_<^Qcz3DzSi!KuqD5c5HsGeTFu4Q~_OcN0)HZJiASPR|R
zAluIN*1y64eZCon+^&Zq0~@b+PH$N(46p$paJi8~(VRu)&#b5cxHz^)hay^Ulauny
ziEV~Tw&ldeQ<E@LN4DycO5RYSiD-8TMwlLW!QsS`SNsO&n?6V;oQ8-~e4~{uMH*0+
zYxzi^fK)r1(w2hMf*%tOkh&CC`5dz?w_V?%nDNuRu1vBkFaot@Dl)%ZK(Q3`9FX;P
zW87YsoKsz+K%~Ia-GI{y0@bzFEnH$hey73{t>%X6$eNqb|6dODt6>H)#X|kGo+hev
zDe9MDRmOkt%OTkeA=Z$lla3FEN#nUkJRi2O`#z<)IGC&kZ7OLsTUfUNwo!+QBgx}`
z9~*f}7TnU2<&S-01%l~MS~WjQPEny<)DaY11V{$^eX8r&?GyE&?i)ZNEhJTQ%m0JM
z2ot8aE-~)!Y->uP7<s8`ECiF9{#%jM7O&oU)YO^b3uXM6+^04A`<l4m1c}j?s$w&~
z)QDGS9**PqmCFr`emY^trWy#@naR2EP+SC}*6D%I;lEvgxXTfFmz$F!H^^lGbw3o(
z?y$TbalB=m>H@0^OB;{A&^*ZZWG4j9I3gfbv8i|O5O|qJdLBbSmPxUZJFq4J_z>(y
z+?O{Ca~}MHwWq{--*1vW94I<Cy@{dq=vqWPxU}?MzsPVp&O2u)+o@;VG2KdadJKC8
z*tq?`b;TylNJf{)+_ZC~S$3YUP9ReCh2=K;9}liCUv9=fs@-I5bLZOBU^g(AdtW{y
zE1HQ+nawKM7dn;9*KUflwYTiyX2IKQux^*dVad}baET6p;BjHuxC~Ihlkhc^3!lJM
z1-;|R3b}ww1#cRDRodVQJk-zeV_ddPj_$1rBb-aB>w1jHfIO>N2d%>hG&#>NQIf|0
zIEboqQ;i3%NqFlSps~~9T$I<Q)vN`d<UBOcYCf>93&H(FaQ1_`5aM_HorAU9fkq<%
zPic16R`ZPQkHj+yCL!5i%eiKy%?(+nV%bLO*!}UgHF}k?1rr7^&>xzq<l!{@<)=*o
zdGEEOzCQ@7ZkNrZr{Vn+w4-ZL>OBeDzZYGlZxK9JGRw9Ozjmrw*=I83SAvMLYLD0>
zgeYBuI7>r^N*PfrV}(TJ)|+n?J!IlK+ym<rk|0WJnRwIog`BOkSx)^5)zU<(zVn+B
zG@I;AD|*|EfRuEAz&^ml1J(VuZ-)y{Ih^3O`Zpzbig|)Dtn1{JfcHL!?!E8Pv16DT
zx?lh7f{=Kw_VujV7JMQ>QhT6LW_g;m@C<pJU;PG;hDIQ66%{Mm)X%D(;EmE|7RI9z
znv;_RKCN$bumEgemmRWO4yV{(*9O$3U~cvkyfFy?WTPKIVQ_WmrjCX{OE_H6tq-+I
zZs)hHTk=K*^+ooMj63VtBE1bSE8oPpDv+%G7}agG=mAW98BaDB7no{4{afv%gJ0s~
zUh}}wQd<aDREYIhyPhU?){%pCLRG{SRY=!t&tCX|h{KO54XYqRH2T)u^s%G-$Ni7}
zt|OaLb}Uz4|5{ksv6u#s;IRy5@wb8A8sAv=g-$BkB)qJv3PZH`gHgrQU|<h!<PG$Y
zpMqi|Q{@Ijn2{o6b*L`=ZP4{o*q(~Azq@O5`Pzxwrz3narfhc3Gi7OfA`{N!#EnqT
zZEnviJ6S}&5Gk0#JY$Kz_M7Fn^nMc}A9OxEQI-DVcBI9^@ju2yADYU?Ziv?=saf$s
zAmF6<nuWRBRzRSNf2khv<!o+70fq;H=R(k64fgXGic7zQ6cGVu!}Wf@CC#Eqro|$m
z>2;V{<rR3<eF2?}-mm8||JCh$%Pjv*E>-yHm|tu=+U{{*g5^Gom0p$Rm@R6Kktf``
zZ6Ebdzx#)&PJ*eRO}M2zer^jqEW<esqLl=gB1qTx(Ggn^JrmN{5a<s6(wUEqZNr)p
z>QjJLqUA`!iRe+b!m}&&Q)Nlm_F%q`3VfUHsM0z+kL=luIA5@2!<4J{GGg6Bli{4<
zZJ^}Pc|O5vGOvhS^XcN$#cUzoh{UQ}(C-+ZfQUr+Beo*BM?z$!4~)6PiA@5vI(zW?
zQHWM~Bs{ZulpL)S=IRA3M`f8vg`inw-pH)}56|khwZ>GIQI`OFxp;+5-chdEG*J?v
z<w}m`-3`XS+4Z>puhe{~Qd-r*u|dwWX3b{&$C)!mLyJR8EHv|8%xtxH_6=jv?V?JG
ziuEtnFU&DS0Jh|pA8o6^^9LtxZY;VRYXEYONJt64&@cHBRYKd}ZaaN^i%RwORI41@
z+i?mMF>?H8a!K?e6F6;8c!;bhjTWN8@B^&3gxe5(WsWz!2ZPwsUW*Gts5aXC1O~J5
zwRgPza$$%Lh_1?_&({-h-*7N&Y}Tb+1oz`NBm?G7aAa<r4>e+FLNA)uB~gf9_xUlu
zB-zoSNL!7Lt8rUc7X{VwTMR5}m1i?rOhoq|VF;y-<2&JGzkD0YE9QT}$S#ML0j`(u
z8$qS({89wT<<mwkV`XkE$@0pHy<ZL;pBzpiin1$;AtpbAMIg}8Gby4aUNd}Xb@IO1
zIUrfv9^dnCff<`NZk|=+H<--SaB2H_>S>dJS7Z+1VlgcDG;viSsTA^Zihd#K&OvRI
z+PY#_83Q8G`T0mdW<bySe>^ED2e7Fa6sZR)XF&6I&>%h_H3x0+pNC6_YU752KLaG#
zL%ALgd)L?L8^l4VN66>^ZX;KlZ=DbG<yQ?D$!5dT4lxlDUoQ424s@nEdJ$Uxu$lNI
zxYG^;Ij6{wh#N4LR-q$nfr&-5F9>jn2#lDVDFdeJb9r+K?SiS&X$KdgLwDT?2c4<c
z4b>^y>FMGNP~?FLWA|t{sf6F}8&>tpTjkW=U_2#WXviY<_rRpbca}6>$sR%Fq{ms4
zbg8M!cS%mt24Ku)0ziXQs!)q-?&fNkM!d<J3~7{*Io`<$ePkNQOw0vb`vps7hDX(C
z+U=XDy~3fb!e7P)-x7PQ?7I9THJnh@<{eOAE<hi51VG8GB{hFnL$P(=`-oz*or49*
zq*{mnyp=MPoHYD5M|yrp>$&r}nGO7JZTl#Szbm`VI`5GWs*LXyKUf_oJ~EQKcc-tG
zUXEciLNOm7RJNp1*N#nT3?}=rhz4%4e~Ob1c$57IY$;w*k!99b%T&96&91VGCFsuN
z(AC3{M~DieqfgSOjr!{(b*@*iy0Ra}&%JPi@H(=U4}&7u{exN5B*0&uEQY-tw~;sW
zmfL}-8m+D?)^;r*F|PEJ?NYc!qE+pdc_0LAiOa;uy_D(qG_z|iiepkrw$+l&*XaYl
zs*dXBlY(EV$-qCLfFI4l!tKijW021uGrxbuUA;*2Q1zS<AW*kx-q(ZD%XaL*LARwb
zpFbQ<dV6bGdKWqkF91z9ytwN<yoG;~*z-xk>vFFywa-^&w`q{u5xw9fu7{1vi%wNM
z+RTA1m4ubw1?4dFHBKX4Sw5^Zw<_ki`VvKUi0<{PcY}?$h5S9~>&+rvXwK?zZp;jz
zb3;GD0)?39Q?%m$cqrYD8|ZxEydoh!0tr10dfX<mf-=jnD+pzaz#iBbUI@t6p;oou
zjN`TbD}tFhj}ndv9e4Gtqe@;E2lVW-;bA&hAk-yJL@y`I{Q<aE=qVF>kx+P#)|?8a
zg}@$S7W^!z@|prrt?a%&p<jhi)gsi*kB_4TDG>~U$p8c}ymF^&T@Ye9+*qKG+2Yx?
zaIX8W;TJj%pdixqHFa7t*~2Tds{iO7LN3R8vGaCy=Vh4VCR~jP^>|>c&wDRJ65T&R
zJbcutBX`!PR`n8kdMZ0;G}909e$Xyt=_{mrq_HJjdBb2(7i;+h*e5T6<z+X7pwp65
zg-?zi^y^7Gk6i_pC^rVv>u+=d?Y#zYXy6vhy34FlhT@;3?VlepjM#R}V9ho2`0-m%
z(#m-f_oNQ>=&M^DcEcGTG91-ayyUgEh-<05o@EIX_>)lad;d@!_>;0CWtAI)A+mZU
zw60BsI2A!M7l7AqvzvPZK6MoYpQ!ZsUIZ7rboQj(&`M~sx0S{fd{9Bp?!VIn;9|Nh
zzGX02=Ye$E-{T#i-PWTjXWxC_#B}Le2|M;UO}DQIN6&+5Y6gxpSUqC0&A-#({{~zL
zJ1TAeH=zr=hp@w%p814kKU=wBFso$t@Ia|XrbROoW+%(7ORTktW6w+eb<ZOXQQ>!z
z60kHUM|L{1p9Z6?BDo4_puE3Z#R6L^3Dyjf$97}$_gV8~w+0W<IL&1!0y9###Mhlj
zmTO5>_~g!x>gPcq=x*r<8Ia`p0xDvqZqRLaurR1^!ufc1UjJSPc8nmBGHUqQAPEbv
zIzuVD;;K^phXyx}(SXS<Fw_-c)B>8j7Np}VBZD-3&UR8&p2UR>xJMrST-r;2wgRn5
z_{WmLm;dX!vU+2ko5Sj>jHwl1S-5XuVq*;}GPFy5up*iv!N|aRgVx(i9&Il~yD(E(
zx2mEegKfbLMT_$NKC&D}c)9XqFrFfZ)%^03lV>?Ny5+DEPm3XERrW1)zcYof)dY@#
z()`Yvz^jDE$JkjinMmjseFNt5nQ?sqi($Ms7wLLC6XW3Eb%<nAvDf7Oam|uN+*&Up
z7`^?k%vC=Z`d-Pvy&q3vk0PW_wX1a}xYl{Nfg8f6AL-y7^OPwXO)~apT1#XF1o+P7
zi9%#1`R|pOLjX)R`-FU--=i&&IjPaMTKj7uMSyX>R(%}s`tOnN`X8$EYqUJsg-m9c
zm)XN!k;%Ja8fO}d5w7O26cD3Ap8dSNKg!Lf<)G0hr6Pl1;q(*HxC^nDK7VS|&mvb}
z#Z?XajRWiM_FX@zy_d87f8oC=Yv`Fa2EY8}l8Y&$Fkw8nc=_c>Am?o<<-EFPxY%Vu
z?Usf(tXhI<q6f8H-UE>=UzLXh3K|SJFHi_@zQPkA!NP~2pE8KNn8V!J9|C%g7j~wX
zqY1hmBTRAa{J&}&2BcCbB35Fiu^$y~DNbkwt52o^u;(dRVh?FcSI4N28gB?SU95W=
zb}*3*&bDC#OE=!o)&KuJw&M~j@@A$`bZkxZeSxu7Ct?o|G0wq$TbEu=KR2yOsL|VN
zP*|Y~H@Ir2K6Sih<N03jEI*LX0gKx@*xo{BMoIZc21x8EQ#1m5*Cp{O$c+=gWfG4z
zln%54ZMe%`A4O;2HkZ{+Si(XH6w_b9w99yrWKnbF5OE3EcQKG4J(P#xfXA@_1f+IZ
zE7<}JM}arx1)SFa>b4G=;2}VVt3@y;8@K6+AJ(outw~?BCcA54=rb#U^H;P*pn3CI
z?uq?qxnhLLgm(oBz{c~(n6=uDl$U>FYAm_5T2xVz#G_JnIU!{0FU*(E89Oz^Op9q`
zB+kJxQFV#2EitWG&Q|J%Rij0xi513yi}MUmCJUh?;!35NZ$?PaUbQR7+XfGvRkAbD
zMC|$~ONYF<zNg3)%WBUVWb9K*(AtbhDzD5DmC|(M9nVxL?5i`jBtJJd#{}19gwPPH
z;{e{me{7-sRIKlKXzFb^ggSCN3hL3`n>P{6T~T?;)1iLiRP_(CksxO^|3Djr)?O+m
zj;i4a^|R6rJ$(pZN-+E{H4lg}6wib#)fj@wRCO?aoax3cwgj)~4v&Do&F6b(!0n)u
zGYkcs+n`il;3R7(*RPvzdR76@tH*UL|6)&?Any-bh88`3p#^VM)L0CAT-Q!@Z$a1A
z6B_+@z`<qY()x(V=^RY2ijpR}fx$#FG?9$?fugDpV59bl8%*#nW;sm0eJtU1;{S==
z3@KruGttjUfB-9#2qndTtQ(G(0sLX8506x1dp{8r0E(^Jh;jibC)nH0z6SFSeP10+
zvM<QRFaM~&c3k^&wyclDjV4(-NoXt#LWtr+v#vD$Gs+lmk9~C-`Ze07B8-ov9K#X<
z6i5OX*ssCogW+IhoAd@ZEpdGii6;VDj;?Oy;&*oPWbOIaYRm_*l;)kt<b3@INO9OF
z=<X6>SBwr+PrpA-c|1f3wQ)b`V%1c=ltr_jJw<?9%@72VWLw;mZve#-c7CQo-D-c`
zqLWHc0EY?kKXnu-Qm#GqG2&&vJ2PN$+v%u(r<#B_2Tmlo-F@g?ze8rCBbiME7NsA(
z7KmCN!9#3?(9G=^R`dzJlL=maLelGTZeGV!SIqvR=3#mNySj_?6^ilnNd~T3{P`!j
zeaaDF$x4V$(iQSL0!>7m(FNY6X`?^GGLwdJG?E>5QC}A*!LNKZmS65Et6>bX9~-jY
zOpn7A0~HnvV#~hPUNq*`0Ba|lAuoL#Wg};j0bn*Xl%vr@{#7QlvdQyf=e3dwuh|sR
za6Ac<%6OyyOQIL_Z03T&ml&r7AK(PSi!^Vr=16tXF`rDpnS)eL<ea}VBoESWZwLJ>
zu!0-|vj#`Q;2Ju3qSCMcB&(GH6i(@Em3yoei`|Se_nOwwU*;ALGj11bFtC?%#=(Vq
zMK8{LeR%=U8wJsr53;B;)YiTYhb^_dML2g<+sW}X=8@{Jr@i;3<8#}i&XmrT7!JdF
zad)t9W|epLfa2rCQ6q(FS1FTDfi0wFU`N6(;YvFZ<0cndko>0q_1I-OxHDjYjK;+&
zlIkZUpTmtnixrih(X)}U3nt{k0j6NNlu|m&d6Yx5HMCN)VAKO@({+WtLIUtxdfT(h
z?zR|8-=Ks%oo@6K6S^oq?EPJ4)Tr}>IBIp4aQHn#Jov`yzOkE^u*&BiKl^fP5OOFj
zM1y^wF-{P<#V0mcC7Kny0-)k78S@;i-TL7@0?<7cHkJfK{71dsp(7sCq$(_JfsXNC
zse0;93S_xY8Pbt!<rmBEZ>bqV=q;Qj8oF6EQWvA(y`Tsfp5S!0X?k=RV9u;SgK-<W
zOdSnmYc)x&APNiLZ|^(xRve|%6TOf0vPLEdeUyUEAF0Y>680d8%oGW5_@yF@6J>^Y
zX+&O}D`wDJL|rt!+S=}YCdV_Ta^lR1L0;|uku52=GLQU4#2Gij{f%kLg5V??iRs-T
zDL1Kc0~Nb6GCzpJUqmkSFIDv6Fdi*6FX3H|*8UppPKNHwJWhappS{3fg&rM-pW!C<
zZjUL_i8fBw$AbUe5PUW9-l3NizQZ}zgp(LXSLgk2#&@V5CQlB@6w{O@VXGHePc4a<
z^nD8Z^Wxw;gnP9H2c5sJ1|&x`p=j`zrGTx#|5}%RSi9{&i#yI1Z=jJS(JM+ZJnVQO
zCj`&r+=o&a9dzK%M*#aLMdd5TlGWe}zAkJv!5e6(+}zFMll4}Om8;coWdXP7P`-H6
zocOLP^O^Y83ICz*+U#4#;qt+(Bjl*Wpy%^lSM6ZnY>4HBF~3(+xev=4f;8pYy~S`0
zIvDhR?t-TPd~_D^Ub$LNNsqWL^E}>7^5^mPUC5hSCWMT{bJh#->??ommsHLBYlP3J
zL{TpJ$p4QBjcAb!p`BH2Zt(I6<7O_<cC>v`Dp?}<?>|r0OmR`NqwS!Sd&e^FpNDId
z>RHDtP~jx?j~ptvTU-2JLIU=P=|vHdbb}+N0JH%Z$O%g}!7+F-p81~F=Zy5EdlN6#
zNfa8s`R)LEtMw)8z}hwa`YunGTw|+x4<#P;N=Ju53r#LuFBqf1p}M0>{&;@Mu|Y#c
z%T0%>AIG`Si8xn5PrL6)7|ssiPBdR@Iy!t;`S&TD3)~CC5nAvw(C*k%!kc*4$i--b
zu$3q}O$?oQI7TYhJG;Hyz*qJvWpJ{dS4D)em<PcESxDeWlU?QsGw0;jKwSOB28=Wa
z(!QEwEJ5R`8%wZ2mr$`onq?g|`Ru*U5?Kb6>?V`FiTma8dA>mN9ZF~1%1yjJiv1Eh
z0iYtFetJ#-#A>c%nTssms0x~${in-K^oR&g2lD-VU57Qf<jb1(--mtt$auvjftr{6
zsWF3JsWc{{q^c)PkAba_gfrEXvvhFY;QwzG1*?b#c&+@>$BQ1wFCT{il&j*E>b!34
zzY4#ZHLy}7lgkmLolz4UOgo)J{o9B7K14)P{XScj6dH@O{9e4!$<w0SU>TAfYIur~
zMJynCiCI_<cyDkG9!n{Aw|RhV0?@gM62yV}OpXpK;@oGIE;fL0#Dreu6JJEIMEp-~
zl&d|Vz6qQU1DP4C=168QABv>&I!3KF$ubCXcQcb-%uef0;)of18WM7khYmtNZC|Se
zgZTbz&LwLrYSQPqT!hDJ@>tuOFKd<*6F2?2)Pb!ANgP4h9o)!o#iW75Y#}k;jW&rr
zF(M26@OK7LcnW3FiEC7g@9t44|G0>f%u&ZE`nClwkHDoCiUP%WW$t{zZ)r6n1^!k0
z<DeZlIo-S4FeXc}t2?F;X<Zl}9Rs_x*ulVb`rBkVLQWbFW`o{JA9cW3pQ&aec+X@Y
zf>G>!5p%6j*0Y&K$>6*YMUsy52jaQH<271xjIQb{DmV?FW$+so71sV;TJBgCycL$|
z_LW;yp#BXyi}9DHC}D7W^K*TeD5-Xr6?Q#U+Xal33p|ROKKbz|^HlB|l=9VLX4J5r
zOf9NmtC4#%e0NoTua8Q$`78Bzj+d;#XSC@4)z6&_7I^|9fckSY(?psXrb}wgoq#D;
zc1R&3(r!Rf7^-OA5leQewuOEZ+6F}vz=uu2xqBJy74`U6l3qxjg2v&ede>Y@+>qXY
zwK7KkWoH_>S3FTaiB2eJl&(IY$BhJ3IR^kPLC$A#3*8$N#N*0&gsD%t!v{$$C*6m{
zJOisQ(X3Kd9Yr*-W^M)7^Y$=?GIIcey7C{#z=~|h?xs##gNejb*X~c03hIny?ywuq
zbnS~-Oa?{v*{Meu<dQ=_$_oe$x{K4K!f(lN=s8pu4?L9MBctlM5BEfo;Ebaq*3X~{
zf8Z>o#7i&jV(=ACx4c4kE(LRZ>~dfo+QQ3m$Pu2-aA2JV1*U+{(9pT7DZv0dRBMSf
z+y8LJ!6LM17!S*-;(KTooEBpqcK_B@^foDMDT@%ROs+l}_(d+>pVl=^y1}QTp823=
zAP+f`)BC<Fc|Q!NMs#O4JDqMDz`4^}G`Q^5k={7g)SCqsqU$a?@HhG8ZlpGz5r%^N
z3R?)|<%VM(KAbiGHtdWVneH2U-vH=VJ#Ud9)zoa;G_Pf9eu}JdUV?B=G<U(_)b255
zmUZi<Gc=k(m(Lm1;5uJ{@`2tZYmC@~&jI`c4Gs+CPkhWwY7N@1C4SZg{B6zI@MMj{
z+U)eKpi0DT=|mXwyd(G9R^wZYfH?o#tXII<AvYWGoxyg~sOwAj%^m7tme27rUGEs_
zKKUiZJvhBAe<_pMovT{(MB;49*!P=;+<8#G8KBM>T}mCBeiF0T$J<0`4Vl^rV*OU+
zGeZB~86MAm8Cqpi7n5+~4x#76jFqHv4!;caOarCr2aVp>T1D%9nlyPvI$<>|%TEQM
z&vqmd0;P%#FSB`@A4fkN1hvl2&+C9?V8?=zl}@c?48acV7aA?lcZ8i3{&Q=3>LM*0
z`K}AP>!8`{@O$xr%>iH}z}&=MC72WUAg#Noo*~+*?43Vf*3`C5XK$+B<k@~&?AgFW
z5T?;JWHrqYlPQomKLn(nmK+2&IWFE<NmOi(<THyPD5NkPAgpyk7*fu?DdQa89#PfC
zC*EyL6rR7WK3v(HnOjKZCYp*YQed&KC~lo~Xlx;ynCY0fr5er<W|~QuImPC|Ela5;
z75otXeVA0<k}eNq6^x=-|HIQz;+OU`E0nz&?B(v&gj&(12wLpZ{WSGK#dfp~e?nz(
z-)a>A{|zDQzH_qNme*kLb$I*6;cJ=wuucu!ho{IwbyGBJ=K|2mzoMC`yjbTtqg`j6
z+$q8cfEDQnvVV{BYXN@>+pTpmdHG+~m<<upq9e`+Zf%mb7PC7uaI%+(Vwza_k1&&@
z*)|hqIwW%)VN6@$YU_$)L-zZl`AdCWU<-ak`cC3Ub?hAQ8#{cV1(lffo+-4fW}#~)
zQjus%3zK$jERWU2)zrX(oB*!N;150$D_9~ij+7?)bJG50CUr1-msCVi-3OVQYnk_#
z2jGDVXoif8<KSj<_4Zwd0lGZ)3BGvB2|p3rH$MaD3Dw=|eXB=yz%y@*hUj_v;|*F|
zl^uNxJ|~}g2dZ0f?g!{mrQ?#T!9N4}gI3~{=;D1#?ER@Gj)kAQiY5{(l~})5upOlY
zoWWq561qm0m$e$k!Uf!3!g#wn$R19*04Go5)|4nqL}%7c=nuI#)DC!g)Mf3wfxZWk
z&Mdak>4FyM#t4Zg44~J8Y5V6*3c=jCt?eeP5);`r^XVSuxwa~dL7cLkA`#Vc+uu4h
z>!7cl%iLOSf>$o*2}lMUlLyw3irU;me=e^rGFhllm|X2;P;Z{fK3f~9BHrP^p!@I<
ziV}?u{<rG7A;TfV?a0_9a^`}>**h-{;9`aSztVI}k~92SY;yiXS2hF#lLi-dXhsZ<
zQRm*Jh%z$M-J%^^!}v|1x_5~hZvv;&CILfSq%fhAi?NL4yA@D)3ViC#EaGxtCpk&L
z48I6O{C{O-!C-gC9_{@z{MuzO3Dw?Y|D}HT@ADB<Gd<vXp=)P?M_k9_nAkk@3^D>D
zj$V`UmR}0-0G%hHMOf-dxI}b2HIGRNTN9&I(6yzbGhJsAL&tl4ZZ2It;>*_#x2QEW
z#oe;D;^6NbXu0Bv*4QRb=!lrdxkkX-Z>wWy);vcw-`bSBL~IbFoF$!7844-NSMrm+
z91S$#2R5eG9gX!Ge#qq5NwD8*IKINeZ?VbRw2xx7q=)`OWQ~<TOAzXU?#Ipud{wMN
z!*uBqlDR}D59|X03(yU{Ph;g0o8rh#dEo#L;Sx`*I%w30BFYcyDNb?tl4GERbZ+qq
zX^=qQmC12a-ZfHvp{e#bnJfl|yF1!Rcnr^B*sSDV0_iI5!z{^yfr0%sG?86%JIn2G
z%C4f}HkC^;u;hbu7TRbSPiw^i@2rpbz^^?>k&G++@L(QUE&O7jn~J-z^-AqLzkM(7
zDSwvSEqt1@*~@Yl?!>Vs(8p)|Ws62-EjCw_M}Z_H*Wu~`WYQV=>gZB}no*E2vDZ~Y
z=2#MqIZ=OmO3(P8D2`r<A)icU(Fq-{OcDWhv*p;Q&<L%g?W+}SXmq>cpZ~Zg>1)_$
zsuYKES1!u4B0ki^rHn0+U`0hIO3!+Haqheq&t7@8uucE*_=#^V+mS~xJej(@7T+%P
zR<~i5c>X-WZEcG>lk_Qc!ApD@zjXe8YGf1e_jtmhUfiEl=MK9VX98S0xZg)EGZI{u
zlJhGES)!Y_wm_vg!&VNZw~Ndt`G#ejp$PxTjyTh#+yj3KYWBUHPCDUuI${Wa25PuD
zaM*@X`z|Sn=U)NPEAvxJZ`By2+a!O{K>|1~V7G3%Z6N1XpvfJTw&{(#ad>jTrumLk
z?)X11@1dku%(wY-1OfTaYLYS2f7E+jz0Z1tYl<@c>x`My_Z3Xm!~IamNu(EUT5SwL
zi8vS-cp0V(!Vy()mVsdoZcZ)v;u6xhk49Cd>F!h+23I<3cbVYtKzG1-Ce^7e23y1V
zL(o0T?BMWiFn5oB<gp5y-)-e3iUN!>)HB5>@j0A~+r5A~7b3FVuROCra(wI#PE_s}
z(hpPp`gB9DtLmBUGql%Xx-WDs;&bsze*4FYm~V!jQe7vEMkhkhIsA;d>V<DXvK=)0
zKRJw@Cu;ZyMDK!J@$tm4GyKY$T*q9fv$rgv(_0{nEfGClSz3cU;z5m=r(j*%noaZX
z3sdwtKrW9j0_J^hv=>vL8gR}7f*mZ>ru$Z@eI^t&zB)k$046v9yxwkT#g8u;k~G6+
z967UiJFvp%ZT9-OZyjsWv~PeG^<(U!uk36U0P-jqK|mxu=JS?nQ?mr%Fsjv4_?GGu
z8y0>wAO=isWwg^wFuNci3D~8#j+}>4+!dx*f<2W}LJnD;a?3}Zv`D#ZbyHCt;<piQ
zeE4rv)bM|z!p>Z=!*+h+o6)Zv_@`GZ-sJW!U<2UT_?EZ|yh*s!KrH`3^@`AG+-8*W
zUSF@!ruwp<jpA`JRQ7TX04FHlkoALUekndz175_J>Yl_EC)K8Q?K8SxW;JNB%Re`{
zb<Rz52c?F6_|19;ke#T7VN(rIg+n!xw!xTRR?Z8wF;M~0HAJMv7#v0GZk>MSM*u2^
zO1o6&`u)B_Udxp1updUUqB7&rS9}oT<FO_L<{IA?s0ySzURe3DT|H5>daN+u(n!U@
ziK?zYe4{twO}vCiDX;2k)%k=*$pN(6j|^_Lj98~oXKr(sa*U!Wbc&SR^q?YrjsjF9
z7^dlUjP0&d9Z2$4?U2i>#w($Y2b~|u@0Tv5#!gY`Qq<aKQ!rlLT4>ROB>UpyfL`Ti
z)eNn8EM!x=!}rtY>_p|J3U3^+haY$lbDLLT@*h-o&!=K{UjHAj!Lbe4$ufW;nq0TS
z83-eHdym?;@jT#~&B6;Iy|l}+tggj<Pk?=2NGV_1fP0p?*RmXdU}ncHWy3Z5mc-xD
z7;))CIOX_erL8ru*n2w>yR_^W0;%$5^l6L1tSK;4ejb~9z*e{>?xAKxWhjtguZOXe
zy|`pp;sjS1t%PK|{D6H~2aF>{0xi@GbyWd!OYOE6OOV5i`_o@}C*xL<50Wnbd?nVx
zbi^x$87TAUwQv3*plV>Cvrv=7u<MvH_Mg}H4~f34BwZhPsphNH+)#F10~?<qZ^)bn
z3UzSbZ-(!34^cinX^@OXRs|Gvj<Sb$hF4#|ZBGMpCkcoW2k4?c_a#kjeLhfc%pN8H
z+E;Ahx#-;`AE8Mj<AGvVZl%iWLK)}9fS%P+M-95$0T(ZNUFD6f0T)fP9H+~Fix$n`
zW{4JRExHv40WN;@JQ0uw9(4+#PfgEz4~#i0p&>YJvb(*`D?jJWP9-^rS8ZSTW89i8
zn@X1639OlSXx!O1op*mi?Nt^uLD>^OQ4j=l_fBQ1>GF6`sF7{;{_oPSm{PtkmQT@2
zcHj--HsSY+1%Kc`F(b{4_RKZMs5VOO=H0FPM!Du#1&N2=y*ul(TUpc|%1h3cNyfv&
zNa+Yu<wFOwM~Fg_;2CoS>Hz-w;hQVZ;fWm;3+o$c+T`-8B8U2B)d_RumY4;dG4NJv
z4AxjV!B>K$Q2OTPl7O;jZ19*yfT*|<_ImA-8cTL=%S}|<d>{&hEA>!!SBG!TDV!y=
zw!dF>hc*S3vQv_J`}zLFR_e$8{EuQE+_jN|HRXoO2b<G+lc^pad)lW*n?Iv|!@^lU
zk&G>3{Gbh;*oa^nX~8UrWRX2@mz?S<a2T*ee7&ai1FxWz#C^C_4S^g4xhnP{Y~uLr
zAK3RWC*}l5AxJ$ydn|mS?reL%k$N?2jln9cIozh;f_OwO_C#jl*>fd6ZAxYwdC`kZ
zK1V-+G({p-BapgwAcT$&Tm(STPo#_b<D{@Kr6H+>vbuI7&N-Q4Mj`{N9V8mqojAUV
zep82_R1dk)98d@(f3o1_jEp<~6*Q!#s{^l%#@K{5%V+ZBek80YRw$W`R+lPi5|e<4
z?@01ywwwHV46>?p&j|yI0W{wA6a``vX}Rc&IUUe(UY6fIr%l)yc#;m<z8CR7Yf@4@
zbG)#VQkPlLze(z*7#Qe;q*;+PZr6b98G8}(5Ecx@^DWUv_K**B6|dtl(qtBzZMbb;
zgKCM9RSP%*j_PC)=G8Gb>Rn3diAFSimK+Q7AMh)Su=Wh5gR{it9iwPMZTZio%=Vhk
zlYIE%Pt4u%m>~Q;K9zIi+k}lH6z)i>WTJ@%PSSNzT+BEW32rYaRxMqXO9eV{+yFQ2
zyZ6FjxEOD)_`1)C=suLQ<Xz~@GbqJuUi)oJVUf=v$O&_`frfe@R@5?0`c!<pM!W57
zEj-KQX31{I%muZFhE!TTuWDhLN7$e^fhTh<B~DT91W85h9TCkyjwBpk(O^0z9G3Ab
zI|Y%EGsctHsUJrCb4foA{-%C76wQ1_d~qeiiODS)yMB`ir<mNd^er>(ZB?sU{y2B9
zKxKSd!&b=<AYkFlJe9P+n&rVVJ#@7;BMxsCUOK9Xc(+GE3epNrxw>tCe|gXHGmqZ0
z2JN2V3>e23KgOh+L@Z;Q-!;KJJQ&Dg*4-03ThFo6+5@zn;&bYc61pZN9945bo{P06
z>is@Pl(_;5MeV|CScPg%z(-Z`EQbI7KRI}%Rshi8zZq23n@ho=1SDu8Q^v&L-Jxbn
zBKg)%efq5#pQLbWgW_yR#B{J6a6#K_bhNijpOh%;cAHKY4<Xv!<<3S$xIXTym_+s^
zR}eqG$zt}!G;WPs*u~E+miIy4z8sXOrlMazv)M4G|CG*4(hy#Ii2>hHMR+xEWw7i<
zwe6fCzrtTwh+S`az!S8_UTvYJL~3Oc3O>C91ItXMwb_mR<K^4TII}sXWl+-R^z(c^
z@1MHg0&@IKf>u~P#qWh#Y;j|zwSinK8c{68^=EJ*e`X}pL9Mp{IQTJBO5)Z#Ron`m
zfvsvC626;!!+M++teK2zrV@G393@Q;$HPcTZY1M!*{&^!uikrO3#S$|4FGeg()ha{
z2ZoELh|Jsmi)yUe<OTBgA3_#%Y3vMAPmX0#v9gVU0m03zovj|&u@Hl2_AyO1hfo`{
zp*DLd-n>xGqp&>FvCsBrQC~j|_1>%rz3k;QHvl_n@X2}68LJ2)E3<vCwohIYL&GSP
zGcbb)7NdnJ>F2l3s!WaJm=r`@SM^Ip6Cl~7z!v4c=nSbw5+a$1f{a>V0W}!~JUoNq
zH@(0`DjP9XWT}pv3yCMp4WJhHMfV$|v^OGEbqdps2FNyzCOjP&o1BrxnW`o_Ny20{
zyMYbFrgkBae^D5ob;?JWu!U*hO{N@0_#w?AuC;@y^;~z<lk6?aD$5WhGqlE)cObd$
zY-0*!=!Ry3f379~=)Fh0?<5^X1p;+?VX!LhbsrtXTGwvA$#&-A-yLwBp$?x5m=sZV
zq4djHKU;}Z>=C|HJ+t)(t5z`R*c;d()oHn}6Rv89Qg8%VK>Qq{S#yO}ozx{4VmA9N
zYMg=?p*lKh)%%vO)4niVHD}Dtf&B3k9I;EP9-5~NZW=zP5b|0v-qaAm^w<ho)!?Yx
zkFg=|ACv4j|MY246Yy5z|066KMdkfueGp?ThiX==bcuUsi>~fr{P*|_8Z}#y<IeG6
z?@yLBv}!c`!aWtv*GMT;e#+|ghF0pO@<`qCvQWO2V8MpG5z49CtoohTQSCtNe0}kY
z_BGH2Rp!B_HQjA*9E^4XU3AYeV4CfDu-W&p`uD8KWA6p-5C~TBw6IkmG&Ks%3lJ1U
zv{u9)p{0%Ol=GEr>L+S66_#EzG}zK#d>uq&D)53l4LTFyIZo7pZe1YkoUJtJuDGIJ
z%wol5jPaG9>a1&s`lOKsYVIoA$6pGWgJ0P0Z>{aEZnG(bFiyd#+O1wkFxhBl8pt{A
z*^UAW^mD35*ZuXNrluvPm6}9`Yd8#|dt0%Wti@e^Uvoa0ZukDMdnXolT;+$)+$QIo
zpgGudp!mTC*Z-d&!P!{@t76sMBwat2tQT2%mJwe-;yZUDiKVv|x`G&$z*}+m@}&yd
ziqCj1^k;#->shIgAdqlk$TC_$^+fs?y0(dI)dGnE4$1#c&PD5@ADLMIkbyus2&gAa
z>$Rn%GbDk%-N2~33>OM=X(E3Lzxlf>1IS1%j=ida`y~S%?JP2Nko=#v-ijDbEm&XB
z4?nE%%RpnR!fAvHhywb?(?~!kM$AJ4y{i9%JGd-^nK*$0TaD%VAQ7ezq>i}yX-Ti=
z=7D*8d|FAhz;NPK7$(Zl9BuQ;RY~3ea36O;X{#6;db}YRsp{iD_XWKAX1({C;S@lL
zpTt(8+h0kyFh<V%j4^t_NrkMF3R$nzW=B7yZMI(vVmIShvuEwLu<tpS7Se}3GV@YL
z{v3S%%k@Snyz`%40?#QVx+r*IAWwCF^P<d&_7;suE-629ZmUvO%DRcb>GAvuM}!TW
z$66tAF!+(kIFEwErGiy2=!5Q7MIf7RtWPcF0%LHSh7(|I16rW{cKDESmHS1qhUbyK
z0sNMjokHc+I(jh>5_P;+kbV|_PWK!JNv)iMG#NC#^r;zhm#BV|t^Mc>u6TcKgI8<y
z{&2VehbD&3TlsPrYqUp0%f{i5!8PBKnfj7Xl3d1LgwWrLVe+&I!PAkzUXb0N??nnK
zPQcp*lHqZrgLC{Vx<q1C4yu+B9BpB~3zsJ^)MaT6xPO}t_dgJ~KRz=5=Cwg(_vC|W
zyM~uRsM0iE2A|n0Oidg9<z`N33X-E%GjX%JSGx%bf@B%)sDlBpp>?i+<t8ptj!m@q
zFUz^}ojg@Z)M=8fY=H^<u9{J;u}3<F)?NstgU;+QQ=i*ysH}<4ZDDC+(<OxxGm}kA
zznLhflyx8V4MY9u!HET3<S5{GSEs(_O^zy*ILiKG)Hk>M2XSlO!~Mn}gU*or`g`V=
z{Y=A<1)V(_9Lbv^GadYb1PXu-f$BSoDbaw2C3KoEZ?{As+d~Noy!VPJoriEpf=Tqb
zSS0nOt|_+>o(*}7%+y9l{IRdGA7>GVx1n6?;6P$^Om!VFx#-|GUh=?c1hmyEYA<aN
zF_im2p;5kl)F$KjUjqxCPA`?LzX>aTwr9~8>rp<}SOnR_a%^_C{TQETiV#VceNWgZ
zX1f!wRn2t#u|=(|pLOF>Jk=H56x2#0E%gMta{16Je7BeW0L!D@-whD#$|$JAxtP<f
zB!PJ#7;{?<YBa$2PJn~@iH*x7E{#1+RXSic^7_5ye|y>P%y$2h_{;$fc2WRGF<KCs
zzHy7{fQfMIl+sUkRYw>$ay_r+Q#JZXdX|{e@Q0Zx<sY)_?S#_68B_>~tP=`t2+$mf
z;*%cjJtO3Dbg92k?&rhUD4+t!0_SvRB;kbP(9(u&AJJd?6ImH+W#75UID{f#gBu6{
zHnSZgGfQ<N*Pvf&hpW;~TH;>bszK9{;@|nC@|yQ@5ker+lbM0zh@?MJ14&22TS7Gg
zLr!ZLh^QSO5nvYYRZ3;7cZmX?Nnc^^hI~N=lmE@AXxt$16AF%A>hGgO5;h`4CD=N7
zc;x=LqhjCD$w6Rn!skb{VoJ9+3DS=uf|f0w@hk|kQ(QTpYI`4J5jmub??GA=H?S@k
zJZu{u|LMwBsGssK%v#(~dKN}1<B+Q*iweQ`YEx<laY3a1>o&A_n%+s;vQ6A><3u6e
zis-gYvtnAe=v}(QMO_N(H)f>w|F9*@j3L&Zuk90e9}bwqssW?mxshs+-*WWo@;jhB
z2Gk^zls;Klj5%f1@mS~;qNJKH%z=}ND0GKdrVnjNF2jdT!|4(Zr+5Of8a5Jw&%f%x
z8PwfSi+sSgXKUm(A&{og*id^Hos9+$d{};h+~;KO#*GKy<;&rNM*AK?+;mk1I6})J
z1f%oPE#cu|a3`NlKDy_m9-eM}`civ411tx|Z2%T(T<)sU9*bCCk0|HsZ@|TS=|4AH
z5p5McZ-o4_6Vkt|q*u~-vQ3QXK}8C50Sa+|jx249(Ta$;*9HQ8Zn|}aEGJ%M3L{wB
zVSdFvU`*Y*-BV0gF!nzwn{qyG2{QBq>6;+7Dx~wJv?N(OdGB;^bL*Dcxgw+V``C8}
zv}$Tj71o~?g(r%`IC(xudQ)t_H!u#f788iB-06CVLI#;caBz*tk-u#^Q?aWYr6;f4
zzh)LSLyhK@=F=cGCa4Tkc#k}f<LwxPj-?0RM6sRAUcKr!lHb>cj#lyB$A-xD;st`_
zGmlMK2LOdpTGhVnsdg`(YiJguxA?F)3;ANd=8($B#4I&}E*RQ|Spc}xo##kLh<{@x
z43F+c&@r`lz9#}DBlu0N!Q*@f#>zvACM&-hgi4s;IYi23Z@`4&k@!T9x)aB^L(LPe
zEweAhvaz-y*MH$==3$cyAYV*C$KhL^ZX+HorGo5$86l+M)|BG#tw;&f)^JX?;V|^+
z@X9m?*ziI)v}?!dSBlpdiYc_PK_flQR6GU=Z4s=Yx-;MKEtAS2YRG`M6bV_qXx?J}
zHI_2G(RSn|lE#aQLWE6evI}(NFk~V5*9&ZBFvNza1e&xnY_kR*-D!vn;{~XSw<I9?
zBa3tx+Dn39_8sjvT{86kPusY5bD?ilbAjaLICS?Y4K)zx#}8hVtI_>WcYsLzg9A!9
z4>dp1fq6d4shdfs9FnM;pk09i162Pe&TJ^FKM4Q1_r6wBiK3W-ANfViAym#1A>3<C
zWF+DR1{0;8Yr9F3Uf(+r%N)#O$5i0)5~Di=(r=6ZIDq0cz#<lt=~?C&S#l4I&4c;;
z2GNmLj0{x*7vn+r$ckX@??1MdGOgZ=hzK(Y0EV0|x)nRO)3dL)XVw?x;Xt$p_?o^o
zeW39-*3I@DcL)HqZ8=S!?W!)FB8^wSM)IqRrU?IAB^Ma}P-$QLkrVzn9sWg`0z^cG
zCg<vlYmx>Olk1)t^*>LT6bN5<nN&f<&nh@B^|dP`@fYOC5(!aM54a~2+c#0B+tpTX
zvx@Ug{^Bq$beA2(`+YihWJ>d1M43fNoAP}wl@bEOBpPY-7|~|iV9fgLyU6cWaR{lX
z6@3v_cCnJHB@14oNz~dzSCFi~co%W;6Vv@^I|C~U>VxaCg*Em{WH8V}Qr-<6uLHt@
zAyfZOw4D!#8s~g{hR<>?iT3r|%LI|2{1-k*y)LdatEZf5WPo;E&WC~ZrfzKiiGnlK
zuWXzyr^h_An4Gmv%Z!+tNPB}WLinCr-gLJ4+ZHQ6weLmgmRFyFmN3h~hqU_in{-H%
zD3e|~ZOT#CCa@)IyvP92i)x<$h1x*8ctfdH0HVhJJ_<WA(2+DhwZQU(RSK>1UpNt<
zHsr&>;h5G|C1re`qS57fAU?naYCU<YQA#1Y-6dNG344;jMm3sd{8Vy#s+EenQ`*1k
zH4y>fq1mV)V+LGE`SX&s)^+4QU8Ce8OfkC`$&5Bn<CJgVnmT#PRo_c%3ge}b&OA)f
z(6oMPYwBBGCW>k2*m<H!Wi+M3_PXUlXcfXGzdYXl>-yKn?ziEs?8$m7?-FR=oF3S{
z4dg2dknda&HIC{scK}fgc+1z`LpdPeRJJ~VTlb~63e3_GjM|;UR337o?_DpN`J0Ji
zXgF-xT2%-wm}6dGB9RjchK%!|M>`IzW-C%9*#O~$)1FBVl3x3O$pNC2I_=mwJX-qQ
zrMxqFphri<g*&>)NY|Z<q4}O(34)2a3-Kv>AQWH~_nvdD_e?vT2AH@@x#6cI3v4um
z&X@eK3p}xiuz_ZCyRzQ3{Rizrcu-m;R$D&IV7+;#$vq_xyD;{Y6%p}iLew^M!A)s>
z112OltL+2@C(Y(}lx4ZNI?<>X@zP|SR$db2BVnsTl3*t`>pKy(a5;4!AW+O7lO6}O
zs^w8^u+1dws9jdgZ};;FNDuwfZamZ_p8<5!$}GbHr!v0eq8YhES>dPtQY`=#fW2Dj
zkZ4ZHQ{WkX$qm()Y1@n#olrKqhS~j>o1DM0ODiJB5jPX-jsJS*FB-*RXV6X2C{Atl
z`B-r|I64i7q4Az+#>fbUOFvx(SUkyuvK=Z)cWld;=+r}$-l6pp)*|bBs(WUxivh~F
zSr;aUjbip^eHRA0$#^R70iNTg5`T5TB7wFUVUK7(`al<KGt0(jwoKf^g*Ea8f`j2;
zMIahjVAGo<=@uM(%KTR@>NUFJ<)oEtVJ$OLEwq{Y{7;Pz0^UqXSL-@gad)-Pwb&uT
z*YZNsEXmrprOdmI`5ooJ3z3YR0RKM#z=8jgD7{5lXv7J7+)WY?x&*X*R$BizeigLx
zq?}bR0IgMad0LAUPi7@G)$UFOh+VHNN&TU|nKsp<W_-CkOe3!KqNdtt!L^W2#v+|Q
zC|JWVU*vY!U8T9@7?+Eci-=CQDV*SosmiDA+<+9&?vg?MuEcLSY*V0=RaP@F#Nfd;
zPXbmmQ=Lf4%=Ydc{HC5Xe{eZ~j{zCjGF`XL3Bf!2Z^dR~>W9}_6RZWv4gXX6NerWj
z-b?P^Z-|Tn3>7bdn|yhXRRrmttT^H~JqVYw*p1cKm?33I!-*HFKQV<I`t1{QmCT<s
zl>!)9cF?5$L5!q7w8<1GEfgW<v1X<i3~YCq$Rea0IgWQN>Fpg|&-CW0J(1F5d%xbl
zH(wb#*5r8q6#wvyoZ76+VkOHY8;kCowJE)R{pLFl?WD*!4H(nkUB*7$z^<UdpA|-k
zSX_O%Q;L}+tsW1~PI1b1ageN6;(UF_zp8y3X)N^IVlaN2Q=;3B-y4EPTCZ{kwPT{p
zPKR1vEDgWu)M%Qz{taq&O!$kZV)yq=3(Gt=H{!>JFe=J;D@B9QT7zaBxQ@}e=tsdG
zCSJfWkXtp75W%=M!Jj8>vRK3-wuM$UDH4Th8a(&G0s)iRknhQ96LmGpYR&F!UWp@>
z`oLucV_32=ql&vC`MpaD*O$2B(o@Fr3iRG}&m2GWUI?yHczLd2MF*JdeoWtFw`QoA
zT6;xv_UfEoK7EQu4S&$l;kr)JZqpd}k4Z7XMai2<93ob}y43~tmW!;lQW*@~^#ATA
zN3SfYLSFP@?z<kPLWf^-K&tnBfV@0|z5PpbJA+rUFMHfDJh7SXeO&ik=k)51r_be!
zQ>SGi-aaKkqW4^a$@5#n#gs8>vAqqkPqfpLocL)_pJNZ5e4iCa>BreQh0;*$rwzF9
z2ZTiq<r??+&3uAR)BmlBL`=#gEriOMp9+YtQ&i`8hH#zlR{mZDk9+Q?K6dk>YMdT_
zV)VgC!=kpPcf);Y5R-~s-&!6H&mH<@Z`gRPbjISimO*<A&X>U0l43tHHF1n_GKQlZ
zLw)(1O&>j!#(JsoWRGajI}sOPHs7~|{;UD)=c`EbbJS2~WwYxG9SZY>I;2?_fFS}x
zMhAWYM~$As?ds2)f7+;Vc-QqEqNEu3%qrxCP{%A80IVVZ{PZNHf+-9qN1%?L<&yKW
z)iDri5I&XPNWqt@2FX5*YgG4~5I!~9aKO(QxIuGyzy$W82QRwT(-CuoIF;|h&WkvU
zEe<kVgk_pLmh%YnNuD~5<irs}nXlQbJU;&K8G7I*fAvF63RadcD1*#gx`#bH8EGsC
zJ_Cayx7M8~3pgK<MAORoaXUKEfVF*a=SQqKp#KxLmQ9eA`>eh>TRn*SCiy-o>=zj`
zxU(odyeQ6ETm;iGZ5{Dtol?Oz3iriC8k}yR8ac@Wd<l(-H1L?9)iPXEBXgQBxZ(xT
zgJ(vA4HnGRE!5%7$&+GDD*HLxB8ttp2P2qz>h>#9V_y8GfvW|4{_i>4X*6=Q`^sgx
zjFO6_xP53i$iXifS8Gk!qk7O(-u&EM>pPQ&(YEE=r=*ZYw9<BeI7kVW=TPyB^e_*C
z;nA;htKwScB-7N9nXeKBr|k!~I$jIjh!f)Z$Bc{$V~O%X!y@QhIgj7V=R}_~gCO$D
zS7=Qw#LHYl(@U!l3F&XrYBjLXy`)X*FskV<$99~v`I9ah!yUj%BcGEUCA71&+ZVu4
zM6I&rIkgCV%1l;(7Ch!azRo{_m=(IKFzRJed(DBP5|Poc7$Kw*TcJx`SnDnSMB^oY
zi4ppw+g3r#Ptpj7z!pNhNXGlW`Fd9qV^sL8ip|-}ov-J5u8sH3im0XItQq!A!SV`C
zVf>VRhApL%iZPEwc=58j>{%#umzkaXpfgiSld44c85o+P3EpU0<3qzBeTE>>w}psH
zblSiTY-EBp11@E<hURs?o{ne_kioHXiJd+k4M*;$&ebPit_t!#QyKYanGexp9K)s5
z&a7;p@<N5^Tc$gw3o*b%=ruh(l0OycW~pFwOo(G567q?xKZK{j#-`wt0p;j(Eki2W
z$k&W%Flh9OZ5OHMF_DBa`|Vi5jUaRi{nu<!jUUH_4MjweDTvW%;=e;Be2&34@Aa@8
z7+^YS$JI2c%jUdZ5-+X?bPNWxveSLcle4NG6eG0{tEe;<Pj7%Vu08M^8nvmlZ~2o|
zBOMKrIbbhN-Q7V;4k|F@A}b@}R4#vzc4<5^3&C~W>c;HQ@}$5u`T0&g_f<Pq`YyQ;
zJ`iGE)=`=gDUjpk8so-3Qqu}95jqLNfV?dqf`(mI={|vBi`2Y6`SFRk=sd3nVmDey
zHmO83ey+@owjgX6^4arm2@9y94{CHVmWStCOI`J@-K$IU^<8QS2}lJTX?b6^xpVQN
ze`q)#KK+alc<!ExF@nV!<v!g%U-WhJf}mUkmnhd;F1r%omU<PX1oQ``kMiXzd;BUP
zjjL2um5M)-h<8}?Yrt<x>y{^Gw4FR5C9#MrgEy;MB2t2!+6OF@B7iJTJhiKFcS$hR
zF;s@Ujt*lq8*iZnb8{fZs_WBBw}LPSvJ)B=cUnd%rnWG`y=`lGSc)~w(m?>;bD4oY
z>QyaHxl`3m7x+0t{?C<HI>?aC=M@xF(FK;czGt3od%yz&lV!$Mi&ro>Engm)PSD6a
z9rG!-yq#nnt6GH9Slm#{!KK~5|8Ish`8K2D2pXMEn=2|Ti?WW^Oj+Ixf$f#iQQ|l}
zlLJ|q%s1S3_^+o$DuPoA@we*M4kJExR4)y#30)VsE>YhvEMY6tSWrm2>1`5t7-iIR
zT>S8aZ+(=!`(=%=63#fy<@)mQJSQ3kFbfgyYj`YCpv?467?UA^V`ryhD^J@I2~flU
z8B@;0d%Evu+<0Y5IWE5v)}UA-<8-n2W>%YM2foHg{_z~f67>{QC&NBVh6<NfLn-;E
ztFTxCaA}RD%0#UbDtr+3n97kPK4c0VG$+0#1;XBeEa}!fBwucK%bZi9B;j6xHA$F}
zoCfXfP;g)$O?`hU&qc%hNPSHx_ioRrzu2VrCQXM4)dtc@?CV#V9=qtrT*kwQxcPwJ
zThqVuNXUJZuuJS9Ze&7zbH!JKAn)#DtKwkdPHZby6;Y+HxXpAHJU!+?3{C$W!0b#_
zKcJpFh!T7cwE;#A?Qx|`sL0lQ(SGELQCB>6uYktT1%7RTn@mON59|=%_NEvqqRGkk
z--b1`iEJYbKeWQl_v|B#kfg(lVL8W>hC(*09M8}b-u>;uGIF=nR`0Io4kaHi2>C5N
zdN!yUr7Dv<S`tTsg7x0Unk4TZJ>U<7V94_l9w5~(AHr^rcu?R@hMo5jwFV+*9F6O)
zf&@e>&}E83^!s*sC{h5H@=Y7O{8C+rJF?t8siet1@7InHz1mqh(;zZ{;Zsg1Vy_hm
zYpq&m-6`YFYq#xPULF-~e(Ei6U5Cmg*>uLk;ew-+zyUNcmsK7aMkwSDtD2G@{e(T`
zV@wB1En#ppr5Q`~Y_bU5%~3xu;Ld~SHdF8$EAOU&o(o0m>ne!jm7(m$gw_Chz}_T^
zjNTMqL)Zo{yx==|KY-6SDwxKd-;j(utU#vbajK7!Bx};bi8Ay?+55&B0kG^Je~Sun
zA{Xt9;fS=i-9`Pz-v6QO>mJzrukeGybVF0O4evoRM^CeI(=#CE%<31J&|-Qh{dq~r
zgDkWw+=)yncaWe_t?#OC**&|=a|XNxp<C9WO&4bt1ULyp!o2QIgq&B0uo)5V966q8
zNJR=)8fD0u1@S#o3}7$A9le{VOb-b7q7VTBuW$`8Y-K{j^SS~9V<Ql&3WUMuK%U+r
zeVLT#VA8zgpQNTL)*tyT8?r#u8Mq|E1B)6NWSAn|?4`B-Rj&T!aCfp{&+Df+kz!(y
zwO!M#FhSFt<SNBxpFMK#<dno~m1G1ggoq&A#cAL;M)cObUKKmz3z_GdJ9qT(8bMBC
zHv<-e8p|A+c`9>L!Wv!w^Vu9OUa_m#ZJSXAf0!4q^@F#~Xg9|j_oXWE0oY;^9usCx
z3`3kBS&t8FEVO(*2zITci?nSo5_RYcV?Qy4GSbpn9s4mjFg6rBrWT5lev0AdN&}+C
ze$P8ETTGcU7CB*?l@@8Osj7pQI0X|D^JKoN*jYSGGrUV|f>kH->c1=Oea7+yzj!G_
zc@6sanwm?j1zr8J)M}cl(LE35XUNVJ{*<)f8R8!hcj(pjrmB5~S&ovFo(EK|VZCYg
z4D7c%ub;40!TPuS0l4CSzA{&w4k2y19{Kz<c^9mZ5F4NQ#IIysoiUav7lgDk236tR
z0fh)1*qupRc4>lH_YX%w|D+#;Mvdv%ZpP(AQ$jF{TC0m*^=Z4WlD^*36*-MW|F=iy
zGz2hx?PPPJ;%SS!Q=-r5+=;<pY=U5pem(C$5%woN9bO!V8LJ`Q%q6Bb=G1W{6f5n$
z)PxdYE3TjanX#7lcE*x^R^<1eK6uP@dE(+C22VZp{v#2jj7Ixy>7bh6<+etpho-<q
zit3dJbqD36?lbBHPu?}{K`LnOP{4#my3kB46AU@=r6_t})rrB4s=$;aX9U7Y`^a-{
z#Ohqyvk2vA!ip6Jc2Ua^|2nUj=($(#U#UEQVw1%H^&i{evMPR5Ut4fw%Rfqw2+XsO
zy%1;{$szfBGEUR-@hvO<NK6Lm;$p-27zk#NZ__81-Sz@&KPPj3d!`WoTKgmcGxKRX
zn1Si}m<bDI$$q`zC8(I(6*B+h@8N@CD+I00;<8o&nm>>#kgzmJ8cmS#T=g(&9fmde
zlRQrp#Gc22jectyx&$CWtdAb*8jpCpenp%9F;=kPVd&u}1rUp<MlCF6Bk?W<9v-@?
zC<e>I)TQiMDy0BZyK;&#kdex|+RI9~kyo47iRgPxz^^m-+j=?#a`t9~%ZE=Ip=25R
z4gt8dN^;N!tahX<;vjYt5&X^}V&T?UYjJA2Bwu{pl2jFO2~%(%Ko%Wf?FyNc7TCk;
z1i|y$s6#7uGqze*5&NbyY}Ur`==L}7=Kwnn26^aE1`OIc7?%70Tf(x~h4Z9YTOz(o
z>~}m;3gU_Yql-=RX1f8qEZl0qRd`O+XmIFHw}!d*TDS)Ebw~oeOC`~ZSnBd@%(b{$
z5H*|3u`Mfi0u{RNTMCpvKH%ft{mvj6V<x*BYXD=w&ZUIsrL6k3BXbtukXA+S_9#pF
zyqH_|;pMzu0c%WQ5B3oCx*vm~Yj7;srsl~Qg2H5oXvJq`Os7-??awYZv<I2@hhsqZ
z2J=jq;MyMQsMB;Myz%-*T_O1PpBK7M9)s1aC;bo#gY0QK#`*KD?dUL_McWWn|F)uf
z_s@dNCmpz?_5JiskXjzYc*<;KC6YX2rY3DtxNE_JK)>`;nO7dRrNRd)0Kir_ZfW&8
zRtLOISxh)c*@%;*4^bM?=;{8gSOBkqXFR&SOlo>$sCk|E+6nqz5?vS{4tnJtgbyQG
zrq`!lEV*aAh5kmM^({U)SUfqdR$xJU?7&ZBja3*}NdTcO!S4wPv)f><d{g-9mdiBl
z&Ygf3SE$K%wf?piqrsL?(rRr!a>7fXnPJR#2_#1Lzs3dT)>wFG3?6j(Y=#yQiUv-1
znPi868D62JOp=KFGr&Ree)>Rv6oDoT7MnPaTsj^<8Dx5TUE7>RCFziq860&<?2uK#
zt^2_}?mty7e<d3Qs1K8Zp3~s#Es^zgb?4DYRAJRSHGJ5>|3Y&TU!3!xaeQu_W|Byz
zuv%GNu<X&`iA43X6(<pq7E6)ZFzkAdLf1Vj@RqD${%(jhA`wBmg^*uIc;cjdplc0l
zduvW{6`<SmCZzUxGm4-`o;%_s;6Tj~{vf&(qlYr~6X<y6#|;pbT`LF<vfqc9nrAcr
zR_aSJi+jK!w$&&bXX837fsHF{JMqdGEphTM5YM&nr(x)P|Gdx1Z5}as{f48%;feTn
zfuiu-tN>$M2)BE!KjC*ieP*ksKwb?(WiZXYQAgdOd}_Uu8IEx#W7CV<`~Lzn=E&-6
z0`|JVOx*Sqgq*~*f#Q<4XN-tN#lwVG=0ncRllgTGbv+1*=Afe<yMBVcjY`-_)Ed=Y
zR(`c$trRRY7&w#5K`GUNc#BRzmklhOK`CtK*H)qvl#g^}EIBP_|D39$m?A@%6CL#j
zLnyyUKFTFkE^$_WYj&06Vv!PWJ96u~5qa8zGczlx6vU#vMDv2>vxc8UGmSs<g{%OP
z3FN08F~xf)G3*D5Yn)3*+V^S{xH>i9Ih1Sn1Ogg8RUO-Tks9+vLY6)Bh#`MuySG((
z2C`0OPSOg$%Z9zgwe@`Tl(oszX^ombx=hbP!*xe(fxIdY0+x>n)2J6{0o~Grn{=G#
z{MSgXbohE<C;xXiQN+`SEkLRd`k&FjaGjX-=FNHTPqjC25rzwtOHtQP{4Y|GDlv{D
zTtZ%a@K9_;MZN@;r)1!cfq?flMTrFAl3J{LE?7?umt03N=5~As%Jz<S4kLWvW11u-
zu#!n_u=(zkEa^FV7H5(6XwKqKu|krby?>Az3`NYO-}OR+x1?VhEG}C(9zo<hpJ=GG
z47trsAn@Vs=-YcCsFvb;Qsy95wFxSnuaoL}D%Uh<(&z5aj}Uj$jDL!)C6FsE_^fn6
zd0LK=Bu(%h;cCqLx0P*vT%xXnFy-7F#rIbwQ|vc^+<LFJmJ>k)|1l9O*@ieb;^JWY
zfPinRwdrf7*ch{6$r5+Zn1ATOP5n>qBCR1gh&-cwuhTrj?DP0<N6=nD83&|-puWpi
zanVf{(87M}9EQq~DY3Qb>QMF<GBdujvP*{0b>nfb<C<KaVSYXHPKsdNah~;Ogv|Wq
zhCn5H#pj(C#tI&J5z`OAgD-i9R#4|V2Fp&|YSZ89R*r2~m#mJ(&QB@V@08lWriA9V
zC%6hpv<=!lvZjVpb>SYh6M?BfCR-3P=L5oN2a_Fy@H(mmLC~hHOl=KoLj1|5s{PnC
zvl&U1M!1JzR=BX`S2Nc(h10+o>FkXnB^MYNUo|Sj-Le>uxt*+A8;vVqvANtcF`LY3
zgb6Ahi$xWrMR7G>@F=P~O;<1m8uzDU-ZKXLsksP^@Zxf`i%M0oOB5p3(%YisnrV8Z
zeI9h}^NqAl;XJiILR%3@y-C~dOjlO))R?n@wNI$dNc5Og>oKLEm5@@)f2lSaD`abO
zK8|-r^56p)0M;0HD5%|-no9~%9bxuu)~UnmP^A21gE%!_IXBpv>PL4YS5O_d+xj!0
zL^A1~%Zr8x)pqk#ySktp*0WStXr3j21f&^%bTpry<weJk!|0PvBN;Y<tde`%yJCa9
z&v0X2IKruKVtOy?;HGWRo#9a#K!Kz9x2oXsytq<hY<WJ}G;gg8Q1@BUvi?h%1#R*O
zwm*zVQ@~M&j@BQa98F=6LXQnpIQJk+Xb1{bA+7tqsBUylZyZoTD!#u5pa3|328!5+
zOek3)g#QF;AoyTYwCye*?x-xfoY@N&7Ulu!>*Du{$JX~jyw3~-koN&fVAXD#^Rp{=
zA6o_V&F`#_y2>PQK&dok^Td<*@`@vYKNzBU-h*M21)yt-&NQpT$Ip-jvWmS(eZF(g
z&bGdBJ2eBH7&5r=5A35IM?h@F&1RIpRp~PlePJ@}xh_<&sE;@EWl@}2j?XLh*cK@q
zPme+Zx{QFmMsaJ;zI{%?8oG4RkgqG>8;swhZJ=-l#S)nx^ASCEXNO5X?Y?O|#@52j
zN>y+5IbdP4<*rK8)xG#=F9;I~urOd*V)Xi3k7kGPMSj^zaj8ng%d>X!aLuPy2z<zS
z^x^xI&NcB`yo#r0zk}Yrz}T@ScXePcwl?TM8rwA`>IAS&#iO_5D8Q(ilg1J!;&X_a
z*a~w$(Lw;3f57&Y!X4@DbtLGF<D53aTfNG+6&iH({<}@=qB#=;4w*k~7w5?c8BC&T
zZc}v0oynvf3p2E}4`1*Gcb(r#lkuk&$h@NKPA+Wn&2h`i_ePfw0(h(U7Qc{U7SX!%
zAhxQ=z%m*1i`^tL5Al0)_RSxADl5xU{9W#f1AWkbUR@2sbrLKM#TS#Wj^Vb-CVV*#
zW;2GM@^PwEA=lTe_UDA~QgNSTcKK2^PZ1TIK?$CZFhYtU|94{JEd??>OyzA4p5fsM
z|02d8XHWCb{ggAM-LtD)p8E>{#O|%rWc03trcv6nfJm3KNb|mx5M->+Jt)y>IjFZ8
z+yGdsLv@6VsPP7JK$lPMpLm$^Eoo(~mcFs|s{T#*P>H3U`f~d6i)v+SyKv%AbVUBd
z0#cy#_Uk-TSyA*buSzj0a<s9A5@Ars-D!=2Sils+xP&nKtW4FEA|QE8)t4mrtm-9a
z>&cA|G<GSEJl>kdqjN{rVx2}jEr&?U-IS3Wkh+vWAx;p?t=X(8Hm}S7R_qw8Y`bDt
z5b(CnyJp-F7qK_>1=(W@u)E9F^GTxz7WsD7YP=mV0DHRebKA$6uRA)EytpDk`;f6E
zZO(oY+LMITLEm8<`DImeA=>7KHhj3JdIztsBlciaTPzeH_{zU$J9rfNpJgw=2Q#4u
z2p{EGFdLy`(qK#?K1AxU3y@ovFb;*+LP3*Nlk4VpNMd!uM)Me%O2bEUJtCXsM|li^
zWD3+?Y=QyAIFh|k{6Pn*z(ygs){2};ahL7~D**4#yx-_+2laqp6NkI3lP$DZJ*l}=
zo>U6I3tE%;T}wP(e3LBJTnWMDdIJ9KL`{n<y6>q|;W%)^IVDK%I1Au{CWQV)C@h4`
ztz^<=eq^crE~RtABSj?3*N$SaySQZU%Y<s2-0CW>d+Ftbd@CrPEm)FZ)Ou`WgqlH&
zKh-<{e>^2mB5>C#fI}6`3F_6d`m5&G|0PVVKg6;A`uswE<H(&XblJ*x{t5~Ck1*sb
zjkVB8kLV9URCG{h%F>WNq{7zFx{VwA3=@limd9^<1#9h1QW3nrX#Z5~t0WAytapM2
z3p{^dfui5>M<VCUib}fs05ye*k1z_YFY0oj>e>S0Qvz4`z)nm+M^|VRV9RQQ;<Wen
zt5(VJt-n?l$L~sccd@`UkEjba_U8SJCX_zssO{orELHB6n7xR3D}@I1>QlSA5U^}V
zm7!qOwl~_RVLk0x^)oj%#mGB}LV!}wNH#wp-jK0pjq637mpGcT*AvJgu5?}a8uNlt
zhx9=`r<*bc@`1yxR53;{WZDkAtrRAUgjjW_9jZK5<iRB8KLI)PaImnex#-}I9k(tn
z`-CWP=Tt}qc8E&-uV|_Pj`<>&KRKI>UKjE6iQeGvCHLNcWqmATyr94XR{@%!r*qZz
zuha`yxxhrEb%?y$O9Q2$ivdSfwvw$^HY-LD*;jIlX%ZmNmE)G%#<abOuj{r@ixh#m
zJ3}4gRH%|t&j`{h|IcLKAU8>`k|x}>d0bjlTQVqM&maOp-at~rbUXcZdSxIpenjA&
z_}z(oAT3(`v8>pFj97HkhCwIbWSQsK?tRSp^fgkYSUYjmoLnklC!A~Q=TWM>6i}YZ
zF65*IF}>ow(zs7<eP4vMt<}j}5}6tqV@>bcEggPl)gEIf-;_SF3ljue*%sO`8FDLD
zi`R*&A=XV2g3P8M_tTmLHU{OZiNQ??YBy%ZJOtd6H0_W^Urrzor#5>;GSos6+vuw8
zE?G{?A&X~ep4SlUw~0{sd!MCsv-QK0yiW3vAt1r0ou*bRKlUpj&df&0A8Ozyhbg3A
ze0U!?lHH3ou$eHgeVSO^``U;szW1M>C5<yPex10#YqhD<8k3EGmb9Y#)LBj~C)c%%
ztaPy;XF}q>$r5mrdj-K6PaB?T%2ifx&5%hHto%XgXrmwi2#H{4QcM{{4)tVt4$yWw
zn8cg{ysGaig3{L|?Z&B$nn9_^WUd(gG6u3mLCjwmR5}p@=`auz<khTlg#4+B+4wy~
zADXX_a@h&HM?495$ZE&@|2D}&<Fzd3HDinPQaY$^_+4j7RTC<Us?a0`A-QohB%0+q
zSKQ&mS=S*K@uwecxsp{K(mX@4-_-{Pq482x-h0M5$w!2kbNIsTa@!S;Lbav`<}aLh
z2?D1{%#4L0%?zRQcxyi=nhMM`*Q3PD#C0R7rezCmOheP8oSYY<@Td{bV~u~eNhe@o
z%4qY6p;xwg0^ah!<M~9A5I+F<n>=h9sT_GbTg_iRW1YM#8|y6+FWF!pGmg>GVO7>s
zr9<%z$gWz1Fnu(OUH`Bo3_qeWycZ1h5sHM+JPVgB(^aIy)^mdHwyl5@8jPSFHQrtR
ztZZ{4y73*$to$dx?9WG^Pjz04!Qb{O?DO7=QC4Y54f5&7tb`Ncy-ydqaZJgz(^Ej7
zYaQ7>alMT8T@ZhhH=g7$tl9K(hdh69Zmcrot?`@gbCMVkaM|aQXlv4Eh5!=rr__Ia
zUAtjKPe=G9G4Rs%xWiptO0dIH>mn1ZQIwd)r8gPPS18)aMUPgEhh@-(?R|sCwVv9W
zUvnjX)#WPL4dcXerrqs4ApYK0wh`)<@*sC^m`i8nFvr}{{o`GGG1-4<cUGE^r@B#j
zedv_x-^FU&LAJu5mQFpX8i(9;<|ua8nq-!BTBKHb%85&GJdxSDy$A=*xVrr{_*Z4i
z2($pRR-Dj;@6oF_l7Fqv60>dL&u$Sw4D<U^qA<j1lfvtlFM|;o-SCKIh}io=Z`aF(
zvDPD3#*D;}q>MNn4Ke18tKM0$R||JT5~1XR$3E19Q5wRG8*S~(p!+80>#*E+6(9K}
zd(^qB<UWRQIoZann5FprP#iQh-?KyXV<XK^y_0pLN%dleEQ3X}zUYs9M38pBSJofl
z+h1Du0&hgN7whuPWLrSmM-wQ=484A9kq`K*#*ZYoL7*ia9pX8_#A<BCAd7iO68J}Y
zd_3DiNLER7o!+qQsi}+66w|Q;lM1=pngnoMtmC?>yl^UTjJ98=@^domY@WAWPrPNO
zM2f}dJ>?qv$CL6gGEjzMvs`wifUWgs8)&p~NjMBAGV;Shb1b%>HBF^B{2E~I0-qy&
z@jCGXma-$@c+YVH0FV$@|0oHhlH_9M(~z{yvlVj1Z5CB$0pzx1W5A{;1ARuioV`LI
zvA~R&tQP?E1xK`r#aJg_H!&sqP$L3uTq>|+CA|K8{p-S#qK6S`@NN`j<XJd;NjrVO
z6#X2y(~h7P*(Oa3`|{(llH>pbERZ4>k(te-N(|d4%_Z-luEWwXUV?VwsrOHZ+HX?G
zG)QlEwcBh`a1kOP)8z-I<vwO2PhjD^YIkxo^5U;;K3TJpxKwL&)@Or}Jm#}rXwZ^w
zMD1Xog1zhY?JauwiS-A0x_7TFA`MkO>TA@{02!o7W}ip9;)fDlsF)qw(Hpl38uwl`
zNNNP!j?R8d?|jgYlq!vT*#4TLR@#Q4Fr9b+zL!OK?^;ePQf;jKqK<ITwB|n}lOdyb
zb)QU6@7wq0YifW8G<so{(rf6vMZ+{Ak1f299@8h8D{6&kBW8Tz8cJgZ;AMOd`UdR_
zP*kbdCS-(BeR=Tul#Hp={u(3;n})%x@MDC?!f#$(UVi;;K4{(`uFUZX2HTRk44{wN
zeA0Zzug34m+0`GgFMF{T4$!?#=GGyb-T;<=qc{Ks<msNpbdlQj2$Luf3S@L&4gD+5
zGrY%VI)>ED-Y_LmfMk;@RG}+jJUj~zt`HG^v<9`<sOx%jUX1J>!7f9u6njRPo51Xg
zrf9WQMgr>80SUfaMzCMa-4XSbxmbSiuQ%L~b##f1W*DA~NHON<G)KweG_i4?$xMfg
z2}l>1Sm>8d8Ktu$Y0a;Em)CJ;EnJIU5H=|oS{vHla!E=$WdWIgPm>CIiEGKgV<ySw
z&U;1?tOd*RdDRtaD-j!m>9z*5RP1H2fnT#j=6HIxxmc@Jv>rM4yRm@q5yt@Wp|52<
z6I*HBub?xN9S|0V83*u^bZ=|iO^svADp)_w=HJ`*6}3A@+3dT8gja%nGhq0UN<^V=
zv5;}!UNTFQ9U=q&4{R>{v}fc5=<O`O6jc^DQ%p$6rTSM9UxYBJqfOFu0KJ6fr+IhD
zZ5DTmE|Z7v%=SfKDhnt?fmVB0VbV#la$=;5Pi_Ooyv(US=2PdG!TSGeSF>mC+-8BK
zF^MjL@rB#`jl30}cRLghU%mKkNd)&~ZvDrD6GLTX|Dx%+*{y5s(>5&{SK@GF>~RDw
z2!SnW?JkbCd5+Qz&T+J{?SUwffd&I;!FTaJ+CXY%nAUuxXj+5(4{BM*xxi7M)uRW~
z+j+a9CAminf|?ntCnsxV@HjI+7Yq+!z8-J__XaZ$uku#^u8)33xqwEj>B`f7@Jihk
zq#?>UQF2e#R2*KJHm=~I(kUj09ne=%!5G8=sJmZ46eW`O*0VMv7R-gVDh78}w9{18
z=E@YCB9+*uJ>5)BuU76J(n`WR*c^<LZxM|~bIw@mJn?v5nTSZaVU29TUW7?Jvn*eD
z6$n<aBR)sbzl-)VF-r3Ok{Vi+;%mO=WE6&!vd><`B&b)x-;i84fZY-(VhR8s6aD`q
z%H!x&T+7|F52jw?3IGhyvmyi$z=3X<-Y{OX+ziw9!NZRXOIx0Sm8+z!j=+6I6?dKQ
zg_#7A+1g~QV8HZHAd3R>r3x+D8IDYxSq(c&O|1}(xy;Sqq-U3hU_{zR;vqxr4DY1%
z%)~0$Zlf^J_(3U}$kLj86t7o1thueCwJ0cB$`=!hQv^5MN{e>|LHd;}vUf-h=?s^N
z+D+Sft|seRnLth`1mkMUzO_B#d~rX%78XqFPdDk4W}slYD?kYc$9gh)dQixl*O9w#
z%+b(r=>-V{@d`5s-G==rXVD0uRuLG&3*MY{hX&b#_{lA--;?PHuMS2i7xrqwQiNm_
z>|%K`Z#IuVE)@c9MaM>Q1XM1HTNAf3Z!YYioVe6lvszdGS|WLW$H&fb>z6pOX=tL^
zPU5g3Ve|QMSC0k`nP5}~C^Jz@3=lH8bv$$5qB(Um6CQJ5?Qy}$v>h|7$}@>q6s;3`
zTk}abU_brOj690>#ziQ@<r!G^9Q5Dl8wP71K=#bHE!&4x1S?6UC7zLwdX=7tLsio7
zyvY$8aF0djqjpef?6bFlNNdau6gcadBi=CV1rM(!SpYK0bV<y9Dy<fZ0izSIQd$xF
zgBSoOn?O%Wtf`ZM*v-UfwQ(_o99FR!vWX~ww{%eNl&~-}ioC!nUm<zvalPWUU~8lr
zFQ_P)Pcw4&5leMc#p+nw@OmVDHuQGgvY-)DWLbuj342;>F!8Tn>@z0L^N=FbZrprx
zsb`p8t`l6z2|Utb#rOlVRnEdSWU=i9B(6~|VhBWt)cTf47rARFVfl7wR90H6Jr1Mw
z^U&%ocV-N{ZsuQDK&b0d3>y_$cxtsw)8g%%7jP6DYR*25G$(hkmrxj{Gx|L4&RQz{
zmAu`2z}%3NFp1v%5Z}HfZ3PG8>?$x;pUv;8uESOAQIB2tK<2|w%X)|rQ{iG-k!u7b
zf?h93l~YP!?AUYz#%`W>ks&p&cSV0`GpJ4>9tZ3lee{D1^k2a?tUE*_6~U*zm4+rM
zJxcOrgp1KYn~im)fD@tY<(n>B&9M#48U83_A(#C2b4e_E|1TM?$NLGWiqJr7A)OsN
zKf{ffIfIftSlB0h(PWMMR3m_rtFjGTV>TXKaRq|lcV>jooeNouX8l1LDFpd;Wx&{3
zEPp9O@H9isR5_>!8eM$<IhS#GNJY{>VG0XKnZ_QOu!@N%3aMjKx18w5oV6%<-%S{_
zg7ST_vm#XC-F)k$dM+ku9J!n+L#Fr2WMPa<Cn37kS9XWNG|~nz#yI>!VlgLXFN-d5
z0+TL$;V$Bq!}76Zn(_(YPa;cAH}e4urQ7VLucaE7Nso4;kO9Aaj+>Py)5)+9vOs~j
zHFh@yRh1gvttRj<{>5Qo#Cu(qWh)zcQ1T=()C&%B53UXPv^sIVn8?Wr_F90{A0mQI
zge-%<v^kjOf)*83bUkX=c57hQDq25K`J{G>xmAQfE6LZvxk)r|!a-UgskZcz_X693
z*BjaPGu^ef=TI>#x&|ytxcb?!NmIo)WvhQ6z~Jm^q*A-iCQxrnfFBhClRYSR-Q7UX
zZ1sJ7PwuamjlnmV^EDDN(J|siU<(U6^$kri8}2#(*JHQjUe3go=r?KZFFK+2VS}Xf
zx<s7;t_nZl4-#XQGKU;zP?UM27BUca3V2*#azhg!c@vqV7U0@0&4yG>9e$nrXLNqj
zwXvy5K^%Np`q+DBGEGnF|3uBalZ2w1%>C4^<ld-#L?c-k{tZkCOB?k)0u&=FvYni3
z@!{skCS@Pqh7$>Os#JPEtHtO@@62z*Iq`)5kg&GfVr{OG(+G3nFAmx6b$WxYN2?Hr
z4qu(irtxw(JQf$Bh<bBa(|Tp5;~o^}2DNk2dW}Syw~Yxzx!*T%F)nr5-n+<k7f||v
zE(YFmAw^O+v7WuZ-;i^0({b-H^F?F!wjWnfkq^L-ACA?F#{Ar_Cx+Qsd^Skbq)=L^
zega&^#g(o|s;wo>>Z{=xCHh0*$s0mdF@p{t1Ko&*-Mvs{5#to86Ss@)T6+fQ@A91d
z`~^(u2CUG#u~9&o;6Xu>F~IgP!Y0g)iEE>KOrtgHUUf(c4x<E0=YB3!(>Jm;SKb}f
zr8$-)IT76Yxy`iXay<~kwq~%}^oA8kWOqQi?;OT;29#CZ?@S8ufTQ7Y?1U!T8arfX
zn3aeN5FD)PdFf)2wB9k*C4yV{S3X1dB7pPbSc8>^VMOakA(dqrwO$lHA|%RTt&<=p
zoi<L4bkNk6ds|8Srbhg?>tU<d{|7ltHn_U8E+`rIepIK5B~tP8<&WRN`jG!gxR{>N
z>sEcrM}XqnvwX}C1Gyaf+?vv)oV(&SC&rW`L=nm4s8_De(enpL-Ft?>xEc37R~DsE
z4|W3sNDMxgD+;a5YYt_=Lz}%WAR2xhg5%+8u?Z3N&8YO74SRSq@jM%=HvV-47t^I?
zp>*r20glC=@@ue;^jn3rls1f(Ui=)oGe<q-s$TySLCkQ7VgKfYi=)5s(IJYLs30>j
zy`TeKhRA80?ngaQ(x>VDq(aFANFim_5B%I}a>CoV096^atsrjjPiaJfwGBzYcOZhz
zz-l#U2AZU24rMt%=F|TpP=7BP73nUPB&q!!)*H4<OR%<+8F-k*V7~ZUJsUzSV^k!M
z`ET_X$P`YAavVK^h7~WL2{|?{O%Q_=w9y1}(vk^c*j$aTuh`5oSkIE*xTy0M*i7id
zJRpDsiW&K~>_Zgbqr8>?|G_w+!M)p2<3)IX#p1_Xmg7_1((je}!@&d0wHmz0VQ}V@
z$<amYQaCq`sy5WJfFLtDd|SdH2+*$nMVvEaKJw9zavg7rAV4=W54=uUTQqoDQ0=Ky
z1vNmF2)TPCqAtL#7*z&0fGl?Is;F>~-%>vi<fvs1lr^Vu2xI?W7|i<6AC()gY`fg_
zJNGK?AArQ(AVQ-s<X+veNnkEt6i5sKV-Q(Djsmx&w$KI5YJkz{f&@R7=_ifE0Ix+;
zerSg!!9rA3(gr~}347tMyfHZAr$cEG--vE48lrE2dSjH~>{hjFqj?Q%zEj3&_S5!M
z<$Ce-coA1tR5u+mq0C+incQV9?*XCAy@0b&z;I9=;KnHAnHx(Ut?E>S!uw_wJAPQO
z(ti2U-O%)fwBg2=KD_JL)`y6Qphq4vEK9Pq3t{n-^r-IXiGzG03@#HcSnYg7ZlwL5
z{wSPQzmUyFi14kv^Pb||I4AKi7M-Y8D9l{#(u_ERxWGnv6HhY7$<VT0)?C+pVSNJ-
z@`aH!x%;Y<X}MKPY}%?r-RN$o;Y)=Vs2YjN7#~ch!SB(rcnKKYEwVI7zcTpk;>zxr
zBK6moVp1F55LR3uR%yVIB=3r$L)1w2q8c|kYC(F$G)**E^$P8OPDyi5>HaH#<w*qj
zy$1i~o(8KACK%HN*50H!_|DD{J8&ec>914vO*3r(ad%57LPz#J*-sX<h%ZQWREa>v
zVt^`6DJ%VV%m>~wOV1Ep<LM?SEBz$JQfBw0gy|$|Mc~6=mVExC!!dYV@ztd0A<-~b
z$$FVp=k(o;)|h8k>`K(#IA2`-pw>*gp_^Mdd43%KswE8h>m<3xGrjr121l)&ieA27
zt(6sHl93!R9WDgbNC;%X68P`&{e7Z{jf-d$uV**=tTqxWCAv=dJQ%h5M#n-K4v?RN
z3H8I2{ozGzU0PDB`yCT|Fo{q~b{Afv*iFOY93Yb8n6ZFeS3q>RC=|(u`RWyVHX3QM
zp7npC0=1H<i0#R&^H-m=$ssV&gBi*r#%bkdP2QRxIuqC4SmD?8d7M>vpW=@5kQRJV
zYn6hj6}pwXu6351<}*iWB3rS4ws4c^D=HlSdk|8=H4xo%q!qGXP=|H&N<;nZRXELI
zNSFyD`XO~Qp2O~3FHR<aely_H{G(Bc|4G9n7{k1PJK~$gusNcNrUaR)CZO1yn)RQm
zSMM|%4w7K)jCM1G3UCj(_|AmiZ$GW?LnAhOL54VSMyR!^BSz}WUSyY{9>0y~f;8gj
zi1{w}6>Btf7dx6Gm;B*rA0ljZK4EcCaWkzmK9a4>Tv}kc#;h6Xyz~KTkCGCBS4s;h
z1&We-o@rwX1*Ah<81+(mivDa2OqOZ`J4ax*Kju(Y6la*(rjmL9#eS0`VOt*;%?TH(
z_h+I;EtCEGTLbSDa(j0YnmWxwdu;)LI4xUEHL*|YXF<c_!TM_?)@8}iQK&w$$C)a;
zmVNsfu)QOOOT#;^)l6LKa$hnPd<^YDKgmFC3#EVKd?nt^DLSr9ol3h>vG$CKQADAi
zyvRUu5Zjd3Epi2H8q>`A=7!)JE)Zo+E%H~beS|dC%yIQx@{7!2j%(}StR4$Nn}IE_
znds3EwJF_U2;pPfoK{N_Rl<JUE3%o#|1m6^g$J1<Nsi4XxqjZT;`v~Wn59z?;du@4
zIQtO+mTT&dVJ=c_O%adw&A2KZ)xzVGmgZgjRrx5g{Jp;@9BAzvm=cz!L4{Y2KHSee
z9AeLO-`a(&w}FcTnr4Tmz=;u0m;drO;P3yi^cesJTOf@QzIZ<<4mMZbu=Q(F!yP%)
zo%DtVSL_{HJuL}g&)6AWgo*%e2?2E%8=6)|J7}#apbWZWLj?CiSB@Kzzps9AM*#j9
z$XXu@Kx~WOd8asEWP<(Qui;oj8Ns~x!<p+c2ADe5`U1&I=C-{*ZclqwFrG8+G(rtd
zr^!P+>RW|cj)TF_YY%Iz33&3#+RtC9EgeCfn7z#*EtiZL6I)OjICyiGiR)c{DUtt@
zRTpMpFpUDVL6=psVr*99*}qz|edE0qfvkI%m8t8^Ly80fQ1GlRZ=xx6xT3>1-sKa3
z9A5qZx>kjiaq_dN)_t)e3u-Mt1^j2k8F=h|Vz(rI_Ff;<7B_1{)azl5FK-mpB#<jf
znGdR&g159A_GR;(BJdb8ojaOSKqznE<Wz5+)@@2jiWK0O@O}BOD5<}JSKURCp`rnj
zjG@f04j+iGa4#DVC3B59U8OqBeqF(q?&iE^s7)_27(7+VOMecEOR(o;&Uz>^0CDdi
z?B_(`JXNd{?3jKC;;`aM!(@}W)UeEd19%*FKSC^BAjg?;-Tcr_WXYzx7AlB2a@``Q
z=59ZN_Xy5Z_kRAbq9lp5M-g*a9k^Q|vP-c#8A~=kwR^m&g-rpFnsPRy>(@APyUS~t
zSQdAn_N{#65YxOtObYOnm9AVtWMU4gT9|EcqL&M|01DOjjSxXio%DQ0le6d@`1RzK
z$0oR(%NZ6JqqHCvV6-~8cm;d*uu}yzzZEEdqHi|fs)De<cT&DR?kFOf?<C&O$xAo{
zG|f$@jqgPEnol@$E9KJPF9Sqosv2&nYCu6a2l$4#CV&c81|>_vh-JF60p$CXNr!=Q
zbW=vc_L+dJ*IrJ#q@ceMb&8MW%qJg^0k!=Z&Iwi!KPOut+-NM|In<{Dnkm~;g6lqU
zKkF%zQ4OT`mu7vkAbUKjB2h16eHjr5^XQ*x=Q2ELFTM|W4v($e@&-F#8Zn6Y3Uiu?
z1;lU$(gRTRm{T!L-@v<dL2EhMG1*etE);R~=YEt<vy)bepb4(<56X;F-`&9rD1pWH
z<`V6~MC>j=?1+&)ab9Y;S-mQS3z7yiUvv^<p3IS;!|Ul3>_9|+30A0pp71Y{Y8r{e
zUW6w%X$nFnmhs7{_;LwvZ%(Dzn<HCF`J~7k4{lJjm78=%Du1#QI2+r{bU7Z<^{67>
zfako)bxeusPG+0P&oCQYPBScw27WzvE>)4Ok<8+j(F>t8E<a-#I&d6GpjA^ae4#&>
z4xT>aSX!s}0ni4oL|d6aIH;4g{I+w?F?!LpRm|*>aI@RB+w)*BZcCtiiIGFJ%3W8-
z9Y)gPb=r@rygL_GB0qX2Nagl4gH~FfWSZT4J>ps~W*P=QHp(ARC0!jX|6=}HoEfyu
zT*yPaYE=Hav4>tsuQ|v<^X1t%kxPO$yQ2OX%-vH@=6+J<q$g~NnZ~||>aHlSh0t^f
zS{X^mli_+j%6G?Agt;FqDL==Tnv=ijjC`rcSDFqF80GelVe*x+>=Ry;Et<FRZ`5kY
z<ZK7-FSkRx4z_=1EfPTfNDdIZ({lwKV=AlL*)1`x>46xh2ES^wm9I>&6YYivv2zcZ
zIq_7rENMWC8^P1UR?c+4>S3{$iZZ|ptg=c}v<ZN#e+3p}0G=Nhy<|b=zewBI_CbIv
zBZ%XHY&E#jyMm}~pm1HryPkvl+;3vKjnxsB`cD|zwD%t?b1Iy|V5e*ML|hYyAb5tG
z8~2#Eh7&N(L3Z{v6Ux$p*L_wwPYD85BO=N}gO(Gmh>EB2{Yn|yL2|)#yuUG8t~++{
zcPjn>o|u5W&o&CP>|gkRv?|$oK=Ll9nCG=L;}INJ=O#-vfwa2&nd@U(Ff>5{?8dWu
znVb=7F0tN8A|yakZk6*s`Xx%xn|W2HSiY!DzK;wMGD<>u*MYuoK8%ItVXvN1f&(x3
z<P&G`_P9jgip3Z~@*d6S{YUT*%lgVHo&N1Sc2CtBC&SfsODv9=R4QbMC{n9-Yl}5<
ztG^yQXud~98)M2j`a7v8sOi!nwC(}B(;85Cyi@h03eyu2pV!%$2$+!_nl8wofFmk(
z4-99KJ2ve6$8y|b7AFErLiZm#+jBTO552~SP~a8*(*%OJ8}Lkzed8i3xh*C?E1_3C
zwxG(6Aqfa|HdraEL{}+XD337cU;eoEvX^k1cxfg$oPR&t!duxXfAamOxNBx#=Xwoo
z8%zB99WHhR-W`7W1-B|Ww{7yvBp->CO0obT90XPe9FvG%5jI!`eZ)(%AO6}z4Uzsa
zoTQ>g{=lOadMf4*F!I^53Z^MNcmPGncLK#ZpmGtAm6${`Uc_u;-216J+*7yoAk3h0
zzBC<|{~<V(jG}Y83k5M7zxT#BSMoN=YQn9h-ETiP+?xz=u5q6{QFNU8&`7kjLYKZJ
z>yyQ-_{NCjVro)CvM`o3A2B8%KU$J5a$unoG*{Y7ncsxWaIh28x(8`C#$;gPy;`eH
zOb#rxY6cE&hiWy{%bru5;asC}=XB=dz-(fq(yX_isw&Pnu!WEv%T}g80mg0?<Gc$h
zj2M*#F;!w5{XGZY@cJ6TC#5BD6h?I^(7A%*@E<Xl;`FS|83q1{?L=sjV<c#^MC0k=
zKeq7+Qt>}WB}I6`l5A?`2Sc@5t3_R@s2=Wiw{@uGTa%8;D>=JB)nwi2gm6A`%X3C2
zdi(e&*Kk%DrzR}{|9Hq_xqiqCgM5Z}*nWZ+2UoBnihM&;VZGyHQlkyZq!#kJTkho3
z5GjU^l${Nl;IB$d*{<uX<JNM=YGVbuRK*<$uvT<sbAhav?qW(`gO}7RAb3c*xT+Ix
zIc`F3g!P)6m4CH6u=eVSGYRh-01@QN-Bqlh2&w8~7}~HAkpqp;=2y!pC3ZDHbI@L6
zP1VRi{b!UrVJf^8GO+iEw7Hy_C8!S;tFQak!c~+-O+VDmj!kg+Q;6691N0I^TH7BV
zJ;-N%V;+_#0n_I7r~+Fpj9o6gXydMZ)VuN6jE7SGZSe3Fp*eGEWoBbp)eqMzD18ri
zojJ<duW$Pd^uQjgV19L_&daMzTTR%&0yL?2K~o&(d9-jtBCGqB`3&nnQxVgRtqIJh
z4`iqyYQ<}%IoAtShhoY+pd&Q1!oIQE<qnS*_#g)uL;wfNog(i4WXFJfa<)>vx2B`#
zJf0Hi%y{?Qi!6A!OyXX^ygE4QlBs!`DJS9(>=d#_x&fOIt>fX)tuUCi=h~mvPaK)h
zYv?Tro(xT<iN&_Pk^HVliv{9zO)ETsoo(}6vJu2bJd*cu*^1e^FyY^rH0x{@f+XvE
z)=LaoHq|6JTHNYMHDXKA*zlN8`S#zseaC(wPwD#r9ImW;yri0M6Gw<|HJRQf9l)x+
zoxc#R`80i34cxSFur|FU^NYyEF}7@3)h#i6?dYu+@~sT;I=?~6h<wWr>uGgH4ns+Z
zGx*@o30NCe@aZAowDJ{HrP(~6ONmYnz~q!$XNX;VxLn@8iWhYrafRAuJYPyZZZGx5
z{vyNz;J)n2N@rZCSK8s`L$11s4GlA4A9d}O%cYqCF%{x<TrOv1H)drUAH~ui3Df}%
zq;dlcG%oNIC#n{?m5g;hjN~AgZszs5Gr5yirNRqaU&cSkx+U9gF!*<d#)-b!RFy{>
zT)haaGistC2CTkptqD%O6Mr$}#h&RX3*9~(N1!=UeBb`k0v-&#?v~A%sM7$$M3|ED
zL=9VJWq2uhI!lR8>pL(~JRk)05$H{6UC@G_IT!oGsG#G~cbdUV`K6+MCqmy;N{)`A
z3aKReQr^Y8s?TDA^q~V1HwJ7ry8yCCn-N=Lr~=W+9Q0Y)S5LZ{QCcK#@$b4+<GhlS
z6f9TguXF1n?eEzsF>_E&122Lze)~wP=1o0RKmwbEN>C^V!&5jo^;$!@3s%{oYub(@
zXF!jU2PF<iZv@nxSC~iB#X8M4F1EtKaEfot-@0P_N*ne^*{pyr+xp2(1W<~wRSmPy
zSKbAM{11ch2|3XxZ0)A3Ay}kGS=beh?g5}=SvMvKb4k~>5~f>UOAbvJlSIi_9g{TP
zaQ{ow;>?LFD3ht5$<L~L=<&xDV0|Cg>kRx6>O{u8AUQ!Phhi@ikw|Gp{@QD9Lx=vB
zx7|DP6--)yTxM(CV12tf2+0g+tYw<5z;A>+-lqzzc5qSh>li!`cU_%)jT8V-=ylTB
z_D(qiMOoXQoy?e2rwIeu5ASVO>UP_u^Aujc3ng<kYL9XayNXsiR2j7wGVWu>=PTht
z`@qV_oj4wxM8vJO#DcT2<%{5uOOq3de$02RcTAUqC5J}JJ3f<Bg?^?4e}n(8FCkOB
z*AZe4=Q>ix2N%f7rNN@-&b!qV0!DhkEm(RycKd}0g#)gbxe6TdY{~r8YUUp`vbK`M
z@zyP^m$O%UwA{~GO#kYpxdL2knm)_4WAN_w0RKM#z~`K4lAi&H5D?Qo(k)?AjH}py
zo@G*duU#9|243g>3xyjp@cSBh-&pg1s20H{Ny5L57#9zu<JGt%QYAB4QGF&(kG=t^
z@Yt0OnH&!j<E|6JTrO%+IP`SE&SP`;j-G}{r8hDTekOA$&)AFda7k~tU>+NFG_{eH
zNJN=m=|}G#l)d^Cdo*&wcKe;c+pe+n*)|s|p_U6!rOM=1XYc%*+Q<IW2~m(hHX2s8
z`4IV>IIORUm5A#UzTV+WjSz{mAi^K|#=qMWX`Cknbk-x%l!~uaeshk&9X9Eh$Y_2m
ziD?y)el<gEV`Rwb&T`iOya3-lv{@*Vw^Rp<d|JO_CzFP=0qL6u+O$}V(WT)l003C?
zcaA^cJx5t4JF)$9LL??YiJxC6@C{HvXq46m+(1cR=?tQzcX_&;A$NACV{zzo7gbK;
zA?Pa^0~8rrxUWNYaVD8QG>l+#69=QmT6EalW-r+ZckTQmL_;?i?b6|V;l(q_&1F=P
zruiw62fM5HC5knf%oB&CT^#)LEoZ4<Y%V<q!1WoZ(SND78r`V>mEM|%vKaD+;<u>j
zX?vKgZpMHnr=g3W<FeHoOA{GBKDusnZN|o*xHwOwfBujdNo*nDE(ATsQNQJaPZ9TC
zX|P>fQNE-PLTfEGR>>8V7p;E*Ag1Kkm&O`vl%6(-ahq~zEfzB0KZZ73l9Cm6#2`LA
zg`^m~AXl*UWlb|i8XNHFch4Y_bOn2rx2={Q<wP)tT3wr3Gb?d)&p?9OgFAu5ItcNG
zw12SjM~y(>a2OsZo>{+XsuK3Ax;L5UY~(g^wCRM88?5_QY`d`XJj34g(kj>2Q*qEV
zM4ZanI=yQs9y1|2e53g1c#lcA1Ygwo$6g7W4(bI?fEku9$Tg-3yXS1Tqe<SyAcm<H
z2g2D&RQTk}k^jR5y;ud}u_%EDYhU8RsB+E*Q4;*$N{h6ZYGYR1N3uvt{+r^tO+nuw
z#m_=PdNlB_zq&VdGJ9z3j9GkQMJrf#v)0Vyev6Oum#30XKHmAIlkZ0z<<IC3Xt_gd
zo2Yg6>zf^3m6QD3u8dC3Ysdlhb{PEVd9H^j>X5{R*ltw1)RQVKAyzRv=`i^#8Sl=y
z+XEz3PhUni<j=r+$!Bj#-bSC<BaqDLN||`_ib_48=Zn4s5sEfXvnOBA8#>W@22g+a
z?Fv{R_>DI<#i@BuCJd&M_RhFO1re^!{t^%hskb+1;qrkBL(G_Vj$ellpTZnu^}ts(
zMXY0h|1Vz$wPO;Y3952i7Xy1?Ff~7FP*KE|Y+UCMS-Oa>=cGKogcTHpXw)I7O-)uE
zX4m)d?0=+uLWM;y`og2V1wC2RI9xh1F?k{m7$#CsimSvQ^vBi+VOxp2B;ZRbi^Gl(
zo#m~FOXa1fPH@Vzccbyn<fk00`kavi5nt$iBe4z%OQ<zpuI)qd7B))pagg?aFQi%;
z=y4oA?U`n88{cec%YQUBxjGzwfp-k-4>yyAsv)B@Z59$vnCy{Yy4+2`iP7zUz&1-U
z9^j2za(|5s$4ei`0&pX2Axw)6F-+o9zM67{{}evsU@VmE&m=8XbF2La{?;dv8Si+|
z2^XdwJ{rM;ngUE;rV)M(on>(chbo!Q^~*N|AG+OGOd>*QmwjHE5tk==)lO@sxDs>7
zXX}ool&i5QL<ySb`2$!ew9Hr8!^S-=w=w}B`t@2x?e_yvd<{+jW!$RGDRkEGev?PJ
zaG=nIc0+ytE|IU*fXG6Izz^fPw9Ym0*Ar<iK@Blrt+4~GJrB}TLc+5cKqszB4Pe5L
z0Z>RfgF&fA0+FEj2CES?T=;tA16j8yb)<^nT!W2fEp!cYKi`H`sbDUFyM`DpZk33Y
zEuU4c&p-2!v5`0!_aMtNqX9Qpx4o=`lhV+Pnrc-@8uB^;!FP^goqV?c^7O2JK{9b$
zu&Rii$65<)t`qqh%}L<Zp&`6W+@qla(t;V%)of4mk3$GV;gYLD1K3#2;>=hu48XM8
z3Q7o+$97LWv~vq;59oZ5HrTM8PwJOD*~Sq$F);USM@^Q$vfOr}vM{4c)HDh|un)Z`
zB$tDgACmfcQ6~|EQaH}T<(aOVw`L>u<!94^hq|aq016o{(T`I?Z!2W>fxXF!f8U-)
z5%7X`W__*Fjj=ld&ISjS7g6%HwJ5IoJPW(RyLW$_St;!cQyxdH^shYRBe-jiP%{rz
z%wg(_`vlZ-J`#fa{9o@5^^d|rGGXUMV@MFYv{<h`&g4kb6R{AYmu_vZIf#YG>@(%c
z%?<^SR<|9;1}<#glS@&>4=#9?tEB1Xf_pVY0L){!jE)D5rVlH3?IW+2Wv$TjLR^6O
zB5*l%w##DsBR`jBA96K~ojDNcYF~;9qc~yTnn1o@Z}zn}5Rlv=FI8@SlbyX7Gk(Mt
z$w6Q}a&jVqERY)9jIIr+y1`qtaP$D8g>dLTs-#|PhH(XoBQrKesa*M7V@L8Yk7J`+
zE+HNJQPS5*7%<Yj8Hl-%i41v&U^B<kw>@}|EJW`i`;fz#A`aTSl9;&U@8{{tKhOj=
zs?MifRc;L^a64fes3ZTZA-e4w4BtY({MFkRS|3p{9~v^~@hLDyP%a+1PsebcUlv;`
zYk&Z4((e@r4H%<~S<|(6tmE9C^Kzz|Nh|;vq1b5;y5Qh@x7@u<HkWV&*VE`(K2%1U
zuxPzF6uF~@Ej9r(*npetSKXWFr6L!MZh}0|9?u4h^rfii(*cl?QcAAS*zwP?ahTe;
zEWM9`NNHnFf2+Zm{vTv)#cLYxT^4MC6;o%Rn(@j1do~Z-j8I@KRhV}Z6(#vP#`*?S
zF0(>+?j(y&^m~sE+P}-Uh)UhbFAXL`nl~!-!%Zb$z{;sSzOMzFtcyU^l9CwK9H;~g
zzAz)umm6XGt5e7D8b*OkSf^GA$iMb`ij`f8VT1BORs<%6uJ)1HG*#?6w0c`|TFlw5
z1OT$)dod0nk&Tp$<025sz{}Mc2K~MNHDEZAZ_Fj;x6SZ}S9?VaVET#(wX})}wJvpB
zk#9uu`*|c`XcaWB*N<WKhgFV}m}W!mb&vW%q!Zz0tH@CrNlWbsc<H!cS)K_Tk=d>b
zgcD)zs-YkfgEMp;@GH@vjKACwZv1GW*%61^Vuo`A28R1c>Q<3GTNfl<CW_D-7-sh$
zV#uFxW<HNf!v=*Mpg`A=W{V{<R8}O(4!dUme<B@>>qGmj?=6eJx5S_*9h%|Z7a}Lp
zEs`6W3b3R@lk)thq(p!{sFOx@V#f<oEo^c$yfCafEN*iNn=>aX#yT#?EdVP4fpa!h
zZ0w341^G#Rd3oM^EDQUrqJ1^7G2@E|R5szfx{X7Mhzkuk;4x3UTu0zJhVg`{dQuK>
zM=e$q5;J&(-dj|}v#)tqSl1yQpoQq02e`_Gb`6~lj!QZQ*_FB&I#Sjy@@^_bA&JuE
z8c?%RUc|~GePF~6B{W~;@)A$~@qU&b0pFgH3(fx}Szs+ldi4s*%5{YD`{A|<>aCmU
zHAj3pJVwP5otq;5Hoi{k2N|dm``DQ5Tq2LGqcouuewqWWJSM4ds$JvgH21+ZekWE)
zmCkK?Yz<xo#VGV)C;CH|@<i?EePyC<2jDU$$aQ%jlmf1k+5rzT{k=DJJl*Lr#z<-w
zcFIaADh1L)b@iq|)KJQ#zGq1rk!B{=2ZEFyF(j2I06yi3royD=l_Y*y>p_ixlABBw
z=K_yK%jlv@MVFuG^t`EAA;ZBu2NC$f&xQ52Jp7z|$D#MpR_HO!eS!^%)~S)>V98W~
z8I|PqUmEVIDKl3%_#Z*DIie&XuDh!*>Ixj6<{?U;4XNvi+RTnnSB69Fy<6Q#?dtMd
z%6$iA+XI>V#dV`g3KTn1{WwJzxJgc0^dXHb9+P(+SlntjGa0-kN;#T6`GEpwpc}%P
ze8Uz76K9$wbV$qu=ff}`Q~6XLAWCtP8D%pm)5auvNg1L6983$&JrBjigX!>hm5bl3
zP@1eopiQ(qjj0JbnD$c|z5Xu(sUHTvY@?~v{K%V<ZpkQjY*EmD_l&}pIAa)GE3Nym
zve|Tr;IHvO^+?FCw2G|*KO=F0gog&6N65&L>4_}Byp=DQue!A+8TOkoWTCzGO2q%1
zEc{H^P-yoUoEEd7Pyg6u!#PFUc^mLUBBLGB*+Wqb^*J4En@n=?#?w`&SqIzUlO%cN
z5qMSr`o1KU;agx!HWwTj2vIqjxO9pW;b0+S<^64{LZ(luPH%$Ocnh;CJDp=p$7b*E
zO`pw^(q{)w;6eRDh`^DF4A1N%wwz!Ahu@;1TShy`&3*;ZclA6DFuGzN^A@{)3BG%8
zu(E><zRd70vv}KEq5PLBHs&<EB)+h)ZI0VCVdh-&-rj_WYWx1abpDmu2C<CG8=_`0
z=1##RQp8e%HovE5T_&Zl(}CRw7kOlNx`zRP_+v}1x6xK!%SiB2k*NyB>h)E?h05OB
z5086sX4Nz{#S9!VJ*!i{xiI_S3LF~qaAG%JsC^qugQH*Zr5>LdQu=D`dY1JFk7HV>
zglt!=lX-&ZBs6%ie`H8xRY#)v`Y<hT&f#^_mU7Xn9n1Rt7oSO~S1VPBBh-uEdL(;X
zO91r+JDJLjS~Hv6j@iq~BAuqQhEtQAvGHL86&!{&1dmfbTlEuC_IO@6_xLM*hOrAP
z5Jdv%x>3ghb9b)>%?^mhpv(oiScjx1DQc&(o!1oUq}DEJ6H+kv#ZIy8A^?aK-h~WJ
zOE6TnN!~z`V%0&N5A|!^x~C^honc?2fj;OOrU8hJtt?=m<u^4nbp*AigcermQq4^L
z*d1Lh<N<nS`*9mRrfApyiFO<EV(cLtG8D0j4qmF@2N9tMsfUx*(AMUn(Ao;Jx5saV
zeu9+^$X`lz>YK6<|6FE;Yu%j`>ymSy_S$n3or^32SwfSr1D3H$A5(vSabWAmpO<B|
z<bOWUwNnCubHcX)7Kf{}*1lbq8qp;5PrluJ$pa5}YeFWOs${=STm8kaHIl8bmZiLJ
ziC2j%bJjd`1R$PsAjh(^`*Jy&rq&<a+SyTjCk6F+*Y#3Fm|pa5n(*PFIg9ZRD!f|~
z{bYh^y}PAsr{Rbc8moZ2OnhUuOkM!q2wquGFbbMUq>>e3Z{(SN(XW5HuBPt~q*j2F
zcSD(e=|ZE@K<A$TFa&nk!ANTRr9xF;hcI}gQ)foRM5gTjM6&hY5huEOhFO%0RAzoD
z$7dttsc@QRp?lOoG)}l1!&OQ2#ot_<lVrIYD5Z`YergNfdmeP;1&e~21%S{X=@YJe
z9<-XSSi%*B6IVQo1xu!Pb3aeM2Z+%~4*-0yJJ8w>SSeJaNJecI##Yi#lYkWh`Bg*A
zkUdU2;W`Li#)li(4t-j2(K;bcI7<~Ff2y0``u;Byi4zelT?4q6`W>#_rH%bt?U|~D
zIo<CqC_AN88v}~fC38>op;+g&XH3`&x;^F|nXN0tmCmFv5)4|rUCAT_f~a?5AmPqr
zeeKP(aG?x5f~>F+BK11!;YyCT0qPO(?)a=cF$vzcLy(Bc@@{~^aj29uxw6IgWHbgM
z7%D#(Cv^L9MhO*mmA17NhqWI?6duxJgBvjAa?bkaigiI*GOr0<oYJHy53|$q3WBLb
zA9;IqDo{%QeE%)yc^esMbJ19-!Be$V7!HDi2zxksv5)Mqey!5hKzktNZO>l%Brhzi
z1k5fzUxb+;S7WevOI%H)4&q00c$=D-#}>^4)aUgc+OTdMiA(=kj}|BgMN+EHb+v9k
zL*qIR?GvyRygaROlZS9E8*f$R(~c%y$3Tuq;~QD-?e<;P5yBt6UDdN0RyLV1-m>O@
zln}g`k;0zC$UK&9b*?c`08hKa44iT+5We+k<U)5$nlM$S^eN|jlL}YOw#CE*9u3l!
zrmx^(wvA1#k7W&;F`fg}xk%NfIq5z%CsTcOYzX8EyEH$d$ZUW#$rndO?*C;)!y^b;
z71KH&QcfU^QQUGNB02`IV5^I|R)@NnhJjj*R`brX9P##4P2WEZOwE26_)cdnaj*t%
z%8N+@cF2ScfpaW6K+(jI`@lU25}narArA>a9;{=Kf?%@y0i{7Jrsx1h;4Hd^z;Ung
zQBm1J@{UFiDpAuB%&pXtbo_YfYi<UgjP|K=;jVnfPiBv_;v+^0D{l>i4k0OGY9e2e
z5%58CO{|5*7%rj|)m=8v3pf*MT=pMyL<hy3=QD?=H%bH>Jbe}V0hT9yq`xi*%q!D+
zXYB;RN#S5mrL`Np69CW&3-ox4x-K{T&Wa(ndH?$-3m08@h#c5zziA-`cX4%v(SEFk
zpK)EGKn=U=7FyU_ag;=3j3{AfkY2M7z$aRg>encQ=Sm#9)pQGHzgjoY>z9(PN$z^G
zqd+5q=swpEiKyo(-5&qWHn|U4h+w+_urYcz3eK9MNLawT%*LV)43UL5l~&E^u`^n?
zA!%8)Z`zHaf{$zj4w2{<H}p%Waro^1;KfS413WIJ)js+lqRBeyw{s&hj)lZS)5`~r
z)0A(1tX68x8lPl=5Oc-f=>yU<YU~z@U_N6t7UZg?&B{h=dk{DVbdx;BAc~F+-&)Pj
z_$|i;{*m>knlmHaez2hR9s;^q(0EYOaVnDjUvl;;!E@_yP@*|zd>jIU`c^*S1uefw
zvJy<@GyDqJb`e_5k18pH&_ACQ-c{)S<kh<KFBPr0&9;YNcv@kFP2f~rZpjo-?QL`%
zSXYYW867DpY(>ux!35?mMy`luHz;%O0lNkbhHPvnM$+m8BG7y=9Re*8V%&H4MeKy*
zj*gBBe5K>CMl{CO3f*Qs(~y{8iLe;o{`ROhG2@TI-$XP#_rvwq(mYX0#0-5A;021y
zQ>{LD;2a91#Q5euWQ97Obo`E`s0d@q!J;0?<-VJ$IuhoGWwW4h5@&C=f8dWNnz0{&
z`K9<L+tPi^Y>&2&HANeJB$`BwKrv6XrIip{|K1|h!DGrO&mILlS+QiW!atNqY~jy~
z0nHeO-VXHs40q~FKy=!1y4p`>ouZgie(F~hlt?NllfmNK3`US3ciwN2{)N-g4KsA!
zIb{ePu}{AIg#lu_YHp-kdyBDzu3AG09rv}x_}H+3tYDlLbMyjHlz%6Oa8wg%0W^x>
zbzp9#==qWbdyC5rF2V}HnM$ATAKV$)t`ik<+weTZkx3ktt3$MIFb$)V_9oe8Z0OT?
zG-aQ@&;yj_h^mL@d7m^^n^R1TgpZ=JAvQPz0=ke?ve%<uSN%t*&9l+-#Lh;AP7mEV
zP9^XqOQf}^2=J{86?0xY(aRhy$<V<qw}=Q+9SFSpysff6Z`@Be>icWs%kj`klH<@_
zL1jMesaB<^<pbZc;Y*JV%wi`*+)PMA@diIdD;<xTe>z=?<aVjvk{UZG0Q2nqZcMhr
zex6kZ8QEd4_+LK7?ycSMq7#=n1NtcRywNMwxDS-~@w1I6fNNM1RmOn~VG}!)I_6Cg
z4g~%KdrJ_1=1&w6Gx8HX=DOYY`1LLm28Y&`%?q$W;Pr$)iZR-B*H?Ju3`&=oP{fvF
z`TnWn1!Fpl+{X?N!<vt2ZI$`@2z%#m!p`RVi-dXGjnFO&MvDpHW!vnn0?7(Y|MNr3
z=9Bj$LRK~~7!B2qgGUG1I6mtEpdkamQ25FHQuv?F#ZAz)S%|Q82Z({-bu2nK=Ax{_
z_;$9jbLRLU*2u^Pq9Agu4gF94KG!g%b6X56&dTQ8JKc@vRlrXxM{YGl{_$gL_8@Q%
zYLnz{T*;SHKNsOuC0yBh5)_Gi%NJk@yRHR3gUK=}nL0fOBdj-RrndNtFq8F=)`b}4
zREW^El1!B#!$pG7IsFa~u*~FS_8;DW=TU6Ue{*E_zi7bS(iW875|)vuMcJS{(XUq<
zT&{BZaW-H05OXL=k))>${^8xncfcWwP4{XQLTj+j<=6&zDZAxrilsBqz>sIiZq7w0
zkc@m1It2~3K>ys`<`wT>P3~5ob3FSs@F{96i61mH9OTmst20N4ZIiE++%B6_3H>2x
zRUUJCoFjqi?1~Y(?5tdHLQx2A?EZg(=VzJ3Ml$}*Xcqa0_z8u8$g#2_PTSpvmwS$y
z^WlHN@ccDh_0yB!K&L)XQEDZ;n8l<vai!IYh{mlC2?`3yc~{BY*LB4Dv1At}CQ5q6
zu|clcckzs^oBS2v9gpKxoJia!{?oesc-d~ahL8|~Z1%i~#yC<8Vx(#k&Kq~rXiBYq
zz$d<0*27lh@mY1=q1Q2z{n<+t&9@|ZO%k2oOi-adR7lOYVAW244%7;}k0wOqh6KOD
ziZn1}{b338tkG0T@jJAwXGGhXGiJazzQ24qqKYdWRe?3)Jj2(~D)=LpejB;4k}Pm0
zWpb5a7FM_QUIO3n_&%4^Z&+01Lw?`$1GX}+-zz}FyKSAClzH0tqLe7*iVU}ZwSk~(
z#IDqV`d#3J8Mf$RqVCZ3G$x0{pQvG`>YRO(wtzny3-VxaoKI1MoA-{^sk?G~0jd9X
zY$ouV3t1Y7bP)?3CKRh#RDOBasD%)*RY<#yx2935w-ySWQ;|70jm_L*Dh+q7U2w0h
zpIh%gf_s)!ejx^S`=+1mJ$iFq!S9^3(v^%O{R<<U2eI<Y+7Tap`fnBsyga-nMMYcG
zlDq!`<Q!RhG2;LBe)6N~7Cv`iFImc<?zyctU)g(hm+W`2ih)W!l%NM(ImqGd?kC`w
zZ`*hghKQE&%CYcR)xNqi1byhTT*R_CJhxnWYKMiG_DRjggO-&ZuspvSTi?kL8dvZ8
z;1EqW(uD&TA<zCcPn#hU?VcIbu!E|7`d2|Iwp}_g{K7sgEu}Kp3LYfaH6oBztcner
zyUj+0g|QlyXXvr1Z7pNIr|Hv3h;pvr4e;K)a-v{;%`>@fcn&(st^Ww%xe)!mshLw#
z@cAL7=pnYHRhN@YymS&D$RUd79JRJq<XE`!mQfoGRVhq3QSh+r=e49<Pc}Q*Bf)|G
z-p9<fKsXucFAhGr`0iQh{0&{bL0HwRHE*pZ*7BY~tTY^fO!wahwpefi1zWtXJ3{II
zwYG4XU(9G~2zmE-b!`pXmuYDYxx&@QMOeY;#RttkZUWx=>+X<1rxnzX2*#HN;oX<F
zt?Z}u*S0HdoQOb#`*O6-0k0K!p<5>-*Kkr$8+zIPMl0~XV7|OsuVTjiWl9yC8mY7D
zT|D)*V;n5q0%IMp?Od&!e)ksuF3EJlAu5u(9vlQWYtPI?wjmVk_jyQg=j4E(g!}j4
zclobTeVJWbkZBc2rec#dVWB~zj-fhfKQOr!L4WtrEoF8MP;~$ymsflexa#(QU)kb!
zm*p7cN^{<hZpJVLujLW~3$dDi6QUOX<}Dc2qJ?c@0HsuVXX-EZ%}w)WOC}b5_D8?E
z>O0HY59Z3n^9^k>3=XzU$=a2Y`+yCi6<aW*29o{e08iT*%{Y<P?<!GbRNDa||33?S
zph7N8-q`TkS2EWu{AqvT!g%x~*%U3u!7MabAEHcyS@Uon76wbTuue)Zo#u~BTffPw
zd<t@;P*`FJ-Kvv{C=aNkWD8v+u1OVY8)*wD;4J3m9-BIjkd=&8Wx#v=sFT=CKMA0D
z)I3FNkiA+*ad{N!2oDrJhbW+necRmL7n}sqMbevNDQ-QGf^KX%l5$DQ;+azW4B<I=
zZEv_*yL1i?He_AEBOL0SA^x{bvRVo*xMva)Dh=$Qn?;lVcyvf`(*onsyOt#3B2=fh
z4)%Up??*7$#HicM^1K{m>V$enVNkbq^N*J@YQX`%D!W10iEoi5qPquZL^NQBnX16`
zoVpRJ-YtU-g&OeP>sU8!F4?sDq)m=~FO2-eCp(<?!0NC%k3bBVC99EqsS$%i^eU!V
zEH&$nW1YQinxG89dqGygX$C|l>lR-!-m2orgtZIZ^s9tT`PfqZi3<>RhCo)`wecI4
zCKE}ci<hT>0+R2_0$0P4gtZ)BDua@`SDLe79&CKXU%(OO=sG7>yS2O0jVCx#jA=ot
z>iUXgFmxu5_h{1fQosv-Nstu&X{B<T@0`s`ccS?R(?GoReoce=B}E-=F%M3&of9&=
z_~Wc0Z<K_}Ba;wD`aJO~=tm-nWVpMuU)W$xXjzf~uBEkQxQDo=L-;%9pd6jg5?{R3
zMm=XG6EkHQOdYCoBu6XI0cf#l0f{8r|F;hC4EU-Ds8m%xlW3|PM{s7Gke-kzq@6N|
zAgZ>I<d?hU`!Dh5Sovmrk6%3$%*N30+<bL-Pq`>dd4jf?cg&7bmG@ag4q14Mgn|u_
zcNhjeo+d90W&PJr)`lstkgAUsnusX-sP^~!<Yl<O|5lV_n(s7!{X?<0DI*HBaSklz
z>9^5d_iBxKd0s#d33-uPUUAA7f@2+bh1!xQz&O-iJ3fLPYhNM337TfgCs(JtGe4#9
zP(!EDhAgvcJ1w^Rn3F|l%Cl?v^H$mEc^Pzva0*!@f>zxm!(14DaFOPcwWM9Ja~p`r
zR=H*Ou1|wbc7VX^&pxcQ_1WD~Egl_37Pj1Nh+MP@D>nTBlBGAN-l&P%gT-q)JU(g0
z8Pe346VFW$hBp_}_9iwh{-6CuYv|r{R*WHXYmaNZeFuKsoUs%&JhkmTXy%A1jE^ie
z{;-;@gZ=^F#6xP=$4B!dyRFubN0`+fuxI5h+czl9V`13smvqSWD;TJXI)}XKV{*b8
zgj`k0vAL5Wt3oz}QWy5ZDg2yJPC6e_K4sscQ)zqC^=<E1Ytn(jfL|=NzGG1WD5nSX
zxa~H+i@GTOMnQixt3wJrFtK$FrLkQuPXg~k`m`gNW-m^vMKw^6VUG@!hQlpXx1G^6
z!q@g(p=}hxZlp9^HIbHAGnT75z4e^~2NYR~CX!kM4>|ZV4?c*9y!LR=k*dp3Mxv_f
z_NA*P;iB9j>s&@_l$G|E&RWlOK>+Pyg}e8yAcWza|7Bor=_|pSWs3Ld=fqC?CH<%K
z2q|Ui#<#NTHJlpAjwzF_yD5q5Tn;=VM<jrK1zuF~^I+|t37I#iO7#?cxBhq!KX-Vc
z;@QuzCKIJT;yN2ioUu|PIJ@oU1G?JQ70bwjxjTc*yMsK{<UQY>WdW$L3$~9o-v2_j
zgZ6$COn3zfuL5kd3J9WkuI@6S%tQoEkP|2|n$?WZzWl3uByBRzD1$H7WA^w@FnV09
zE9TOSk2kk*y9`~?*CYVgb^0U5)@R#Ls*ug#XhQ8#*uqT&rZ_Z>0=^A=NO*~+*e$17
z^vXeGm{qf0r+38Uzk&<oJ01IOoO>uZ?@8nrC#NM$(uCJNq$WE^2k*{9Q8lbRSYPZI
z1_^q?#z&Po0kpYx3j8xZ*k81~C3`fR^qP)Mz;MNK-ymfHl1*x9oAMn-WjoHWw8fBe
z@BzkR4jM9UW{A-=MkKRuLIjmf!)hbs-H37Cm!kQa&>yH<k9gMRt#b@bjdm-PAMPS~
z%yXl0o|>+q@q}ta#kTk0HlA`81?%|XmnQ%<cBNlHg%YteWyoZ_bHatM%*Xpzb4Fvc
zs^V8N+*P>Y_f-|VasYfKVXm(0d2W|*q<3h2lPZE&ek<uATM$H}JUov#`V&v>cL>$?
zZipRZw{w$6=*_JMlD9QD?<Z3JO^3O=)7?PG*f#!hZY1QQ2LMPk4Ev4y02PnXN|(e4
zV&v{iyWxXXGeJ=2nPWS+3bF?#_kyHHM+X~H)x0a`o5K8v6o8DKl1ZC?64k-825KZa
zUqYYC0nE(05e%d>P?|f!(U1t`Zc=Ns?;e{zp-Qd4=aEkzanvJdP9;oaRgCU|8B^eS
z&WxU>GTHa-8&jgC=b0I-*$gPYCtYYF;(%59ts)hrh_T2I;4;746PuTj#SXforq@CF
z9-Xu&coA*ccnpul-#9CqLGzE_t1<;29S$-aM$duju};Zzs-lstA40Lg`I)f{N_QQ#
zF@)=^xS;!k4Pc!PIMT(R4JuEC?@%V)SYAf9+C@FB)ZKBNIKTJSUB?qAldWE-V3InD
z4qXEY3<-Np3sbNM82pLN?RM;N6-P45Vo@Mjq;KdyLA=>Y*Z9z`M%2$AoCmTsA1fZ$
zyPNYRhTJZLo;-q$1Ym+I59PykrtvQR2a2D=h{yLIarz0SpI8~oGT)tI9sxzlaE7|s
z7YU}v4X12XH&LddBV)wg?K5BVpHua1l_z+%B+g<w)I<D=N!=NNWz-E0a>UnXb3mY}
z>fEPNCx6d+g|JX;>Iph`FkG`Kpo^^Rc9Xu4E9*Ux*Z`D@6N~Wh?dtLzT%V%)|D_Q&
zL|j9H;>!m%5I|Yif=JnZe_Sx*LMhKiSBxQbhY;MCj?;IViQA)tBfwmMr8Ok1??2@K
zmSZoB@wU>zL)I{Jg-rLw)U-W44CfDX_TLZiJiA*-q9GEgQ1+ocA&s9n9q$?zxx#yN
zWMk{)viboLpc6;`grSMxQ7j+Um0QM;p4RFJNO*~O8YS+yghg-!La8#ydgq&Y_c_sF
zncrYKx$Q2|iYgiT&IIFM<`Z@8mZZ;gXx!dl{>~B_LkMJOkc?oSvH@yt=uulC;P7ar
zgHb5pGOOu$R5jndcn&bDGJYHhuOrs=<+#UGGpy>sL)v+1`<JFr_L|waS#&F*2eV=O
z(xkFG%lylNOz$*lg>f^^&77LU3zJ(J6s@hP&6jT;0#Bo$-;7DDu(WZu%tOE`U={%D
z0{@dSg_*n;!)t)C-rp-&A;fkX!ascx+~k`BLV$kN_pF9_)~cWCTrkNEcJMNg+W+y^
zw|>R@R)|2|hndu$L))j9DjqQDU$^i1Tk#n;DjvhnW)-d``c&!uH)3s?_tkzjPaUHl
zviclG_-Kh#7WEG)It{i>kwynAiFrT)T^7~DAV;Fv7S_+hVkyRkpGc)iG^g4LjMp-9
z*+lSwSC_O6(e)c+kuxf~V42^$bpp3V8l}OgdsNfWOj+a&N6Br|^>>^4p|?ZJZD0}#
z+!4d$yMg6%rjRLnZOaG~Tv|h1C*7nCLIDfJ_KcWZ^A^qhET=ZdS12ftw+*yMpPXC9
z<QzaZ4KpGXZ1EVjiSh1r^}U>7kc+Be?k{cU%prWs5t4}~l_@H26$q_EnHirT!h%N;
z08@;-7y!9gJu8RivFsXXq;<&0APJ`T?wG@0gH1&9sqAuUcC=Ria61mjp*qbwXhkVH
z(Vt6iI0Wmv>8~_vKVy$)P#4)ZZ|R3%xLQBue8wPupl)~qm{)ZQD0ARNTJX3x(pSEe
zn>*L{8Clar5kL*L)|{Hvc@DJ%B4<9UL1@_zBpXUq7y2+FE~<kZigTI|1&{U;MKeC5
zm|d1h2%`mQsZkQw4=tZMcoxwXuHnvb=uo+544%qN6K20dsg<czQVRXhS&fO^#zGL@
zJti&ma(A9U-xkA%hxapX<68^H@PG-CtA6%~(7;EZs%VNDp5n~=CMi6{HP8xu)b@mc
zg=bVH$2}x{qx8tP2x?oH(!J1CZ#Ux+$S#2<X83?@B^ixA5VtooO^G=3AtSxAd$ZRk
zoOs>nnbp(yuf*cF?yq6Gi5z|O48w12z2#Bl*nXU^C$Ax&BYU3_RK|{zd4D<dLa;86
zwdBR#x(jQe$|+RR6uvpTLTY;W26NY;xAUd-cb)}d5rcA!FSB&6+Qm-V6eCV<#-h7d
zSPS8`=rh{In?lQrFY*u!`@mtrnFAeBY~0xIm8q5Hu!D#3_J7eqI``27&v67FauHO4
z5)jSk#tFk>1>Mcl398L?%8q~5PCVqtEw6gwu`rx40J<E10ppFRVfJJOih%xS6MWpG
z%9<nzbsYT4tdOibF<E)!vlalon5X3ku!OapEXeOBd^oY~cbsN#%etss021RvKsaPM
z9y<Byqt!(H=3T5lP3z7nsp}sp^xg6~*)`M2@@9Yv`CQ3MN^8Y6!qaw?ua&#3_WxZ_
znA$YI3mB44))@eWL34VZZ+eE;W;9$^KyoSIN}_NT$Mz{FK?(42c(~RR3X=MsDT8K2
zEpe11*97z~Q)9LcwMwL~=3fgIY|u7WeS?EQ;5Uqh-#drxCY;7Ax=<4B$|;oZ$b;_V
z{bps<pd>D>V!5hrR^CZeM}DNF6Q}3#@&rk^U#T3+>G{`Ij9hTOsR|c%ZpCs$F4vnz
z)9pVGD@sF0H6`d-)<^x+ZjZ)8(u6Cv_L~0?td+%j2!SswVmgJFIKD>Hn-RS(*fi49
z1oQtCR+CMzF|-smr7?t^`5np&$J^BahjeJbTVf_Jv6~df3-X@>B#azb5j|Y5e*#HH
zkSW*&&$U*T7-y|p=Y`NePMLc+pciL-Fir{ygQt)B@x~v|KI=O(+D_%pZ?+J580o;g
zOU*CMDg)Y7LuT+l*%K}jw~>gdS0|}<NK!*9&$Cwj`&X%JNmqVpl9W_d!2$D}2z-QN
zzzs6ub|p7Y+7({iijd(`O@aC{h;FjHefxvpMHn{E77*#ArE9CT+?xXVx=y%-+zho)
zvGOI?wG^=R{e5<15zZ@d=nRf7m9(=nbFR2tXracL4Hjj3cawTI^(_bXBKo>~ZcL-|
zK%&BWnNQuNf4}t8O_-e3j`*3^^k_dHgSr838K=$s=tW%7fQub)wS6UtN){tFMHA7y
z=ifFX<oxU`z@0!94(~~s1xrBZ+Pdj0+S73B5J!IkbusGF6NU%?a3MFJr$^r7Y?U^`
zfsr}m3e?A%6yPVLpR%rXC$irD{P{5<!c+ktJJ5R^J#K7WFpZI#C{r7nr$@^Pp9C;>
zMWnlwNWF(P3)N_yYZ0OcT$l~2*o^FpE(Z^m=BC#Rz2Zwg^aQy>5+Bk`x@K6v6w;7*
z#WEE>FOpC$>g%!Uwk>5_Hx5)RSyjx%krQoADsSfyeWPc2^Kp7YlT7<eq$O7LIJA!T
z7h<+$q8MezV&?93m_;|PosmN@ML0w1(LQYl)|vZyvuL+xi$bz0ClMU$`k+U<fM5S4
zBKph*%3rTDLYQYr1S<Y=btcxt+s+FqQ(xw1e|wRAMuG9CcbwW8k|bq|m-s`9<OuaR
zIbGdWfc{#B`vExurk(4OWvwgm>iROhVI2j`^NpFAk_p3)UK@}e<F&hF&nh4G3zx7;
zz7lvBe4)fNQ#x=-0yCpv_YVWm|G{wAyIOAvFRKVI;}ztyQP-`XcXX#FrgIzB#;erO
zu{Fi&@%r$;ji44rcbUeJCeaqWeJJ?lMR6~(4Q=yPLx`rSC@U!ilRgCwnfu%v`n45)
zK3^ROzl;+oMKww93XCQbCNQ!xe+tBpV}xV}0R;bbcp;t#$(IDx)q!C$idgtXFM!?p
zw>pDiG=Lc*3zq<dT-CLjP9`tRZZ-(h<0(sBq>nmX=K)e+b~tc~oQ!zfX#$d7*P8sG
z9)$I46tHC}T?4OqusbeNHcnorj<UCf89vYnn5Jk>u9C6etSlUBaXaD$5%uE?vUg29
z42{lOe<m*M`?!^)*8jNbTHj=>5*M;_Bu8C@NI5QH2$<|31VQ*T6@s#OcjVUxp&B7p
zG42T;O8yrFbz!>H29K1CCr6a0bt45r8Gu)?J+0&_GRk$-k`5?%6-V_IzXhJ<dKVv_
zel)~2zw&7x+u+8BCNxorFLuB5{8HlF>xbcM*ju#qh>U*!BN~(Q4k)NNKH^XXaN)8T
zEy7gV6(~R>*AM>}+2%0T>_z=qjjwOLURh?pR=n^+k>oA5t@FnFV|D|$Ov@SfS5Wtw
z)||I)C)W`{*27l8WC_Ol7auGpF*F)HFQGVF6^Uzhi4Nh9u#q{L6K|nAE8T7=EX>t~
z@M^b;IKTpfvELBC*{QpeL90HUBs%+vEy26mTEM2UsPRkbXFiv#iqA5#O75D}Wk8Zy
zpzqlh0U50mq_W33@zOov|8l?)xD~fNY!jd@iiXP!iR~`_;*<%Lgjuj9R_&!*y$&z8
zDzqgIBKcS7DBz{XG;n=;*{gANvZW`rYSd)@S9t4%81gBbSnF?O^j66A_iBhH(?YJ1
z^m*QYnPQgZc3`wRA9#5&*d{ur35TEx8adR6yh^ALZ@sV#qjq=zp)U9}lW0NQDcHa6
zfJ3#9Oq+sH+vOOkn^GUTUDFpZ7e1oDLX%DKggK}MgX<U~2i8HAQP9`Nk)u*ZYb2R<
z8=fUrbU#F&Us*5)(4%o>Ts&gkc*}fzV8U<0ipX^b&q=usPT^-R#RT|AOCw35O+{#H
zwT(A%#%u!$sIn}ep<g28?43ePIU>m;wfq^&@>=8jC(YeYUJD46<4j*S50dB;Ep_?A
z)}Q3F$jD@2h<%2))1wa;j}agUjaM~0Rhq}~@yG-KPQp#u;~x__3?{91aa0W(%trLt
zk^jtpnE>13yaZ=3Q~LAmD;lGuhDtJ2G@q%)8cO1B;L*9%rqOZ^2rTEH<<sowgNBnt
zOU#aQ^DJb>i=|mvRQ$5WyIVE<k(96IwV?*EkjP(641b5+VRCC_&&>~|9%g6@q!chc
z+5l(ouu8>&c&T-hP!lw+9O%qTAKZ*V4=15^-oT!u*A-fDsQ~BdZX{F8D&uI`x#n;n
zwzf|-9oDlC$*?`+Cjm=?Wa0Oy#Roa0$mRk$s*hP;92aKtlCs#C(5wD0>NFGrn5iKp
z*0*&Os#Mqdor1@1IIA`MzxZH+99bDCKJ{y05(sgD#UrIuKO_Al4*@5(?)o#lwlDQ0
zC)2Uc4;8_ZQuRUb{1xHty9uv_%4NOCl=_Z5T{oC);C<X*{!^%(1Wo23z1|p*n#akD
zGscy87CPS#&qKh#DFt9-P-34wigQ-yI8l9n*o%6~ulLUR+;1t-#5)PL7CbA?UjjEG
z@a8_5cqKO~%rUoEdktO9;F@;dAIa-FU-0g?mrNyo<Vl;^@v_S_PcgMlD*PG|v2&0W
zs7vAVQbz*ggpiQ?RX{u3tS_rf=+gdh(iQaGKIN5Z0WbcOBvK8_ecq;en`jg%h_I9S
zH8oZV_CaJrm^>JwpH74MfclqL%n7>K#U`AOqA8Df=bKP6@WBHpft`phP&}y~%OMTb
zZ`So@ICmbjmY`_2Xz*CV!alf7eP@APkk0zxLeJN;uUszdihDeVb8N!Bd*y2iB8B8n
zR0`)Qi>g;aV$%ux67H-!o(oz9_RT+$T%*(}qr8EZGZ?q@tMSvZK2=EgidB6`7&95e
zi?;w|4Rrph|MvBpMpOV*&QJby6QNXbOD}ngF{J9kYiQ$Blxy0ojFr#Y6I-P%+>P)<
z1h#Ezu5g=y6T_Bn)n4cpv(d3dzL(wCUrAvxNvJ`lz~33{F2vALA+WmPb_pdl_8obZ
z`!z83;nvRA|C(gSy4_Mzx>OxpATNMFxpsGn(Q0sii*G$t^T577&#3rTWw<>F>zdC#
zUdV>oTFaL*-8w1q5T%uadOTwU7>})eZEMRNNg;=6Ym_K`_0$&wXU){>_@^Q9Rtb0K
z9!A82fz+`H&obX9^~uHUFH=#MFAYj!VFP|BA@B>GuFP@G1b*`X$z@Oz+dXE!y4$ly
zH0rGVrgAqjvMQyxHCPC#YspQmdZ&fR*1S~8%PlNl%fjdcRcp!*@TAi>ZQjX5fjvmp
z!8<^<s94GjFrk!lWD6X@sPEvC$?(Uj`qM4KD#-;MOisNufN)a>;$hrFcQ=?b`~Goy
z-NJ*&smbTq6!ez&J3fV7&dvrrvB4S-9A{8OIPbrF{k3w0ToiiNRaJU?$Qd(5E2Y)J
z|4a7wM?{Vp{+Y{%k9Ywm9}&$apC^2VP8-isOOJyVp-hzuj-c!yz#}<~bDi3tHu9|j
zjD|}Z$2-uQ5<JhkS>+&$`;e>V1!%uQL!9Kb)oGrb=@t-!w{V_Sc@CRe)N-1mS-cN}
z-aiLWfZOg>EF)v0#USsy7|kO8Vh=BW?hC~E)wdgUZq)ok+WIVCNs213%*WlmC<2{D
zfuj`f8^+wm*h-ScGy-3_<IE#OsBJdf9-NuR8AU%htpoI?ElHPy$4p90xulR6om2fs
z7>pH{X^{9Z?50h`?tryw)B^;K87c6dU2pc0>8wyJ4FV?<Sq>jesX2Ixj3iVg;Xm<J
zI}Ho}Iqy%ITm(vQVf4Umx6fhLd>6hnfm&jvzC8-EuMn62Vl`1E?Z8~zFtNhU<mN5H
z?qhyYBx+{yuJk#Xp4u!90OGApi%)EV`D;_dxw87HR;rpCifR+z@qPKr028({5gHJt
zO|fF+gb{|60S+p^IR9nE1|eJ#33qt~(o0eb<1Mu9@Rg|aPwd#!H^k3EU$h<6G~ht?
zf0$JFsRek-hr8>m`=Gd~_SFiEW@5o_`{Ky-ms;BlRbOp!70yAQhaqt84yXyA_R_=w
zK>Z&;E5U2CTK3T3u$wsbf}ij*X>OF0B}-<(=v;=M3L&0z+QbI9J+s(H;=ebHM#u%J
z{)%Hy$#2cXRt+W!jp$@ca)&S-=v2j#ov@6J9bZlCjw9Zd0fIKlR1U=;;Lt2Mmel@h
zE55)Qh@2N|FiEAyg|RM|k?WxjDUdUrj0FhDPN)MH@TrH?BoKzaKn+#nh*2RMp_>me
zJUdU*k{F22KkKR8b~v9~fu)pZaMFK1w_LvOK{q*KI$&4Y<hNe{+Uc+(LoPpc6wh}a
zE`KfZ&xcMEf#xbb;9D0V1S(Ax#&&cEsKR}a>8uQ3!dZ_r1d?-DZpy_^BD>gB@4V1u
z_7d?i3<FusqwV$4wu%hL7uHQrWlsS1CCFU*;&d_LJP<O@9(zXIry1lzQCua~nGI9a
zQPZr24+J%sDq-j*32nN`p6fi=h2AE_h2$oKWeMS&LqH>c1cg-^p^nSi8<v`xx#qsw
z?U{{HZ;v%L<FN>qKpx|yYYR2b>N&sCYr7ZG)3u%LOo7!h%eguHCHqlI1JJTJ&<t;?
zTX7vqiMGzKke^qCyq=R}_Uv+s=IU8pVH50^6ARf>!RGW9&0u|S4|hWH+RYX#r-of<
z>Ch0x72c?Gm3TuTmhx`X75Nlkj1!B~*p{qHUJDk1&CBZ!DOtHba!I;_nEH&^go_VZ
zGE1)=ugGmVLKIIO6k&MW8Y#umrq-<f6oCikG5Rep&9a=#a@Ay{f|xtcnpe&7qwpW3
zhjA5QV4d*2j<5Cl{8P2+2ycac_4$&=8TC*Dd1ma7U@2p^U05e9Pm`ipt-XIw!lGSX
zudMEZ$S+pjiIWA}ONXSJ6cnQ)t3g$UD6g0Ccm+R2DC93dQp7VeRw745!aRJBZZSxz
zEzt+$U~0ar-B^fyVVE$lyRSgnxPxRn004`bu*MvB>9+ab@?VZHV?%gNk3Uer7zBAu
zU7WSVM);uHE`3_1!GQGPXZGPon`7mFWBX>g(jt`oisrfc3ME{Z=)dhZ8W<W+5c`d8
zOly}c7m3sl;5N9ZVH)UfbuD@1ND}wfVwt)3*RQbAWc8nLA_<ck#7Z<|pw-yfZPPiP
zeUUSUr*xUqka>jpNF*F3T)BrmZQ^#W|E3mdP`!bDkA@uB<UUSH<BpgehCKpiz9O5y
zXLlQy+|Q%2e!H|y7KBx&RHW|Ok5;pzYWbE6u{3Py-cHABYa)i+rBc8PvSHG&Y*;qn
z5LPuQ)SKG<na#dmuc_OhqyuNL77`K2-ld@$=)T7?;r@NGy5vv@Q}5iy>^xq+#i0E4
z@mU6LY|Mh$Iv8DgAaLo~-uejO!4mgS&;nOa574T5cOtB2K$JIe5#Y3B5n<kixsdqp
zBa!i;>*r-{jD*v|kpp%qON6y_R{_E}t7}EE+x>5N-^OtPZsbxr)eoCpUoMkye}U_=
z^*~kvYVEF!o!@9?t-JLAbWSgd8{w5Afhmr|uwAQ<o2CMZeRZ$&?;J&Sg~q`6_$#9@
z9|O0{Q-rgWNSrT#?&9h9ibF;7XK<`h)h*-1!{Keh$*m0qE07}DF5slZfOM2Pd(eqH
zW$;B@p{V{SGR~8v+{ycHc*oAs^jqgjRe12YMG;+W1Nzh-l_PU>OhUDw05Su`cp^$|
z^sa0zUO1q*s|Uh}C$%gt&^qgbfK0uhX+;3d`cp9gceF?ej(HnBKuQ7w;d2E_4`C99
zSP&~kHPVLNJ~OWZq_Md81rT&HWbimcVslrYJhUcSDh-HY!rUl1!o(8bf~H?iHKacB
z&F4}PRxV`^@`f8B>%H|nlRfc>fMHC9(r7?-h$H57sosud(<7dA2W5Bptlhavdix#y
za+Na^OAp|#_Q)!?QnKGr?OgP3%t60ze!*<EY4kxQPLiuQya5K|06grR)UB}mf$W(!
zUzA<XJh2JO?VI{SPPldX1N8IpYX$=pdfT~`<xE2%KSwOb^*FUdh8YjQf>rMqZez)Z
z=s}ZXCS_6M3aU)dqTn1`hCI9pfqIZ(#s412zX#98PXd;D<0ND+4T$W0jQ@<FG|=Pv
zY2OL7UOQF*K{az(N%pOMaX-;j!zM%z>2U!-@w1~_cQ{StWPCT5);rG1rifR86Y>9V
zcx`9HNmPmRbnRPa>B~Xxd%Vso6)<QtfioN5YQyvKpH<!L7ep|4p99ld+fv=K_6e%}
z=#1CUT?~ms`FNQKwtEcfu9jVss&J!LhFBs1#U*edNC!{sZNp$(@v|H{!pBgQAYn&Q
z4{!ls9{~?9Ms^%To(V~$%X_`UAhzWPOK=}M?B6n+UosTSFWA5?uKQAE=r#0ISTNOe
zZ$Xl(@r^a0Y>GO#8GS|cE>NI+eSr|4A1z%oZxx%M#>9jC#2~&=XP6WNS+N+rf)T7b
zPi1?5-xc=+xc|V6AE<&(Phwr)?2^}eozOt#`hU?vi1t58PH-~ERSY4Wxj=2M<eDm6
zoBaCHq|_)s#<4(s$fL-GKcLNVQ0FR($fa_3eXla!Rw_a0vSL9!#=dS|heiO;3vNsE
zQU;w(uZi;ke9N9fS>cn4cI<h}6ZY)L;vJw^s;HboA&HXe1|n|0HYGGxkQQrwPRUIK
z5foN6KNr;zsj=gIMvjIo7l4(i6tK?>MOY&9k{UeyJgZ7(!q!uM@u*FX!>vioC*!-<
zx$T@0-r!!@;IWi<y2Z6lzQX@k7)Wp^_105i-u=)hM9w%pao|C{j$jj@qJ`P-RN@dQ
zyDGn`!O>av7Vis!V`V%b>^rGZ?TLacw6!CvA_`75ck&^{2Z4zRDiOIgq&yt&+6A?p
zonR9jxI0BKgjSPJVQaPYsYf|^E=UzkLKn}Lup=cRuXtvvLO;*B{JPS>&lR`_mjg9J
zzWnTQ1{T^-{iaYTF>41YF$p~o_R|naSW5tHtt~qp#z-$<FnT&P1@b-qXmb3-!CQm=
zZ^P&dygZ5%Qt+a5srMzJX0*Ox6EJ=4jL7&-3O&ppCiZSG!okvKuyw6N4*C9<TqcnQ
zVY;63*q*h|mp}~m*u~W|9EL^#wSG8eGf)Fj-V_$5gJ#(1*|~PJycN1Nb{_2(O;7kn
zIsZk76z$aq428yn`oqLh9z%$zH&%00TF<t~AZeD&ni3CdS&*x8q)+L}0is<2?QcVF
zkiT?S^Suvk7}12Bov0iQ;8iyakVnP};`ge_9p~~)YDZd^S4Yk61Xu*V(ilk_wLb+I
z-j0#=29><XXoOYW`ViCEwwTrKrP8yf+a@rp;BDy(Mg?6g0RKM#z=GN0iOwE5<n2Lh
zunP=-vh<&y={YGMB8ApN%dvk~h-Z$j1g}%-8U=NrqmMX!;X-6Ch&Rh)DkMFoTIgTd
zy)nAucA`+j!!9Um1yROiuF`HWnw1eysumMXc2TMU+cUaSB<BjbU(%f}fO(4c;B0#J
zuk=Uo1wJ;YE0KRyu-yZHlD^W`!d82NZ?`Vb%QpudZ(06+TroOi3Dn8=d;S{s>3<NV
z+99=bV1aB>LmI*WH4Oz5hH*X`Xe2d6^S@}slPE+18=%Dtvrv@Ms4sNBuN(DY#k=#L
zxfvq-MvK>i;uA_{NbNvLMg~UgfKF=ODp^b(mYb62`Uy~f6cOhm=d0Jcztn>Q`hxPz
zeVBaOqy=JH2>NE5dUD2vP;y(Vtb#k)>Wz&85Q9iWc1^7VEh4#ZD+Yve75d!jyj1kS
zJB$XXss>Ud=X5t(asQ~Z+`?IjH^!I#e#(=fUsf{|YtU$qco0Nr!vfvH0;Qz9H9P*$
z11Ce{-f`O4$tc2x<ooho4K+m=Li_QHVD$p*OZ^t0S3dpIPFR>+KHq;@;#qtR1@s>C
zJlFb40xM6!fPe{$>#qWhqs>WiAm}BKB3IqWGp^71n%2QF1==aSZ6xKs70>s}cIlt4
zQTxE+7R5dIdMu#Ls8nW^12Kh9>T5KNI+v#wie!Qb`&lfCA=o~qz%7{Vtr0$-=EM$)
z02Xjij4btOCIj&Q7zxYVJ4`|l{;@NGJzx?=VDQ_aGgjjXQwnTgUmt=i32u4~LtTiK
z4}|63Q$h_%$nvp4)4Vb9|C9m=y*}D4OR4BY>C>Q5EMzCsy%iTJG!WU!4$a-?G~Ow}
zu|;#<jlwTB!=v7PZ48@q72y}h$MEPW6Up9S_`N|?xrHfXR}8_^e@Dpg@(%2gF!1Kp
z%QZErC;YSeg43S5M~;1*nkPx9dw5>`RS1%?WMi`SxSoC^NBtTkGm}>wZ-Z22a;YGk
z`g$%XsBE0>{Nq7rAFo8@h*=(f_bFDdYUpJ|;ff3-t==b)iyWlDB{jWD)BFEiD{6Iy
zLD>Ms85`nd?kssEWgrCz-{q)Sy8V<jsNi?gXR?&&`%H1JkUOGZ6sI{V-5H!4+(w)N
zUqG-61&R;SVMI6B&J*_fTe&`Y2%$5fq)1M*^gUjoelB3eAA@Xlm3luezVENmMf=}l
z@obn0IgZuG1OO&S%iJ~acvxp%(R-qs03*QiBLnimiYJ2E=Iq2%%-&iyWPwhyXs)2Q
zkd*oFNsbvElVB0);Yq#W@a~T0FQib>jHZp=#DZ@2$*0xYfro7--vO91w1b)s(hLkk
zIORx{YZ#M)l4%pYx=tX{WLGIZ|Bzxu@b@a-RIOSqiH3!h0REP{QcsZ!<_j{co*I|-
z_@{g<w1!Z^1J%9?X8ubG@ph<a#4@pHB-b^lLeR})9dd4w_oDy16|n=PHq<Gz+Ncgp
zdHYqJpW$rq&3*Wgxm&x)9g!;5MI>4aJmYJ=PP;E_0z7oaDogNbN<?oGK+!z?2rI&*
z0L4yPrBIIDh?%jx3KRj0&KPiG!~1CQ6SfB|KH!$g2T~eBr#+IP4zfC0Ogrk<DlSW3
zd$WVER7g}H8wT84x(Po}S=$3dbdu{;xygenL=qh5f6n>0NFjByWpRuDv_V?FkSDDz
zYo1&|&X~9FM5=>{x!pQ;-F0RLffmS@&Y<F*A%JZKn|0e^6Q-;!eyqWv_tE%E-~cSz
z9PI9OmAS>iWTDwhwKu1^z+P44<EJr;kOmb-x<ysm{la}adzYrMqQd)D+>0!}wUR~Y
z3L<(rYoeR4ZXaFUVtRy&w9b8*Bz|=kW5H4@uKrPKunq9LYqG-g74Pv?F~{M4M8a!m
z{xFv`J>bV(gGh;0LZjp*`FO^Cx#xqtHxJM?G7mF*%BT@hrqK%JD$`S9LcyCz)-6ky
zHkwL0GG&2CDJH3@I7i2n8Y2>XQv1ZA|7pbX`PwcO!vQ%^HM<Ig)Yf;>iAcrh3uFNL
zyb{A}5qNDyZqGOK$T@jurbV-H|6N?egQ4|hQ>QOCwk=E>=2zweQX*Xx*z9zb^CGH2
zh?-88*57!m@Ym>m3O_wBZrF%m@tJ;PjkYXN*vfG7`$nSJR@+J#CCISR!`{R_ZVm{d
z%ew40Pv@4rZBA+}^@P<HsJY6*>a-^Z(9I>L*nY?SreWjiG>0(5fu>vwU+!ov1xCJ^
zSw3T;p;ihNS$!Prn?tQ8*O!V78_JcA88LAU7!eF;+f6)tcp?F^zb}dlNYK9d_{_7v
zg=7X&{3*|o{|@fsFQJ(m{I(NZRkGQmephUk<^#IMvZFcQ30AojASVQk!>k`W2;!pB
z?BzBu0NxnbW=>kK0nOyOG$O8?it7H`{^${`*NY6qGQIECE<Xw)dFoJ4Q4;%#I;!FF
zq>N7rrlL0OoBoq=@>uP5I{6^92Vl$b>&+6zsq=pQm4DTs>wJH(eSs6=*QG?;e1QC9
zTYieRyEMZ>Cee|zR7JEhc9UP{GI_?gNZaO(b}rjcUG2P}G?fKv(Cv;21r_YO7>qLM
zDFsMt8)*K;wa-M2k;G@LiM1&=KN(l@L7yZ>vuESQV6@zJc94!X_#{E2Xh{zSfAmDO
zz*l@~EBU;9MpxZ_KZ-dS8!AyvWF0)H<AQUxT)Nf~R^Fc8wKqX6x<r>z5|v7A2ydd#
zCmO6Ix%gQp0kR&JT;`d$bdy2#*{;a*ePZu0{~GT9K|u$PTjKZmlncnEw{I}dCB_Fx
zx$#jFm-a42nN;FxuUrLKl7n?;Q&29z4e>_@4%Q8sw!X8r57c4L7v_}ed_68!jTiSB
z&m%g8JwQ4%O}*gJG=a^Va*TEgtmA?;vugw&i&ALmRGkK=VFep_Y{l;J;6k6kvmKAT
zo`=v?XJK9`cu~XPpupx&$>4IZ^cVGjWI}#3wvx(kS(g-};W}S^T2w^f)fj*S)Yl}#
zI=NrD+aqfs)OUtC1xVl=3v9|kYyCq}?;hG^*eUxk{@~^!`@3<;=`UaK7{c>gQ*J7V
z!0(2ZUhi8;>$Jp5#^u}O70uV5V%Kn^+?)k0dJS_{<y@iv*Xbh#>%3<^vWA<#=Dlr0
z47FJ_?$5u+poxcvBq~t2XPlGcVihx51%ICZ)|VF_aEZn70&TESg4ss^zdJNvAA0}W
zks@Gv5d$$X!eo8<Nwa(jgZ5Xzc^X+aWa$A{Ccc4rYwA$1>Uy=#%G(=qr4&PT{RIGf
zZ!V}Wg5LMfCG5R9JspJj9VeZ}%UWMp0;<FwHwZ6#!3u~HqT;`RW)vzhU0&RS9mw(-
zMw8hh0mr|k-BRY&W5##GwUj7>>+hIc0%i1E?}}L6nB7O~f~8yL)~K3jmIRI<hcx#m
zY^n+(V<tg;#=L}L_q_J&i2~SVKLXo6EwEl5RcJvAt}5O_$6p(c2sTTPu%(#PAv&z1
zT>_tP%Dq$lzc!O6E1m_@0-5u%-RBg0;0t?xBi3K2#!a*O7={D#zt<w*&W#rs){tvt
zBM{t|wb#coZOdxFD^#gF@oJpsbyP;~3z=cPzEB^v4izM#%^A+F;CFP4({|4Rg9cLP
zHRjOqis{D)g~(xtkBP?5?mxo|8Jynyit5BWR2U&^ZSmO0g{tgxmsr?RDsDO`OV*!C
z+2*xS^c_QcT6R}BH<F*T2y-MxAK;42Be`g<pVpI&yRMp~ml0y$HWU*2p>b^=Xb6h?
z`QLVQOQ8|aBEcn_P~b=!me77iOihtmU(i(SnJbWYVN{6pL0dx{)ck?iM5k1ZikAvE
z3N)Sc{ayl7$R9(dW+w&Npt0A9iOSKarhG3mEC@mRd4eA63G7D($&LaT3Z**V5JPDQ
z;q4_{0N^7xp3wNrr7*}Q9Ogz{sRpsectr^b*(2qlDWy|x@djE%H5k`CxAP%t4G}u|
z9@6|ZbbL3O@&KFhmENv~TmunY;l((<hJ4zIIU|+7&cm<VbW!V)UurIzDno^XSg?)R
zgRN-Hg`ZG)sjOExP2SJcOeL#a1pU&45p|`i5y_`1>eo@iE6yv(o+`RUWL~%zGNMxp
zFkKhu{9~6JZ?$?F0ZuxPkXDrtS3fM=n42&@hnjWkVNS1@<ZrMD)u7I4F)mZ`yu+(C
zBStaNcK&SP9uT?+8ICeIUEC~JocB0d3l*;;reQF;GzQpqE$Xv>yOM9UA2D7)7x7Rk
zB(nj@q%<^nRdKTKun~Y6EP@wYDRs7hiss0%5^M<WTKo)aZvEj(53IQ8RCR6>GZ{x-
z*nq|Tq7Vx-|9Q|v5IDqFhB1@@ER#JHXOo)Cxl(N(&2Pp-GVA#9@Dmv9zwsCi9RO}Q
zt4vO$Xkid)PjixLbR}9yvd4^K4W|KiLxTdrF{>Loqt&?%M&^p51-(1fa%`}5+gW8&
z)zWO$Zd%JHHR}KNLJOfQs4aIoqu&Z;A<rGM5}By98KC0i%m$wvRl_;rvR&a*I@vqa
z@Epy?E=Ntsl9>#ILS3*jr{H;$18e^F%4ZOf%k*LNr;qG9mad!!S@7>M=9IOBJujh+
zEyh;~yZm@%n-yM2M+u>2{#M<6v!4;qr51r0-~e7O@2AGSxHZuW_)Gp;bV#PD|I7LM
z;N`wrthDEJG$*E{5{e{*eFY%cm?ovahKbd+MWlMwG<)zsAmD7MyIA?W@m+lEHPRtI
zPpU~jc$M&>f@|5LGIODruWO1Wh~-(Xg0W*H*PBjUhsRU;_1U+ILsJ?aAgg$-o2_CY
zobhzb!U<6_yYyWUUtq1&RUPHUXrwf2Pv~K?xQDA||ND45u<O#Q-_wyE+BCX9>EGz8
z%3Lm`tg%7y47X$?L4D3uFit2uKUP~)3h5o5y*>C6!!u;2huo>s1Gp^?PQM&J@l%K*
zceitPgv{5Tr)UH7*DMO2!Ed3WZMetBv}LCrPIx_%u(o8aeSoMwtsxv#AbO2iBR{&v
zS(M0D0@o*Mt_#0{?`6z8d?yqgY&C4Khinfiaob<hHmcCT1XXaC;_xh-1==Xn^wJ<O
z_6V{>4!?MvyF2lLt*=t0qyg&}Th|lLC1WPJXI2n{Q*QiYuv>4pqW(?#x-#JZ((#{}
zwLG$(YD%*<E6K^U_ocwTtZ6E4Ig^;;zi<6Jm?3wLY8GXq--x%dQ{Lc3z74iMqV*ah
z0Iw4^c)mg;cM-R=GofysSI4p`LgypTjzF`P$sX%xxg(jAnl2M49Xsixm4A5~RfM$j
zED#PxFG%A!58gqA{bOlAiM`wYVtkY}j+RjBCd7tLe6*l!l`sXpXy_DB&&`HELVx6I
zktAMN*^&SKW-62Z`YhDBwYPmgFmO;%PR650$7foN%td9zzO|ku3r$fSnd;ocZ{WqT
zu^~t?7QJh6?D%i&?^AyIsc4hn9<v*QT-J&c7&u%(Y2AvAa!Po<>1&XV&PN_$OvH+z
z0dzEFt}ZzoGQEk;ZQ;`dVfx(<wMNf|aAvxwhdpsZq~3b(b4*MXXG@TQ!s2>Ejaxkk
z8qNT`^Yq<|%59>S;>Q8}#^|+gb@`F#?U*%Wjy=j~kc&XY-Q8geI0O4)g<68fxZ1-m
zV{T_yPy1Z;9ztMoh*0i+iAOol0sI$yiF!$A<Sq<V-l{Fh3xZDHusS4}n?rrwT~Dc>
zz`xkQrDuwv-Ei4V;p#re&PN$MBfXbzV*9g$m2g<3NsiZTV*J(Pq@b@-(y7dyNghJx
zDy14(&78^6&d#J9Os<m%wqW6JS3~(hsJ42)nOVd7;u?#_%om|)p`R~h2=eqL{OFEO
zx)Ax*cK|7RGg>73x*{Mwl9Qfl#|#8D7$-Rzw1CePb&BY-s`Zb0*@8Ig2B3W)tgX&F
zWqhE&LA?yD%0gsVx;TNRqTEsJN3nIx^k{;{oi;62qHI2Dm}hRDPpWUM&>GqLrf<4F
z@vnR<9HwJo^p@Tugsh?7u<?s?!{lLlA&Onw@<qjK4hJkX-Lacq$`!8bosrQ#uc=gq
zZ=pxBSm5%wqWTI_)LzF)W?}FI_;5LQs+LDStf$#CW!$0FR9jZJ<9ei7KBx<kO3==<
zC@Z~<VI&gCAAuN{E~>kQ?mORGHHZQf6NqyRmBOGj9EYpXaoypJ-9;pkaM_!&${>RU
zmc8_y1e~=TmpoHq1UI_^|1JH}IxYjc5GddmqIw~R?Vc1Nt5fK3WTzh=g(o_?T-~o~
zcQjK+zKAsl3XKK46t%^1<R3P_|7wdE0R#GNCAcO>j5F2<#CE<><m<=zQf}rSqu~MO
zsi796{do)cs=?KIXomhhjam`Kd?^A6T#sBoh;qtdPy}?54CH{8xVo*Ef@vz0`{{Kn
zT-%=2dBb6Huk{zB-fn*=#=ZcCP&iIIE{3OMD>@B{!drPaBJKRTrnoNUhNVbz4;F@w
zt|d<e>Wmy!Bx+7)U>i2(tihKNULF%OvlV%*_6AA!cFX+>4P#GIG-VD$rCK9%^`kt1
zm6y#5-##Jt;)S3;HSlO0E5bKVilhs_b(Ly(FHqA_r;>vz(KTWv#Sg^O<=k&)E&<%P
zcWQ{3lg%sOdtOnjnjThlt2a4p^MX6r9HpJ=X&&ADPFGi9JhJ`h;M?e-|1DyjA4uW`
zbHZ0js84WIMKG^!1mz1l={|@h)OWMvK)SzyVI}BQxG(_o;H5XISu0slc%RMZMy?BO
zm&>+M-jr`xJzV6yhWh-po*1U1jr7F#k?9)|qfMu}`Sp{l1Hi68N}j$gu+fxe?x{dK
z46I$6JWX<MaL4y9ydChzQqz`Cb-90k(@k6b<VBeYQgv)qG~25zHeiDrGG*nTiyg(f
zPzDMYimk87T&*RR!w@y?g|k@d_un&B>0WP7#duJQh?nO@DeNSgG^jtTaEAoxCD_U|
z@Ij~%VQAPmF*CG3@xJe}$EVZ~*y>!9cR;&v>EbMiu=$$*=W>kY0kk!bM=g}t;zeD%
zJu@!|1RU=(0_fRDy5|2(D!4Lh0_IdU5Ko5SzE+r&{Aye(5w)<6gJDnkCVJ-<W$9+E
zQh1j!&_BYbfj%)-Am5edBNOgMHOGt}ACDAgCz5VFR6E?Dh5?WceHJ^<Nq-rv@a;;(
z`m(e+);tJmeJOsslAO9l8BUD~9UB%K^1V4Cffe4kBniTt1#Yj5@ZDj4tw*DG&jbS)
zr_htU@zT0~VZUrZ3D(WJ5VwYz`%X>^()Qh)B5+%ryY5lJ(8sy2keRFixru&MEXz<H
zJ?KW)<YUG219Tj@IrJ>=U(_3}^<uS5#<L3bqSEFPJFWPc<|jl@qrC5%UIF043jNl7
z9)n<+8XPF;zeL=-8052!`igdkM=rrHA&b(t0J}P?O$RwApi6%~xuRzRI2ZK?-fJV3
z>cH)4Q7`8XK<Sil63}-W2Kdt-zV}Vb45SGcnn~E-;11ZXBpZCP|Fkl42UF?}_jYQ>
zrgFY7$Z%>KtFjHdDm;F+HB{K}MR5cgP^B{!gEDK4DHkeFh{pb-LayYNlX?!)ZY7I3
zq9OhvD5t9e2m_RT;EODyAK3q*NI5v(4J3vj<F>&2?tRGv$_~7&jV;9H%XLJ)0B*EL
zcc&iA|5UV5I@EGBBIB{AeG+u{UqYAQ8mqAVEl7WYxG+28-4}^9tLL@E^g<N83^21C
z6Unw0QUV><Opv)<GR(_wdl+t=Kt7b%nbq^4Q5~CJl8<E=23`Qocs8g0D0$B`JT{zy
zK81CgcACsEHP7No@Rum!=N{{^*6UVi;j6lwjsmexFLzmNh8lp+-!S#ohFq12Z>Av0
zFwJ5KyBs)1&(muxw`MivBFR3*W8wB^@KPNjlRE%iRMm(Z+xTItF@a?)VlvcWwd8+J
zs&D6<l`7c~EZB~9kwH3jf}Kd|(?O$%=;rPJj2#zHMEXxvR>q_D5cq@{y=HoNKC+%!
zDYb#I0RCz6mL75z<tf@4^Aeca1;IuK=fu8{XIP;Re_YNaMoIelk>$+juzIceDAU@+
zCW0>uo4%2Oegu~BxFSu6<CtiB0tH_MqI@_j82?;HM3F!_9HEw|X{Iy8gbzZ&!7KYX
zt_ItIJF0u)s9W`u=oR^yW;yZMl31(AcISBN;*I(4^cj!;3VBI8-@)1}_5)}qMI7qJ
z6~!l=-dwjW+40YcMCOfH;fVRmfWfLX?I7k55ih6{Xj7j~%!1>HLx|Q8$tEteo3h{4
zD7#~~@KHq>8M3cG?_I&uDa?>CP^O3}J_maeeF(a}AgtvwXb4Q>*_SPJLYuc%&Xsir
zg&=1zZeaOp<gHORVEK;NCvRORv|CLU=-;2`JAP6dM+zlNvo}(w^PxUEOK++?^Yq<M
zZ6uGlDfnT>n1(#*rXeAyas`d`Y*AHti4nL0486j#j>})oh#&M-?=bVX=T1IAs5eJ?
zQJ2cvCawS>a_Qh@XbM##r9i=nD*bg#riUj`HQjO@;s-YdXs{4GbhY5KG|pUR0TE6n
z#v~pdm;V(#2cV`K1j2{GKWRs!)q2>*7NZ*|T*7sgCFKwS;UQ`agf<f{{Mo#r<Hv*T
z7c`NJNSWkL%t6ucJfh;azO69oSBOf+GH`g1{~!20&gS*4jcVhi)bn4jFP@Jvb5?&b
z=54)tsgtQ>Z^cNj!8E#ZStSI;CMP@Xc_A?okN-}?{MJMOtutIvYwSbb5xW|OvEIww
zMNmnqSelTtO9lA$7LA(Mi>&8C`LY@=Z%b?iAuS<5qCm?+|LUltN_)VsV687jc<PPU
zwnP$rZXFe;ZPPhfMEXll@y9WYL<KXjCj<Sf99l)0gBZ0GH1=m%@3rV}ced!U6HDxI
zjm)yqxJX5}d==2#!hX&GwWe|z6h{k;Z=UP}{QbP4J_UYA`8I_Thk9;fXEU~}Cs)lT
zs``8dlt|{-#V1N|XcBzsjb}2d^HFd~1X4}Q%npzU9JER~rS3HRad&G0zM2^SB}zV^
z>mJdq@IeFH$OAp2iuB1L@s{+Jmez*1-`GHBrzd;}4f-{p@(W?*SGC21L>a&!cNrPA
zGC9tFAgua)YEda2JZuCkA>Zm6scR58ZhX&o{Kp5CeOBGKj$<g$3PKRaJ)48W5dgAj
zTMptCl`dxpyyacTmao2gJ?m#yGlP1(>t3aKwMa|7KS}^RRHkoMdXys0H{<3iCeu7?
zY>SEHeTzrFO|wH&>F*Oxn|Iijm`P=Q?~~bfYs^k)GXI}v3=RD&iCers$ch7lYC~Qa
zBP*Uf-t$OBL6@IFSzN2@Ow1e$(VnW3+p-dRP3Q_R9`k$e;jis06%qh_znR)y(k6E#
z{X<2bQ<^oXD^LHGfFv0x(~4{DTTWQ8Gvi}mrgKvlu|Kxn*((t8XPB%}5Oo8}Ju^e9
zl7Z84A7~kBi|Y`!_S3hB*umNoI2Lvt$lSI}X2>7QrOIuIXzZk}3r~}6`ocwHf(+lf
z-?0V+2;OdoaBw6U3y$A=N?r$&!A{eAldQ}osy2~J3axQV&(h)6T0C*yVosv08O^dx
z33!f0k-Rmc425(JA_Sj3|Jx3VtH<}Sg*G<-`G?ZV(}RpG2G|YG^6eyu@R6~?feS21
zdQeMPMtLs+Mz+eyqIA)-a1YDhj0D5!m!Kh-S=@W}f^89Z^o(H$#>7xr@eq&9&focO
z84}qlQA+!Zg{vblWhv4g65#8QKW@AmMoYoXO6CpLua3~*oulAa{VSU(VD|l)|4}*b
zXL0YjMg<%_OsXI`Mic0}n5X7KeJ4;uZYM?Ey_;LaG>L@<ARt{-^x&Tju846yEcVhJ
zZaaE-QM^aIEK;TB0;z#i<P9+vk30#Q<>)kfT`{cJ7=0@Q<s!h&@%<H&(R=MIdBEH`
zwuC4{vslfPkzbREYkos9$0UaO)(XE(14B>Nimd1S0b>0+I8}UfVj)L13OI`fi+%c_
z`d8CE>{>BJyr;{u%QvG0&#OG=W{?6YDEd%&1UXOmgL-{8q>gPV{a0r`x>|*V#scHf
z+u`7Qg7<0?U<#=O*JL`|gmx?0lk7*74=%1HAsj!M($j~^_s!?vG;d6GYhtM>cvsDW
z&TJlHs-J^f`|tB9{!cofA}ai6@*{Tvxr`$@t<;ETI7chKKRWjE=Fv%)E`3fsq{rlY
z-m&#Pexo3eX%S;t{ZZuh?APxo(D7;1Q)wX%*6U;9bfFvQQRo<;yRjLY2EJS@#${Ju
zB1reFO_o%O@ARfd{#wA`IGwn~W-=Fhj&~VXu>VM%J<L?C2yT!6g-~Xkb@uG`gG7c@
zZfo16iU&+^vmuJ>H&3my3Q3)H@GkeGE4JP8<VsH<GfBqe1i?u@JS25>R}T!ll_7g9
z>@GAz**mjl`rCCcRH4-E8g0O<(;({Iw*i>jcIJqCXI0~OoWu5vo7MiM%3kr0x7C1{
zNNnWbUO6GQ19<)3YQW%jA!ArKTHxoH>Tag2Xe?tAW`XQq$nUg0);9ZgA@vMN(Y7?7
z|NI(NH-O74Ay_(OqB2G$ZcF47HkV07PY7s=X69W#nr1=P8xL5$F3h$X8CJ;cL2j>w
z^wUCSgQr8Qf0%j1xtk9V{JhP}BD4|<#yQSa4ru^Fl^${9NB)YY7iU1&W6Vn`t<w}5
z&i=`|hBNq9lE^7j-b(wGaHbT?kWog&)D4h)3X~a}OdXw*A4s%tn_u)L<0hn$<cGio
ziK7hrmHbsNy<ywD_`BoKF_lHpEz)}q1X4S-zGPhcMB4Hfc(vNbE!oGUpLJrO4T!nE
z3z+9#N<q?yR++i%J`Of_MnlFgERc&;smSM9`8)7B!6Q`|G&AGIc0Kkl=j%Q8z~X+o
z;(-cLg;o6hmYS+6sx`1ccov!MD34bD^Pl6a8&S-!J1#jLFg|s2h7@TUnJXITE{Xs~
zuj_#`pbzK&S<rnaI1_Tzh;<!f$KxE?c~yvD_ZYsLTni&bavhG)u~j+64O0-8VLbkP
zzK|vjNFkhfztJOHxdoQoWGR6c9D)2h5ZgAqUxs&(8!`f|q%`n^BeH$ZmTK*odFdf|
zKK$KXc8_u;nhrr*XK!$AQeC-NjGMoWYyd36GQ(Ljklye&oI9}?GG-VRMg;dzP3}{J
z4dkMd5(JIAsOjw0_VIE@@TF*1f2%QamemlN8FvRt4j2jf%Vu!6v4qF^g!>F1Rzu_x
z8GN?BGumu!(U%JQae+}kns#lKk4T()`|i#ykWx`o5J}lJ=;3bf4`4e<lB}2dg674@
zs9eE<W?Vo2k`W(Cx;PV3`5)nNOo2IYuC=g#yGL|S5FB!axcs>sqX`uTAen&8mrVV!
zl!TdEN?gaXUjSq^58In)pOS0lP4c#kzY#F+<Q@3vRX-{b_=BC)tOa#@zsnc_fmsEF
zISKk3@f~lKW;hi*X_u6+Ty(NKL#66f964_|Vu%U2<1zA6xg8BTLB7#jpOFwSmKRSE
zXPIA!lXvLZINBMAHbS3<22z&hV9`Za75Tr@@-+f*&k=rBW<b8z;fsmuV)8n1x|rzR
zrC7n<B2Ev$doTDGu~x7r(#dH9@n7i6Z%fN`+_@tiP$42`tKPg|7{Z5c_h|%F9@7~A
zeX%c>4Q`M895>1m^hL#OhUhL0?Q=L|2GIF14qCCcDbvxLdcP^vq!O7@y#SdWMG@SB
zn1A~jkeH&efy9zgo5_rAjD_O!?u3H{#PdMgf#I!`sGIj&qMw0~vv)e1AbhHLdrY{1
zMo3`8zenA4$d^>Db$CqI$6_e2p{+!;Qb0nRT0WszrKr{$>t*Wf=zqmdmr5wbvb}?(
z)qOoXj=y9O=X<}tVWj7J(Fcvol2;YV44yhtUNTXdW+Tn^$$27cXkyy>d%6vz3k6|J
zOaEqEOU*(#MoYX88ym)da5lJyXgvkme_%m7B&(&f7@$<<GnWhd%q04~pK|i<p4Sn`
zZvQA35|Yn!p!1VSHSq#K07)ukzVocuwuaua^}8TRY{GLsSGBAp#YdzGlqt?Z3RNI<
zGOhTdVIF@Q)5Ph?bRm)oAr&iV@Xqrq295#a2FKg;#@hE9DbXP7Ij3m0dccrtbo`hd
z&m>b^jI&<cSyS7JRV08upJ&>j5m}Zft!QA{g^*$@5U#I|3?6eE571m5KXiF{7|C?7
zdgdnuPA0MV$MIEM2pUC5&Q8?YgSb_QO<qX~-cE9`VdKsf?-y-xdqX5+&7CUc3!&yV
z=x%SWOo3{?=hJ+L8}y*kX1>~bt*1kOqrJW7yf<W1zI_R2L=ne8Iz^2yIcW86X#yfi
z{L(4=Z9U;*Rp7<bGFNMyY&&ITgL`%{K96N9S2!)EoNl!6;9pm3;c%5lTmoafc4ap$
zlVJ1kWw>vTi{!oSWaX|jswin0VkEwL28Gj+v%>IkaO0t_1uIR&T3hsujd!1THzMy{
zgjYM&@KS*IOZg@;ja6K8fyj-c;Af*Nehv{$^xV~JO1Px24KI^T%#4~48&3%sJi-6t
zpe|hZ<SSS_MMyih0b`uhQyiLd+LJB2+8WdSPm=68BjduHh^`CZ3)eZ0yOYRXrNW@v
zm#*r<T07Vw{`Um88BcXky4;d`d5+nyA1rcV<#uA2;ZQ)Rr6)+G`wd7TY}*JZ0b$T`
z`gk^jXNLz71Q}@hgWAMR@_Nl|e@p>A<qLyC?ganE!Vc|l+-a_<DmPcx>bg+I=DXo1
zb#3gVakcyt5<V=rB#%+&DsasS&qg{O%uip%D*51Jn*03mZHaZlXT`hefgvytz83Ch
zUx~X#u4+frDSf;@l(R2R*6Q3VOy~fqjZ;)?6;;o=5=8`lQ~&{HnIaMw$6a44Uo(ZP
zHTB|OWlQ*tX-<TKuit1;7(<9x_6a&9v)uZ60h-G=JKRHr589Z^!#~)ATX{k9Q?n8=
zcq~ACnQGD?;q=Eg>h*W&A>q?%fqm!po^jL{RtHB*pqx(oRp7puZoh((nuA!1n0Cp+
zY<;&DL>luXp)<GP7+40Tb6{i{rmillLuI&5l?Hw5-)+<n&5`FTi*oxV!Lr@Nt5U=0
z;P6l_e-3M%+r)0YlQw|bovbl_O_y`}qxq$=c~Kq!sY0R}0GpLEt!yov|D-DRujVJ3
z90~<WhBo_}d)97~2pdR1n|(lwPo`o)dvEeY-jh*PF#Hbeb_kaeBF0#cCKfN*%-1WE
z<{+Y(!+c$}fa?Y%QIB=dYzVM6GU!`OmU3Vnqvj>0R$D{?5;n0;*=t$-pgJ@(yMA>;
z=H0v13yk>-<zHHOljrrmg?BoJF%)X<Nu~(5FQZm#jz@u-Jx_sbJgtQYgUGOTc88g_
zIcwIBYqskig7h<ghWcD-7rPk!hAQ8cLrli{pX^4`6)F;fzZcK!$$+<5!;h5C8DGb*
z27g#m9_E%8vE-3LihW;*iXCo9cM5P`<yQR^F0?a{(rcg;o|~HT6O*a?Ox_71)I-Bd
zEt$iRKwma6$#4s{xRE&~X~ilrok0Wa86gsVgmfW(C1B$yD}C196<~3dPW)022HOlB
z`J+b7z$lF6{}9a@mTOCsn^-Q!hS=ruLWb$FEq|K~qXHtTtM)995{7G4x9WJ3P9vu5
zTLS}O+7Z~Ut1g$yVqn$Ur;-jW^Y)z(;!<Batd25@GSk*tr9<|&ykkj}N8a{B35L~<
z7J+JKG*5@By1$+8g%Z{%a4G>sqoQsa-k`J#1vldL<duB)Exdr?qNawGjC1ZPb1pdj
zo-lMJJ0(p;+|3~sf1=!3;FB8~InH+pY1p?KQFTNM?k!i99I-alO$zM?+WcJ>J1qJq
zEt)vpR~0PgI#_m8Cj)Uleb-nz>{8<TMxnFZX|f<@;lHHa?TMc&HbP^+p?f=?o;AY%
zlom3szS7A#R5iN(eP2S3VyA*ywzR#Y1AxBztLu|lI@fpv^Uj%B1>UtPcZtJ3pk-@}
z61H^a7;sW0bcw#QPBNUkMy7O76#@v)7tsl*>-1S>thXbZ8GPsB=x5(8BDIV|-HW~x
zPR`3s8`${G70Qt!D8NWPyumUik(HCxT-|!_XXdJJoJH`x8wk3~_>J*z(&cVVsS7o^
zHwM4V?!Ny#hg-Enh%y(#I{_V$;6FWsPaF92=RTZ!UyL{d)9dpE@copFyvQ4D48n4*
zfIM%`O>rt4v9bu|TtmmfGt0O%xd>laWfIESgX-d~o#;gE>6i#?$zz38nfpAMgh}-v
zI}#-(7@Zi39M|tk|2sUgH<{_;GoE2p;`@dAdCUAN#;>z}fkiT~n08*pqnOWw5P7>^
z#L??2edF!PzU{9Tp!K1uO{fOU2!9=KQn|AKVfA^a4c2R=3MYyN6D(>W-f6oeH{Ik(
zN<nGLi`C*rURpU1rTg{pU*Ga+tsm4bG5fqRQYQC<anUaDJuVe(%^N7hY6}qQfE`(9
zVa}#q8*3rTt6biG>7qVKh2ZnUmy$H(mG3=TfbHHF$&n8uSe_ozA2#E8`h1x#aG)6*
znJDTHMozSAM|YX;_DmURPe!r#ZLgX)yZ@5D0jZ7aOW_6e=l`VwNi{TP4=#`QUMsnB
zlgI-Qflc2#>LNk*W4N(-Rbf-dBvr+2KKnAy<tG;8g$CVR)1pxXCdG9F2=sEoDXLqw
z0%x0Jrmag2Z1S7NjwHBpTAkIXyURw^INfgrN4bZ7aL3cam4gHk9Y;-94+F?LUg8lB
z6IFp^Ed$>LK07<hM_@&3ZqfZ^sdBSRXQa;J+AI}ERycsJ2%QbbEv&jVFjxAQpCknD
z%R^1F)Vi~ax9ZNm;6Ia@*UB#~9Tw9z0%flD(eWk<1;&_O&?e^E9uz3iCfyFO!2EV9
zs+xWoKb=x6I3?<wbVwN;|MiaM^;Ic~b@7Zk|BR&Vhp-$CdxKzzm3+myT0pJW>(_9B
zW3k!2zBb4O${vtP%6?<24a>;DJf~(NW1wl<NrJ$%|Ahq?Kn|@a9_(!=#mebKOh$8x
z%Zz1nHp$73ks5%Z`6CKwm!m0bOJ`-VBR)5IG>SZUh?9(Ak`n5URAj-#4E-H<UGX@}
z-&)Uoa^>t_QHcUyd>$WyGx1LSZR?z$hSHO<0pl<s%oib0WnX)XQ2Nv*ok9A}`4l>%
zOypyQc~E8#^>RcfX9joLUM8}Q3S_E~wl2-~CUb(*RMHkjxMVRT1zR-WmGrRJva9;j
z`U-TA;<;dVHrnd-j`_{T`Q#$yjT?Ig)`=_R6jyshRA%%zr+jD|OHM!T*ZUimcd0IX
z2v9(5cfBK7Z5WigdXXYeINK+E!wdV%cEqzEkiUqSqLO9_cR)4L&zqZA%_h>>z)o`J
zfeSzruL`!h#`M!WNyN$OpNZfwWr6{G8e0JHy6Ac}(Pl<$*sKajXqjJoa`<X9lIcPR
zP^}R5|16VkY+YiEc{3?}?J5`_IW<}q$R6|?k4v5@`;BMQ6geQv6C&=VeYI+(zp+sH
zdJ%|S?IdLHpC&JUUVd4DMsac-lP@_DI^#_+msa~;HUqMZM&Nnol_wCi(bqs%89y2Q
zeNZ#&qift7pilUPo02GY0JFeUkzry@Pcxw{mIGn<Ul8=O-NZ)Y4nP~4A$+<z>6D$}
z*KJ850;?Uowmz}<s=dH!5J=$j&~QJ1)mj-3X|#>!6-TEdmn&-1=}n&cJeaxnJ?E<B
z6+n_p{bk-=rYWzDQx)ua-qeZY!gt4VMKOG;oWSDcR-Edz=hRkejw<vkc@8EMfP{Ld
zyIaVE;#&Q-YPmUd9b|*dYrKg%QX!h%eA3$q0e|vGbJLfPaA$9;ed66LtzK()k0(a6
zNuuj;LHjg2wlDRLpP}eZd0pw=#WZ+1?3B);>kB)nbS8eISFbpETj2#<exGMiMS=Sn
zD^V`h3wLOf$vNuz%h&-1IvmTh4kyKG5j|Xd=Drn%uSMcriuv=NB~lz3jg>|SMLFiz
zLKP#F0gB-;@v$RyR$*TEVhcvQxp6_Wu{r=+oY6pA<9QjmWFXHj{B{3(0^wjtSqxI9
z{aPmQVE>Q~fK?S3RS_#yy8hg;;uIA>xx40o8k<Q2R1dPe61_c5e<}z-SLs1}NG2MS
zk9e_5T2S4kJqtKEVW)A$2Tz-~5~Tob05n4N^-K>_WXl*(^O*6?TN1QRd-O0NbjX$s
zUGgqi0Q?pwjXD$B-0$7wglhkm7kPoVB;0$48dAN5L>GRF(FwKkOF*u1i5iBaZ)^Ji
z;f7O4FGMpXCS-`(c~tY?6!B_4w>l<1StY#Pxx?vyfhn|W>OnkvNV%KMPye_v{QT1I
z5ZtMok6)fsb5gbkU+}wjt@31#)1|nzeao?6J7O@11Zzv!v~h_)V-Mu6bH!tU@*0%K
zE~Rrvw<!*_Mq6}$Kec41yv(b`DLsXz2p2vLZ#8=V=g!B3zN#zG`8F+<eD?HmD4%z1
z!_uG{mrHr1PhG1oOHE{hK&vNeY3svmO`sR?Zetvb(*dmto?4k>91~=6D4BseYBs4?
zQ7)X7*sA&}#grMIQ0MDdzG1(g_*4^TjhE6gs;7A4i`&CJ>wnf&+*@4EFo-g}k=9@d
z6af}^ZIybX^pR;JtFB|AcC@2k_5GY3wm<-9cO(W&H$DH^F#d`JS&mt&@=u$StY{It
z^}>aG0hX{KG)`gOf_WZc<!pDhLw@7ne@(iBOKkIF+9<8s9li^9U;5<DUuuHKr4um&
z#l@?m3Dx|_Z%CBDqqYX#8_Xzckji-pmis`;a!eQvJ$Bg)5yQZ?9XCMVp^qhAJHqX|
zn<j<~CBgHm4Mul?4T6R_##W&Q6%Z1a61KX+Svdu<KCEeA!xtnV(@7XtJ6Y#}bNjv{
zQ&FQtn|W~CyuXXIZNYve0@TZq2HisTgYAjsIGe#i&xBD+r)vV14B8iNTvICcViqsr
zv#<M&-1L<6-BSpf%*T=klx+IHv;0X`jWb8!6`!uwDyq?2V*zv8_%sM*dEjfnp;SFV
zH3#NRPl<epORSR*#VC&^*KhlP=mtO+`I;PzAruVdl?kYoh~U3CX<-e)*AKuZb_x|>
z?@1|37R&WW<c>Yzz?YnJ=v{YH(PBC4d7<?Vp||H|BMABFWONg>KN{Vyr_D!}A6hEc
z;G--NZDf<l>@QBde|?&5qGJ7YofT*X+&sCdR>zw_0Gr9~56dQAhqg4{Xc%h_`Itd2
z2Nt{SlF(15qLt$<j~h%?O%es_GQSlk7$454IvJ(fB&_<0LN#QcbBdE|AjP>Lpym$7
zhrIFibkppVz|pBfR|Rq9U5Fx3;y+8BpllBv&_*k=IAhQbOrBy+4!XU{AmFhA;-9EJ
zU^;t|L%o;g`x8XVX8^u0=rg9d@>@BZ%6-MD#h@wOxxy)uARZ(RaTI<#d;o4?Tbl1u
ze}S10-QPuf`s^s+WdNgf(H{Co@Po3sA4mtRpya>neh7VfMUzBO_;QLPRE4|#=9-&O
zxgTyG1K*}*PP;Vlt1(jsQ3<8PHIaxvyeLzgwCHCL_stTq?c2NcAzJn^x@`tE7;EV<
z(Bf++h9#VTo_%IFxb!Y$iUVww_puX7^?5v`jJCEhKt<Q0D&>Kh_z#rvA2d<lIU0wf
z`gseWCk2k8&o|k9r$5%la)QY6fuk#wE#^TNE!Y=O^={+_jK@~=C)<2wTO9faEggmd
z<EZZPuBS}{KR{`B)*G_K1$qjDEKWqu1oPK8>|sg|Aem|(-P8~%o^HV9saMlq07kRH
zz2^sPcz_x4C_y+THAm`i-8Opxf(N0>l~SadM<jZ6i=KQUmvozSh1GpzuT-4YaPR7F
zoQ&^tuj2GJ$eKh8JaOHf_?&b3%*RKx7c<3=9axXxbq&mJ_pM_O`TPyH!_zI7@<0NG
zPa9lpB+sOsy>IYRod<Ik^bJHbtXMz}Oi9KV&L7!~9f3U$L7jfwJ5cV&4MI46zsYV4
zyhK-Cg2{E3K7lZ{s*V!;7U%te(K*5pmjdUw9CQw@Hluy~%4xX~p2knN#o&U<vdH;n
zh?AcOsVcN>F+%ON#HTrfC%++E$+jeT;|9qIlQDockkf&i+(LN7D<NW-R8@oiJ!iKI
z>IBjk(y}OSy&f28_0J6nUlvO#hx@y&r?!d8I#*8|)(iCB9h>Pv6z%XPT<Ds=L<#UR
z5=LZoV$8j|l}**krLcp=f^VCZ@RDO9bpDaT_}m;v_}--LhP$<895uB6daMK&Jhtaw
z^3mU80SEbDaIkh6GLJYK8Bai;D@=auS39Y0c7POGzc=;G1S%}ob*^q65ojT1<@Ag@
zL>oTK3EhrGNnBOz!}1Y+qv9oS(<0uV@29-8X~3a4(ilrB^fij1WHN2**RpEsPvD_W
zmA{FMc3gXa*7_tNT_JuS7dSduH<Dl@rUdGufR<g^I<k2Iz6BP>^3@weU^wUU<}|mt
zj%Gr(q3?R23OG1ca;h%qEFX^8(av*Q!$H#ReUMF1mPeZCA`oVB%W5yv)!Zt-{ul0t
z2>Uz!Dc8o|PKbS`{Ccm@SoP<HR%_x0J?2lb6o%mm-Qrl_Ey`Fvww#>tw1QW#Z$|8o
z_91py91uQ~W2002ZsV4c4FJ^QsthbLx%k!~Gvg~%UXDaE&p>(iRwz#-{t$i)zhzSI
zICBg}ij>f{o6_sog;DlCa=>v{@8p@I;OQB3?Z$kejQ2|g$}t&}XS&&n6FLId&JLbf
zI)N>iFrk;}-%2)ENPKchRgik(LvK-L3*JpDz!$78@8EWv%H{s6#~5R_96ztL0s?H?
z_?sYAcjCbn2%XTz9)33A3Ph;lk{-4E-p~$)BAh(J)oo{Pc*05%tH?S^@$bMM*~p0a
z!iawI!a@*@2aeX&2t$jwB#`FuyzDy2e^Kw%Q%VY54PS4I2nqqxS?U69`^99tMh`!{
zyr_oril@Krj(~$%?tZfH<L+1d4}1xLCt`Iwm7J8+FD(;0eWA`SweWpwbd{1&SR?j?
z&_6Zwm0$Sz6H~G1BKw!IsK1`ltGC59`<^uSv8Q(B6-NIDe8AR-tW5t#nhE22#iR>y
z^Oz`)Ry%kX_4<G;+@`NgPWRy_$nue#&_DSNQ!7Wfk23g&dKY-p>k*33**lFSMqbm5
z>4)ESv<@%sb6w_j|4Fp`SbBRh<OMIA;a&ZXHh4OJ&RGCuL{qXQZouJ(&)S54*aIW^
zzTfS!D~r}Hs>i6CfAC(txRY%!$V|NO<T_sg3_2!+pK-m<qcGKO>&Wn=YKKg2eGZUX
zW=Rw!b^IQStdrZ)iE3t~AhB<t8#vL*Qe~%BRzZ2NFrJ$Q{DWa1k$y$xu%%MV-F^)S
z8cCBBQk|JmM)<Oi#P@UwSJdR~=*O#wbD^0UU+5V_iM`XEFA{Q{dp*B;$MQx<@SRPG
z_Z}E!rL!z|3ZjGN_Uw`7vWqEkk;7kAmTCpBDQ>xORMY@0i=n&2;_ueP!Un?%Zk{IX
zPto~0XjVO9qSE?pV6O&_N5B&XT_lS%H(faprK}Z+(kwY+D%nv5aY*Z_CqATSKm<y&
zq@cri{*K|UOiU7->gL<In&6^(4}n6u#La7%z4am{^j>E8G6;Vc9|jB-m5q@S?kFYg
zX}Ti=?^$7f)>{EHBUYd!xAuR!hDCJO?>2jUC`)K!ezz?A9Nkhj{(k*|E(MQV_b|NB
ziL~e%l=$R|X{%P>&|fH55U`f~-_C7iIG(u422nn?{1VX9#kz156-?^1H@BU7Q6hLK
zwQtl1r|ezT<5B79Z8e}oFzgUw7Jum>Zr35G-7ChUQdGL*H$13Lkc)4bMpNB+)QPCj
zs|;Nuys*?A+L-p-1d^2k&4mGIXjFqLgUcID21OZ*>46dGD~bKku}TW#&UFYRa>FGJ
zbYTF~OC&z-h~*w;g_Cg@guPyC)du~M*?+~#7Bsp`L?M;Xv7sC0v{QnnfZ6Etj=dxT
zbN@N(3=znuh5P4tdU#wsDQt(B2$IQsm#_?<l{&&%Rin+F78>m4!8qJMLtp@)NDo85
z|M{Cr<c6ELz6t+ttP*E2rUMPf-hqX)h)wZ7F5fL@(j5g%!NYy<0#R2@L;mbokk>ZN
z7PyeQqIFC%V64<Y1&480x}S<k?!a|VTKkwHFjn_V7sp_aDI7<ko+aB-Shx$HlRv2Y
z6ONXf&;!j=OD9{HHlMSUQcpKHI83ZP%Wc(bgKSdgo>ry0kct1CwtBA5!Pu6h@<;qO
zoUq()T*Vx9=LtuLunyGn&+Ru`!j<M6qr=7TfU1lHSb?#$>elCMK(jip*!>3Esp1f}
zZN8`oyV8r_-5Mgyp7O+QHL-J-LkU#!6_$D^QYrIP+?f<eG%ThLth2%M5e~S=sYgo~
zix-czc;v`Tg(e8RtnZS@^bo~SBP~#6LWRsSJg0mWju)>)81+fJgmcZEeIX0Pof&>f
zZ$NOW?*bqH)LVPku<5?)xY?rrsZm~B$XOEbDd~r-BxY>A2dHcbb;h;m3$7~r3nZ7Q
zltj#y{i%OeCH*h1$6`Mn#4B?)Rnd}Hlr;s042GYmo53y=mENDkBPrOF;eBs(FZlWL
zH-4Yfch?gd?X8O!r~mc&k1x$~5Df+XxEtl54vqNZs=%J-|Cs8?zK-d@5wwo^Pn3d|
z{#xqQZQ@vF;E;(#hONWfgx$En!eT{)AfZmJ0{<>YCr|FvqMN5S_w9iT$QyliLB88(
zGi{gG?}l6*V4R0WqNn=OalK&9?tHZQ>NfbbDur~SwRNWmHYg(|>5SY){x?*4ZPEyE
z(I&^bhw$AZqUGn3W(?a^)R+~~sX}m%7Bro0aSX4FJP5+St?W8*)HlPaCnq|1lR1oU
z@GVMF{Cl%CNm)Ja-g17~b2qpkN1QD#_P0u(%51VQjGZDH$l|rYaXFxfQaEgwixNX0
ze9i}Kh!34xm#Ykp%U&U-#GN3k5v---aC11B(wQZKaah)(H6Y{#)a1srDD4|4-$$Wl
zb!q1&nniuc{Lb~KA>T+TdN<XWn`)yGa&W_x6JXHg4gfk68}O<Y$UT=KW}KYBa`*2Q
z`z@<0aWF|IbdU?qh&h`!eF?*q?-F67<~3KvWTIu}had(1`8dNs>-`FYd?vz#CJ$;w
ztr8j#I=rGaD-{oeA_OdHBva1w6NZXMMbRqU!F~VvJo*<WVsAnS`;iGVK(%U}C@zue
zmu0;<9$0$2V&sp(yKu}h+f;~ZrXPy}<<lpJpV&G|dQ<w41v@=wmn-{u=!~~1nnha7
zPLro~DMx)VXk`xKoz*pvHV;`g(UHF3Q_V6MSbwnrc>*!3Yyn&Lif)fwU%)52`izv#
zQ@7`lM^8Xw@izr7#g_pGkqNNn72&hDvOpumnU66^m<16$8BP9_c3G?Iffil(fv>>b
zwSE7hXl_+gCc6}ZaN_o@iatae{|v;l<X({NOT^GoDF4A3dDjCjr+Z9jm8T_78d!Cs
zgl{zzF&5id&pt@!O4$ziW78<gu3KX4$eAmIJI7XAUgEXH3HQ<f`67jj+su$bdv1ec
zv#l@H@0zhQ1Zgz|RgdUVJGb)eR2s%pE)R$xKOc`Kn+AH|Ji9oUprg&}v!8&Ax0RoX
zTluR6s4^ufM0owXJC=2rIHI4IH3uRWX2AOU4WA`mvG(~YZ-~EohsFQ<qc+ugaf;)J
z80$e!!0=ADUh{5^Tkk%6LBv@9;(E<I!ArK<(tU^!-W*R)g^9d%Hi7qc0i8Bt$u%jO
zD~8W(PQ5xC8Z(!UP`kV_MDIw8<SG?K^McBypp?Y_o!|ClmF={Akog9%VJbul-0XlP
zWXFG1!W*2Gd$6_#9rP7XSAW*x^+Wqox`iY~2CRv{p*2lRJbsjG4ZS|XEFBG6Q7Q7W
zm@bEwd2{dHhQF5?b?WO{6J%=-x>vW`nn-fK>tH&3Hf1|Ih>#B*@sF0#a{1|XMYi|(
z8&#_$pbeN+>tU1-DAhUf@_-dv(sGr}n#>7PjDGXW-~Fd9Z@+Y9&iM3z{6q49WB^N8
zkB)wjSJ!`^G5!-#K7V|Lfe;`c?qU~^X2-;~qp-3>^rT+$1g;N!viSqmG~I`h4Pf*R
zwen1sE8#KXUk}PaEobtR8}8&e&sOzRS~t642nZtsx2%o0B-&WUlw)oqj%i}P({*|b
z`%u%O2~`@a<R3&6UFo4I8ESCWCHU`$ZfY-<CA^R-R4@Y~;lFhiOhn2BANHp<0Vck?
z4RGCdRtoRxC9b@lcN2OmeMbnY;uTFyMVdV>Zgv@MQNQA+-1|LAZxCz!fLsj41^XOv
z?c!U7U!mo^<Mlhb6G$%jqNl4IJ6a-2KHLCm*05k&q*7>ff=C6l2S%k<lt9bQwvec6
z_Uweu08EUlbLct$e&X?RB}*n?j>`38FE@6m#%Gd+Jsow?``02p9eqX1Al&oX!{~4<
zWM~GxHr^uq(a7A-c6YbY8FpC8vOfbTy4+Lm42aCbh-Ds6fNF~bA)j)bv{G)bs17Qp
zg<wfOA8(fc)-xWB_6g#hjKCrc02GJm54+Y&VG4Rn0wwKNBd){sabcvAJ0A>I9skZl
zE?G-=6{s`b56_cXPzk}%&H1_T19I1R#^`;=;jhNcNbnQ%jdos<UX+GHKwd;8!xU4D
z?{?4ulA{rbl=;GHSe0QT*{k%PXuAM>7wA5D#%t}|!cW2|=o?*HF7V(N1aKeuk_!8~
zgz?=OBD<Qf<j1<Ypsn12s5OBJiQuahPDonAsk6WY&avxgb>)sU0qI5muVM{KJydOm
zws574q<q1@)WsW19h9XHax&r3#xwakHzYxv+`1RA<4IpL64z00Vp~o;%57U*Em}QB
zjt7cDp+RnGt0sF<kIZ6L5Ss$oPyIJMUZWoffN;6L>t1v823A~Oh}?3>fPjp0Q^Ct1
z4Ucl}udJf;eW2+s%&?f*RbDc^3TMH4mIB1>BQjB>h2Llg5)u12I@zn|S&oo-?1qsP
ztkp>)sZ9og;P8$(hLwqlspj}H4)y(ki24~prNOEs+BSw&q_poXsozZlpz~BnnKj|-
zAbCpKhnQmBN_t-vg61X0*=eV0@}->6nD+=6`3#_oX9(St_GOVYUIC>>W9n`0_@etp
zq4T}fuyBjFX65;PmPxbhzcqv^l7Hn9LgN*}rqYM7KslX*`|;6e^|r)YY1{4PffT3q
zCQOlAeDNR*wus{<m1KF9A>fKK+?fT1x%kT=`Q#8qV*uiUYej!h;KFIh;_b6RrxgQ*
zoOX|+_MUC<abVn1^OUI9|1T~zD^5ybXo@BLT0?$vgmfs0j$_6%r3uN-9MGp%s+8D8
z0mR07gQ-m`e?&mWwP5u>E+pW@(-T(bO&O^#afNSb6Dnj-rwX?W1Y-l5>n@&GUA;~C
z<cD#<r4SZOP4;FPAq|E~`%G3`&j$B0J`{U+0>jDIP^Azu;P%Czd~Lh<R&Bp`XVh5~
znz!9qpR?BV;hU0%NA^-G5<cC^`V09pa__Y0>eWa>TnvTQv7}TSIt5r6DUPA@Daxge
zmWAv($ZjyS@y0-k;{fI++4_rr$d0*eU1vaZLNK|n5n~tFcTRCJ`2`^9dp#ams-8fk
zb6rbDki4TCEOtM+1uWTg$?)cd71<-xm1nXq=fWHsSPdt3@P}x7+p5h(+oNfsqo+;6
z{h8~?iEtyyfuAiDZ*hQ*8y#R^&J1U;u{pbj0`pEk7f};}w8z68(QO$3OFXIQ3aVGX
zCi5FqW5BB2)wS-BCsGrK`;KJf`Zu7V{+DD6aNEOf(xCoKKeg6tnW%L^NWB7y3fV-)
zis%)HEg+N2dMtP7+~!r25^MmmFg9MIr>$O!MZWc^DiF@Z`gfCjEVvQp6~+FLNAkhb
z3Ef)`(V-IMyG{|xfs^8IJrX1CuWBX=oPGfD<GBe&o;mkELyriT1)+P=d}64Fy%!_F
zE)cqp+r(o`tJLLvq|0DIou4Xl3caO5s<+Lz*sZf2G!IXiN`J?x(FSAT=4LKD-fv#3
z+Xnmy9b6xOxIccF3#U3y5VM^stPh4;LzuR%`qU;idRXs-LeILXd7Jfy!0&bScpl@2
zmn%rN@glPpUA=sYgX-UFQrVkLbp`eN!^xS?@o`t!4-UQ-Uj)1^GFvZ|n4IF%<-1wm
zAzV+31iIzGczvx>c67%OCLLMq-F}cQL43n3A0ECp_AN~yD>%(~xMSv_RR170@sOHz
zij6#iyWu4!5<~axef1-^fGq=?LPBQng{K~F*_iAtJ{d|O(CkeY9#M^ZM&6$qEo({*
z!pg8C6u@&KF~R>vwkG{()31vS5;nF<MQ;-b_ZrMR1MOd2BHK2Wfk!yTt8Nq{b;`^k
zjOVaP4Mq=3(YUg0Yx((-6rt@_EWZ==UOa3>J@5`bgY2;nK;IEH2LuBgEUmsrewtNv
z20$08bHIUc*tLZ(bTw*<WIZfe)kPl;`KAqKeY0~!h(PFHXId&muUm)J|2<8i*DOyo
zi;{4eq81@T^I?UnXezGzHkm3f8jn1Bz7o+1`?EBXO-8B?%O+;^WJ=srQg*8d?LT|J
zy4xjlPY3FL2&;@&I@A_&xv?Gi8X~!pB*~BBp{4PThhhOeq+LVR`I-(fbnkIsFY_1j
z(bb+n9I#Ltk$t+~JHJKwZ$;LXe_Z@(_EbSS+2HnW{zpF#jOJ>8M>`J0Xfi*IYeeDd
zOVR(+WNZweO6KgG;MN6S)B%BjPF^71NlQf#bUiiFF=8~U&xP+946gBW_|fj2J)I$F
z_*)h+!Wa7;Ko7k90gTo>8O@TI+?3`#yAeqQnfPBhqaIClq>bsHxW#Ml7wT`Z%k38g
z(t1@fFGDdixA!$Bb(MkMOki1m_=_E6#n({EX5_i)39WaFY}MFXRxD_OejdVc3EK)&
z7iX61aOwXlKnSjfG3aYtuqB<s=csDM7-mD@>(sq)MXVB=gq{z<P;kPvJR9UYAmS;Q
zgP}2sJB~(O2YqHp1CHQUsIz5yhbsK2NRyeI%qqz~!lT1Qp!`n;OdZ10K%u*0r@Q=i
z*!`#A<cgTvJoP{{WDRtG8Ip8(NrO)dYbyumg-gJk(Pe2y@W=5X<Mo2H)dwd*H#Rzm
zA^wWME83$mva)rdbND+uBd-H@4?(tY6HS?t?<@?@_PJ@b;Wk#f$xPt$Q70GAD5_+?
z=v(WSH_v)cx;c8CB0pvzEIj3-z`tyu_Wp0TF3PwnoxVL-Rxrmv`6?j&rkImoE4~eH
z>We9W7dl~`McG@5rc0$}t{Wv^U1T5qi7}t%_=BguZOv~75>8djn=%Yf!vcB?_gwG)
zJ_n9`%gpv-;_I<r01Lw<bFzdoHp`L~Ogh}%d0?CHcIWv8=}aIC1O+mkq++-@d5&8g
zFp-xbb!;yI1KPeGSxMmf-VreMu~AiG*(w`zDTKpS_pc)T_Tg-J_wQu&_(iNR;2J{(
zU1GJSo(%A4Tcq2LvA9y0M4pd(QZUBuuqb$1m>6Ish)YZ%$Pz=re4vH=gXhphv5RMt
zrAYjr+B)@Rlnli=(ybLa9$3EZn?+Msyg{`I1gER_?g2wfi35G5&u<XFcPG${-UE`}
z)CCC~*eIe_UhwBNmxo5Zqv-kKa^SwZl#964?lOYrbD;2y-i@R2I+f)G=%k{%H-Z%v
z-h)T~(E-<B9YXTel&St&w6&NG7lgTx6y!odKmGqdBLr-2Sv>t4$Bt~cSj6;@e4Z->
z$jhO4=o}$O|Fkp39xRcW^jik$AcA;oj$lcEEE8hvfF`?i31z-LZPC<5y8=6P8y0Vw
z#e|e`^R_-wYAr&Z7khWq^1X%6oh*d!_ugna5`G)+%$X>=OuU37LOt#ak*HN;1B`}A
zLVhU<E#vFmD-vQDa5rq)((8ct{rR;k%waS%IIpVyn7s8pTcS<J8nP(n14jVL`P5Xq
zBOR?@tS(jyFY^_14JS)Z%}+kk)5i%7BQA%=%J$G$@NY~}F}89`{XyN%_K<2K3ja@S
z658KTAW&DxkA;MJe}nWDDKJloQ5lw&<XHQ46ZT#A9KP$#x`R)Tj4k0C7~W@3Abc<A
zc;w%DJ=@o!pUlyXBOURM?$#VSxnf>umUm>6IT-yBL_IzE>JfUI`B$GRXNqK^iWuY+
z<PxpctxxS)&+y|$&C1*>1wVW(!fb8|tFq~?^1=P=S6Jsu(#x3gv9J8S_oBWC9MuXg
z;l&pSzZ@eNFQk1r<KeOQs&b<36WUy{Ew|gujvy>Zhoa6z<M>DFoZ-K>12gS?RV1Kx
zFlpgi%b>r7J1aeSdFZH$^kgHm6`4;q9aSW|6gR_bdUo&J@16o`3QPo?{NcM(-9l^X
zPARzkcWrKn+4c&8hZuBtw8Hkpi_*OXu%S7=r$sbIk51OVu!9)uy$uZ^b)YatWFt9J
zRTdm>E-2zxr``j^_y#Y25!Kz#7H=O%v_CCuWCVroM~-Nq=wo6pZ8-RS>6P_ch3P&j
zt2cF;A4_46$B^Nx-;AYy$Gc8%gmu=#dxlKgD#}Qps_*iy5bUIu?LHw5oPIJo$U7u-
zk6oWPFiIzo#*<6NHdk;5(iU#h?#x!rPLyEsmi>B*Il(~K%-Xc$`l4hy&d41yP6Z|n
zqzRgmHG<QL50L~LH+Yu~_@F7t#jTfSFv5SxCI*Hb_9zEhL3ZDAx87`XpfMivMgsHp
zlJ(pD=?Vy71&LC}w4634sHC-R&4cj~L(4kStT$|(?a+Nnwx2SyU3+|C4`{AA4(icX
zQ#5E0(3cI@;*=t>?c;xV@|$ef{59yG{MN~Odo9kxsAA3P{s_rWBX3VfD@ml;8%4+<
zNo%<VNVv$$=TVPzoW<dA+K)PT>hNCS#GTfAz`uB48kr-sD|7myh}NPR(Mck#@PgHo
z1@R6i^7S$EgK$=-hCq91nDJUPZQ8657{16gXbvPxW?x#Vj-1cdTb3%tIEF>j_C{!a
zhzf2gPLr6JZC#O!b*Vo?nSdPJrDc-umY&CUfoU6WV0kTEXI}z5&UH>-N_fBD6N#{_
zzQ^Q%8tX5SgAraq<rFUg5TG$F`jx8q|4>#lSu2u+a9z{~G|~KpK$L_0H!kUo^F;)t
zdmzD-)6a&>`w>OonvIPs3Quj5aIVGqmggHRF1nbzS-@o`W@|omC|Szjdj?aV8eA%x
z&Tz)j^5AYHn&9|iug-w61yA`~!1EWX9<IUz3zTCfB92!mrz4{Dh=shyEy-_Es+StT
zjy@h!`M`lTYEU*HA&?FkA$_TEun|y@ocO;eNQZfA8@#08YsiC1YYj2bYnR<&%<S|@
z8=#}H0P;BBnnK~lKj&5Xr=lWMmxm1UOOYorxlW$rWuh<nMMWJ74|@-W4w>oryx8Ze
z^Mo*~V`qKnU}?((C$(1@VNZ6BF-vQW7p{u!#fiITvt8Wv$WMC}B?m=hV0WL)Zulj@
zc2iyylE<%(Pt84|F;F_I=aneGsYu0T3I&a}8BJ?M^as>20xd_YKkZTkhEh;{{{Frx
zg$V4gTtrJT>J+o$z445fmyrdOjK9uf<kwal7_+m-i<iERHbm;<W(_q`=1CVmKEHlR
zclK4gG@OZHuBXDUkX^^`!bgR8;7jS@mSiph9cOKWO54Ty)HLf{dM|w(v#NTp4M-qh
z58apRSFID)TcWGfS+P?&jI2F?;SOYT&6AQKJba>tY`xQQ5_=W2lut_ja9#)JXV4|6
zCW$!1`5VfS9E_NMgKI`|^WZ1)VLbifv;#bLQwPFbhrf&BfeHrGH}l0$58eKEV5;FK
zab^l-SCX6-30elTr1$baTrj03RLc)L!RJ@QG}4u|t;;x0A#EN$u$Zg|mF8R~(TPtX
zwSnU}3_SL2P9YN$#fr+FYlBE(c@SAirQ?WO(I&ycw_>8KtFZVC*jpP5zYyjZ=FQ~y
zH(UkkJ3KLeb8Qyy?*P2B0NQ1AQE*7M3JKRPG3>CLj0yxd-YbajN3+^#*or;1ESqk}
zYkW)Sf;FN(uvZXCJwui<CbXeGg0vZRKK-x~@3`^$@id6TIih#-XB9S~*3u+Ng&sZG
z)69kdALQAoRRROaZUyj859EH`XXdaqaml#|Q*8~!XV){kNZ!&8MIlnYMMX-1HST)b
zdArHdVo|#>LJ{3Y;etcP<RIn()YJfon`%D3i&FR6F)g?n@*m|91rb5!v-@wGl&1U_
zn|N74FlARrzKgCrsdNp@&B$}G0Ag3!Tg2<vd-NuW$9|)u;^(K;yu9V$`X1FR5n-DP
z^@FVYv;g`y`!CAbE}=ywxJcA|-mmGp{ZSJ{dy}8;+S3%hZEb_`$`q|53IZIrFFOM8
z(&lo930pi^M(&R5p|{m<Ovy5NRFD`+h5ZwL_n|$otH}+jy>aLCmQfPD4ec$6Mm1~t
zBkuqJO6x!-{EXX>;uG#yv`~&N?CkfZ(n)`5@%tgoCRbc8mqWA#MQN6!4c16SIOI~V
z*cuVxCN~(_kM@=UXs((2V73;iE2Yy&o9G2f3G(pYzqdM9L%7ySuuE=aLChIZ$~MZW
z+jByaEKv*8g!W)o1!<G20&+d~_!4u!S?<4Qci)55{daW&!{*_iBGVvuVh4ZL+7oXV
zd{TAvqPh~|^EeFSso*+(zKKKP2sst7ljD0T0`?SB`gwAFYzCu*P!N<|vaK#8EyHNj
zYT4q12DF4+b{eW_tc1U{UBkGWuWT|qwB?mn+ld?KO<xVj{f%Z~>a)-lgd>@w2p`}A
zi+{J5k%6@h(o~^mftK(dz4af4H|_0omc#l8FgTRt?CzjZF7U$YnexEkgf=B|q6Bq3
zky~Dq>_ow5#81@#we-9Ac2*J!o0b&f7s3Cgfc7~s;fxJT-n(dKdJ*EZS6u##H6oU7
zeu*81@WL>gg6hXtwLx6;kL*~$TQC;3A%<c@i$!9)pzkvNkl(sL{KtSIJUByshv_Op
zt8k@Od3}1fdPMdPjToezI1(K=AMjDm`>g49%uiK?2Fs68u-5+k%-z>bj95Y5w|$Se
zsd(4wyImTbm);wy&AvpcU;(IgRxCvPFwbHPeQX&b+em@yKLy8Xz@se^nYQnC8vaSS
z<K;LA^F4fm3~mYlj6aq9$`r>tyN4AItTe_Y+MA<<yob7nO0Rdp4#I=?0qGZ=N_rDM
zcUMH=OW83JyC&AL2IB)J$5b7_K`EBBkGlo5!gfsKOesl7ZlPfuNX2@u<BLG&K-Rxl
zD`D$NtCi&3#@YwPDo}y6M+N}($f>UEcEZpY<!;wloTZj=$>46M1?H%_AcH2ob%s~O
zSh$V}?Q?r4L=&N!WA-oz=Ug2u`xN?^nC197F&#MlXOKygj{)eJ4hkchTEFXgPISC@
z@}SX&@QH{b9n%q<-tA*ywVutN`h^cVl`}l-VvJR>=Cr6X`~Z^m!4NdqX!TT)Ziz^x
zx#$WtC&Ov)A1XefrM#?j@#T8e*M^4$H_$K}K4q9)aKb1Gc3MqS&V8%N1HN2#xptW5
zp%=10psRU66}926lV~Y8>+HWj_{kg^DXUoT1q8!qIUyC%yIe46QuNNCC_jq2a@9*P
z5NxG<#1m|ef>Ehkc{>imBZ;EdM8pECIerlU4@!z!l$dHe29Fb7-jm@B6l79ziFpPv
zP=Ha<dd<>vz+PoZ*O4(SLK8ji&Lk)YeVLxlVt5^+k~UgC{1=G#<FnI_qjKrfP$|{)
z(=VE@ko2_+g)W287q+zxnPqnc`&#9pwQ5vt!)c9Edqn|Q#n~TH2NUo^<BGt8SZtGE
zV+he<tC71#t$0U4N(r7XC76fZ*>V4lMm|LG)gVBI6+=tL)+gb&U&N9YI*~F<^e7!+
zRc-VqiK6~T-54%3IfyPAIU$da5+sL@bpY6{E|b;;^@%PMbnb38l1O1)-DVZ4w1m<d
zwZz(a$BpqLg9Ey;-fk&6?HVp?MxBLyBb>xZ^xbfXXqK`-1UW5U)E_1uelGW1@WS~}
zE4H(r*=Y>9JYn~Z1l@UdlTY!OlE|4MtX0;}>kZ~eFa`KklIugdb1TW*HLm=yKur^6
z#fST<r^;2gm4%6&$pF<+dDTVowiV92r)|KavG+W{%bf4D<eDfrL^V)O*6Z)Tn^@2(
z69;DWH5P#aV9`6tm8oSm{B~LZI83Z1v(o_AFVmjdVS|hrHJArAN&K`_*JfUxiW_F@
z+EKWZUZWnfxJ5#;pXfF3m~22>><>}6f#6JNV<QzA!Z0w4`bPmt_vihs5Y!N=9q$@4
zdo4A!(+UG^k?$+q@6-phlT96*nN}t`Mv*do4@RoN`g*c*oq(vW2|Jb@XpY(+$PsCa
z7z0_bJm21Y1mz$bq1N&Ec02pi`Uvai`P8>vSAKvV5_R?SuO84!7KQA&YpJyI2fuO~
z?jcdMVi4!M&uVf@nG+53ynW$20C5;4o(>-c!Wq)7<^HM}`Tr)GCTjT~zF3qM<dF{t
zUxOz&2C*QtSZafUv<oO{CnO?yL1;B6;Qe230(BY}cYbLvD85E*Sv}ZSc<7Eyb)EMN
z^Yd+G3I^sO5mzsyy`UC<2PJ|oLGnh)pZUTJL@Pfx=Z&Yujx%dVZ!aP$g$R%p=w=Uh
zYZ}JZ#WU4Bbfh%pnsEUKl;f%i7r^`8bp;hoGz~f1T@{;z^SWpncuGkCBX1V$H0C$Y
zlT~?;DWP~(kmm_hk=(b?+9Tj=Q~qNkv}KkoQw($n*iw1RN6GaCjVVmQ0Lc~fQa<=!
z*8rKh%lKCz>dm9#&jj#Ln)Kwe6buT7L+UU--Rjm+Uh?9BLdbfU5u`s=2`xu9@`o^T
z5=i@iUil7s2@w-LZChIpbsub((oku)es;-3R<@dm3(nl?O((iik{VN2l=y~o_IgI=
z7<3EH?PwD(N!o&TY}hk~h(H^l)Ef}^C?>$|BV!*0f_L2E&~+ZFUg7SjWSG2DK#7Aj
zsym$8+F6|q%OkL^vMhYHwf1U2DbgKhlw+NK#0AMUUN>gQ4307sPqKswqj(&P-~xrS
znU3A+m!$R+056nKI_j?R)20l$?ls*sQi(mVyFlxqBqe{TaXOgmxp>-~5Ra?N^4aTG
zAqc&z+B2ci;GxaCbsaNN4^iz-I$Zr*kKSkxJgCE6r7RmZ>{Y^xGPO<((rk7Ov3FAC
zU_uDjtL!I6D{rUn*1)2Vtdw)4Ta34PEm?`=rPw*oz#1VEM#U2dQAItR?%|cm?LQ6=
zs11{bqx@mOZHB8@En{Z-`lcy1XEeV?*|jrnndfd<;}LJmP8UJFq72Ml8PdaUR6tu7
zp$VsZCf&AiE37ifXrNUT@-ftn|Eim0tI#G%8D3cI<pn%s<mJo8O{wBylO7s<LtIKa
zVOvQ942pe|kCS{TT#%MB&%KDJrmxH7k_{Y^&ibvfvOEnet*5lO{Qy#T&4q>!Bj3K(
zRRdqNzI+e2M46?<ilXj<W`8N#hL@44JTkO~riHi~TRLlM-dIg~;!YbV5Cdjxz&e<q
zso0%F5Pg1LGK?2{2;oE_9$d9?pb_0#iC^0~F3GvtAg!c-KWRqoy~VE<@q9MUI*23G
z%#qYJxWOS?^`zBfzUc-Rz^WguL=t75qu!$#w{TmRNNnkTmgjF+)o<fTOlWG?9t+O~
z*j5M~U@u4d7s1g9EG>><#s9Kq)!Q<OvR+1NxNX&qfRi|)!7JNu{8Y^a%8&X?#j%kl
zE0YAoBQJx~8>T}d#*)^sy|<`BrjtzKGz)A785n+vt`NbrKE&d~7Ddqt6cicD4r#;^
z7X^>Yo={PPx5ne*C*$rPfBt~*(uDSmcU?#sw9$hF*V$GA@Y~*d5$~Y`g7Hid1jBX}
z`cWoBl<NoMILdj5gLx@<{=S1xpi)fCk<_8&EiwZcBV+!GiWvCB*~N;UZAj#gIG#M8
zR?6r$l{|#W!p^dzw?(P$3bz>#aSmiy-+z7&M_`;6Tso_`r}b@V<@R*%(?7_R!I(Ot
zy=+=WOiYPZJU8z)1Y(vL^Ln9zT<!Ti-%<=eex_KoVk)@limnrIi6ZzvTeL>fH|af;
zEp+*iHDep08PR`0|7;>05k$R9_2lDuF*xzh>z}_--(s2hG=l`Nnb$ptgQlt3J#OJ2
zx_#6C^b~JtAJ&8fEE0l=*`t7~{4$s-tgo$~Tsu=E!_H9-Pk`o>81B}q@c&AWHC`f=
ztHoA4I%>+fcAIMOmV<_jxacnKj})hKsSE?j;7l}4Z8qx&n_6&Q{e~cJnfqB249m)1
z1L~0nJMdB&by)cc`<S2Tk+w)JYe^Gmt6N!zJ$nW0`<9XP$){4^P@ixexe-yZ+*wfJ
z;r7BQ=Pa`w^!&X&!eL7wvP%l{W>zgWX8r}=%4mt>ce~tIUX3s61}W1<;8f{(<hTt`
zCy)583wyVXl(AVd7>+VZ^0hKUGZNra&^%@vwXFT^D5nPp_dkn+M5Likzr)-?j|O($
zE?+iQZBEZT+Z5Q{Vu{?1upilm#+IxHjHS<KCh=Civ0e2ks!*(Ug*zFHVg?1m{6eWN
zLOfj-EThgX1IoXU9Yy{H`l7ewWU|h*T4@~0JI(svRNb6mvMM557zbN+F3R@4$X*eS
z^Ch+uZk(bMftP(h446UaSOB85D=A&w1+Mn-GG>XAOh(%nE+=KpFyq<W>XIwO+~jPW
z-+NU#XUgccU>(EI=3~p_Mwc;NKH2_WZ=!OaN&ysRf~gYE<s%yY@ONS2=ysNSX*=C>
zTqVZ&ms#Vj)t5Kqzi~Qjj$#O<@x8TB+lMq!@uJ6z*n%R2GR>nFlvFAFQ;<a{SLl$`
zdNhklq<mpa-ncp<XR&=+0FP@h8T8|2k(#!N-G&3enB#a)K?&-4;R{12z&v%pGG+ua
z%@67=VEoSew7~4U+jc@<L&_X2zqxrxN&lzKhn9I`5Z)lQjpB-V%B4-~ai->0%PzTu
z*WUMIb65q7qI^%GRQ+LHbUtkG5)?v5@kXIGr$C-D@%F;#*-kT5TDn4on@xg*P4)<w
z1ApJq`xAE_4<CCEqwkYuS(Oa=ag8PfHA5V=LBxjhBu;a@dgZ^v!P}mI@)D`Ivx@=i
zT+JGT?pi|Ac$Tl~u<w!a@$b+<6(zZP&2iM(9GogPdR#7D=x&Z>VfE%XnJY@-9Vb|l
z8TkXcPzcR0rCf$lt_v!>DGO#EpF~KE1hT?AhZd=Q{@2?ups@KtB(cq@{lE*xu0(lg
zTRbg?QBc^iHtOR-Mbu;d*h`ZBj9P>rxFRpTE_V<3X=&`Z3n!9|iJE2?j0j89Ex^hM
zqc=?|bxF(t-&-$owl~MdUxcDDVWR0(_)p580nfFMoHR=~88dt5=!)%)o5mfPR-3O8
zEoh<J&rw32mVqSaqmd-qDj!lPv`;dili`c!d6k6X$PkfHGOrjFBLXbl(xb}e_cRXn
zFb%~x<FAt@AqG!-V_Xf`IA8Z;5xn_vaA){JBGK6t`VqRmg5qd*<ovWDF2)#1LIN$7
z4>+=n2}Y(t`94N{n4pN;Fy-w!<tN!?v?+BSVBixpTwYMoZ8ZFkV4wXn`e$IRGsNdP
z#aQ($=WMr!Ytx<;KuE@HNY_7RY1{Xj#CAe~WFoTVlkSe0m-$6%F8#{rOF%frJgKGd
z9B!$2gYIsLk&`^=g<y}!BbhKe$k($l(fF6SEF?9noTlsgA7AGXF^JDd0fb{94HL?q
z56a<^v!$%Qq$e0A$<4$xa~sQpnAJzZ(a1rg2U)j`qNEj@9pJ`s5J9j<=A@xRTCU|M
zcu8KLz%M;-)4#2zqb;i}10n>r<S;o^dj^uN<#RAR=5dbvwxPOE;7i4NPSQos@@WUn
zxCLg;g<ar+-h&E=a{L3ToaunonN~~uMCIx?&S`k~hu5W*C0V|Rs2mD&Um+f<0;9k6
z9QGm$$z!nOv0aXA^p}Eoi4wv#cY{)`I5@;sCwJbX=Ykf@0c^8YVJtV+AQrQ+xNpHP
zBD29VKjCEFS!>*2^r$t<@#dt(*8WT2rj`S$3{p_xx~65qVTyWuuuXX89yrN8n+Yuh
zbRF>T($n!kyC`3B7k0)=SYFM=2_SNvV>PJVYr^bonVRMH!8Y+}YlK~Z@49r3lSeLT
zc$`DoU40&qTSaWGAVhuA!{vwkbQi;vWVsh~s3Tg9lY(#HZolKt>g~NNi@3n!k8rF?
zn_@e(slRvmZWmZ^CZfo6=%VKzt)YoBE)$B<G|h+Iq&HG$0E00e(Cr6jgAuF!hO81t
zE6enf14BkEu#R>x=4^3_dMb(?idb0+mr4vX8bZx#%jV1i(`ld)sD_Wrqz|Ba$rGi_
zDloVq`x)(ED>s|*)@gm}|6~`wt&!?7($<$)%uB^}MsX?wes=&QUj2v{-5J<xw;B%$
z$t;hL2HL>#Fjy<pkkI;>{WtwV{WT`E-6)~$w2boZHm3S>ru!@pw0!+NT&UScv~(jX
zj1a!=Kvrwhr#b;-kOs`2!w8GQ)GKa}SL~Ioigj`UdsZR_5a^n(fs1GE(0I)4j8pQ2
zz!C8?%i$2`LekfP0?ewQ)R2HAtnaJPEVc>M_%kQ<)&0$HlC(|%wN`<RP`vxgiR0ZS
z)ruoTtQraOHAkjZ28-Uj0_r-ubppzT5{3<Xurtf^GN3T5Nxu(m!)S5gOXWdzk+_)=
z`pviNupEooB**m0m?L=610b3ZkQFdj+#_c#dEfFxF>v4!9shZ%?^5VT6`7n4vPx*h
z8dmX8p6f{I@eFlg(_Yq5d{ri%yW5EYFtWx!6ov{9cJ0EqKQm!DVeb=v0!g0HQV$YP
zvBc6!NmY6MGvfA?tN8x;@+tP@oZbyE|CC7_sk_$GkzIn5T%pN+s<lh=l9R#T9>dGG
zlRSTTg7C;_UK^-zBdV!zcl}oE*S@t0nS}C^S6H+^)tZ+vFa}j0JVTeq_HY~S3=~I4
zLr_bSPQf>#+FJ3=Fo>HRQuRkRnlAnW=fHLF*H3cXh1-w))zos4f6(FWdAR2)3L7{a
zILJB5do{DWi?8}cZYylw=Dr7gf_GY3`8Mm??G>?HsR{e}y>npGTfWU=Hu^7+WqG_C
zW;|wyZR=>yBhc~iQ45T)U1U%3>;dIE(6kp_Gj5s#ww`1c-9Y|v4!rb?P$nsubEytc
z*n!U8A(L`BBkgmDpPPUB%RBD1l!=Zh>%jdk%#U;a3mkKa!#Dn$%2_3<k0@e0S}>}U
z+qmpKDxOuREo-qg9Si%f5#ntVaA!%TZX<(z=8gy|3Nki}Ii5(p!%E9-n(}QL*w0$o
z*HR-%^Q`g6>SBlRbW^y`UT_FfgK&cjtn}?Cew%*Jpsw>m?JdwCA;($Tv7?+2f+`1?
zW*8USzT%@zKE&jpRFcgA%Cj;nmhS9<=Y|vOTKJaD8y+0~Kx`CgvgkWPQluHdmGt5Y
z4S7Ny^>nDD?CagtfHYXqmf=?(GTP+H^?lA<(=+iKHht4DkxoBYAG7LI!{yHIn^&Xm
z_5X6mJ#s|5K2Bo1L8si@d=pqqo*AjgKzMYL?5sJK9h+_Idqv+(RG3eNge)oE>n_X_
z2D)|=g+BUGblH<R2KvTE?BE*+<Ew-3z(KV+FBFH%YeNGSUYgHEryIxWVAQ@4J_Ry&
zLT>^IibX1e!2EpE&<yO8G*58#b^hr$3~-Pci*q{Yo+ceE>Q=rgT#AhTYfbdt{OP4>
zCOv%&Ps;^Nre1EV*H_=TtIZ|TGMJQmAVn?l;iCpnM)Rv9#2<J<rU#<fvGB&v*ctKS
z61MLg>8pEMZw|`^04LOS`9=AuGtX?`&z&pC6Lo&FY3q2+>~mF=)Xzihoo^CI6Lj6O
zULy=esAXzL6fz4xx4I1?D_jF^?3Ppzk~}HwY6Rvt=1HW*n=b*zpi5E_qm{aEl&>cu
zzOyEqNo`o#UjXJ0fLRwAT~SoXuUdvpS$YY|HIs*Zm?}cq5${p!5;HD3c2Bf`Dtb41
zKjKwENCJueb{z027&zdxc?b1fBfQ?+unEuWq0Kkquvp0zj0kPp10d!%oTG76Lwgji
zANL%m%L4h?h5J>Wnr1K9z-pjTSJfhVf+_~Wut>BI2^<d^{?Y7~KE!d@r5-ZzE+a$-
z%BF9vi(wXF88^MBfkWr&`n_aMf@K_#B%8cM;?|iUQRQvB3Vw%E#FyKuV_4g{N@<LK
zO;STF2BGjrd2bmJSqgwO^?zlqx`q4B4a8tv-d@U#*f!SpF|u@`Dwv6L2O&hRL(96y
zs1Px8!N~>kxL$UXf1it>b)OgglH|CmG@+WX+Caf5(0%FU=K4+iUo(yfyESj`)CrhK
zra`*xvnGw7*4qpGh0{`jWmQAPppUfFz(WY7!yoG|d@GrMsOGWAwW><l)@?TUhm6X#
zCS}iNP<TGY814KvTn}-`n*YsgTZ7qHv=}MT2fZy%g_;3!{sgl;ZQ2R2@B7t=WvJxz
z9ys`GXPkj+GlKuw<M{myy0r|Gx`ztl7?v|4b?~@&9xBRu;D+6>!eVQ}6;5$qOitP|
z*ui<|7>a~|<u;H_F-d1l5Nov?BPq9_1@KD=hxe=Kmw$xzk%TxiZ*J9$xufQ<BthG|
z0DkC3>iG0<V!pC?!VXA*AZN5nSjr2{C=0nNAG^Ef-p|&6!g}Imr?xd2;(ol<$Mia4
zW^F3ASSUprXWKQvHz97!eShF4j@gTbD57v@n+x)Tl8AeYB$88^OHMomyL17ajjf|I
z9n<zcz0s)!H6`~}BQDmB1`~NoZYM1%i*JG%u%4{4InuX6)aqw*?^t)}<lCnd^?r&P
zrcN!q`z_~OB1mn~#r2+SIL`0vFL%{DpNpyd=xsT?se+QS*YfHX$DJqG*=ujC2iEQ&
zY*j&*gtbQ*jdS&6T`e}CjMng}wYXWcp>8A%XHROHm-Ui8k{FSneddqVx_3qh(IF$l
zL)iv_OA!s1wgOhm8q<K2;*zK8+-bQza1qQ70}{=milhcTym@K9{nvSwnEWBNcgI!c
zc-r%yUKf&H$o}y>H#l}Hakm7&lZn|ch!lQf$jw*H6U63C-1O~H`=EZ^KWME24RDyV
zV;+X7NjP<`9!&{c6KMOr@=#l9;;dIGzk8RQQsJ`FM9-<d_MWi8-ZfyGZM(ulp>t`Y
zwde~$JMTUL27cLGpmguv^L@D~&<wyY71ZXs8!#mQL#Ps!VOaB6bK-<m-jD#$ZWvL9
zh^-)YF66UKfd3O-qRb0_j8!glJ`w0yGVvjU^JAzqVT4bev>UML`$s!{dTe%FXjjtv
z7ejSl-tak*`UnzL*Ner`$<x&liQNuAcIyy#Es(=7t>yyCDe#=O(G*Y*P5FQ?|E|aC
zS#hi)8`6Nt9P%BGF-;&HVwoy5lfPLoj6)Tl*=0~nm2WJtrDL9%Q<KMjzs4B>qWQCO
z1SYCY5z_^6@Sh51TWS)5qU2z<uhe6wRe_SN?Pb54Nj`CND#p0DGKjJArsZ4?8q>-O
zGCeit>|~v>1#>eiMkwTLX{d(C_=?6Ib;g@Mr0UiJslUjxJlk+OKDsu1t@(Sb@b|UX
zCdht`s(EQ(tOv__R<~aJR~8h3XCWhERZDoeBC7|oIsxf?;<H5DRMQ$7qRKhU@<lJJ
zCpb1O!GO+biHT<ev$e-)elob@N=1l$x|^*KiUJHz2L~nxwQi06RySr5+ae6t_x@)+
zDMKNJ)LE+7VicCeA;jA>tKim2L{MZTl*4KOw==_pKd1GfF(#T(lmVz4iYv$TY+<^y
z2SYsQnL_In_IBrV3+43zLM#ipCuG)4rblX)p2Jtk{2yIl*PJ##f8kck51z3bS%Zhm
z>`-lh_m5xMUJ$68Mg8(=PC%B{6EHdhvfi82o3!Z-z@ae13PV80@J3icwoC>+AKzh5
z58X#`LT|zL8Q^NIq)9YDV*axaVkGvwLZYW>ys76m&02&*IH6MPU0|Dbs{RFl;D%3k
zXt^_0ou1P`GH(DqzZLor-=r|RSU^t@gHrKqn!v;V%GGKlCoA0Or(G1+k?O(V5bvov
zf=k$o#YERPGZVe%)K~lT|M?46R(qBirKDMuYOM!d&6!;DCoth)fbGS0-xH4b*n?yy
zmkZ(6YZUQgsB;J7-X$RxKJOv8y0LWMe*^O(kn-MK_Z23|N=D46MABJR>rrJKZgF4t
zrOEwO%f*D~p&{$fX4$it0F?#bYykZ8ApQO4Q%neHc+$Ad-1F=cyt>_<`U{{vY@)bh
zmxyJY=rx_c0s=vG7Db|tX5L-=l>Iyikksb)lf{|QQv<9h6+8!9%)Wl19w<wys7z4<
z^}uB-kZ222Dhm8!pqK&Hpp9eb<P>>jNzB}>$NTt`BjSpEAa62|aWryOv(Qdkv2mME
zl@o83XTnetP;&Pz|1st)vHbV?Pu9Ufdz$%yh!^ClUY*0uHPzIJ9w?;d7gGL1Knn{&
z6EY>XDldd*H9yBBS9b-$btq{XkUM_kXAi1P5|M1iU`}ZOwu{<zvk20ULKDy%a2IQQ
z;*Jh3{!fS)dPO*PYi&oc>p+t#Qb1FdPV+DLM;#!`pF@*mE+lolEmPrZgK+V@7kW(&
ztD=y*A|CXl$=*w!U1EvI5Uwa}+`)Clw2#gV8^S2@x_9G><r+C-H#p^25i%V#ZC9Tl
z^_G!O_P2b~kX~!kD(xqJ9{;}oqXr4nO!`YpNaGZ=ZM}7$jSDtOqO97L3Ogbmo%5{m
zPSv9=47DK|4I>b4FQ%n^_j+$^Q*>5>PevVBPqi}DcUn9p<s~};hO_&Zg`-1@<?N_m
zgJ^9qt07?#G5>nli_Jq-sEzGGg#VH<GV+q=b~o$2hnC0MX14czXi5<O8vn1-7`)8Y
zwrS=&gp+uGmvwEx{HGufQv<A(ZulNT^%|hqGJb%xJl%6y^7}1Cpe&o&bt-W>rDLMs
zcAFn-$*itVDm#IV2bq^12mT|ViYuEM@B8yf?W#I0beYzlh@(II$~JdTdUM}Q!7IeN
zv}{7LiUJoK9ALQfeg7Us<$26qKXO!puFe>Tyn>UdkGU4VWYCHASwKEJVW|lTd_4`*
zCMoSru{u(4nh>>oXAPSCyxFW;QT&7^b8Zo>{fZIsYsfl8kxp5{wZ!1Y(hcRpIWRHZ
z>Ka%l8pz+bpPfMfEsaz6gJPB*^%2noU2JAajB`l5om!4bKymh>3(YA}yUe*a70e6Y
zkEdVAC;hLS=ArD>jX06Y%C^bUL6&)dTahkM-^t}tR%4qFZfy<$_d`l`XkV%P4GX@V
z$|vt2Sb6GxVwixnLYwdik#k$)?JYP1Xc$z}dUO3HP-6~bg$-EwUw`zr2%T?%m1UaW
zK(~HSu`2kCQCUf4FnA5P@s6~>15X8U_am(+k>e$uN5`;31Q+7}U_)9u#n&Kp7lD2F
zR>X|m+CdOhFni_y2FyG!v~ZnM8c%6l$KaT`JFiD$Pxj+THsnSi)&J;D8J^?_fqtla
zHiz@|c{@OfK~niB>YImUAKtMAI>7sbnk=E_c#fSYaZU+Av29{(aIRQvXY4`>ZgG8i
z_bx?u)dpp&vg+eOktCi$bPCQ^Z3#Cd+$Nviw(MJA?U&ZdxWz|w*s9LO1REX6(u{*q
z->i0~N05Rm<u<g4OOB`v54nuv28y1x>RgBcJ$wyV_u5+)SfuXDy97BP3dC>r`c7K#
zqr^$=%#NKKmPoe?kVF5XfrM}sJF~bQC$-;{4DFKHMZSMg>%6p{-Labljb;vqn`X-k
zH4WwLv0d8S?drIysY)aqCuY*z(9|%}!8sl<jo$0K4`!Xx&AoKm`eQJyMpI7YrT}m<
z#G-6%g-^-Ka-j2;w}cCx0<Ci9ejIgpcvr251}Yp!*s!6UZ!)ZISIU|0SGGv81OLi-
zmhZ_G|M&G@vW%$!M;j)kFTvOeHVn<+ol9sQO+7cVmNOD?14Ju0>1e=7wrFlZA`8tN
zZDI8E^m{IyJu5PrS5vj}nRss+KL>Gc>BAS)I%GZGFMw|3C%ijOkW9}B__r;Zd}fM=
z6+S^cgjOP$eOCgo$go+3;yWh(_!uCTS&0}ktpj9xhT5HtADB3*GYE$ij6R!BltbiQ
z!VAkCH%1Xbb=20w$IFVsqL?DYM;L(e8qoT}qY_zrEZ0EkYu#^QO2uJ+zCwS$xcgh3
tl8y!;OiSOrjRmA1nb_Fiez%w0<3!mp0aLKE!mXAcN6KR{bM#G|wZDyoez5=m

literal 0
HcmV?d00001

diff --git a/MikroGig/20260712/20260712060418-Config.rsc b/MikroGig/20260712/20260712060418-Config.rsc
new file mode 100644
index 0000000..93916ab
--- /dev/null
+++ b/MikroGig/20260712/20260712060418-Config.rsc
@@ -0,0 +1,3337 @@
+# 2026-07-12 06:04:19 by RouterOS 7.23.1
+# software id = 2961-C4ZZ
+#
+# model = RBD52G-5HacD2HnD
+# serial number = HCX084RAVFA
+/interface bridge
+add admin-mac=18:FD:74:6E:58:14 auto-mac=no name=Bridge-LAN port-cost-mode=\
+    short
+/interface wireless
+# managed by CAPsMAN
+# channel: 2422/20-Ce/gn(17dBm), SSID: vados, local forwarding
+set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados wps-mode=disabled
+# managed by CAPsMAN
+# channel: 5200/20-eCee/ac/P(20dBm), SSID: vados5g, local forwarding
+set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados5g wps-mode=disabled
+/interface ethernet
+set [ find default-name=ether1 ] mac-address=48:8F:5A:8E:1A:BC
+/interface veth
+add address=172.20.0.2/30 container-mac-address=00:00:00:00:00:00 dhcp=no \
+    gateway=172.20.0.1 gateway6="" name=veth-awgVDSina
+/interface wireguard
+add disabled=yes listen-port=12430 mtu=1360 name=wg-awgVDSina
+/disk
+add mount-point-template="[tmpfs]" slot=ram tmpfs-max-size=64 type=tmpfs
+/interface list
+add name=WAN
+add name=LAN
+add exclude=LAN include=WAN name=Internet
+/interface wireless security-profiles
+set [ find default=yes ] supplicant-identity=MikroTik
+/routing table
+add disabled=no fib name=r_to_vpn
+/system logging action
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email
+/system script
+add comment="Script for setup routeros script system" \
+    dont-require-permissions=no name=AM-setup owner=AM-setup policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-setup\r\
+    \n# Script comment: Script for setup routeros script system\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n# :local ScriptName [ :jobname ];\r\
+    \n# Additional commands:\r\
+    \n#\r\
+    \n# For scripts:\r\
+    \n#:global NewScript \"script_name\"; \r\
+    \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\
+    tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \
+    \".rsc\") output=user as-value ]->\"data\");\r\
+    \n#:global NewScript (a);\r\
+    \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\
+    \n#\r\
+    \n# For run from terminal:\r\
+    \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\
+    eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\
+    ut=user as-value ]->\"data\");\r\
+    \n#\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF \"LF\";\r\
+    \n#:if (\$ScriptUpdatesCRLF != false) do={\r\
+    \n#  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\
+    os\" ] do={\r\
+    \n#    if (\$ScriptUpdatesCRLF = true) do={\r\
+    \n#      /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\
+    cript;\r\
+    \n#    } else={\r\
+    \n#      /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\
+    ipt;\r\
+    \n#    }\r\
+    \n#  }\r\
+    \n#}\r\
+    \n\r\
+    \n# /import verbose=no \$ScriptName\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global SetupScript [ :jobname ];\r\
+    \n:global RemoveMe true;\r\
+    \n:global RunOnce (a);\r\
+    \n:global InitSetup true;\r\
+    \n:global tmpfs false;\r\
+    \n\r\
+    \n{\r\
+    \n  :local RmMe [:tobool \$1];\r\
+    \n\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SetupScript;\r\
+    \n  :global RemoveMe;\r\
+    \n  :global InitSetup;\r\
+    \n  :global tmpfs;\r\
+    \n\r\
+    \n  :local UrlSuffix \$Identity;\r\
+    \n  :local UrlDir \"certs/\";\r\
+    \n  :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \
+    \r\
+    \n  :local CertCommonName \"Root YE\";\r\
+    \n  :local CertFileName \"Root-YE.pem\";\r\
+    \n  :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\
+    f852f02a708aa5d5666\";\r\
+    \n\r\
+    \n  :if (\$SetupScript = false) do={\r\
+    \n    :global SetupScript \"AM-setup\";\r\
+    \n  }\r\
+    \n  :if (\$RemoveMe != false) do={\r\
+    \n    :set RemoveMe true;\r\
+    \n  }\r\
+    \n\r\
+    \n  :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\
+    \n \r\
+    \n\r\
+    \n    :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\
+    \_\\\r\
+    \n          (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\
+    \n          (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n         [ :len [ /certificate/builtin/find where common-name=\$CertComm\
+    onName ] ] > 0)) do={\r\
+    \n        :put \"Importing certificate...\";\r\
+    \n        /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\
+    \_as-value;\r\
+    \n        :delay 1s;\r\
+    \n        /certificate/import file-name=\$CertFileName passphrase=\"\";\r\
+    \n        /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\
+    t YE\" ];\r\
+    \n        :delay 1s;\r\
+    \n      };\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \
+    ] != 1) do={\r\
+    \n      :error \"Something is wrong with your certificates!\";\r\
+    \n  };\r\
+    \n\r\
+    \n:local MkTmpfs do={\r\
+    \n  :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n  :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n    :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n      :log info (\"The tmpfs is disabled, enabling.\");\r\
+    \n      /disk/enable \$TmpFs;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log info (\"Try to removing directory 'tmpfs'.\");\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/remove tmpfs;\r\
+    \n      :return true;\r\
+    \n    } delay=100ms max=10;\r\
+    \n  } on-error={ }\r\
+    \n#  \$RmDir \"tmpfs\";\r\
+    \n  :onerror Err {\r\
+    \n    /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\
+    et total-memory ] / 3);\r\
+    \n    :do {\r\
+    \n      :retry {\r\
+    \n        /file/get tmpfs;\r\
+    \n        :return true;\r\
+    \n      } delay=222ms max=10;\r\
+    \n      } on-error={ }\r\
+    \n    } do={\r\
+    \n      :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n#    :return true;\r\
+    \n}\r\
+    \n:if (\$tmpfs = true) do={\r\
+    \n  :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\
+    \";\r\
+    \n  :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\
+    \n    :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\
+    \n    :return \$true;\r\
+    \n  } else={\r\
+    \n    :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :log error (\$0 . \"Directory tmpfs is not created!\");\r\
+    \n      :return false;\r\
+    \n    } else={\r\
+    \n      :onerror Err {\r\
+    \n        /file/add type=\"directory\" name=/tmpfs/scripts;\r\
+    \n        :do {\r\
+    \n          :retry {\r\
+    \n            /file/get /tmpfs/scripts;\r\
+    \n            :return true;\r\
+    \n          } delay=100ms max=10;\r\
+    \n      } on-error={ }\r\
+    \n      } do={\r\
+    \n        :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\
+    Err);\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n#      :return true;\r\
+    \n#      [ /file/get \$FileName ]\r\
+    \n    }\r\
+    \n#    :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\
+    \_global variable tmpfs!\");\r\
+    \n#    :global tmpfs (a);\r\
+    \n#    return false;\r\
+    \n  }\r\
+    \n}\r\
+    \n  :put \"Renaming AM-GlobalConfig, if exists...\";\r\
+    \n  :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \
+    . [ /system/clock/get time ] . \".rsc\");\r\
+    \n  /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\
+    fig\" ];\r\
+    \n  :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\
+    \n    :put \"Installing \$Script...\";\r\
+    \n    /system/script/remove [ find where name=\$Script ];\r\
+    \n    /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\
+    h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \
+    \".rsc\")  output=user as-value ]->\"data\");\r\
+    \n    \r\
+    \n    /system/script run \$Script;\r\
+    \n    :delay 2s;\r\
+    \n  };\r\
+    \n\r\
+    \n  :local Script \"mod/AM-Certs-By-Ident\";\r\
+    \n  \r\
+    \n  :put \"Installing \$Script...\";\r\
+    \n  /system/script/remove [ find where name=\$Script ];\r\
+    \n  /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \
+    check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\
+    rsc\")  output=user as-value ]->\"data\");\r\
+    \n  /system/script run \$Script;\r\
+    \n  :global tmpAddCerts;\r\
+    \n  :while ([ \$tmpAddCerts ] = true) do={\r\
+    \n    :delay 1s;\r\
+    \n  }\r\
+    \n  :delay 1s;\r\
+    \n  :put \"Removing \$Script...\";\r\
+    \n  /system/script/remove [ find where name=\$Script ];\r\
+    \n\r\
+    \n  :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \
+    ] > 0) do={\r\
+    \n    :put \"Renaming certificate by its common-name...\";\r\
+    \n    :global CertificateNameByCN;\r\
+    \n    \$CertificateNameByCN \$CertFingerprint;\r\
+    \n  };\r\
+    \n\r\
+    \n  :if (\$RemoveMe = true) do={\r\
+    \n    :put \"Add Scheduler for remove this script...\";\r\
+    \n    :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \
+    where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\
+    \n    \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\
+    \"_RemoveSetup\\\" ];\\n\" . \\\r\
+    \n    \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\
+    \n    :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\
+    \";\r\
+    \n    /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\
+    time=startup interval=30s on-event=\$OnEvent;\r\
+    \n      :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\
+    . I'm leaving.\\nThere will be an error below, this is normal.\");\r\
+    \n    }\r\
+    \n    :delay 1;\r\
+    \n    :put \"Loading configuration and functions...\";\r\
+    \n    :do {      \r\
+    \n      :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\
+    \n      :put \"Normal removing temporary global environment variables.\";\
+    \r\
+    \n      :global SetupScript (a);\r\
+    \n      :global InitSetup (a);\r\
+    \n      :global RemoveMe (a);\r\
+    \n    } on-error={\r\
+    \n      :local ErrorMsg \"Loading configuration and functions error!\";\r\
+    \n      :log error (\$0 . \$ErrorMsg . :error);\r\
+    \n      :error \$ErrorMsg;\r\
+    \n    }\r\
+    \n}\r\
+    \n"
+add comment="Global Config Script" dont-require-permissions=no name=\
+    AM-GlobalConfig owner=AM-GlobalConfig policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GlobalConfig\r\
+    \n# Script comment: Global Config Script\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# Warning: Dont touch this line!\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global GlobalConfReady false;\r\
+    \n#\r\
+    \n#\r\
+    \n# Global Url For Amster scripts to fetch\r\
+    \n# most be defined in AM-Init-Script or AM-setup scripts\r\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n:global ScriptsUrlSuffix (a);\r\
+    \n:global CheckSumsVerify true;\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF true;\r\
+    \n:global CommentsInScripts true;\r\
+    \n\r\
+    \n# Debug output:\r\
+    \n:global PrintDebug true; #false;\r\
+    \n\r\
+    \n# Debug output for specific script:\r\
+    \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\
+    \n\r\
+    \n# Debug logs\r\
+    \n# Other actions (disk, email, remote or support) can be used as well.\r\
+    \n# I do not recommend using echo - use debug output instead (https://rsc.\
+    eworm.de/main/DEBUG.html#debug-output).\r\
+    \n#/system/logging/add topics=script,debug action=memory;\r\
+    \n\r\
+    \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\
+    \n:global Domain \"WORKGROUP\";\r\
+    \n\r\
+    \n:global EmailGeneralTo \"vados@vados.ru\";\r\
+    \n#:global EmailGeneralCc \"\";\r\
+    \n\r\
+    \n# \$ScriptInstallUpdate mod/notification-telegram\r\
+    \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\
+    \";\r\
+    \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\
+    \n# Use this to send notifications to a specific topic in group.\r\
+    \n#:global TelegramThreadId \"30\";\r\
+    \n# Using telegram-chat you have to define trusted chat ids (not group ids\
+    !)\r\
+    \n# or user names. Groups allow to chat with devices simultaneously.\r\
+    \n:global TelegramChatIdsTrusted {\r\
+    \n  \"454403445\"\r\
+    \n  \"-1003631309063\"\r\
+    \n  \"-5124482807\"\r\
+    \n  \"1087968824\";\r\
+    \n};\r\
+    \n#  \"-5294757340\";\r\
+    \n\r\
+    \n:global TelegramChatGroups \"(all)\";\r\
+    \n#:global TelegramChatGroups \"(all|home|office)\";\r\
+    \n\r\
+    \n:global NotificationFunctions {\r\
+    \n  \"email\"\r\
+    \n  \"telegram\";\r\
+    \n};\r\
+    \n# Toggle this to disable symbols in notifications.\r\
+    \n:global NotificationsWithSymbols true;\r\
+    \n:global TerminalColorOutput true;\r\
+    \n\r\
+    \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\
+    \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\
+    \n\r\
+    \n## Update channel. Possible values: stable, long-term, testing, developm\
+    ent\r\
+    \n:global updateChannel \"stable\";\r\
+    \n\r\
+    \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\
+    \");\r\
+    \n:global CertRenewTime 2w;\r\
+    \n:global CertRenewPass (a); #{\r\
+    \n#  \"\";\r\
+    \n#  \"v3ry-s3cr3t\";\r\
+    \n#  \"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n:global CertWarnTime 1w;\r\
+    \n:global CertIssuedExportPass (a); # {\r\
+    \n#  \"\";\r\
+    \n#  \"cert1-cn\"=\"v3ry-s3cr3t\";\r\
+    \n#  \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n\r\
+    \n# Script BackupAndUpdate mode, possible values: backup,\r\
+    \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\
+    n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;).  \r\
+    \n# osupdate - Update if available and creates backups before/after update\
+    \_(ignores `forceBackup`)\r\
+    \n#               Set `forceBackup` to true to always create backups, even\
+    \_without updates\r\
+    \n# osnotify - Set `forceBackup` to always create backups on every run\r\
+    \n:global DevInfoIncludeIP true;\r\
+    \n:global BackupAndUpdateMode \"osnotify\"\r\
+    \n\r\
+    \n:global forceBackup true;\r\
+    \n:global BackupPassword \"Peskar55\";\r\
+    \n\r\
+    \n# SFTP Backup Variables\r\
+    \n:global BackupRandomDelay 0;\r\
+    \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\
+    \n:global BackupUploadUser \$Identity;\r\
+    \n:global BackupUploadPass \"root.mnuc.backuper\";\r\
+    \n\r\
+    \n:global BackupSendBinary true;\r\
+    \n:global BackupSendExport true;\r\
+    \n:global BackupSendGlobalConfig true;\r\
+    \n:global BackupSendScripts true;\r\
+    \n\r\
+    \n# Remove local file after uploading if no errors\r\
+    \n:global BackupRmLocal true;\r\
+    \n\r\
+    \n# Local Backups Root Directory \r\
+    \n:global BackupLocalRoot \"tmpfs\";\r\
+    \n\r\
+    \n# Encrypt Backup\r\
+    \n:global BackupEncrypt true;\r\
+    \n\r\
+    \n# Sensitive information in Backups\r\
+    \n:global BackupSens true;\r\
+    \n\r\
+    \n# User Export\r\
+    \n:global BackupUser true;\r\
+    \n\r\
+    \n# License Export (not for CHR, will silently skip)\r\
+    \n:global BackupLicense false;\r\
+    \n\r\
+    \n# SSH Keys\r\
+    \n:global BackupSshKeys true;\r\
+    \n\r\
+    \n# Certificate Export\r\
+    \n:global BackupCerts true;\r\
+    \n\r\
+    \n# Certificate Password\r\
+    \n:global BackupCertsPasswd \"\";\r\
+    \n\r\
+    \n# User-Manager Export\r\
+    \n:global BackupUserMan false;\r\
+    \n\r\
+    \n# The Dude Export\r\
+    \n:global BackupDude false;\r\
+    \n\r\
+    \n# User Files to export, comma-separated string or array of strings\r\
+    \n# User Files are not removed on backup\r\
+    \n# Any directory paths will be removed (/ -> _) on remote file\r\
+    \n# Nonpresent files are silently skipped\r\
+    \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\
+    \n\r\
+    \n# load functions and any custom scripts\r\
+    \n#                    [ /system/script/find where name=\"global-config-ov\
+    erlay\" ], \\\r\
+    \n#                    [ /system/script/find where name~\"^global-config-o\
+    verlay\\\\.d/.\" ]\r\
+    \n#\r\
+    \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\
+    ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\
+    \r\
+    \n#  :onerror Err {\r\
+    \n#     /system/script/run \$Script;\r\
+    \n#     } do={\r\
+    \n#       :log error (\"Loading configuration from configs and functions\"\
+    \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\
+    \n#  }\r\
+    \n#}\r\
+    \n#:log info \"\\ndevMode = \$devMode\";\r\
+    \n#:log info \"\\ndevRunning = \$devRunning\";\r\
+    \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \
+    GlobalRUN\\r\?\\n\" ] do={\r\
+    \n  :onerror Err {\r\
+    \n    /system/script/run \$Script;\r\
+    \n       } do={\r\
+    \n       :log error (\"Run script \" . [ /system/script/get \$Script name \
+    ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# signal we are ready\r\
+    \n:set GlobalConfReady true;\r\
+    \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\
+    \n"
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \
+    owner=AM-GlobalFunc policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GglobalFunc\r\
+    \n# Script comment: Global functions\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch, scheduler\r\
+    \n:local ExitOK false;\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n#:global checkRunJob \$SriptName;\r\
+    \n#:global fixCRLF;\r\
+    \n#:if (\$fixCRLF !=  false) do={\r\
+    \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\
+    ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\
+    }\r\
+    \n#:if (\$fixCRLF !=  \"LF\") do={ /system/script/set source=[ :tocrlf [ g\
+    et \$fixScript source ] ] \$fixScript};};\r\
+    \n#}\r\
+    \n:global GlobalFuncReady false;\r\
+    \n\r\
+    \n# Git commit id & info, expected configuration version\r\
+    \n:global CommitId \"main/728/bebacfc7\";\r\
+    \n:global CommitTAG \"unknown\";\r\
+    \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\
+    r: root, in 11:00:05 30.06.2026.\";\r\
+    \n\r\
+    \n# The variables are received right here.\r\
+    \n:global GlobalConfVersion 140;\r\
+    \n\r\
+    \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\
+    \n\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global IdentityShort [:pick \$Identity 0 18];\r\
+    \n\r\
+    \n:global devBoardName [/system/resource/get board-name];\r\
+    \n:global devMode [/system/device-mode/get mode];\r\
+    \n:global devCurArch [/system/resource/get architecture-name];\r\
+    \n:global devCurVersion [/system/resource/get version];\r\
+    \n\r\
+    \n# Variables defined in AM-GlobalConfig.rsc\r\
+    \n:global TerminalColorOutput;\r\
+    \n:global CommentsInScripts;\r\
+    \n:global DetectIpAddrDefault;\r\
+    \n:global DetectIpAddrFallback;\r\
+    \n:global updateChannel;\r\
+    \n:global Domain;\r\
+    \n:global EmailGeneralTo;\r\
+    \n:global BackupAndUpdateMode;\r\
+    \n\r\
+    \n# Single functions, without nested functions.\r\
+    \n:global MiniDateTimeStamp;\r\
+    \n:global MicroDateTimeStamp;\r\
+    \n\r\
+    \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\
+    \n:global LogPrint;\r\
+    \n\r\
+    \n# DeviceInfo and Updates\r\
+    \n:global IsCheckUpdates;\r\
+    \n:global WaitCheckUpdates;\r\
+    \n:global GetPubIp;\r\
+    \n\r\
+    \n:global GetArrDeviceInfo;\r\
+    \n:global WaitArrDeviceInfo;\r\
+    \n\r\
+    \n:global devModel;\r\
+    \n:global devRunningMode;\r\
+    \n\r\
+    \n:global devRbRevision;\r\
+    \n:global devRbSerialNumber;\r\
+    \n:global devRbVerAvail;\r\
+    \n\r\
+    \n:global runningChannelVersion;\r\
+    \n:global runningChannel;\r\
+    \n:global runningVersion;\r\
+    \n\r\
+    \n:global devBuildTime;\r\
+    \n:global ROsVerAvail;\r\
+    \n:global PkgUpdStatus;\r\
+    \n:global currentUpdateChannel;\r\
+    \n\r\
+    \n:global ScriptInstallUpdate;\r\
+    \n\r\
+    \n:global DeviceInfo;\r\
+    \n\r\
+    \n:global OldMode;\r\
+    \n\r\
+    \n:global ParseKeyValueStore;\r\
+    \n:global RandomDelay;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global EscapeForRegEx;\r\
+    \n:global CharacterMultiply;\r\
+    \n:global CharacterReplace;\r\
+    \n:global CleanFilePath;\r\
+    \n:global CleanName;\r\
+    \n\r\
+    \n:global CommitBrief;\r\
+    \n\r\
+    \n:global EitherOr;\r\
+    \n:global FormatLine;\r\
+    \n:global GetRandom20CharAlNum;\r\
+    \n:global GetRandom20CharHex;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global Grep;\r\
+    \n:global IfThenElse;\r\
+    \n:global MAX;\r\
+    \n:global MIN;\r\
+    \n:global HumanReadableNum;\r\
+    \n\r\
+    \n:global IsFullyConnected;\r\
+    \n:global IsDNSResolving;\r\
+    \n:global IsTimeSync;\r\
+    \n:global IsTimeSyncCached;\r\
+    \n:global IsTimeSyncResetNtp;\r\
+    \n\r\
+    \n:global MkDir;\r\
+    \n:global RmDir;\r\
+    \n:global RmFile;\r\
+    \n:global FileGet;\r\
+    \n:global Unix2Dos;\r\
+    \n:global UrlEncode;\r\
+    \n:global WaitForFile;\r\
+    \n:global ScriptLock;\r\
+    \n:global SendTelegram;\r\
+    \n:global NotificationFunctions;\r\
+    \n:global SendNotification;\r\
+    \n:global SendNotification2;\r\
+    \n:global SymbolForNotification;\r\
+    \n:global SymbolByUnicodeName;\r\
+    \n:global ValidateSyntax;\r\
+    \n:global CheckSumsVerify;\r\
+    \n:global GlobalConfChanges;\r\
+    \n:global GlobalConfMigration;\r\
+    \n:global VersionToNum;\r\
+    \n:global RequiredRouterOS;\r\
+    \n:global ExitError;\r\
+    \n:global ExitOnError;\r\
+    \n\r\
+    \n:global FetchHugeFiles;\r\
+    \n:global FetchUserAgentStr;\r\
+    \n:global FileExists;\r\
+    \n:global CertificateAvailable;\r\
+    \n:global CertificateDownload;\r\
+    \n:global CertificateNameByCN;\r\
+    \n:global CharacterMultiply;\r\
+    \n\r\
+    \n:global InspectVar;\r\
+    \n:global InspectVarRet;\r\
+    \n:global ParseCustom;\r\
+    \n\r\
+    \n:set IsCheckUpdates do={\r\
+    \n  :local isInfo [:tobool \$1];\r\
+    \n  :global updateChannel;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\
+    \n  :local CurrentChannel [ /system/package/update/get channel ];\r\
+    \n  :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\
+    el) do={\r\
+    \n    :retry command={/system/package/update set channel=\$updateChannel} \
+    \_delay=300ms max=5 on-error={};\r\
+    \n    :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\
+    \n  }\r\
+    \n  :local Update [ /system/package/update/get ];\r\
+    \n  :local Channel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set currentUpdateChannel \$Channel;\r\
+    \n  :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\
+    \n  :local StatusPkg \"undefined\";\r\
+    \n  :log info (\$0 . \" Checking for updates...\");\r\
+    \n  :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\
+    dates without-paging as-value]->\"status\")} \\\r\
+    \n   delay=300ms max=5 on-error={};\r\
+    \n  :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\
+    \n  :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\
+    s true; } else={ :set PkgUpdStatus false; }\r\
+    \n  :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \
+    ] ];\r\
+    \n  :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n  :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\
+    \n    :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n    :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n      :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n    }\r\
+    \n    :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\
+    kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\
+    \n    :return true;\r\
+    \n  } else={\r\
+    \n    :return \$PkgUpdStatus;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitCheckUpdates do={\r\
+    \n  :global IsCheckUpdates;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :local Status \"\";\r\
+    \n  :local Update;\r\
+    \n  :local WaitCount 0;\r\
+    \n  :if ([ \$IsCheckUpdates true ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n  :while ((\$Status = \"\" || \$Status = \"finding out latest version...\
+    \") && \$WaitCount < 60) do={\r\
+    \n    :delay 1s;\r\
+    \n    :set WaitCount (\$WaitCount + 1);\r\
+    \n    :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n   }\r\
+    \n  :set Update [ /system/package/update/get ];\r\
+    \n  :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n  :if ((\$Update->\"status\") = \"New version is available\") do={\r\
+    \n    :set PkgUpdStatus true;\r\
+    \n  } else={\r\
+    \n    :set PkgUpdStatus false;\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n    :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n  }\r\
+    \n  :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\
+    \n  :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \
+    do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitArrDeviceInfo do={\r\
+    \n   :global GetArrDeviceInfo;\r\
+    \n   :while ([ \$GetArrDeviceInfo ] = false) do={\r\
+    \n    :delay 1s;\r\
+    \n   }\r\
+    \n}\r\
+    \n\r\
+    \n:set GetArrDeviceInfo do={\r\
+    \n   :global LogPrint;\r\
+    \n   :global arrDeviceInfo;\r\
+    \n   :global devBoardName;\r\
+    \n   :global devModel;\r\
+    \n   :global devRunning;\r\
+    \n   :global devCurArch;\r\
+    \n   :global devRbRevision;\r\
+    \n   :global devRbSerialNumber;\r\
+    \n   :global devBuildTime;\r\
+    \n   :global runningChannelVersion;\r\
+    \n   :global runningChannel;\r\
+    \n   :global runningVersion;\r\
+    \n   :global currentUpdateChannel;\r\
+    \n   :global ROsVerAvail;\r\
+    \n\r\
+    \n   :local DeviceInfo;\r\
+    \n   :local Resource [/system/resource/get];\r\
+    \n   :local Update [ /system/package/update/get ];\r\
+    \n   :local VersionString [ :tostr (\$Resource->\"version\") ];\r\
+    \n   :local ChannelStart [ :find \$VersionString \" (\" ];\r\
+    \n   :local RouterBoard;\r\
+    \n   :local IsRouterBoard false;\r\
+    \n   :local RunningMode \"\";\r\
+    \n\r\
+    \n   :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\
+    \n   :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\
+    \n   :set runningChannelVersion \$VersionString;\r\
+    \n   :set runningVersion \$VersionString;\r\
+    \n   :set runningChannel \"\";\r\
+    \n\r\
+    \n   :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\
+    {\r\
+    \n     :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\
+    \n     :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\
+    len \$VersionString ] ];\r\
+    \n     :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\
+    \n     :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\
+    \r\
+    \n       :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\
+    \n     }\r\
+    \n   }\r\
+    \n\r\
+    \n   :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\
+    \_3] != \"x86\") do={\r\
+    \n   :do {\r\
+    \n      :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\
+    \n#     :set RouterBoard [ /system/routerboard/get ];\r\
+    \n      :if ((\$RouterBoard->\"routerboard\") = true) do={\r\
+    \n        :set IsRouterBoard true;\r\
+    \n     }\r\
+    \n   } on-error={}\r\
+    \n    }\r\
+    \n\r\
+    \n   :do {\r\
+    \n     :set RunningMode [ /system/device-mode/get mode ];\r\
+    \n   } on-error={\r\
+    \n     :do {\r\
+    \n       :set RunningMode [ /system/device-mode/get running ];\r\
+    \n     } on-error={\r\
+    \n       :set RunningMode \"\";\r\
+    \n     }\r\
+    \n   }\r\
+    \n   :set devRunning \$RunningMode;\r\
+    \n\r\
+    \n   :if (\$IsRouterBoard = true) do={\r\
+    \n     :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\
+    \n     :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\
+    \n     :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \
+    ];\r\
+    \n   } else={\r\
+    \n     :set devModel \$devBoardName;\r\
+    \n     :set devRbRevision \"\";\r\
+    \n     :set devRbSerialNumber \"\";\r\
+    \n   }\r\
+    \n\r\
+    \n   :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n   :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n\r\
+    \n   :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\
+    \n   :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\
+    \n   :set (\$DeviceInfo->\"model\") \$devModel;\r\
+    \n   :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\
+    \n   :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\
+    \n   :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\
+    \n   :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\
+    \n   :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\
+    ion;\r\
+    \n   :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\
+    \n   :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\
+    \n   :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\
+    \n   :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\
+    current-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\
+    upgrade-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\
+    \n   :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\
+    alled-version\") ];\r\
+    \n   :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\
+    \n   :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\
+    ) ];\r\
+    \n\r\
+    \n   :set arrDeviceInfo \$DeviceInfo;\r\
+    \n   :return \$DeviceInfo;\r\
+    \n}\r\
+    \n\r\
+    \n:set DeviceInfo do={\r\
+    \n  :global GetArrDeviceInfo;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global FormatLine;\r\
+    \n  :global CommitBrief;\r\
+    \n\r\
+    \n  :local License [/system/license/get];\r\
+    \n  :local Snmp [ /snmp/get ];\r\
+    \n  :local Info [ \$GetArrDeviceInfo ];\r\
+    \n\r\
+    \n  :if ([ :typeof \$Info ] != \"array\") do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :return ( \\\r\
+    \n    [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\
+    \_. \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\
+    \_\\\r\
+    \n    \"Hardware:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Board\" (\$Info->\"board-name\") ] . \"\\n\" . \
+    \\\r\
+    \n    [ \$FormatLine \"    Arch\" (\$Info->\"architecture-name\") ] . \"\\\
+    n\" . \\\r\
+    \n    [ \$FormatLine \"    Model\" (\$Info->\"model\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\
+    \n      (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Serial\" (\$Info->\"serial-number\") ] . \"\
+    \\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"nlevel\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS:\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"level\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    [ \$FormatLine \"    Channel\" (\$Info->\"package-channel\") ] . \"\
+    \\n\" . \\\r\
+    \n    [ \$FormatLine \"    Installed\" (\$Info->\"installed-version\") ] .\
+    \_\"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Running\" ((\$Info->\"running-version\") . \
+    \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\
+    \n      ([ \$FormatLine \"    Running\" (\$Info->\"running-version\") ] . \
+    \"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\
+    \n        (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\
+    \_\\\r\
+    \n      ([ \$FormatLine \"    Available\" (\$Info->\"latest-version\") ] .\
+    \_\"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\
+    \n        (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\
+    ) \\\r\
+    \n      ([ \$FormatLine \"    Firmware\" ((\$Info->\"current-firmware\") .\
+    \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS-Scripts:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Version\" \$GlobalConfVersion ]);\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\
+    tionFunctions ({})}\r\
+    \n\r\
+    \n:set GetRandom20CharAlNum do={\r\
+    \n  :global EitherOr;\r\
+    \n  :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\
+    FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\
+    \n}\r\
+    \n\r\
+    \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\
+    \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\
+    \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\
+    \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\
+    \n\r\
+    \n:global checkRunJob;\r\
+    \n:set checkRunJob do={\r\
+    \n  :local Script [ :tostr \$1 ];\r\
+    \n  :global ScriptLock; \r\
+    \n  :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\
+    \n  :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\
+    :set Job [ /system/script/job/get \$Job ];\r\
+    \n    :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\
+    stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\
+    \n     :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\
+    lse; \r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVar do={\r\
+    \n  :global InspectVarRet;\r\
+    \n  :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\
+    \n}\r\
+    \n\r\
+    \n:set CommitBrief do={\r\
+    \n  :global CommitId;\r\
+    \n  :global CommitInfo;\r\
+    \n  :if (\$CommitId = \"unknown\") do={\r\
+    \n    :return \"unknown\";\r\
+    \n    }\r\
+    \n  :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVarRet do={\r\
+    \n  :local Input \$1;\r\
+    \n  :local Level (0 + [ :tonum \$2 ]);\r\
+    \n  :global CharacterReplace;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global InspectVarRet;\r\
+    \n  :local IndentReturn do={\r\
+    \n    :local Prefix [ :tostr \$1 ];\r\
+    \n    :local Value  [ :tostr \$2 ];\r\
+    \n    :local Level  [ :tonum \$3 ];\r\
+    \n    :global CharacterMultiply;\r\
+    \n    :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\
+    fix . \"-> \" . \$Value);\r\
+    \n  }\r\
+    \n  :local TypeOf [ :typeof \$Input ];\r\
+    \n  :local Len    [ :len \$Input ];\r\
+    \n  :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\
+    \n  :if (\$TypeOf = \"array\") do={\r\
+    \n    :foreach Key,Value in=\$Input do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n        [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\
+    \n        [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    :if (\$TypeOf = \"str\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n         [ \$IndentReturn \"len\" \$Len \$Level ]);\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\
+    \n      }\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if (\$TypeOf != \"nothing\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n       [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\
+    \_\\\r\
+    \n        ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set GetPubIp do={\r\
+    \n    :global DetectIpAddrDefault;\r\
+    \n    :global DetectIpAddrFallback;\r\
+    \n\r\
+    \n    :local PubIpAddr false;\r\
+    \n    :local Url \$DetectIpAddrDefault;\r\
+    \n    :local JobName [ :jobname ];\r\
+    \n\r\
+    \n    :do {\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using default serv\
+    ice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \
+    detect public IP using default service: \" . \$Url . \".\")}\r\
+    \n     } on-error={\r\
+    \n      :log error (\$0 . \" Failed to detect public IP using default serv\
+    ice: \" . \$Url . \".\");\r\
+    \n      :set Url \$DetectIpAddrFallBack;\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using fallback ser\
+    vice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\
+    \_detect public IP using fallback service: \" . \$Url . \".\")}\r\
+    \n    };\r\
+    \n    :local IpLen ([ :len \$PubIpAddr ] -1);\r\
+    \n    :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\
+    {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\
+    \n    :return \$PubIpAddr;\r\
+    \n}\r\
+    \n\r\
+    \n:set FormatLine do={\r\
+    \n  :local Key    [ :tostr \$1 ];\r\
+    \n  :local Value  [ :tostr \$2 ];\r\
+    \n  :local Indent [ :tonum \$3 ];\r\
+    \n  :local Spaces;\r\
+    \n  :local Return \"\";\r\
+    \n  :global CharacterMultiply;\r\
+    \n  :global EitherOr;\r\
+    \n  :set Indent [ \$EitherOr \$Indent 16 ];\r\
+    \n  :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\
+    \n  :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\
+    \n  :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\
+    n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\
+    \n  } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \
+    \$Return ]) ] . \$Value)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseCustom do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Start [:find [ \$Str ] [:tostr \$2]];\r\
+    \n  :local End [ :tostr \$3 ];\r\
+    \n  :local Num [ :tonum \$4 ];\r\
+    \n  :local Return;\r\
+    \n  :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\
+    \n  :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\
+    \n  :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\
+    lse={\r\
+    \n  :set End [:find \$rest \$End];\r\
+    \n  :set Return [:pick \$rest 0 \$End];\r\
+    \n  }\r\
+    \n:return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set LogPrint do={\r\
+    \n  :local Severity [ :tostr \$1 ];\r\
+    \n  :local Name     [ :tostr \$2 ];\r\
+    \n  :local Message  [ :tostr \$3 ];\r\
+    \n  :global PrintDebug;\r\
+    \n  :global PrintDebugOverride;\r\
+    \n  :global EitherOr;\r\
+    \n  :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \
+    ];\r\
+    \n  :local PrintSeverity do={\r\
+    \n  :global TerminalColorOutput;\r\
+    \n   :if (\$TerminalColorOutput != true) do={:return \$1}\r\
+    \n   :local Color { debug=96; info=97; warning=93; error=91 };\r\
+    \n   :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\
+    \n}\r\
+    \n  :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\
+    \r\
+    \n  :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\
+    \n    :if (\$Severity = \"debug\") do={:log debug \$Log}\r\
+    \n    :if (\$Severity = \"error\") do={:log error \$Log}\r\
+    \n    :if (\$Severity = \"info\" ) do={:log info  \$Log}\r\
+    \n  } else={:log warning \$Log; :set Severity \"warning\"}\r\
+    \n  :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\
+    erity \$Severity ] . \": \" . \$Message)}\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateAvailable do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :local UseFor     [ :tostr \$2 ];\r\
+    \n\r\
+    \n  :global CertificateDownload;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n\r\
+    \n  :if ([ :len \$UseFor ] = 0) do={\r\
+    \n    :log warning (\$0 . \"The intended use is undefined!\");\r\
+    \n    :set UseFor \"undefined\";\r\
+    \n  }\r\
+    \n  :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\
+    \n       [ /certificate/settings/get crl-download ] = true && \\\r\
+    \n       [ /certificate/settings/get crl-store ] = \"system\") do={\r\
+    \n    :log warning (\$0 . \"This system has low free flash space but \" . \
+    \\\r\
+    \n      \"is configured to download certificate CRLs to system!\");\r\
+    \n  }\r\
+    \n  :if ([ :len \$CommonName ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No CommonName given!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\
+    \r\
+    \n        (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\
+    \n        (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n       [ :len [ /certificate/builtin/find where common-name=\$CommonName\
+    \_] ] > 0) do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \
+    \"' not available.\");\r\
+    \n    :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\
+    ) do={\r\
+    \n    :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\
+    \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\
+    e ] ];\r\
+    \n  :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\
+    ertVal->\"skid\")) do={\r\
+    \n    :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\
+    \_= 0) do={\r\
+    \n      :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\
+    >\"CN\");\r\
+    \n      :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \
+    is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\
+    \n      :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\
+    \") ] ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateDownload do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :global ScriptUpdatesBaseUrl;\r\
+    \n  :global ScriptUpdatesUrlSuffix;\r\
+    \n  :global CertificateNameByCN;\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :log info (\$0 . \"Downloading and importing certificate with \" . \\\
+    \r\
+    \n      \"CommonName '\" . \$CommonName . \"'.\");\r\
+    \n  :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\
+    \n  :do {\r\
+    \n    /tool/fetch check-certificate=yes-without-crl mode=https http-header\
+    -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\
+    sUrlSuffix) \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n    \$WaitForFile \$FileName;\r\
+    \n  } on-error={\r\
+    \n    :log warning (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \\\r\
+    \n      \"' from repository! Trying fallback to mkcert.org...\");\r\
+    \n    :do {\r\
+    \n      :local CertSettings [ /certificate/settings/get ];\r\
+    \n      :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\
+    \_] ] = 0 && \\\r\
+    \n           !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \
+    || \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \
+    \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\
+    \r\
+    \n             [ :len [ /certificate/builtin/find where common-name=\"ISRG\
+    \_Root X1\" ] ] > 0)) do={\r\
+    \n        :log error (\$0 . \" Required certificate is not available.\");\
+    \r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n      /tool/fetch check-certificate=yes-without-crl mode=https http-head\
+    er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\
+    n ({ \$CommonName }) ] \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n      \$WaitForFile \$FileName;\r\
+    \n      :if ([ /file/get \$FileName size ] = 0) do={\r\
+    \n        \$RmFile \$FileName;\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n    } on-error={\r\
+    \n      :log error (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \"'!\");\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\
+    \n  :delay 1s;\r\
+    \n  \$RmFile \$FileName;\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\
+    +\\\$\") ];\r\
+    \n    :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\
+    e . \"' still unavailable!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \
+    \"_[0-9]+\\\$\") ] do={\r\
+    \n    \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateNameByCN do={\r\
+    \n  :local Match [ :tostr \$1 ];\r\
+    \n  :global CleanName;\r\
+    \n  :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\
+    rint=\$Match or name=\$Match) ]->0);\r\
+    \n  :if ([ :len \$Cert ] = 0) do={\r\
+    \n    :log warning (\$0 .\" No matching certificate found.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CommonName [ /certificate/get \$Cert common-name ];\r\
+    \n  /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileExists do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :local Type     [ :tostr \$2 ];\r\
+    \n  :global FileGet;\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={ :return false; }\r\
+    \n  :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\
+    \n  :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\
+    \_true; }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set Grep do={\r\
+    \n  :local Input  ([ :tostr \$1 ] . \"\\n\");\r\
+    \n  :local Pattern [ :tostr \$2 ];\r\
+    \n  :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\
+    }\r\
+    \n  :do {\r\
+    \n    :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\
+    \n    :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \
+    \$Line}\r\
+    \n    :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\
+    Input ] ];\r\
+    \n  } while=([ :len \$Input ] > 0);\r\
+    \n  :return [];\r\
+    \n}\r\
+    \n\r\
+    \n:set HumanReadableNum do={\r\
+    \n  :local Input [ :tonum \$1 ];\r\
+    \n  :local Base  [ :tonum \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Prefix \"kMGTPE\";\r\
+    \n  :local Pow 1;\r\
+    \n  :set Base [ \$EitherOr \$Base 1024 ];\r\
+    \n  :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\
+    \n  :if (\$Input < \$Base) do={:return \$Input}\r\
+    \n  :for I from=0 to=[ :len \$Prefix ] do={\r\
+    \n    :set Pow (\$Pow * \$Base);\r\
+    \n    :if (\$Input / \$Base < \$Pow) do={\r\
+    \n      :set Prefix [ :pick \$Prefix \$I ];\r\
+    \n      :local Tmp1 (\$Input * 100 / \$Pow);\r\
+    \n      :local Tmp2 (\$Tmp1 / 100);\r\
+    \n      :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\
+    \n      :return (\$Tmp2 . \".\" . \\\r\
+    \n          [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\
+    2 ] + 1) ] . \\\r\
+    \n          \$Prefix . \$Bin);\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanFilePath do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CharacterReplace;\r\
+    \n  :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \
+    \"//\" \"/\" ]; }\r\
+    \n  :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\
+    n \$Path ] ]; }\r\
+    \n  :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \
+    :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\
+    \n  :return \$Path;\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanName do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\
+    stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\
+    \n      :do {:if ([ :len \$Return ] = 0) do={:error true};\r\
+    \n        :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\
+    ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\
+    \n    };\r\
+    \n    :set Return (\$Return . \$Char)};\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set RandomDelay do={\r\
+    \n  :local Time [ :tonum \$1 ];\r\
+    \n  :local Unit [ :tostr \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global GetRandomNumber;\r\
+    \n  :global MAX;\r\
+    \n  :if (\$Time = 0) do={:return false}\r\
+    \n  :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \
+    [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\
+    \n}\r\
+    \n\r\
+    \n:set EscapeForRegEx do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitError do={\r\
+    \n  :local ExitOK [ :tostr \$1 ];\r\
+    \n  :local Name   [ :tostr \$2 ];\r\
+    \n  :local Error  [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$ExitOK = \"false\") do={\r\
+    \n    :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \
+    \\\r\
+    \n        \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\
+    ror\" . \\\r\
+    \n        [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \
+    \$Error) \".\" ]);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitOnError do={\r\
+    \n  :local Name   [ :tostr \$1 ];\r\
+    \n  :local Error  [ :tostr \$2 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\
+    \\\$\") \\\r\
+    \n      \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\
+    r\" . \\\r\
+    \n      [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\
+    rror) \".\" ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set MiniDateTimeStamp do={\r\
+    \n    :local mikro [ :tobool \$1 ];\r\
+    \n    /system/clock;\r\
+    \n    :local vdate [get date];\r\
+    \n    :local vtime [get time];\r\
+    \n    :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\
+    \n    :local MM    [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\
+    \n    :local M     [:tonum \$MM];\r\
+    \n    :if (\$vdate ~ \".../../....\") do={\r\
+    \n        :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\
+    \n        :set M     ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\
+    PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\
+    \n        :if (\$M>12) do={:set M (\$M - 12)}\r\
+    \n        :set MM    [:pick (100 + \$M) 1 3];\r\
+    \n    }\r\
+    \n    :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\
+    \n    :local dd   [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\
+    \n    :local HH   [:pick \$vtime 0  2];\r\
+    \n    :local mm   [:pick \$vtime 3  5];\r\
+    \n    :local ss   [:pick \$vtime 6  8];\r\
+    \n    :local Return;\r\
+    \n    :if (\$mikro = true) do={\r\
+    \n      :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\
+    \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\
+    \n    } else={\r\
+    \n    :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\
+    \r\
+    \n   }\r\
+    \n   :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitForFile do={\r\
+    \n  :local FileName [ :tostr  \$1 ];\r\
+    \n  :local WaitTime [ :totime \$2 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global EitherOr;\r\
+    \n  :global MAX;\r\
+    \n  :set FileName [ \$CleanFilePath \$FileName ];\r\
+    \n  :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } delay=\$Delay max=10;\r\
+    \n  } on-error={ }\r\
+    \n  :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\
+    \n    :do {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } on-error={ }\r\
+    \n    :delay \$Delay;\r\
+    \n    :set Delay (\$Delay * 3 / 2);\r\
+    \n  }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileGet do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global WaitForFile;\r\
+    \n  :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FileVal false;\r\
+    \n  :do {\r\
+    \n    :set FileVal [ /file/get \$FileName ];\r\
+    \n   } on-error={ }\r\
+    \n  :return \$FileVal;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmDir do={\r\
+    \n  :local DirName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing directory: \". \$DirName);\r\
+    \n  :local DirVal [ \$FileGet \$DirName ];\r\
+    \n  :if (\$DirVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  };\r\
+    \n  :if (\$DirVal->\"type\" != \"directory\") do={\r\
+    \n    :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\
+    ory.\");\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$DirName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\
+    : \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmFile do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing file: \". \$FileName);\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\
+    sk\") do={\r\
+    \n    :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\
+    \r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$FileName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\
+    \_. \$Err); :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MkDir do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global FileGet;\r\
+    \n  :global RmDir;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :local MkTmpfs do={\r\
+    \n   :global WaitForFile;\r\
+    \n   :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n   :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n     :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n       :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\
+    \n       /disk/enable \$TmpFs;\r\
+    \n      }\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :log info (\$0 . \" Creating disk of type tmpfs.\");\r\
+    \n    \$RmDir \"tmpfs\";\r\
+    \n    :onerror Err {\r\
+    \n      /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\
+    /get total-memory ] / 3);\r\
+    \n      \$WaitForFile \"tmpfs\";\r\
+    \n    } do={\r\
+    \n      :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\
+    Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :set Path [ \$CleanFilePath \$Path ];\r\
+    \n  :if (\$Path = \"\") do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log debug (\$0 . \" Making directory: \" . \$Path);\r\
+    \n  :local PathVal [ \$FileGet \$Path ];\r\
+    \n  :if (\$PathVal->\"type\" = \"directory\") do={\r\
+    \n    :log debug (\$0 . \" ... which already exists.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/add type=\"directory\" name=\$Path;\r\
+    \n    \$WaitForFile \$Path;\r\
+    \n  } do={\r\
+    \n    :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \
+    \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterReplace do={\r\
+    \n  :local String [ :tostr \$1 ];\r\
+    \n  :local ReplaceFrom [ :tostr \$2 ];\r\
+    \n  :local ReplaceWith [ :tostr \$3 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :if (\$ReplaceFrom = \"\") do={:return \$String}\r\
+    \n  :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\
+    \r\
+    \n    :local Pos [ :find \$String \$ReplaceFrom ];\r\
+    \n    :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\
+    \r\
+    \n    :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\
+    \_\$String ] ];\r\
+    \n  }\r\
+    \n  :return (\$Return . \$String);\r\
+    \n}\r\
+    \n\r\
+    \n:set IfThenElse do={\r\
+    \n  :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \
+    \$2};\r\
+    \n  :return \$3;\r\
+    \n}\r\
+    \n\r\
+    \n:set EitherOr do={\r\
+    \n  :global IfThenElse;\r\
+    \n  :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \
+    \$1 \$2 ]}\r\
+    \n  :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\
+    \_\$1 \$2 ]}\r\
+    \n# this works for boolean values, literal ones with parentheses\r\
+    \n  :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseKeyValueStore do={\r\
+    \n  :local Source \$1;\r\
+    \n  :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\
+    \n    :do {\r\
+    \n      :return [ :deserialize from=json \$Source ];\r\
+    \n    } on-error={ }\r\
+    \n  }   \r\
+    \n  :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\
+    }\r\
+    \n  :local Result ({});\r\
+    \n  :foreach KeyValue in=[ :toarray \$Source ] do={\r\
+    \n    :if ([ :find \$KeyValue \"=\" ]) do={\r\
+    \n      :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\
+    \n      :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\
+    \_:len \$KeyValue ] ];\r\
+    \n      :if (\$Value=\"true\") do={:set Value true}\r\
+    \n      :if (\$Value=\"false\") do={:set Value false}\r\
+    \n      :set (\$Result->\$Key) \$Value;\r\
+    \n      } else={:set (\$Result->\$KeyValue) true}\r\
+    \n  }\r\
+    \n  :return \$Result;\r\
+    \n}\r\
+    \n:set RequiredRouterOS do={\r\
+    \n  :local Caller   [ :tostr \$1 ];\r\
+    \n  :local Required [ :tostr \$2 ];\r\
+    \n  :local Warn     [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :global VersionToNum;\r\
+    \n  :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\
+    \\\$\")) do={\r\
+    \n    :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\
+    e/update/get installed-version ] ]) do={\r\
+    \n    :if (\$Warn = \"true\") do={\r\
+    \n      :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \
+    0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\
+    \n        \" '\" . \$Caller . \"' (at least specific functionality) requir\
+    es RouterOS \" . \$Required . \". Please update!\");\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set ValidateSyntax do={\r\
+    \n  :local Code [ :tostr \$1 ];\r\
+    \n  :global LogPrint;\r\
+    \n  :onerror Err {\r\
+    \n    [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\
+    \n  } do={\r\
+    \n    \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set VersionToNum do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Multi 0x1000000;\r\
+    \n  :local Return 0;\r\
+    \n  :global CharacterReplace;\r\
+    \n  :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\
+    \n  :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\
+    \n    :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\
+    \r\
+    \n  }\r\
+    \n  :foreach Value in=([ :toarray \$Input ], 0) do={\r\
+    \n    :local Num [ :tonum \$Value ];\r\
+    \n    :if (\$Multi = 0x100) do={\r\
+    \n      :if ([ :typeof \$Num ] = \"num\") do={\r\
+    \n        :set Return (\$Return + 0xff00);\r\
+    \n        :set Multi (\$Multi / 0x100);\r\
+    \n      } else={\r\
+    \n        :if (\$Value = \"zero\") do={ }\r\
+    \n        :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \
+    }\r\
+    \n        :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\
+    \r\
+    \n        :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\
+    lue * \$Multi)); }\r\
+    \n    :set Multi (\$Multi / 0x100);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptLock do={\r\
+    \n  :local Script  [ :tostr  \$1 ];\r\
+    \n  :local WaitMax [ :totime \$2 ];\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global ScriptLockOrder;\r\
+    \n  :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\
+    \n    :set ScriptLockOrder ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :local JobCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :return [ :len [ /system/script/job/find where script=\$Script ] ];\
+    \r\
+    \n  }\r\
+    \n  :local TicketCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :local Count 0;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \
+    + 1)}\r\
+    \n    }\r\
+    \n    :return \$Count;\r\
+    \n  }\r\
+    \n  :local IsFirstTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Check  [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if (\$Ticket = \$Check) do={:return true}\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\
+    o={:return false}\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local AddTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Add    [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :while (true) do={\r\
+    \n      :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\
+    \n      :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\
+    \n      :delay 10ms;\r\
+    \n      :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\
+    e}\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local RemoveTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Remove [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\
+    \n        :set (\$ScriptLockOrder->\$Script->\$Id);\r\
+    \n        :delay 10ms;\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local CleanupTickets do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\
+    \n    }\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\
+    \n  :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\
+    \n    :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\
+    ist!\");\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$JobCount \$Script ] = 0) do={\r\
+    \n    \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\
+    );\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\
+    \n    :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\
+    t . \"', resetting!\");\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n    /system/script/job/remove [ find where script=\$Script ];\r\
+    \n  }\r\
+    \n  :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\
+    \n  \$AddTicket \$Script \$MyTicket;\r\
+    \n  :local WaitInterval (\$WaitMax / 20);\r\
+    \n  :local WaitTime \$WaitMax;\r\
+    \n  :while (\$WaitTime > 0 && \\\r\
+    \n      ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\
+    \n      [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\
+    \n    :set WaitTime (\$WaitTime - \$WaitInterval);\r\
+    \n    :delay \$WaitInterval;\r\
+    \n  }\r\
+    \n  :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\
+    \n      [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\
+    \n    \$RemoveTicket \$Script \$MyTicket;\r\
+    \n    \$CleanupTickets \$Script;\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  \$RemoveTicket \$Script \$MyTicket;\r\
+    \n  \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \
+    once\" . \\\r\
+    \n    [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\
+    \_lock\" \"\" ] . \"...\");\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification do={ :onerror Err {\r\
+    \n  :global SendNotification2;\r\
+    \n  \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\
+    \_silent=\$4 });\r\
+    \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification2 do={\r\
+    \n  :local Notification \$1;\r\
+    \n  :global NotificationFunctions;\r\
+    \n  :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\
+    \n    (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\
+    ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolByUnicodeName do={\r\
+    \n  :local Name [ :tostr \$1 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global SymbolsExtra;\r\
+    \n  :local Symbols ({\r\
+    \n    \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\
+    \n    \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\
+    \n    \"arrow-down\"=\"\\E2\\AC\\87\";\r\
+    \n    \"arrow-up\"=\"\\E2\\AC\\86\";\r\
+    \n    \"calendar\"=\"\\F0\\9F\\93\\85\";\r\
+    \n    \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\
+    \n    \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\
+    \n    \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\
+    \n    \"cloud\"=\"\\E2\\98\\81\";\r\
+    \n    \"cross-mark\"=\"\\E2\\9D\\8C\";\r\
+    \n    \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\
+    \n    \"fire\"=\"\\F0\\9F\\94\\A5\";\r\
+    \n    \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\
+    \n    \"gear\"=\"\\E2\\9A\\99\";\r\
+    \n    \"heart\"=\"\\E2\\99\\A5\";\r\
+    \n    \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\
+    \n    \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\
+    \n    \"information\"=\"\\E2\\84\\B9\";\r\
+    \n    \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\
+    \n    \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\
+    \n    \"link\"=\"\\F0\\9F\\94\\97\";\r\
+    \n    \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\
+    \n    \"memo\"=\"\\F0\\9F\\93\\9D\";\r\
+    \n    \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\
+    \n    \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\
+    \n    \"scissors\"=\"\\E2\\9C\\82\";\r\
+    \n    \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\
+    \n    \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\
+    \n    \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\
+    \n    \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\
+    \n    \"sparkles\"=\"\\E2\\9C\\A8\";\r\
+    \n    \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\
+    \n    \"star\"=\"\\E2\\AD\\90\";\r\
+    \n    \"warning-sign\"=\"\\E2\\9A\\A0\";\r\
+    \n    \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\
+    \n  }, \$SymbolsExtra);\r\
+    \n  :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\
+    \n  :local Special {\r\
+    \n    \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\
+    \n    \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\
+    \n    \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\
+    \n    \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\
+    \n  :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\
+    '!\");\r\
+    \n    :return \"\";\r\
+    \n  }\r\
+    \n  :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\
+    me) ] . \"\\EF\\B8\\8F\");\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolForNotification do={\r\
+    \n  :global NotificationsWithSymbols;\r\
+    \n  :global SymbolByUnicodeName;\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\
+    \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\
+    \n  :local Return \"\";\r\
+    \n  :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\
+    mbolByUnicodeName \$Symbol ])}\r\
+    \n  :return (\$Return . \" \");\r\
+    \n}\r\
+    \n\r\
+    \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\
+    \n:set UrlEncode do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\
+    \n  :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\
+    %24\"; \"%25\"; \"%26\"; \"%27\";\r\
+    \n         \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \
+    \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\
+    \n         \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \
+    \"%7C\"; \"%7D\"; \"%7E\" };\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :local Replace [ :find \$Chars \$Char ];\r\
+    \n    :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\
+    ce)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsDNSResolving do={\r\
+    \n  :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsFullyConnected do={\r\
+    \n  :global IsDNSResolving;\r\
+    \n  :global IsTimeSync;\r\
+    \n  :if ([ \$IsDNSResolving ] = false) do={:return false};\r\
+    \n  :if ([ \$IsTimeSync ] = false) do={:return false};\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsTimeSync do={\r\
+    \n  :global IsTimeSyncCached;\r\
+    \n  :global IsTimeSyncResetNtp;\r\
+    \n  :if (\$IsTimeSyncCached = true) do={:return true}\r\
+    \n  :if ([ /system/ntp/client/get enabled ] = true) do={\r\
+    \n    :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :local Uptime [ /system/resource/get uptime ];\r\
+    \n    :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\
+    \n      :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    }\r\
+    \n    :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\
+    \n    :log warning \"\$0 The ntp client is configured, but did not sync.\"\
+    ;\r\
+    \n    :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    /system/ntp/client/set enabled=no;\r\
+    \n    :delay 20ms;\r\
+    \n    /system/ntp/client/set enabled=yes;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\
+    \n       [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\
+    \n    :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\
+    ee license and x86.\";\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ /ip/cloud/get update-time ] = true) do={\r\
+    \n    :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :log debug \"\$0 No time source configured! Returning gracefully...\";\
+    \r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchHugeFiles do={\r\
+    \n  :local ScriptName [ :tostr \$1 ];\r\
+    \n  :local Url        [ :tostr \$2 ];\r\
+    \n  :local CheckCert  [ :tostr \$3 ];\r\
+    \n\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global MkDir;\r\
+    \n  :global RmDir;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\
+    ithout-crl\" ];\r\
+    \n\r\
+    \n  :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\
+    \n  :if ([ \$MkDir \$DirName ] = false) do={\r\
+    \n    \$LogPrint error \$0 (\"Failed creating directory!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \
+    \$GetRandom20CharAlNum ]);\r\
+    \n  :onerror Err {\r\
+    \n    /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \
+    \\\r\
+    \n      http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\
+    lue;\r\
+    \n  } do={\r\
+    \n    :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\
+    \n      \$RmFile \$FileName;\r\
+    \n    }\r\
+    \n    \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\
+    \_. \$Err);\r\
+    \n    \$RmDir \$DirName;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\
+    \n    \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\
+    \_not show up.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileSize [ /file/get \$FileName size ];\r\
+    \n  :local Return \"\";\r\
+    \n  :local VarSize 0;\r\
+    \n  :while (\$VarSize != \$FileSize) do={\r\
+    \n    :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\
+    768 file=\$FileName as-value ]->\"data\"));\r\
+    \n    :set FileSize [ /file/get \$FileName size ];\r\
+    \n    :set VarSize [ :len \$Return ];\r\
+    \n    :if (\$VarSize > \$FileSize) do={\r\
+    \n      :delay 100ms;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  \$RmDir \$DirName;\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchUserAgentStr do={\r\
+    \n  :local Caller [ :tostr \$1 ];\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global CommitBrief;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Resource [ /system/resource/get ];\r\
+    \n  :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\
+    \_\$Resource->\"architecture-name\" . \\\r\
+    \n    \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\
+    CommitBrief ] . \")\");\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptInstallUpdate do={ :onerror Err {\r\
+    \n  :local Scripts    [ :toarray \$1 ];\r\
+    \n  :local NewComment [ :tostr   \$2 ];\r\
+    \n  :global InitSetup;\r\
+    \n\r\
+    \n  :global CommitId;\r\
+    \n  :global ScriptUpdatesCRLF;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global CheckSumsVerify;\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SumsDirAndFileName;\r\
+    \n  :global GlobalScriptsUrlSuffix;\r\
+    \n  :global EitherOr;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global Grep;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n  :global RequiredRouterOS;\r\
+    \n  :global SendNotification2;\r\
+    \n  :global SymbolForNotification;\r\
+    \n  :global ValidateSyntax;\r\
+    \n  :global CommentsInScripts;\r\
+    \n\r\
+    \n  :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\
+    hout.\");\r\
+    \n  }\r\
+    \n\r\
+    \n  :foreach Script in=\$Scripts do={\r\
+    \n    :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\
+    \r\
+    \n      \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\
+    \n      /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \
+    Vados\\n\" comment=\$NewComment;\r\
+    \n    }\r\
+    \n  }\r\
+    \n\r\
+    \n  :local CommitIdBefore \$CommitId;\r\
+    \n  :local GlobalConfVersionBefore \$GlobalConfVersion;\r\
+    \n  :local ReloadGlobal false;\r\
+    \n  :local DeviceMode [ /system/device-mode/get ];\r\
+    \n\r\
+    \n  :if (\$CheckSumsVerify = true) do={\r\
+    \n    :local CheckSums ({});\r\
+    \n     :do {\r\
+    \n     :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\
+    iptsUrlSuffix);\r\
+    \n      \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\
+    \r\
+    \n      :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\
+    ficate=yes-without-crl \\\r\
+    \n        http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\
+    =user as-value ]->\"data\") ];\r\
+    \n    } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\
+    \n    }\r\
+    \n\r\
+    \n  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\
+    s\" ] do={\r\
+    \n    :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n    :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \
+    ];\r\
+    \n    :local SourceNew;\r\
+    \n\r\
+    \n    :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\
+    \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\
+    \n      :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\
+    \n      :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\
+    iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \
+    \"'!\");\r\
+    \n        }\r\
+    \n    }\r\
+    \n    :do {\r\
+    \n      :if (\$ScriptInfo->\"ignore\" = true) do={\r\
+    \n        \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\
+    e\" . \"', as requested.\");\r\
+    \n        :error true;\r\
+    \n      }\r\
+    \n      :if (\$CheckSumsVerify = true) do={\r\
+    \n        :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\
+    \n        :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\
+    ptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n             [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\
+    rce\") ] ] = \$CheckSum) do={\r\
+    \n          \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\
+    >\"name\" . \"' matches, ignoring.\");\r\
+    \n          :error true;\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\
+    \n        :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\
+    fetch\" ] = false) do={\r\
+    \n          \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\
+    ng without.\");\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :onerror Err {\r\
+    \n        :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\
+    lScriptsUrl ];\r\
+    \n        :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\
+    lobalScriptsUrlSuffix ];\r\
+    \n        :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\
+    Suffix);\r\
+    \n        \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\
+    name\") . \"' from url: \" . \$Url);\r\
+    \n        :local Result [ /tool/fetch check-certificate=yes-without-crl \\\
+    \r\
+    \n          http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\
+    ut=user as-value ];\r\
+    \n        :if (\$Result->\"status\" = \"finished\") do={\r\
+    \n          :set SourceNew [ :tolf (\$Result->\"data\") ];\r\
+    \n        } \r\
+    \n      } do={\r\
+    \n        \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\
+    al->\"name\" . \"': \" . \$Err);\r\
+    \n        :if (\$Err != \"Fetch failed with status 404\") do={\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\
+    \n          \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\
+    \?\");\r\
+    \n          /system/script/remove \$Script;\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$CheckSumsVerify = true) do={\r\
+    \n          :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\
+    riptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n               [ :len \$CheckSum ] = 0) do={\r\
+    \n            \$LogPrint warning \$0 (\"Added the script manually\? Skip u\
+    pdates with 'ignore=true' in comment.\");\r\
+    \n          }\r\
+    \n        }\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :len \$SourceNew ] = 0) do={\r\
+    \n        \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\
+    >\"name\") . \"'.\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :local SourceCRLF [ :tocrlf \$SourceNew ];\r\
+    \n      :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\
+    lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\
+    \n        :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\
+    \$ScriptVal->\"source\")) do={\r\
+    \n          \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\") \
+    . \"' source did not change. End of lines set to CRLF.\");\r\
+    \n          if (\$ScriptUpdatesCRLF = false) do={\r\
+    \n            :put [ :tolf \$SourceNew ];\r\
+    \n            \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\"\
+    ) . \"' source update end of lines to LF.\");\r\
+    \n          }\r\
+    \n        :error false;\r\
+    \n        }\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\
+    l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\
+    );\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if (\$CommentsInScripts = true) do={\r\
+    \n         :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\
+    \_\") ];\r\
+    \n         :if ([ :len \$CommentLine ] = 0) do={\r\
+    \n           \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\
+    iptVal->\"name\") . \"' for comment in script body, is not found result Ig\
+    noring!\");\r\
+    \n           :error false;\r\
+    \n         } else={\r\
+    \n           :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\
+    ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\
+    ] + 2) [ :len \$CommentLine] ]) do={\r\
+    \n             \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\
+    \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\
+    ;\r\
+    \n             :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\
+    ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\
+    \n             \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\
+    omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\
+    ded!\");\r\
+    \n           } else={\r\
+    \n             \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\
+    al->\"name\") . \"' did not change.\");\r\
+    \n             :error false;\r\
+    \n           }\r\
+    \n         }   \r\
+    \n      }\r\
+    \n\r\
+    \n      :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\
+    \"\\23 requires RouterOS, \") ] ]->version);\r\
+    \n      :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\
+    \_false ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires RouterOS \" . \\\r\
+    \n            \$RequiredROS . \", which is not met by your installation. I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\
+    \\23 requires device-mode, \") ] ];\r\
+    \n      :local MissingDM ({});\r\
+    \n      :foreach Feature,Value in=\$RequiredDM do={\r\
+    \n        :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\
+    ceMode->\$Feature) = false) do={\r\
+    \n          :set MissingDM (\$MissingDM, \$Feature);\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len \$MissingDM ] > 0) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires disabled \" . \\\r\
+    \n            \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\
+    ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      \r\
+    \n      :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\
+    ript comment: \" . (\$ScriptVal->\"comment\"));\r\
+    \n\r\
+    \n      /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\
+    Val->\"comment\") \\\r\
+    \n          source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\
+    F \$SourceNew ] \$Script;\r\
+    \n      :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\
+    \n           \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\
+    \n           \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\
+    o={\r\
+    \n        :set ReloadGlobal true;\r\
+    \n      }\r\
+    \n    } on-error={ }\r\
+    \n  }\r\
+    \n  :if (\$ReloadGlobal = true) do={\r\
+    \n    \$LogPrint info \$0 (\"Reloading global configuration and functions.\
+    \");\r\
+    \n    :onerror Err {\r\
+    \n      :global InitSetup (a);\r\
+    \n      /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\
+    \n    } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\
+    ctions failed! \" . \$Err)}\r\
+    \n  }\r\
+    \n  :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\
+    \n    \$LogPrint warning \$0 (\"The configuration version decreased from \
+    \" . \\\r\
+    \n      \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\
+    \n      \". Installed an older version\?\");\r\
+    \n  }\r\
+    \n    :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\
+    \n    :global GlobalConfChanges;\r\
+    \n    :global GlobalConfMigration;\r\
+    \n    :local ChangeLogCode;\r\
+    \n    :if ([ :len \$ChangeLogCode ] > 0) do={\r\
+    \n      :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\
+    \n        :onerror Err {\r\
+    \n          [ :parse \$ChangeLogCode ];\r\
+    \n        } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \
+    . \$Err)}\r\
+    \n      } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\
+    dation!\")}\r\
+    \n    }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\
+    \n        :do {\r\
+    \n          :if ([ :typeof \$Migration ] != \"str\") do={\r\
+    \n            \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\
+    \_\" is not available.\");\r\
+    \n            :error false;\r\
+    \n          }\r\
+    \n          :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\
+    \n            \$LogPrint warning \$0 (\"Migration code for change \" . \$I\
+    \_. \" failed syntax validation!\");\r\
+    \n            :error false}\r\
+    \n          \$LogPrint info \$0 (\"Applying migration for change \" . \$I \
+    . \": \" . \$Migration);\r\
+    \n          :onerror Err {\r\
+    \n            [ :parse \$Migration ];\r\
+    \n          } do={\$LogPrint warning \$0 (\"Migration code for change \" .\
+    \_\$I . \" failed to run: \" . \$Err)}\r\
+    \n        } on-error={ }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :local NotificationMessage (\"The configuration version on \" . \$Id\
+    entity . \" increased \" . \\\r\
+    \n       \"to \" . \$GlobalConfVersion . \", current configuration may nee\
+    d modification. \" . \\\r\
+    \n       \"Please review and update global-config-overlay, then re-run glo\
+    bal-config.\");\r\
+    \n    \$LogPrint info \$0 (\$NotificationMessage);\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\
+    \");\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\
+    \n        :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\
+    \r\
+    \n            [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\
+    \n        \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\
+    \n      }\r\
+    \n    } else={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\
+    \_changes are not available.\");\r\
+    \n\r\
+    \n      }\r\
+    \n\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \
+    } else={ :global GlobalConfChanges (a); }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\
+    on; } else={ :global GlobalConfMigration (a); }\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n\r\
+    \n# load modules\r\
+    \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\
+    ns\\\\.d|mod)/.\" ] do={\r\
+    \n  :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n  :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\
+    \n    :onerror Err {\r\
+    \n      /system/script/run \$Script;\r\
+    \n    } do={\r\
+    \n      \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\
+    ailed to run: \" . \$Err);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\
+    led syntax validation, skipping.\");\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# Add and fix global scheduler\r\
+    \n:put \"Add or/and fix Global scheduler...\";\r\
+    \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\
+    ; }\";\r\
+    \n:local Comment \"Every Day Set Global Environment Variables\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \
+    = 0) do={\r\
+    \n  /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\
+    ent=\$OnEvent start-time=startup;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\
+    \_do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\
+    ) do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\
+    \n}\r\
+    \n# Add Update Script scheduler\r\
+    \n:put \"Add or/and fix Update Script scheduler\";\r\
+    \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\
+    \r\
+    \n:set Comment \"Every Day Check For Update Scripts\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\
+    \" ] ] = 0) do={\r\
+    \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \
+    start-time=startup interval=1d on-event=\$OnEvent;\r\
+    \n}\r\
+    \n\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\
+    \_not ready.\"); }; } delay=100ms max=5;\r\
+    \n\r\
+    \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\
+    \n    [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \
+    \") ] . \\\r\
+    \n    \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\
+    \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\
+    \n    # signal we are ready\r\
+    \n:set GlobalFuncReady true;\r\
+    \n:set ExitOK true;\r\
+    \n\r\
+    \n:log info (\$0 . \"Global configs ready!\");\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n}\r\
+    \n"
+add comment="Download custom Certificates By Routers Identity " \
+    dont-require-permissions=no name=mod/AM-Certs-By-Ident owner=\
+    mod/AM-Certs-By-Ident policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-Certs-By-Ident\r\
+    \n# Script comment: Download custom Certificates By Routers Identity \r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n#:local ScriptName [ :jobname ];\r\
+    \n#\r\
+    \n# CloudFlare\r\
+    \n#/tool/fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobalR\
+    ootCA.crt.pem;\r\
+    \n#/certificate/import file-name=DigiCertGlobalRootCA.crt.pem passphrase=\
+    \"\";\r\
+    \n#/tool/ fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobal\
+    G2TLSRSASHA2562020CA1-1.crt.pem;\r\
+    \n#/certificate/import file-name=DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt\
+    .pem passphrase=\"\";\r\
+    \n# Quad9\r\
+    \n#/tool/fetch mode=https url=\"https://cacerts.digicert.com/DigiCertGloba\
+    lG3TLSECCSHA3842020CA1-1.crt.pem\"\r\
+    \n#/certificate/import file-name=DigiCertGlobalG3TLSECCSHA3842020CA1-1.crt\
+    .pem  passphrase=\"\";\r\
+    \n:global tmpAddCerts true; \r\
+    \n\r\
+    \n:global GlobalScriptsUrl;\r\
+    \n:local UrlSuffix [/system/identity/get name];\r\
+    \n:local UrlDir \"certs/\";\r\
+    \n:local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\");\r\
+    \n\r\
+    \n:log error \$CertUrl;\r\
+    \n\r\
+    \n:local CertName \"DigiCert-Global-Root-CA.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Global-Root-CA\" [ find where common-na\
+    me=\"DigiCert Global Root CA\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Assured-ID-Root-CA.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Assured-ID-Root-CA\" [ find where commo\
+    n-name=\"DigiCert Assured ID Root CA\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Assured-ID-Root-G2.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Assured-ID-Root-G2\" [ find where commo\
+    n-name=\"DigiCert Assured ID Root G3\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Assured-ID-Root-G3.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Assured-ID-Root-G3\" [ find where commo\
+    n-name=\"DigiCert Assured ID Root G3\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Global-G2-TLS-RSA-SHA256-2020-CA1.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Global-G2-TLS-RSA-SHA256-2020-CA1\" [ f\
+    ind where common-name=\"DigiCert Global G2 TLS RSA SHA256 2020 CA1\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Global-G3-TLS-ECC-SHA384-2020-CA1.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Global-G3-TLS-ECC-SHA384-2020-CA1\" [ f\
+    ind where common-name=\"DigiCert Global G3 TLS ECC SHA384 2020 CA1\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Global-Root-G2.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Global-Root-G2\" [ find where common-na\
+    me=\"DigiCert Global Root G2\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Global-Root-G3.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Global-Root-G3\" [ find where common-na\
+    me=\"DigiCert Global Root G3\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-TLS-ECC-P384-Root-G5.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-TLS-ECC-P384-Root-G5\" [ find where com\
+    mon-name=\"DigiCert TLS ECC P384 Root G5\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-TLS-RSA4096-Root-G5.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-TLS-RSA4096-Root-G5\" [ find where comm\
+    on-name=\"DigiCert TLS RSA4096 Root G5\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Trusted-Root-G4.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Trusted-Root-G4\" [ find where common-n\
+    ame=\"DigiCert Trusted Root G4\" ];\r\
+    \n\r\
+    \n:set CertName \"GTS-Root-R4.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"GTS-Root-R4\" [ find where common-name=\"GTS Roo\
+    t R4\" ];\r\
+    \n\r\
+    \n:set CertName \"Go-Daddy-Root-Certificate-Authority-G2.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"Go-Daddy-Root-Certificate-Authority-G2\" [ find \
+    where common-name=\"Go Daddy Root Certificate Authority - G2\" ];\r\
+    \n\r\
+    \n:set CertName \"ISRG-Root-X1.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"ISRG-Root-X1\" [ find where common-name=\"ISRG R\
+    oot X1\" ];\r\
+    \n\r\
+    \n:set CertName \"Root-YE.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"Root-YE\" [ find where common-name=\"Root YE\" ]\
+    ;\r\
+    \n\r\
+    \n:set CertName \"Starfield-Root-Certificate-Authority-G2.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"Starfield-Root-Certificate-Authority-G2\" [ find\
+    \_where common-name=\"Starfield Root Certificate Authority - G2\" ];\r\
+    \n\r\
+    \n:set CertName \"USERTrust-RSA-Certification-Authority.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"USERTrust-RSA-Certification-Authority\" [ find w\
+    here common-name=\"USERTrust RSA Certification Authority\" ];\r\
+    \n\r\
+    \n:global tmpAddCerts (a);\r\
+    \n\r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n#:set CertName \"GTS-Root-RX.pem\";\r\
+    \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\
+    \r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n#internet\r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n#:set CertName \"ISRG-Root-X2.pem\";\r\
+    \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\
+    \r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n\r\
+    \n\r\
+    \n#/ip/dns/set allow-remote-requests=yes doh-max-concurrent-queries=100 do\
+    h-max-server-connections=20 use-doh-server=https://security.cloudflare-dns\
+    .com/dns-query verify-doh-cert=yes;\r\
+    \n#/ip/dns/static remove [find where address=1.1.1.1];\r\
+    \n#/ip/dns/static add address=1.1.1.1 name=security.cloudflare-dns.com com\
+    ment=\"cloudflare-dns IPv4 1\";\r\
+    \n#/ip/dns/ static remove  [find where address=1.0.0.1];\r\
+    \n#/ip/dns/static add address=1.0.0.1 name=security.cloudflare-dns.com com\
+    ment=\"cloudflare-dns IPv4 2\"\r\
+    \n#/ip dns static add address=2606:4700:4700::1111 name=security.cloudflar\
+    e-dns.com type=AAAA\r\
+    \n#/ip dns static add address=2606:4700:4700::1001 name=security.cloudflar\
+    e-dns.com type=AAAA\r\
+    \n#/ip/dns set servers=\"1.0.0.1, 8.8.4.4\";\r\
+    \n#/ip/dns set servers=\"\";"
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\
+    \r\
+    \n:global GlobalScriptsUrl;\r\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\
+    .30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\
+    \n"
+add dont-require-permissions=no name=awg2-webui owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    :put \"Download image, and save him to usb1/tmp\"\
+    \n#/tool/fetch url=\"https://ros.vados.ru/docker/awg2-webui-arm.tar\" dst-\
+    path=usb1/tmp/awg2-webui.tar\
+    \n\
+    \n:put \"1. Create veth interface\"\
+    \n/interface veth add name=veth-awg address=10.9.9.2/24 gateway=10.9.9.1\
+    \n\
+    \n:put \"2. Create bridge and add veth\"\
+    \n/interface bridge add name=br-awg\
+    \n/interface bridge port add bridge=br-awg interface=veth-awg\
+    \n\
+    \n:put \"3. Assign IP to bridge\"\
+    \n/ip address add address=10.9.9.1/24 interface=br-awg\
+    \n\
+    \n:put \"4. NAT: masquerade container traffic\"\
+    \n/ip firewall nat add chain=srcnat src-address=10.9.9.0/24 action=masquer\
+    ade\
+    \n\
+    \n:put \"5. Port forward: UDP 443 \? container (AmneziaWG QUIC mimicry)\"\
+    \n/ip firewall nat add chain=dstnat protocol=udp dst-port=443 \\\
+    \n    action=dst-nat to-addresses=10.9.9.2 to-ports=55055 in-interface=eth\
+    er1\
+    \n\
+    \n:put \"6. Port forward: HTTPS 9443 \? container Web UI\"\
+    \n/ip firewall nat add chain=dstnat protocol=tcp dst-port=9443 \\\
+    \n    action=dst-nat to-addresses=10.9.9.2 to-ports=443 in-interface=ether\
+    1\
+    \n\
+    \n:put \"Create environment list..\"\
+    \n/container envs add list=awgui-env key=WEB_USER value=vados\
+    \n/container envs add list=awgui-env key=WEB_PASS value=zoomzoomrulezz\
+    \n/container envs add list=awgui-env key=SECRET_KEY value=RanDomSecret32Sy\
+    mboLs2325272931q\
+    \n/container envs add list=awgui-env key=AWG_ENDPOINT value=10.30.30.10:44\
+    3\
+    \n\
+    \n:put \"Load and start container...\"\
+    \n/container add file=usb1/tmp/awg2-webui.tar interface=veth-awg hostname=\
+    awg2-webui \\\
+    \nroot-dir=usb1/awg2-webui envlist=awgui-env start-on-boot=yes logging=yes\
+    \_shm-size=4M\
+    \n\
+    \n:put \"Start...\"\
+    \n/container start 0\
+    \n\
+    \n:put \"Verify...\"\
+    \n/container print\
+    \n\
+    \n:put \"Should show: status=running\"\
+    \n\
+    \n/log print where topics~\"container\"\
+    \n\
+    \n:put \"Should show: AWG started, nginx running\"\
+    \n"
+add comment=Generator dont-require-permissions=no name=AWG-VDSina owner=vados \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="# ============================================================\r\
+    \n# AWG Proxy -- MikroTik RouterOS (protocol: v2)\r\
+    \n# 2026-06-30 22:08:12\r\
+    \n# ============================================================\r\
+    \n\r\
+    \n# 0. Check prerequisites\r\
+    \n:if ([:len [/system/package/find where name=\"container\" disabled=no]] \
+    = 0) do={\r\
+    \n  :put \"Container package is not installed or disabled. Install it and \
+    reboot.\"\r\
+    \n  :error \"Usage: /system/device-mode/update container=yes\"\r\
+    \n}\r\
+    \n\r\
+    \n# Auto-detect storage\r\
+    \n:global awgDisk \"disk1\"\r\
+    \n{\r\
+    \n  :local usbFree 0\r\
+    \n  :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] free] \
+    } on-error={}\r\
+    \n  :if (\$usbFree > 0) do={\r\
+    \n    :set awgDisk \"usb1\"\r\
+    \n    :put (\"Using USB: usb1 (\" . (\$usbFree / 1048576) . \" MB free)\")\
+    \r\
+    \n  } else={\r\
+    \n    :if ([:len [/disk/find where slot=\"usb1\"]] > 0) do={\r\
+    \n      :put \"USB found but not mounted. Format as ext4\?\"\r\
+    \n      :put \"Press 'y' to confirm:\"\r\
+    \n      :local key [/terminal/inkey timeout=30]\r\
+    \n      :if (\$key = 121 || \$key = 89) do={\r\
+    \n        /disk/format-drive usb1 file-system=ext4 label=usb1\r\
+    \n        :delay 3s\r\
+    \n        :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] \
+    free] } on-error={}\r\
+    \n        :if (\$usbFree > 0) do={\r\
+    \n          :set awgDisk \"usb1\"\r\
+    \n        } else={ :put \"Format failed, using disk1\" }\r\
+    \n      } else={ :put \"Using disk1\" }\r\
+    \n    } else={ :put \"No USB, using disk1\" }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# 1. Uninstall script\r\
+    \n/system/script/add name=awg-VDSina-uninstall comment=awg-VDSina source={\
+    \r\
+    \n  :put \"Uninstallimg AmneziaWG...\"\r\
+    \n  :log info \"Uninstallimg AmneziaWG...\"\r\
+    \n  :local prevDNS \"\"\r\
+    \n  :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\
+    env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\r\
+    \n  :local storageDisk \"disk1\"\r\
+    \n  :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\
+    ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\r\
+    \n  :local prevTmpdir \"\"\r\
+    \n  :if (\$storageDisk != \"disk1\") do={\r\
+    \n    :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\
+    Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\r\
+    \n  }\r\
+    \n  /ip/route/remove [find where comment=awg-VDSina-tunnel]\r\
+    \n  /ip/route/remove [find where comment=awg-VDSina-dns]\r\
+    \n  /container/stop [find where interface=veth-awg-VDSina]\r\
+    \n  :delay 7s\r\
+    \n  /container/remove [find where interface=veth-awg-VDSina]\r\
+    \n  /container/envs/remove [find where list=\"awg-VDSina-env\"]\r\
+    \n  :if (\$prevDNS != \"\") do={\r\
+    \n    :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\r\
+    \n    :put (\"DNS restored to: \$prevDNS\")\r\
+    \n  }\r\
+    \n  :if (\$storageDisk != \"disk1\") do={\r\
+    \n    /container/config set tmpdir=\$prevTmpdir\r\
+    \n    :put (\"Container tmpdir restored to: \$prevTmpdir\")\r\
+    \n  }\r\
+    \n  /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\r\
+    \n  /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\
+    \r\
+    \n  /ip/address/remove [find where address=\"172.19.75.209/30\"]\r\
+    \n  /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\r\
+    \n  /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\
+    a\"]\r\
+    \n  /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\r\
+    \n  /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\r\
+    \n  :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\
+    \r\
+    \n  :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\
+    \_} on-error={}\r\
+    \n  :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\
+    out.rsc\")] } on-error={}\r\
+    \n  :if (\$storageDisk != \"disk1\") do={\r\
+    \n    :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\
+    n-error={}\r\
+    \n  }\r\
+    \n  :put \"Uninstall AmneziaWG Proxy complete!\"\r\
+    \n  :log info \"Uninstall AmneziaWG Proxy complete!\"\r\
+    \n  /system/script/remove [find where name=awg-VDSina-uninstall]\r\
+    \n}\r\
+    \n\r\
+    \n# 2. Network infrastructure\r\
+    \n/interface/veth/add name=veth-awg-VDSina address=172.19.75.210/30 gatewa\
+    y=172.19.75.209\r\
+    \n/ip/address/add address=172.19.75.209/30 interface=veth-awg-VDSina\r\
+    \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.19.7\
+    5.208/30\r\
+    \n\r\
+    \n# 3. WireGuard interface (MikroTik derives the public key automatically)\
+    \r\
+    \n/interface/wireguard/add name=wg-awg-VDSina private-key=\"4CHyNhbOs923/E\
+    yNDguMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=14710 disabled=yes\r\
+    \n/interface/wireguard/peers/add interface=wg-awg-VDSina public-key=\"o5Ig\
+    Cl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcY\
+    QnD9N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=172.19.75.210 endpoint-po\
+    rt=51820 allowed-address=0.0.0.0/0 persistent-keepalive=10\r\
+    \n/ip/address/add address=10.9.0.3/32 interface=wg-awg-VDSina\r\
+    \n\r\
+    \n# 4. Container environment variables\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_LISTEN value=\":44044\"\
+    \r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_REMOTE value=\"109.107.1\
+    77.79:55055\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_JC value=\"9\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_JMIN value=\"105\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_JMAX value=\"920\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S1 value=\"90\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S2 value=\"136\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H1 value=\"472437748-472\
+    438637\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H2 value=\"707808381-707\
+    809250\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H3 value=\"1609078552-16\
+    09079495\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H4 value=\"1012329484-10\
+    12329741\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_SERVER_PUB value=\"o5IgC\
+    l1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_CLIENT_PUB value=[/inter\
+    face/wireguard/get [find name=wg-awg-VDSina] public-key]\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S3 value=\"45\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S4 value=\"27\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I1 value=\"<b 0x00010014\
+    2112a442><r 12><b 0x80220008636f7475726e2d3480280004><r 4>\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I2 value=\"<r 32><t>\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I3 value=\"<rd 16><r 24>\
+    \"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I4 value=\"<t><rc 20>\"\
+    \r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I5 value=\"<r 38>\"\r\
+    \n\r\
+    \n# 5. DNS\r\
+    \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\
+    n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\
+    \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /container/envs/add list=aw\
+    g-VDSina-env key=AWG_PREV_DNS value=\"\$prevDNS\" }\r\
+    \n# NOTE: replaces existing DNS configuration\r\
+    \n/ip/dns/set servers=8.8.8.8\r\
+    \n#/ip/route/add dst-address=109.107.177.79/32 gateway=wg-awg-VDSina dista\
+    nce=1 comment=awg-VDSina-dns\r\
+    \n\r\
+    \n# 6. Download, create and start container\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_STORAGE value=\$awgDisk\
+    \r\
+    \n:if (\$awgDisk != \"disk1\") do={\r\
+    \n  :local tmpPath (\$awgDisk . \"/pull\")\r\
+    \n  /container/envs/add list=awg-VDSina-env key=AWG_PREV_TMPDIR value=[/co\
+    ntainer/config/get tmpdir]\r\
+    \n  /container/config set tmpdir=\$tmpPath memory-high=200M\r\
+    \n}\r\
+    \n{\r\
+    \n  :local arch [/system/resource/get architecture-name]\r\
+    \n  :local ver [/system/resource/get version]\r\
+    \n  :local dotPos [:find \$ver \".\"]\r\
+    \n  :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\r\
+    \n  :local endPos [:find \$rest \".\"]\r\
+    \n  :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \" \
+    \"] }\r\
+    \n  :local minor [:tonum [:pick \$rest 0 \$endPos]]\r\
+    \n  :local suffix \"\"\r\
+    \n  :if (\$minor <= 20) do={ :set suffix \"-7.20-Docker\" }\r\
+    \n  :local file \"\"\r\
+    \n  :if (\$arch = \"arm64\") do={ :set file (\"awg-proxy-arm64\" . \$suffi\
+    x . \".tar.gz\") }\r\
+    \n  :if (\$arch = \"arm\") do={ :set file (\"awg-proxy-arm\" . \$suffix . \
+    \".tar.gz\") }\r\
+    \n  :if (\$arch ~ \"x86\") do={ :set file (\"awg-proxy-amd64\" . \$suffix \
+    . \".tar.gz\") }\r\
+    \n  :if (\$file = \"\") do={ :error \"Unsupported architecture: \$arch\" }\
+    \r\
+    \n  :local url \"https://github.com/timbrs/amneziawg-mikrotik-c/releases/l\
+    atest/download/\$file\"\r\
+    \n  :local filePath \$file\r\
+    \n  :if (\$awgDisk != \"disk1\") do={\r\
+    \n    :set filePath (\$awgDisk . \"/pull/\" . \$file)\r\
+    \n    :do { /file/make-directory (\$awgDisk . \"/pull\") } on-error={}\r\
+    \n  }\r\
+    \n  :if ([:len [/file/find where name=\$filePath]] = 0) do={\r\
+    \n    :local freeStorage 0\r\
+    \n    :if (\$awgDisk = \"disk1\") do={\r\
+    \n      :set freeStorage [/system/resource/get free-hdd-space]\r\
+    \n    } else={\r\
+    \n      :do { :set freeStorage [/disk/get [find where mount-point=\$awgDis\
+    k] free] } on-error={}\r\
+    \n    }\r\
+    \n    :if (\$freeStorage < 262144) do={\r\
+    \n      :put (\"WARNING: Low disk space (\" . (\$freeStorage / 1024) . \"K\
+    B free). Need at least 256KB.\")\r\
+    \n      :put \"See: https://github.com/timbrs/amneziawg-mikrotik-c#insuffi\
+    cient-disk-space\"\r\
+    \n      :error \"Insufficient disk space\"\r\
+    \n    }\r\
+    \n    :put (\"Fetching: \$url -> \" . \$filePath)\r\
+    \n    /tool/fetch url=\$url dst-path=\$filePath http-max-redirect-count=10\
+    \r\
+    \n  } else={\r\
+    \n    :put (\"File already exists: \" . \$filePath)\r\
+    \n  }\r\
+    \n  :local rootDir (\$awgDisk . \"/awg-VDSina\")\r\
+    \n  /container/add file=\$filePath interface=veth-awg-VDSina envlist=awg-V\
+    DSina-env hostname=awg-VDSina root-dir=\$rootDir logging=no start-on-boot=\
+    yes comment=awg-VDSina\r\
+    \n  :if (\$minor > 20) do={ [:parse \"/container/set [find where interface\
+    =veth-awg-VDSina] shm-size=4M\"] }\r\
+    \n  /file/remove \$filePath\r\
+    \n  :local freeMem [/system/resource/get free-memory]\r\
+    \n  :if (\$freeMem < 16777216) do={\r\
+    \n    :put (\"WARNING: Low memory (\" . (\$freeMem / 1048576) . \"MB free)\
+    . 16MB+ recommended.\")\r\
+    \n  }\r\
+    \n  /container/start [find where interface=veth-awg-VDSina]\r\
+    \n  :do { /file/remove [find where name=\"console-dump.txt\"] } on-error={\
+    }\r\
+    \n  :put \"Waiting for container to start...\"\r\
+    \n  :delay 5s\r\
+    \n  /interface/wireguard/enable wg-awg-VDSina\r\
+    \n  :put \"WireGuard interface enabled\"\r\
+    \n  :put \"Installation complete!\"\r\
+    \n  :put \"Ping test: 109.107.177.79 via AmneziaWG tunnel. repeat 10 times\
+    \"\r\
+    \n  /ping 109.107.177.79 count=10 interval=1\r\
+    \n  :put \"\"\r\
+    \n  :put \"======= NEXT STEPS =======\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"Route specific traffic through the AmneziaWG tunnel:\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Route a single host:\"\r\
+    \n  :put \"    /ip/route/add dst-address=8.8.8.8/32 gateway=wg-awg-VDSina \
+    comment=awg-VDSina-tunnel\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Route a subnet:\"\r\
+    \n  :put \"    /ip/route/add dst-address=100.0.0.0/8 gateway=wg-awg-VDSina\
+    \_comment=awg-VDSina-tunnel\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Remove a route:\"\r\
+    \n  :put \"    /ip/route/remove [find where comment=awg-VDSina-tunnel dst-\
+    address=8.8.8.8/32]\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Show all tunnel routes:\"\r\
+    \n  :put \"    /ip/route/print where comment=awg-VDSina-tunnel\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Uninstall:\"\r\
+    \n  :put \"    /system/script/run awg-VDSina-uninstall\"\r\
+    \n  :put \"=========================\"\r\
+    \n}\r\
+    \n\r\
+    \n# 7. Verification\r\
+    \n# /container/print\r\
+    \n# /interface/wireguard/print\r\
+    \n# /interface/wireguard/peers/print\r\
+    \n"
+add comment=awgVDSina dont-require-permissions=no name=awgVDSina-uninstall \
+    owner=Manager policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\
+    \r\
+    \n  :put \"Uninstalling AmneziaWG...\"\r\
+    \n  :log info \"Uninstalling AmneziaWG...\"\r\
+    \n  /ip/route/remove [find where comment=awgVDSina-tunnel]\r\
+    \n  :do { /tool/netwatch/remove [find where comment=Monitor-AWGVDSINA] } o\
+    n-error={}\r\
+    \n  :do { /ip/route/remove [find where comment=Monitor-AWGVDSINA] } on-err\
+    or={}\r\
+    \n  /container/stop [find where interface=veth-awgVDSina]\r\
+    \n  :delay 7s\r\
+    \n  /interface/list/member/remove [find where interface=wg-awgVDSina]\r\
+    \n  /container/remove [find where interface=veth-awgVDSina]\r\
+    \n  /container/envs/remove [find where list=\"awgVDSina-env\"]\r\
+    \n  /ip/firewall/nat/remove [find where out-interface=\"wg-awgVDSina\"]\r\
+    \n  /ip/address/remove [find where address=\"172.20.0.1/30\"]\r\
+    \n  /interface/veth/remove [find where name=\"veth-awgVDSina\"]\r\
+    \n  /interface/wireguard/peers/remove [find where interface=\"wg-awgVDSina\
+    \"]\r\
+    \n  /ip/address/remove [find where interface=\"wg-awgVDSina\"]\r\
+    \n  /interface/wireguard/remove [find where name=\"wg-awgVDSina\"]\r\
+    \n  :do { /file/remove [find where name~\"awgVDSina.+tar\"] } on-error={}\
+    \r\
+    \n  :do { /file/remove [find where name=\"disk1/awgVDSina\"] } on-error={}\
+    \r\
+    \n  :put \"Uninstall AmneziaWG Proxy complete!\"\r\
+    \n  :log info \"Uninstall AmneziaWG Proxy complete!\"\r\
+    \n  /system/script/remove [find where name=awgVDSina-uninstall]\r\
+    \n"
+/user group
+add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\
+    !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api"
+/container config
+set layer-dir=/usb1/docker memory-high=200.0MiB memory-max=2048.0KiB \
+    registry-url=https://registry-1.docker.io tmpdir=/usb1/pull username=\
+    amsternl
+/disk settings
+set auto-media-interface=lo
+/interface bridge port
+add bridge=Bridge-LAN interface=ether2
+add bridge=Bridge-LAN interface=ether3
+add bridge=Bridge-LAN interface=ether4
+add bridge=Bridge-LAN interface=ether5
+add bridge=Bridge-LAN interface=wlan2
+add bridge=Bridge-LAN interface=wlan1
+add bridge=Bridge-LAN interface=ether1
+/ip neighbor discovery-settings
+set discover-interface-list=Internet
+/ipv6 settings
+set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes \
+    forward=no
+/interface detect-internet
+set detect-interface-list=WAN internet-interface-list=Internet \
+    lan-interface-list=LAN wan-interface-list=WAN
+/interface list member
+add interface=ether2 list=LAN
+add interface=ether3 list=LAN
+add interface=ether4 list=LAN
+add interface=ether5 list=LAN
+add interface=wlan2 list=LAN
+add interface=wlan1 list=LAN
+add interface=ether1 list=Internet
+add interface=Bridge-LAN list=LAN
+/interface wireguard peers
+add allowed-address=0.0.0.0/0,::/0 disabled=yes endpoint-address=172.20.0.2 \
+    endpoint-port=51820 interface=wg-awgVDSina name=awgVDSina \
+    persistent-keepalive=27s public-key=\
+    "o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU="
+/interface wireless cap
+# 
+set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \
+    caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\
+    CAP-18FD746E5814 discovery-interfaces=Bridge-LAN enabled=yes interfaces=\
+    wlan1,wlan2 lock-to-caps-man=yes
+/ip address
+add address=10.30.30.86/24 interface=Bridge-LAN network=10.30.30.0
+add address=172.20.0.1/30 interface=veth-awgVDSina network=172.20.0.0
+add address=10.9.0.2 interface=wg-awgVDSina network=10.9.0.2
+/ip dns
+set allow-remote-requests=yes servers=8.8.8.8
+/ip firewall nat
+add action=masquerade chain=srcnat src-address=10.9.9.0/24
+add action=dst-nat chain=dstnat disabled=yes dst-port=443 in-interface=ether1 \
+    protocol=udp to-addresses=10.9.9.2 to-ports=55055
+add action=dst-nat chain=dstnat disabled=yes dst-port=9443 in-interface=\
+    ether1 protocol=tcp to-addresses=10.9.9.2 to-ports=443
+/ip firewall service-port
+set ftp disabled=yes
+set tftp disabled=yes
+set irc disabled=no
+set sip disabled=yes
+set pptp disabled=yes
+set rtsp disabled=no
+/ip hotspot walled-garden
+add server=*1
+add server=*1
+/ip ipsec settings
+set accounting=no
+/ip ipsec policy
+set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0
+/ip ipsec profile
+set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
+/ip proxy
+set cache-administrator="" max-cache-size=none port=80,443 src-address=\
+    0.0.0.0
+/ip route
+add check-gateway=ping disabled=no distance=2 dst-address=0.0.0.0/0 gateway=\
+    10.30.30.81 routing-table=main scope=30 target-scope=10
+add comment=Monitor-AWGVDSINA distance=1 dst-address=9.9.9.9/32 gateway=\
+    wg-awgVDSina
+/ip service
+set ftp disabled=yes
+set telnet disabled=yes
+set ssh address=10.30.30.0/24 port=2222
+set winbox address=10.30.30.0/24
+set api address=10.30.30.0/24 disabled=yes
+set api-ssl address=10.30.30.0/24 disabled=yes
+set www-ssl port=18443
+set www address=10.30.30.0/24 disabled=yes port=18880
+/ip service webserver
+set graphs-plain=no rest-plain=no webfig-plain=no
+/ip ssh
+set forwarding-enabled=both publickey-authentication-options=verify-required \
+    strong-crypto=yes
+/ip upnp
+set enabled=yes
+/ip upnp interfaces
+add interface=Bridge-LAN type=internal
+add forced-ip=109.107.177.79 interface=veth-awgVDSina type=external
+add interface=lo type=internal
+add interface=wlan2 type=internal
+add interface=wlan1 type=internal
+/ipv6 nd
+set [ find default=yes ] advertise-dns=yes
+/system clock
+set time-zone-name=Europe/Moscow
+/system clock manual
+set time-zone=+03:00
+/system identity
+set name=MikroGig
+/system logging
+add action=email disabled=yes regex="* added|changed|removed *" topics=\
+    system,info
+/system ntp client
+set enabled=yes
+/system ntp server
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes
+/system ntp client servers
+add address=10.30.30.81
+add address=10.30.30.10
+add address=0.ru.pool.ntp.org
+add address=1.ru.pool.ntp.org
+add address=2.ru.pool.ntp.org
+add address=3.ru.pool.ntp.org
+add address=time.google.com disabled=yes
+/system scheduler
+add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \
+    on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Every Day Check For Update Scripts" interval=1d name=\
+    AM-ScriptInstallUpdate on-event=\
+    ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment=Generator name=awg-VDSina on-event="# ============================\
+    ================================\r\
+    \n# AWG Proxy -- MikroTik RouterOS (protocol: v2)\r\
+    \n# 2026-07-01 00:03:43\r\
+    \n# ============================================================\r\
+    \n\r\
+    \n# 0. Check prerequisites\r\
+    \n:if ([:len [/system/package/find where name=\"container\" disabled=no]] \
+    = 0) do={\r\
+    \n  :put \"Container package is not installed or disabled. Install it and \
+    reboot.\"\r\
+    \n  :error \"Usage: /system/device-mode/update container=yes\"\r\
+    \n}\r\
+    \n\r\
+    \n# Auto-detect storage\r\
+    \n:global awgDisk \"disk1\"\r\
+    \n{\r\
+    \n  :local usbFree 0\r\
+    \n  :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] free] \
+    } on-error={}\r\
+    \n  :if (\$usbFree > 0) do={\r\
+    \n    :set awgDisk \"usb1\"\r\
+    \n    :put (\"Using USB: usb1 (\" . (\$usbFree / 1048576) . \" MB free)\")\
+    \r\
+    \n  } else={\r\
+    \n    :if ([:len [/disk/find where slot=\"usb1\"]] > 0) do={\r\
+    \n      :put \"USB found but not mounted. Format as ext4\?\"\r\
+    \n      :put \"Press 'y' to confirm:\"\r\
+    \n      :local key [/terminal/inkey timeout=30]\r\
+    \n      :if (\$key = 121 || \$key = 89) do={\r\
+    \n        /disk/format-drive usb1 file-system=ext4 label=usb1\r\
+    \n        :delay 3s\r\
+    \n        :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] \
+    free] } on-error={}\r\
+    \n        :if (\$usbFree > 0) do={\r\
+    \n          :set awgDisk \"usb1\"\r\
+    \n        } else={ :put \"Format failed, using disk1\" }\r\
+    \n      } else={ :put \"Using disk1\" }\r\
+    \n    } else={ :put \"No USB, using disk1\" }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# 1. Uninstall script\r\
+    \n/system/script/add name=awg-VDSina-uninstall comment=awg-VDSina source={\
+    \r\
+    \n  :put \"Uninstallimg AmneziaWG...\"\r\
+    \n  :log info \"Uninstallimg AmneziaWG...\"\r\
+    \n  :local prevDNS \"\"\r\
+    \n  :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\
+    env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\r\
+    \n  :local storageDisk \"disk1\"\r\
+    \n  :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\
+    ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\r\
+    \n  :local prevTmpdir \"\"\r\
+    \n  :if (\$storageDisk != \"disk1\") do={\r\
+    \n    :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\
+    Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\r\
+    \n  }\r\
+    \n  /ip/route/remove [find where comment=awg-VDSina-tunnel]\r\
+    \n  /ip/route/remove [find where comment=awg-VDSina-dns]\r\
+    \n  /container/stop [find where interface=veth-awg-VDSina]\r\
+    \n  :delay 7s\r\
+    \n  /container/remove [find where interface=veth-awg-VDSina]\r\
+    \n  /container/envs/remove [find where list=\"awg-VDSina-env\"]\r\
+    \n  :if (\$prevDNS != \"\") do={\r\
+    \n    :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\r\
+    \n    :put (\"DNS restored to: \$prevDNS\")\r\
+    \n  }\r\
+    \n  :if (\$storageDisk != \"disk1\") do={\r\
+    \n    /container/config set tmpdir=\$prevTmpdir\r\
+    \n    :put (\"Container tmpdir restored to: \$prevTmpdir\")\r\
+    \n  }\r\
+    \n  /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\r\
+    \n  /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\
+    \r\
+    \n  /ip/address/remove [find where address=\"172.19.75.209/30\"]\r\
+    \n  /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\r\
+    \n  /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\
+    a\"]\r\
+    \n  /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\r\
+    \n  /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\r\
+    \n  :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\
+    \r\
+    \n  :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\
+    \_} on-error={}\r\
+    \n  :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\
+    out.rsc\")] } on-error={}\r\
+    \n  :if (\$storageDisk != \"disk1\") do={\r\
+    \n    :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\
+    n-error={}\r\
+    \n  }\r\
+    \n  :put \"Uninstall AmneziaWG Proxy complete!\"\r\
+    \n  :log info \"Uninstall AmneziaWG Proxy complete!\"\r\
+    \n  /system/script/remove [find where name=awg-VDSina-uninstall]\r\
+    \n}\r\
+    \n\r\
+    \n# 2. Network infrastructure\r\
+    \n/interface/veth/add name=veth-awg-VDSina address=172.19.75.210/30 gatewa\
+    y=172.19.75.209\r\
+    \n/ip/address/add address=172.19.75.209/30 interface=veth-awg-VDSina\r\
+    \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.19.7\
+    5.208/30\r\
+    \n\r\
+    \n# 3. WireGuard interface (MikroTik derives the public key automatically)\
+    \r\
+    \n/interface/wireguard/add name=wg-awg-VDSina private-key=\"QCMsDU98Gm+nhn\
+    kYRcAN/dyczDYHOLsX3PfBRFjWBF4=\" listen-port=14710 disabled=yes\r\
+    \n/interface/wireguard/peers/add interface=wg-awg-VDSina public-key=\"o5Ig\
+    Cl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"b39T9K2/LR8vNtY\
+    AZw+sLRze6yGlS3EaZhAa7wiFB20=\" endpoint-address=172.19.75.210 endpoint-po\
+    rt=51820 allowed-address=0.0.0.0/0 persistent-keepalive=10\r\
+    \n/ip/address/add address=10.9.0.2/32 interface=wg-awg-VDSina\r\
+    \n\r\
+    \n# 4. Container environment variables\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_LISTEN value=\":51820\"\
+    \r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_REMOTE value=\"109.107.1\
+    77.79:55055\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_JC value=\"9\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_JMIN value=\"105\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_JMAX value=\"920\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S1 value=\"90\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S2 value=\"136\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H1 value=\"472437748-472\
+    438637\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H2 value=\"707808381-707\
+    809250\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H3 value=\"1609078552-16\
+    09079495\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H4 value=\"1012329484-10\
+    12329741\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_SERVER_PUB value=\"o5IgC\
+    l1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_CLIENT_PUB value=[/inter\
+    face/wireguard/get [find name=wg-awg-VDSina] public-key]\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S3 value=\"45\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S4 value=\"27\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I1 value=\"<b 0x00010014\
+    2112a442><r 12><b 0x80220008636f7475726e2d3480280004><r 4>\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I2 value=\"<r 32><t>\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I3 value=\"<rd 16><r 24>\
+    \"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I4 value=\"<t><rc 20>\"\
+    \r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I5 value=\"<r 38>\"\r\
+    \n\r\
+    \n# 5. DNS\r\
+    \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\
+    n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\
+    \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /container/envs/add list=aw\
+    g-VDSina-env key=AWG_PREV_DNS value=\"\$prevDNS\" }\r\
+    \n# NOTE: replaces existing DNS configuration\r\
+    \n/ip/dns/set servers=109.107.177.79\r\
+    \n/ip/route/add dst-address=109.107.177.79/32 gateway=wg-awg-VDSina distan\
+    ce=1 comment=awg-VDSina-dns\r\
+    \n\r\
+    \n# 6. Download, create and start container\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_STORAGE value=\$awgDisk\
+    \r\
+    \n:if (\$awgDisk != \"disk1\") do={\r\
+    \n  :local tmpPath (\$awgDisk . \"/pull\")\r\
+    \n  /container/envs/add list=awg-VDSina-env key=AWG_PREV_TMPDIR value=[/co\
+    ntainer/config/get tmpdir]\r\
+    \n  /container/config set tmpdir=\$tmpPath memory-high=200M\r\
+    \n}\r\
+    \n{\r\
+    \n  :local arch [/system/resource/get architecture-name]\r\
+    \n  :local ver [/system/resource/get version]\r\
+    \n  :local dotPos [:find \$ver \".\"]\r\
+    \n  :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\r\
+    \n  :local endPos [:find \$rest \".\"]\r\
+    \n  :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \" \
+    \"] }\r\
+    \n  :local minor [:tonum [:pick \$rest 0 \$endPos]]\r\
+    \n  :local suffix \"\"\r\
+    \n  :if (\$minor <= 20) do={ :set suffix \"-7.20-Docker\" }\r\
+    \n  :local file \"\"\r\
+    \n  :if (\$arch = \"arm64\") do={ :set file (\"awg-proxy-arm64\" . \$suffi\
+    x . \".tar.gz\") }\r\
+    \n  :if (\$arch = \"arm\") do={ :set file (\"awg-proxy-arm\" . \$suffix . \
+    \".tar.gz\") }\r\
+    \n  :if (\$arch ~ \"x86\") do={ :set file (\"awg-proxy-amd64\" . \$suffix \
+    . \".tar.gz\") }\r\
+    \n  :if (\$file = \"\") do={ :error \"Unsupported architecture: \$arch\" }\
+    \r\
+    \n  :local url \"https://github.com/timbrs/amneziawg-mikrotik-c/releases/l\
+    atest/download/\$file\"\r\
+    \n  :local filePath \$file\r\
+    \n  :if (\$awgDisk != \"disk1\") do={\r\
+    \n    :set filePath (\$awgDisk . \"/pull/\" . \$file)\r\
+    \n    :do { /file/make-directory (\$awgDisk . \"/pull\") } on-error={}\r\
+    \n  }\r\
+    \n  :if ([:len [/file/find where name=\$filePath]] = 0) do={\r\
+    \n    :local freeStorage 0\r\
+    \n    :if (\$awgDisk = \"disk1\") do={\r\
+    \n      :set freeStorage [/system/resource/get free-hdd-space]\r\
+    \n    } else={\r\
+    \n      :do { :set freeStorage [/disk/get [find where mount-point=\$awgDis\
+    k] free] } on-error={}\r\
+    \n    }\r\
+    \n    :if (\$freeStorage < 262144) do={\r\
+    \n      :put (\"WARNING: Low disk space (\" . (\$freeStorage / 1024) . \"K\
+    B free). Need at least 256KB.\")\r\
+    \n      :put \"See: https://github.com/timbrs/amneziawg-mikrotik-c#insuffi\
+    cient-disk-space\"\r\
+    \n      :error \"Insufficient disk space\"\r\
+    \n    }\r\
+    \n    :put (\"Fetching: \$url -> \" . \$filePath)\r\
+    \n    /tool/fetch url=\$url dst-path=\$filePath http-max-redirect-count=10\
+    \r\
+    \n  } else={\r\
+    \n    :put (\"File already exists: \" . \$filePath)\r\
+    \n  }\r\
+    \n  :local rootDir (\$awgDisk . \"/awg-VDSina\")\r\
+    \n  /container/add file=\$filePath interface=veth-awg-VDSina envlist=awg-V\
+    DSina-env hostname=awg-VDSina root-dir=\$rootDir logging=no start-on-boot=\
+    yes comment=awg-VDSina\r\
+    \n  :if (\$minor > 20) do={ [:parse \"/container/set [find where interface\
+    =veth-awg-VDSina] shm-size=4M\"] }\r\
+    \n  /file/remove \$filePath\r\
+    \n  :local freeMem [/system/resource/get free-memory]\r\
+    \n  :if (\$freeMem < 16777216) do={\r\
+    \n    :put (\"WARNING: Low memory (\" . (\$freeMem / 1048576) . \"MB free)\
+    . 16MB+ recommended.\")\r\
+    \n  }\r\
+    \n  /container/start [find where interface=veth-awg-VDSina]\r\
+    \n  :do { /file/remove [find where name=\"console-dump.txt\"] } on-error={\
+    }\r\
+    \n  :put \"Waiting for container to start...\"\r\
+    \n  :delay 5s\r\
+    \n  /interface/wireguard/enable wg-awg-VDSina\r\
+    \n  :put \"WireGuard interface enabled\"\r\
+    \n  :put \"Installation complete!\"\r\
+    \n  :put \"Ping test: 109.107.177.79 via AmneziaWG tunnel. repeat 10 times\
+    \"\r\
+    \n  /ping 109.107.177.79 count=10 interval=1\r\
+    \n  :put \"\"\r\
+    \n  :put \"======= NEXT STEPS =======\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"Route specific traffic through the AmneziaWG tunnel:\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Route a single host:\"\r\
+    \n  :put \"    /ip/route/add dst-address=8.8.8.8/32 gateway=wg-awg-VDSina \
+    comment=awg-VDSina-tunnel\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Route a subnet:\"\r\
+    \n  :put \"    /ip/route/add dst-address=100.0.0.0/8 gateway=wg-awg-VDSina\
+    \_comment=awg-VDSina-tunnel\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Remove a route:\"\r\
+    \n  :put \"    /ip/route/remove [find where comment=awg-VDSina-tunnel dst-\
+    address=8.8.8.8/32]\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Show all tunnel routes:\"\r\
+    \n  :put \"    /ip/route/print where comment=awg-VDSina-tunnel\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Uninstall:\"\r\
+    \n  :put \"    /system/script/run awg-VDSina-uninstall\"\r\
+    \n  :put \"=========================\"\r\
+    \n}\r\
+    \n\r\
+    \n# 7. Verification\r\
+    \n# /container/print\r\
+    \n# /interface/wireguard/print\r\
+    \n# /interface/wireguard/peers/print\r\
+    \n" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-date=2026-07-01 start-time=02:03:59
+/tool e-mail
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \
+    server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com
+/tool netwatch
+add comment=Monitor-AWGVDSINA down-script=\
+    "/ip route disable [find comment=\"Route-AWGVDSINA\"]" host=9.9.9.9 \
+    interval=10s packet-count=5 thr-avg=0ms thr-loss-count=4 timeout=5s type=\
+    icmp up-script="/ip route enable [find comment=\"Route-AWGVDSINA\"]"
diff --git a/MikroGig/history/20260712/20260712060418-Diff-Config.rsc b/MikroGig/history/20260712/20260712060418-Diff-Config.rsc
new file mode 100644
index 0000000..9c8e7e9
--- /dev/null
+++ b/MikroGig/history/20260712/20260712060418-Diff-Config.rsc
@@ -0,0 +1,4 @@
+11c11
+< # channel: 2422/20-Ce/gn(17dBm), SSID: vados, local forwarding
+---
+> # channel: 2442/20-Ce/gn(17dBm), SSID: vados, local forwarding
diff --git a/MikroMaster/20260711/20260711224001-Config.rsc b/MikroMaster/20260711/20260711224001-Config.rsc
new file mode 100644
index 0000000..4645e53
--- /dev/null
+++ b/MikroMaster/20260711/20260711224001-Config.rsc
@@ -0,0 +1,3842 @@
+# 2026-07-11 22:40:06 by RouterOS 7.23.1
+# software id = A8L5-07YF
+#
+# model = RB952Ui-5ac2nD
+# serial number = D3D50CEDCD38
+/interface bridge
+add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\
+    "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\
+    Bridge-LAN port-cost-mode=short
+/interface ethernet
+set [ find default-name=ether1 ] comment=Unet-cable loop-protect=off name=\
+    Unet-ether1 rx-flow-control=auto tx-flow-control=auto
+set [ find default-name=ether2 ] comment=LAN-2
+set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3
+set [ find default-name=ether4 ] comment=LAN-4
+set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \
+    loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto
+/interface wireless
+# managed by CAPsMAN
+# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding
+set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados wireless-protocol=802.11
+# managed by CAPsMAN
+# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding
+set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados5g wireless-protocol=802.11
+/interface wireguard
+add comment=WG listen-port=13231 mtu=1320 name=WG
+add comment="WG interface for Amnezia route" disabled=yes listen-port=33033 \
+    mtu=1360 name=wg-nuc
+/interface list
+add include=static name=LAN
+add name=Internet
+add include=Internet name=WAN
+/interface wireless security-profiles
+set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
+    dynamic-keys supplicant-identity=MikroTik
+/iot wiliot servers
+set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East"
+/ip dhcp-server option
+add code=12 name=HostName
+add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00"
+/ip dhcp-server option sets
+add name=HP1505n options=HostName
+add name=StartLife1 options=HostName
+add name=amsterDev options=HostName
+add name=MiTV options=HostName
+add name=miller options=HostName
+add name=amster options=HostName
+add name=garage options=HostName
+add name=domain-search-set options=domain-search-list
+add name=VADOS-LEN options=HostName
+add name=VADOS-NUC options=HostName
+add name=MikroNUC options=HostName
+add name=master options=HostName
+add name=MikroYellow options=HostName
+add name="=\"Client ID\"" options=HostName
+add name=iVados options=HostName
+/ip dns forwarders
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no
+add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \
+    verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no
+/ip ipsec proposal
+set [ find default=yes ] disabled=yes
+/ip pool
+add name=dhcp ranges=10.30.30.83-10.30.30.254
+/ip dhcp-server
+add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \
+    dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \
+    name=masterDHCP server-address=10.30.30.81
+/ip smb users
+set [ find default=yes ] disabled=yes
+add disabled=yes name=vados
+/ipv6 dhcp-client option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=DUID value=0x00030001488f5a8e1abc
+add code=61 name=clientid
+/ipv6 dhcp-server option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=CLIENT_DUID
+add code=61 name=CLIENT_MAC
+/ppp profile
+set *FFFFFFFE use-upnp=no
+/routing bgp template
+set default disabled=no output.network=bgp-networks
+/routing table
+add disabled=no fib name=To-VPN
+add disabled=no fib name=r_to_vpn
+/system logging action
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email
+/system script
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\
+    \n\r\
+    \n#:local Script AM-setup\
+    \n;\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n\
+    \n\r\
+    \n#\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\
+    \n\r\
+    \n#\r\
+    \n\
+    \n#root.mnuc.backuper\
+    \n\
+    \n\r\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\
+    .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\
+    \n\
+    \n#:local Script AM-GlobalConfig;\
+    \n\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n#:local FetchFile AM-DOHCert.rsc\
+    \n\
+    \n\r\
+    \n\r\
+    \n#\
+    \n:global MkDir;\
+    \n\r\
+    \n\
+    \n#:local FetchFile Binary.backup\
+    \n:local localDir \"\";\
+    \n\
+    \n\r\
+    \n#\$MkDir \$localDir;\r\
+    \n\
+    \n#\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\
+    \$localDir . \$FetchFile);\r\
+    \n"
+add comment="Global Config Script" dont-require-permissions=no name=\
+    AM-GlobalConfig owner=AM-GlobalConfig policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GlobalConfig\r\
+    \n# Script comment: Global Config Script\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# Warning: Dont touch this line!\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global GlobalConfReady false;\r\
+    \n#\r\
+    \n#\r\
+    \n# Global Url For Amster scripts to fetch\r\
+    \n# most be defined in AM-Init-Script or AM-setup scripts\r\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n:global ScriptsUrlSuffix (a);\r\
+    \n:global CheckSumsVerify true;\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF true;\r\
+    \n:global CommentsInScripts true;\r\
+    \n\r\
+    \n# Debug output:\r\
+    \n:global PrintDebug true; #false;\r\
+    \n\r\
+    \n# Debug output for specific script:\r\
+    \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\
+    \n\r\
+    \n# Debug logs\r\
+    \n# Other actions (disk, email, remote or support) can be used as well.\r\
+    \n# I do not recommend using echo - use debug output instead (https://rsc.\
+    eworm.de/main/DEBUG.html#debug-output).\r\
+    \n#/system/logging/add topics=script,debug action=memory;\r\
+    \n\r\
+    \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\
+    \n:global Domain \"WORKGROUP\";\r\
+    \n\r\
+    \n:global EmailGeneralTo \"vados@vados.ru\";\r\
+    \n#:global EmailGeneralCc \"\";\r\
+    \n\r\
+    \n# \$ScriptInstallUpdate mod/notification-telegram\r\
+    \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\
+    \";\r\
+    \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\
+    \n# Use this to send notifications to a specific topic in group.\r\
+    \n#:global TelegramThreadId \"30\";\r\
+    \n# Using telegram-chat you have to define trusted chat ids (not group ids\
+    !)\r\
+    \n# or user names. Groups allow to chat with devices simultaneously.\r\
+    \n:global TelegramChatIdsTrusted {\r\
+    \n  \"454403445\"\r\
+    \n  \"-1003631309063\"\r\
+    \n  \"-5124482807\"\r\
+    \n  \"1087968824\";\r\
+    \n};\r\
+    \n#  \"-5294757340\";\r\
+    \n\r\
+    \n:global TelegramChatGroups \"(all)\";\r\
+    \n#:global TelegramChatGroups \"(all|home|office)\";\r\
+    \n\r\
+    \n:global NotificationFunctions {\r\
+    \n  \"email\"\r\
+    \n  \"telegram\";\r\
+    \n};\r\
+    \n# Toggle this to disable symbols in notifications.\r\
+    \n:global NotificationsWithSymbols true;\r\
+    \n:global TerminalColorOutput true;\r\
+    \n\r\
+    \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\
+    \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\
+    \n\r\
+    \n## Update channel. Possible values: stable, long-term, testing, developm\
+    ent\r\
+    \n:global updateChannel \"stable\";\r\
+    \n\r\
+    \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\
+    \");\r\
+    \n:global CertRenewTime 2w;\r\
+    \n:global CertRenewPass (a); #{\r\
+    \n#  \"\";\r\
+    \n#  \"v3ry-s3cr3t\";\r\
+    \n#  \"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n:global CertWarnTime 1w;\r\
+    \n:global CertIssuedExportPass (a); # {\r\
+    \n#  \"\";\r\
+    \n#  \"cert1-cn\"=\"v3ry-s3cr3t\";\r\
+    \n#  \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n\r\
+    \n# Script BackupAndUpdate mode, possible values: backup,\r\
+    \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\
+    n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;).  \r\
+    \n# osupdate - Update if available and creates backups before/after update\
+    \_(ignores `forceBackup`)\r\
+    \n#               Set `forceBackup` to true to always create backups, even\
+    \_without updates\r\
+    \n# osnotify - Set `forceBackup` to always create backups on every run\r\
+    \n:global DevInfoIncludeIP true;\r\
+    \n:global BackupAndUpdateMode \"osnotify\"\r\
+    \n\r\
+    \n:global forceBackup true;\r\
+    \n:global BackupPassword \"Peskar55\";\r\
+    \n\r\
+    \n# SFTP Backup Variables\r\
+    \n:global BackupRandomDelay 0;\r\
+    \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\
+    \n:global BackupUploadUser \$Identity;\r\
+    \n:global BackupUploadPass \"root.mnuc.backuper\";\r\
+    \n\r\
+    \n:global BackupSendBinary true;\r\
+    \n:global BackupSendExport true;\r\
+    \n:global BackupSendGlobalConfig true;\r\
+    \n:global BackupSendScripts true;\r\
+    \n\r\
+    \n# Remove local file after uploading if no errors\r\
+    \n:global BackupRmLocal true;\r\
+    \n\r\
+    \n# Local Backups Root Directory \r\
+    \n:global BackupLocalRoot \"tmpfs\";\r\
+    \n\r\
+    \n# Encrypt Backup\r\
+    \n:global BackupEncrypt true;\r\
+    \n\r\
+    \n# Sensitive information in Backups\r\
+    \n:global BackupSens true;\r\
+    \n\r\
+    \n# User Export\r\
+    \n:global BackupUser true;\r\
+    \n\r\
+    \n# License Export (not for CHR, will silently skip)\r\
+    \n:global BackupLicense false;\r\
+    \n\r\
+    \n# SSH Keys\r\
+    \n:global BackupSshKeys true;\r\
+    \n\r\
+    \n# Certificate Export\r\
+    \n:global BackupCerts true;\r\
+    \n\r\
+    \n# Certificate Password\r\
+    \n:global BackupCertsPasswd \"\";\r\
+    \n\r\
+    \n# User-Manager Export\r\
+    \n:global BackupUserMan false;\r\
+    \n\r\
+    \n# The Dude Export\r\
+    \n:global BackupDude false;\r\
+    \n\r\
+    \n# User Files to export, comma-separated string or array of strings\r\
+    \n# User Files are not removed on backup\r\
+    \n# Any directory paths will be removed (/ -> _) on remote file\r\
+    \n# Nonpresent files are silently skipped\r\
+    \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\
+    \n\r\
+    \n# load functions and any custom scripts\r\
+    \n#                    [ /system/script/find where name=\"global-config-ov\
+    erlay\" ], \\\r\
+    \n#                    [ /system/script/find where name~\"^global-config-o\
+    verlay\\\\.d/.\" ]\r\
+    \n#\r\
+    \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\
+    ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\
+    \r\
+    \n#  :onerror Err {\r\
+    \n#     /system/script/run \$Script;\r\
+    \n#     } do={\r\
+    \n#       :log error (\"Loading configuration from configs and functions\"\
+    \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\
+    \n#  }\r\
+    \n#}\r\
+    \n#:log info \"\\ndevMode = \$devMode\";\r\
+    \n#:log info \"\\ndevRunning = \$devRunning\";\r\
+    \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \
+    GlobalRUN\\r\?\\n\" ] do={\r\
+    \n  :onerror Err {\r\
+    \n    /system/script/run \$Script;\r\
+    \n       } do={\r\
+    \n       :log error (\"Run script \" . [ /system/script/get \$Script name \
+    ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# signal we are ready\r\
+    \n:set GlobalConfReady true;\r\
+    \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\
+    \n"
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \
+    owner=AM-GlobalFunc policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GglobalFunc\r\
+    \n# Script comment: Global functions\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch, scheduler\r\
+    \n:local ExitOK false;\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n#:global checkRunJob \$SriptName;\r\
+    \n#:global fixCRLF;\r\
+    \n#:if (\$fixCRLF !=  false) do={\r\
+    \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\
+    ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\
+    }\r\
+    \n#:if (\$fixCRLF !=  \"LF\") do={ /system/script/set source=[ :tocrlf [ g\
+    et \$fixScript source ] ] \$fixScript};};\r\
+    \n#}\r\
+    \n:global GlobalFuncReady false;\r\
+    \n\r\
+    \n# Git commit id & info, expected configuration version\r\
+    \n:global CommitId \"main/729/f42d43ae\";\r\
+    \n:global CommitTAG \"unknown\";\r\
+    \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\
+    r: root, in 00:05:03 01.07.2026.\";\r\
+    \n\r\
+    \n# The variables are received right here.\r\
+    \n:global GlobalConfVersion 140;\r\
+    \n\r\
+    \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\
+    \n\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global IdentityShort [:pick \$Identity 0 18];\r\
+    \n\r\
+    \n:global devBoardName [/system/resource/get board-name];\r\
+    \n:global devMode [/system/device-mode/get mode];\r\
+    \n:global devCurArch [/system/resource/get architecture-name];\r\
+    \n:global devCurVersion [/system/resource/get version];\r\
+    \n\r\
+    \n# Variables defined in AM-GlobalConfig.rsc\r\
+    \n:global TerminalColorOutput;\r\
+    \n:global CommentsInScripts;\r\
+    \n:global DetectIpAddrDefault;\r\
+    \n:global DetectIpAddrFallback;\r\
+    \n:global updateChannel;\r\
+    \n:global Domain;\r\
+    \n:global EmailGeneralTo;\r\
+    \n:global BackupAndUpdateMode;\r\
+    \n\r\
+    \n# Single functions, without nested functions.\r\
+    \n:global MiniDateTimeStamp;\r\
+    \n:global MicroDateTimeStamp;\r\
+    \n\r\
+    \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\
+    \n:global LogPrint;\r\
+    \n\r\
+    \n# DeviceInfo and Updates\r\
+    \n:global IsCheckUpdates;\r\
+    \n:global WaitCheckUpdates;\r\
+    \n:global GetPubIp;\r\
+    \n\r\
+    \n:global GetArrDeviceInfo;\r\
+    \n:global WaitArrDeviceInfo;\r\
+    \n\r\
+    \n:global devModel;\r\
+    \n:global devRunningMode;\r\
+    \n\r\
+    \n:global devRbRevision;\r\
+    \n:global devRbSerialNumber;\r\
+    \n:global devRbVerAvail;\r\
+    \n\r\
+    \n:global runningChannelVersion;\r\
+    \n:global runningChannel;\r\
+    \n:global runningVersion;\r\
+    \n\r\
+    \n:global devBuildTime;\r\
+    \n:global ROsVerAvail;\r\
+    \n:global PkgUpdStatus;\r\
+    \n:global currentUpdateChannel;\r\
+    \n\r\
+    \n:global ScriptInstallUpdate;\r\
+    \n\r\
+    \n:global DeviceInfo;\r\
+    \n\r\
+    \n:global OldMode;\r\
+    \n\r\
+    \n:global ParseKeyValueStore;\r\
+    \n:global RandomDelay;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global EscapeForRegEx;\r\
+    \n:global CharacterMultiply;\r\
+    \n:global CharacterReplace;\r\
+    \n:global CleanFilePath;\r\
+    \n:global CleanName;\r\
+    \n\r\
+    \n:global CommitBrief;\r\
+    \n\r\
+    \n:global EitherOr;\r\
+    \n:global FormatLine;\r\
+    \n:global GetRandom20CharAlNum;\r\
+    \n:global GetRandom20CharHex;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global Grep;\r\
+    \n:global IfThenElse;\r\
+    \n:global MAX;\r\
+    \n:global MIN;\r\
+    \n:global HumanReadableNum;\r\
+    \n\r\
+    \n:global IsFullyConnected;\r\
+    \n:global IsDNSResolving;\r\
+    \n:global IsTimeSync;\r\
+    \n:global IsTimeSyncCached;\r\
+    \n:global IsTimeSyncResetNtp;\r\
+    \n\r\
+    \n:global MkDir;\r\
+    \n:global RmDir;\r\
+    \n:global RmFile;\r\
+    \n:global FileGet;\r\
+    \n:global Unix2Dos;\r\
+    \n:global UrlEncode;\r\
+    \n:global WaitForFile;\r\
+    \n:global ScriptLock;\r\
+    \n:global SendTelegram;\r\
+    \n:global NotificationFunctions;\r\
+    \n:global SendNotification;\r\
+    \n:global SendNotification2;\r\
+    \n:global SymbolForNotification;\r\
+    \n:global SymbolByUnicodeName;\r\
+    \n:global ValidateSyntax;\r\
+    \n:global CheckSumsVerify;\r\
+    \n:global GlobalConfChanges;\r\
+    \n:global GlobalConfMigration;\r\
+    \n:global VersionToNum;\r\
+    \n:global RequiredRouterOS;\r\
+    \n:global ExitError;\r\
+    \n:global ExitOnError;\r\
+    \n\r\
+    \n:global FetchHugeFiles;\r\
+    \n:global FetchUserAgentStr;\r\
+    \n:global FileExists;\r\
+    \n:global CertificateAvailable;\r\
+    \n:global CertificateDownload;\r\
+    \n:global CertificateNameByCN;\r\
+    \n:global CharacterMultiply;\r\
+    \n\r\
+    \n:global InspectVar;\r\
+    \n:global InspectVarRet;\r\
+    \n:global ParseCustom;\r\
+    \n\r\
+    \n:set IsCheckUpdates do={\r\
+    \n  :local isInfo [:tobool \$1];\r\
+    \n  :global updateChannel;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\
+    \n  :local CurrentChannel [ /system/package/update/get channel ];\r\
+    \n  :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\
+    el) do={\r\
+    \n    :retry command={/system/package/update set channel=\$updateChannel} \
+    \_delay=300ms max=5 on-error={};\r\
+    \n    :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\
+    \n  }\r\
+    \n  :local Update [ /system/package/update/get ];\r\
+    \n  :local Channel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set currentUpdateChannel \$Channel;\r\
+    \n  :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\
+    \n  :local StatusPkg \"undefined\";\r\
+    \n  :log info (\$0 . \" Checking for updates...\");\r\
+    \n  :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\
+    dates without-paging as-value]->\"status\")} \\\r\
+    \n   delay=300ms max=5 on-error={};\r\
+    \n  :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\
+    \n  :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\
+    s true; } else={ :set PkgUpdStatus false; }\r\
+    \n  :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \
+    ] ];\r\
+    \n  :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n  :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\
+    \n    :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n    :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n      :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n    }\r\
+    \n    :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\
+    kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\
+    \n    :return true;\r\
+    \n  } else={\r\
+    \n    :return \$PkgUpdStatus;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitCheckUpdates do={\r\
+    \n  :global IsCheckUpdates;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :local Status \"\";\r\
+    \n  :local Update;\r\
+    \n  :local WaitCount 0;\r\
+    \n  :if ([ \$IsCheckUpdates true ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n  :while ((\$Status = \"\" || \$Status = \"finding out latest version...\
+    \") && \$WaitCount < 60) do={\r\
+    \n    :delay 1s;\r\
+    \n    :set WaitCount (\$WaitCount + 1);\r\
+    \n    :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n   }\r\
+    \n  :set Update [ /system/package/update/get ];\r\
+    \n  :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n  :if ((\$Update->\"status\") = \"New version is available\") do={\r\
+    \n    :set PkgUpdStatus true;\r\
+    \n  } else={\r\
+    \n    :set PkgUpdStatus false;\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n    :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n  }\r\
+    \n  :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\
+    \n  :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \
+    do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitArrDeviceInfo do={\r\
+    \n   :global GetArrDeviceInfo;\r\
+    \n   :while ([ \$GetArrDeviceInfo ] = false) do={\r\
+    \n    :delay 1s;\r\
+    \n   }\r\
+    \n}\r\
+    \n\r\
+    \n:set GetArrDeviceInfo do={\r\
+    \n   :global LogPrint;\r\
+    \n   :global arrDeviceInfo;\r\
+    \n   :global devBoardName;\r\
+    \n   :global devModel;\r\
+    \n   :global devRunning;\r\
+    \n   :global devCurArch;\r\
+    \n   :global devRbRevision;\r\
+    \n   :global devRbSerialNumber;\r\
+    \n   :global devBuildTime;\r\
+    \n   :global runningChannelVersion;\r\
+    \n   :global runningChannel;\r\
+    \n   :global runningVersion;\r\
+    \n   :global currentUpdateChannel;\r\
+    \n   :global ROsVerAvail;\r\
+    \n\r\
+    \n   :local DeviceInfo;\r\
+    \n   :local Resource [/system/resource/get];\r\
+    \n   :local Update [ /system/package/update/get ];\r\
+    \n   :local VersionString [ :tostr (\$Resource->\"version\") ];\r\
+    \n   :local ChannelStart [ :find \$VersionString \" (\" ];\r\
+    \n   :local RouterBoard;\r\
+    \n   :local IsRouterBoard false;\r\
+    \n   :local RunningMode \"\";\r\
+    \n\r\
+    \n   :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\
+    \n   :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\
+    \n   :set runningChannelVersion \$VersionString;\r\
+    \n   :set runningVersion \$VersionString;\r\
+    \n   :set runningChannel \"\";\r\
+    \n\r\
+    \n   :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\
+    {\r\
+    \n     :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\
+    \n     :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\
+    len \$VersionString ] ];\r\
+    \n     :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\
+    \n     :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\
+    \r\
+    \n       :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\
+    \n     }\r\
+    \n   }\r\
+    \n\r\
+    \n   :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\
+    \_3] != \"x86\") do={\r\
+    \n   :do {\r\
+    \n      :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\
+    \n#     :set RouterBoard [ /system/routerboard/get ];\r\
+    \n      :if ((\$RouterBoard->\"routerboard\") = true) do={\r\
+    \n        :set IsRouterBoard true;\r\
+    \n     }\r\
+    \n   } on-error={}\r\
+    \n    }\r\
+    \n\r\
+    \n   :do {\r\
+    \n     :set RunningMode [ /system/device-mode/get mode ];\r\
+    \n   } on-error={\r\
+    \n     :do {\r\
+    \n       :set RunningMode [ /system/device-mode/get running ];\r\
+    \n     } on-error={\r\
+    \n       :set RunningMode \"\";\r\
+    \n     }\r\
+    \n   }\r\
+    \n   :set devRunning \$RunningMode;\r\
+    \n\r\
+    \n   :if (\$IsRouterBoard = true) do={\r\
+    \n     :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\
+    \n     :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\
+    \n     :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \
+    ];\r\
+    \n   } else={\r\
+    \n     :set devModel \$devBoardName;\r\
+    \n     :set devRbRevision \"\";\r\
+    \n     :set devRbSerialNumber \"\";\r\
+    \n   }\r\
+    \n\r\
+    \n   :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n   :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n\r\
+    \n   :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\
+    \n   :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\
+    \n   :set (\$DeviceInfo->\"model\") \$devModel;\r\
+    \n   :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\
+    \n   :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\
+    \n   :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\
+    \n   :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\
+    \n   :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\
+    ion;\r\
+    \n   :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\
+    \n   :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\
+    \n   :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\
+    \n   :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\
+    current-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\
+    upgrade-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\
+    \n   :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\
+    alled-version\") ];\r\
+    \n   :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\
+    \n   :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\
+    ) ];\r\
+    \n\r\
+    \n   :set arrDeviceInfo \$DeviceInfo;\r\
+    \n   :return \$DeviceInfo;\r\
+    \n}\r\
+    \n\r\
+    \n:set DeviceInfo do={\r\
+    \n  :global GetArrDeviceInfo;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global FormatLine;\r\
+    \n  :global CommitBrief;\r\
+    \n\r\
+    \n  :local License [/system/license/get];\r\
+    \n  :local Snmp [ /snmp/get ];\r\
+    \n  :local Info [ \$GetArrDeviceInfo ];\r\
+    \n\r\
+    \n  :if ([ :typeof \$Info ] != \"array\") do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :return ( \\\r\
+    \n    [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\
+    \_. \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\
+    \_\\\r\
+    \n    \"Hardware:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Board\" (\$Info->\"board-name\") ] . \"\\n\" . \
+    \\\r\
+    \n    [ \$FormatLine \"    Arch\" (\$Info->\"architecture-name\") ] . \"\\\
+    n\" . \\\r\
+    \n    [ \$FormatLine \"    Model\" (\$Info->\"model\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\
+    \n      (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Serial\" (\$Info->\"serial-number\") ] . \"\
+    \\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"nlevel\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS:\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"level\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    [ \$FormatLine \"    Channel\" (\$Info->\"package-channel\") ] . \"\
+    \\n\" . \\\r\
+    \n    [ \$FormatLine \"    Installed\" (\$Info->\"installed-version\") ] .\
+    \_\"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Running\" ((\$Info->\"running-version\") . \
+    \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\
+    \n      ([ \$FormatLine \"    Running\" (\$Info->\"running-version\") ] . \
+    \"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\
+    \n        (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\
+    \_\\\r\
+    \n      ([ \$FormatLine \"    Available\" (\$Info->\"latest-version\") ] .\
+    \_\"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\
+    \n        (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\
+    ) \\\r\
+    \n      ([ \$FormatLine \"    Firmware\" ((\$Info->\"current-firmware\") .\
+    \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS-Scripts:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Version\" \$GlobalConfVersion ]);\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\
+    tionFunctions ({})}\r\
+    \n\r\
+    \n:set GetRandom20CharAlNum do={\r\
+    \n  :global EitherOr;\r\
+    \n  :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\
+    FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\
+    \n}\r\
+    \n\r\
+    \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\
+    \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\
+    \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\
+    \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\
+    \n\r\
+    \n:global checkRunJob;\r\
+    \n:set checkRunJob do={\r\
+    \n  :local Script [ :tostr \$1 ];\r\
+    \n  :global ScriptLock; \r\
+    \n  :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\
+    \n  :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\
+    :set Job [ /system/script/job/get \$Job ];\r\
+    \n    :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\
+    stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\
+    \n     :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\
+    lse; \r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVar do={\r\
+    \n  :global InspectVarRet;\r\
+    \n  :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\
+    \n}\r\
+    \n\r\
+    \n:set CommitBrief do={\r\
+    \n  :global CommitId;\r\
+    \n  :global CommitInfo;\r\
+    \n  :if (\$CommitId = \"unknown\") do={\r\
+    \n    :return \"unknown\";\r\
+    \n    }\r\
+    \n  :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVarRet do={\r\
+    \n  :local Input \$1;\r\
+    \n  :local Level (0 + [ :tonum \$2 ]);\r\
+    \n  :global CharacterReplace;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global InspectVarRet;\r\
+    \n  :local IndentReturn do={\r\
+    \n    :local Prefix [ :tostr \$1 ];\r\
+    \n    :local Value  [ :tostr \$2 ];\r\
+    \n    :local Level  [ :tonum \$3 ];\r\
+    \n    :global CharacterMultiply;\r\
+    \n    :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\
+    fix . \"-> \" . \$Value);\r\
+    \n  }\r\
+    \n  :local TypeOf [ :typeof \$Input ];\r\
+    \n  :local Len    [ :len \$Input ];\r\
+    \n  :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\
+    \n  :if (\$TypeOf = \"array\") do={\r\
+    \n    :foreach Key,Value in=\$Input do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n        [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\
+    \n        [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    :if (\$TypeOf = \"str\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n         [ \$IndentReturn \"len\" \$Len \$Level ]);\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\
+    \n      }\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if (\$TypeOf != \"nothing\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n       [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\
+    \_\\\r\
+    \n        ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set GetPubIp do={\r\
+    \n    :global DetectIpAddrDefault;\r\
+    \n    :global DetectIpAddrFallback;\r\
+    \n\r\
+    \n    :local PubIpAddr false;\r\
+    \n    :local Url \$DetectIpAddrDefault;\r\
+    \n    :local JobName [ :jobname ];\r\
+    \n\r\
+    \n    :do {\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using default serv\
+    ice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \
+    detect public IP using default service: \" . \$Url . \".\")}\r\
+    \n     } on-error={\r\
+    \n      :log error (\$0 . \" Failed to detect public IP using default serv\
+    ice: \" . \$Url . \".\");\r\
+    \n      :set Url \$DetectIpAddrFallBack;\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using fallback ser\
+    vice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\
+    \_detect public IP using fallback service: \" . \$Url . \".\")}\r\
+    \n    };\r\
+    \n    :local IpLen ([ :len \$PubIpAddr ] -1);\r\
+    \n    :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\
+    {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\
+    \n    :return \$PubIpAddr;\r\
+    \n}\r\
+    \n\r\
+    \n:set FormatLine do={\r\
+    \n  :local Key    [ :tostr \$1 ];\r\
+    \n  :local Value  [ :tostr \$2 ];\r\
+    \n  :local Indent [ :tonum \$3 ];\r\
+    \n  :local Spaces;\r\
+    \n  :local Return \"\";\r\
+    \n  :global CharacterMultiply;\r\
+    \n  :global EitherOr;\r\
+    \n  :set Indent [ \$EitherOr \$Indent 16 ];\r\
+    \n  :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\
+    \n  :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\
+    \n  :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\
+    n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\
+    \n  } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \
+    \$Return ]) ] . \$Value)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseCustom do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Start [:find [ \$Str ] [:tostr \$2]];\r\
+    \n  :local End [ :tostr \$3 ];\r\
+    \n  :local Num [ :tonum \$4 ];\r\
+    \n  :local Return;\r\
+    \n  :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\
+    \n  :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\
+    \n  :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\
+    lse={\r\
+    \n  :set End [:find \$rest \$End];\r\
+    \n  :set Return [:pick \$rest 0 \$End];\r\
+    \n  }\r\
+    \n:return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set LogPrint do={\r\
+    \n  :local Severity [ :tostr \$1 ];\r\
+    \n  :local Name     [ :tostr \$2 ];\r\
+    \n  :local Message  [ :tostr \$3 ];\r\
+    \n  :global PrintDebug;\r\
+    \n  :global PrintDebugOverride;\r\
+    \n  :global EitherOr;\r\
+    \n  :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \
+    ];\r\
+    \n  :local PrintSeverity do={\r\
+    \n  :global TerminalColorOutput;\r\
+    \n   :if (\$TerminalColorOutput != true) do={:return \$1}\r\
+    \n   :local Color { debug=96; info=97; warning=93; error=91 };\r\
+    \n   :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\
+    \n}\r\
+    \n  :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\
+    \r\
+    \n  :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\
+    \n    :if (\$Severity = \"debug\") do={:log debug \$Log}\r\
+    \n    :if (\$Severity = \"error\") do={:log error \$Log}\r\
+    \n    :if (\$Severity = \"info\" ) do={:log info  \$Log}\r\
+    \n  } else={:log warning \$Log; :set Severity \"warning\"}\r\
+    \n  :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\
+    erity \$Severity ] . \": \" . \$Message)}\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateAvailable do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :local UseFor     [ :tostr \$2 ];\r\
+    \n\r\
+    \n  :global CertificateDownload;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n\r\
+    \n  :if ([ :len \$UseFor ] = 0) do={\r\
+    \n    :log warning (\$0 . \"The intended use is undefined!\");\r\
+    \n    :set UseFor \"undefined\";\r\
+    \n  }\r\
+    \n  :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\
+    \n       [ /certificate/settings/get crl-download ] = true && \\\r\
+    \n       [ /certificate/settings/get crl-store ] = \"system\") do={\r\
+    \n    :log warning (\$0 . \"This system has low free flash space but \" . \
+    \\\r\
+    \n      \"is configured to download certificate CRLs to system!\");\r\
+    \n  }\r\
+    \n  :if ([ :len \$CommonName ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No CommonName given!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\
+    \r\
+    \n        (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\
+    \n        (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n       [ :len [ /certificate/builtin/find where common-name=\$CommonName\
+    \_] ] > 0) do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \
+    \"' not available.\");\r\
+    \n    :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\
+    ) do={\r\
+    \n    :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\
+    \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\
+    e ] ];\r\
+    \n  :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\
+    ertVal->\"skid\")) do={\r\
+    \n    :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\
+    \_= 0) do={\r\
+    \n      :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\
+    >\"CN\");\r\
+    \n      :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \
+    is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\
+    \n      :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\
+    \") ] ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateDownload do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :global ScriptUpdatesBaseUrl;\r\
+    \n  :global ScriptUpdatesUrlSuffix;\r\
+    \n  :global CertificateNameByCN;\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :log info (\$0 . \"Downloading and importing certificate with \" . \\\
+    \r\
+    \n      \"CommonName '\" . \$CommonName . \"'.\");\r\
+    \n  :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\
+    \n  :do {\r\
+    \n    /tool/fetch check-certificate=yes-without-crl mode=https http-header\
+    -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\
+    sUrlSuffix) \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n    \$WaitForFile \$FileName;\r\
+    \n  } on-error={\r\
+    \n    :log warning (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \\\r\
+    \n      \"' from repository! Trying fallback to mkcert.org...\");\r\
+    \n    :do {\r\
+    \n      :local CertSettings [ /certificate/settings/get ];\r\
+    \n      :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\
+    \_] ] = 0 && \\\r\
+    \n           !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \
+    || \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \
+    \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\
+    \r\
+    \n             [ :len [ /certificate/builtin/find where common-name=\"ISRG\
+    \_Root X1\" ] ] > 0)) do={\r\
+    \n        :log error (\$0 . \" Required certificate is not available.\");\
+    \r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n      /tool/fetch check-certificate=yes-without-crl mode=https http-head\
+    er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\
+    n ({ \$CommonName }) ] \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n      \$WaitForFile \$FileName;\r\
+    \n      :if ([ /file/get \$FileName size ] = 0) do={\r\
+    \n        \$RmFile \$FileName;\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n    } on-error={\r\
+    \n      :log error (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \"'!\");\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\
+    \n  :delay 1s;\r\
+    \n  \$RmFile \$FileName;\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\
+    +\\\$\") ];\r\
+    \n    :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\
+    e . \"' still unavailable!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \
+    \"_[0-9]+\\\$\") ] do={\r\
+    \n    \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateNameByCN do={\r\
+    \n  :local Match [ :tostr \$1 ];\r\
+    \n  :global CleanName;\r\
+    \n  :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\
+    rint=\$Match or name=\$Match) ]->0);\r\
+    \n  :if ([ :len \$Cert ] = 0) do={\r\
+    \n    :log warning (\$0 .\" No matching certificate found.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CommonName [ /certificate/get \$Cert common-name ];\r\
+    \n  /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileExists do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :local Type     [ :tostr \$2 ];\r\
+    \n  :global FileGet;\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={ :return false; }\r\
+    \n  :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\
+    \n  :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\
+    \_true; }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set Grep do={\r\
+    \n  :local Input  ([ :tostr \$1 ] . \"\\n\");\r\
+    \n  :local Pattern [ :tostr \$2 ];\r\
+    \n  :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\
+    }\r\
+    \n  :do {\r\
+    \n    :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\
+    \n    :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \
+    \$Line}\r\
+    \n    :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\
+    Input ] ];\r\
+    \n  } while=([ :len \$Input ] > 0);\r\
+    \n  :return [];\r\
+    \n}\r\
+    \n\r\
+    \n:set HumanReadableNum do={\r\
+    \n  :local Input [ :tonum \$1 ];\r\
+    \n  :local Base  [ :tonum \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Prefix \"kMGTPE\";\r\
+    \n  :local Pow 1;\r\
+    \n  :set Base [ \$EitherOr \$Base 1024 ];\r\
+    \n  :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\
+    \n  :if (\$Input < \$Base) do={:return \$Input}\r\
+    \n  :for I from=0 to=[ :len \$Prefix ] do={\r\
+    \n    :set Pow (\$Pow * \$Base);\r\
+    \n    :if (\$Input / \$Base < \$Pow) do={\r\
+    \n      :set Prefix [ :pick \$Prefix \$I ];\r\
+    \n      :local Tmp1 (\$Input * 100 / \$Pow);\r\
+    \n      :local Tmp2 (\$Tmp1 / 100);\r\
+    \n      :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\
+    \n      :return (\$Tmp2 . \".\" . \\\r\
+    \n          [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\
+    2 ] + 1) ] . \\\r\
+    \n          \$Prefix . \$Bin);\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanFilePath do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CharacterReplace;\r\
+    \n  :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \
+    \"//\" \"/\" ]; }\r\
+    \n  :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\
+    n \$Path ] ]; }\r\
+    \n  :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \
+    :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\
+    \n  :return \$Path;\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanName do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\
+    stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\
+    \n      :do {:if ([ :len \$Return ] = 0) do={:error true};\r\
+    \n        :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\
+    ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\
+    \n    };\r\
+    \n    :set Return (\$Return . \$Char)};\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set RandomDelay do={\r\
+    \n  :local Time [ :tonum \$1 ];\r\
+    \n  :local Unit [ :tostr \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global GetRandomNumber;\r\
+    \n  :global MAX;\r\
+    \n  :if (\$Time = 0) do={:return false}\r\
+    \n  :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \
+    [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\
+    \n}\r\
+    \n\r\
+    \n:set EscapeForRegEx do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitError do={\r\
+    \n  :local ExitOK [ :tostr \$1 ];\r\
+    \n  :local Name   [ :tostr \$2 ];\r\
+    \n  :local Error  [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$ExitOK = \"false\") do={\r\
+    \n    :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \
+    \\\r\
+    \n        \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\
+    ror\" . \\\r\
+    \n        [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \
+    \$Error) \".\" ]);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitOnError do={\r\
+    \n  :local Name   [ :tostr \$1 ];\r\
+    \n  :local Error  [ :tostr \$2 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\
+    \\\$\") \\\r\
+    \n      \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\
+    r\" . \\\r\
+    \n      [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\
+    rror) \".\" ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set MiniDateTimeStamp do={\r\
+    \n    :local mikro [ :tobool \$1 ];\r\
+    \n    /system/clock;\r\
+    \n    :local vdate [get date];\r\
+    \n    :local vtime [get time];\r\
+    \n    :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\
+    \n    :local MM    [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\
+    \n    :local M     [:tonum \$MM];\r\
+    \n    :if (\$vdate ~ \".../../....\") do={\r\
+    \n        :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\
+    \n        :set M     ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\
+    PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\
+    \n        :if (\$M>12) do={:set M (\$M - 12)}\r\
+    \n        :set MM    [:pick (100 + \$M) 1 3];\r\
+    \n    }\r\
+    \n    :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\
+    \n    :local dd   [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\
+    \n    :local HH   [:pick \$vtime 0  2];\r\
+    \n    :local mm   [:pick \$vtime 3  5];\r\
+    \n    :local ss   [:pick \$vtime 6  8];\r\
+    \n    :local Return;\r\
+    \n    :if (\$mikro = true) do={\r\
+    \n      :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\
+    \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\
+    \n    } else={\r\
+    \n    :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\
+    \r\
+    \n   }\r\
+    \n   :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitForFile do={\r\
+    \n  :local FileName [ :tostr  \$1 ];\r\
+    \n  :local WaitTime [ :totime \$2 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global EitherOr;\r\
+    \n  :global MAX;\r\
+    \n  :set FileName [ \$CleanFilePath \$FileName ];\r\
+    \n  :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } delay=\$Delay max=10;\r\
+    \n  } on-error={ }\r\
+    \n  :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\
+    \n    :do {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } on-error={ }\r\
+    \n    :delay \$Delay;\r\
+    \n    :set Delay (\$Delay * 3 / 2);\r\
+    \n  }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileGet do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global WaitForFile;\r\
+    \n  :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FileVal false;\r\
+    \n  :do {\r\
+    \n    :set FileVal [ /file/get \$FileName ];\r\
+    \n   } on-error={ }\r\
+    \n  :return \$FileVal;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmDir do={\r\
+    \n  :local DirName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing directory: \". \$DirName);\r\
+    \n  :local DirVal [ \$FileGet \$DirName ];\r\
+    \n  :if (\$DirVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  };\r\
+    \n  :if (\$DirVal->\"type\" != \"directory\") do={\r\
+    \n    :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\
+    ory.\");\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$DirName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\
+    : \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmFile do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing file: \". \$FileName);\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\
+    sk\") do={\r\
+    \n    :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\
+    \r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$FileName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\
+    \_. \$Err); :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MkDir do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global FileGet;\r\
+    \n  :global RmDir;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :local MkTmpfs do={\r\
+    \n   :global WaitForFile;\r\
+    \n   :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n   :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n     :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n       :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\
+    \n       /disk/enable \$TmpFs;\r\
+    \n      }\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :log info (\$0 . \" Creating disk of type tmpfs.\");\r\
+    \n    \$RmDir \"tmpfs\";\r\
+    \n    :onerror Err {\r\
+    \n      /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\
+    /get total-memory ] / 3);\r\
+    \n      \$WaitForFile \"tmpfs\";\r\
+    \n    } do={\r\
+    \n      :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\
+    Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :set Path [ \$CleanFilePath \$Path ];\r\
+    \n  :if (\$Path = \"\") do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log debug (\$0 . \" Making directory: \" . \$Path);\r\
+    \n  :local PathVal [ \$FileGet \$Path ];\r\
+    \n  :if (\$PathVal->\"type\" = \"directory\") do={\r\
+    \n    :log debug (\$0 . \" ... which already exists.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/add type=\"directory\" name=\$Path;\r\
+    \n    \$WaitForFile \$Path;\r\
+    \n  } do={\r\
+    \n    :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \
+    \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterReplace do={\r\
+    \n  :local String [ :tostr \$1 ];\r\
+    \n  :local ReplaceFrom [ :tostr \$2 ];\r\
+    \n  :local ReplaceWith [ :tostr \$3 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :if (\$ReplaceFrom = \"\") do={:return \$String}\r\
+    \n  :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\
+    \r\
+    \n    :local Pos [ :find \$String \$ReplaceFrom ];\r\
+    \n    :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\
+    \r\
+    \n    :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\
+    \_\$String ] ];\r\
+    \n  }\r\
+    \n  :return (\$Return . \$String);\r\
+    \n}\r\
+    \n\r\
+    \n:set IfThenElse do={\r\
+    \n  :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \
+    \$2};\r\
+    \n  :return \$3;\r\
+    \n}\r\
+    \n\r\
+    \n:set EitherOr do={\r\
+    \n  :global IfThenElse;\r\
+    \n  :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \
+    \$1 \$2 ]}\r\
+    \n  :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\
+    \_\$1 \$2 ]}\r\
+    \n# this works for boolean values, literal ones with parentheses\r\
+    \n  :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseKeyValueStore do={\r\
+    \n  :local Source \$1;\r\
+    \n  :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\
+    \n    :do {\r\
+    \n      :return [ :deserialize from=json \$Source ];\r\
+    \n    } on-error={ }\r\
+    \n  }   \r\
+    \n  :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\
+    }\r\
+    \n  :local Result ({});\r\
+    \n  :foreach KeyValue in=[ :toarray \$Source ] do={\r\
+    \n    :if ([ :find \$KeyValue \"=\" ]) do={\r\
+    \n      :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\
+    \n      :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\
+    \_:len \$KeyValue ] ];\r\
+    \n      :if (\$Value=\"true\") do={:set Value true}\r\
+    \n      :if (\$Value=\"false\") do={:set Value false}\r\
+    \n      :set (\$Result->\$Key) \$Value;\r\
+    \n      } else={:set (\$Result->\$KeyValue) true}\r\
+    \n  }\r\
+    \n  :return \$Result;\r\
+    \n}\r\
+    \n:set RequiredRouterOS do={\r\
+    \n  :local Caller   [ :tostr \$1 ];\r\
+    \n  :local Required [ :tostr \$2 ];\r\
+    \n  :local Warn     [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :global VersionToNum;\r\
+    \n  :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\
+    \\\$\")) do={\r\
+    \n    :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\
+    e/update/get installed-version ] ]) do={\r\
+    \n    :if (\$Warn = \"true\") do={\r\
+    \n      :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \
+    0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\
+    \n        \" '\" . \$Caller . \"' (at least specific functionality) requir\
+    es RouterOS \" . \$Required . \". Please update!\");\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set ValidateSyntax do={\r\
+    \n  :local Code [ :tostr \$1 ];\r\
+    \n  :global LogPrint;\r\
+    \n  :onerror Err {\r\
+    \n    [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\
+    \n  } do={\r\
+    \n    \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set VersionToNum do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Multi 0x1000000;\r\
+    \n  :local Return 0;\r\
+    \n  :global CharacterReplace;\r\
+    \n  :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\
+    \n  :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\
+    \n    :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\
+    \r\
+    \n  }\r\
+    \n  :foreach Value in=([ :toarray \$Input ], 0) do={\r\
+    \n    :local Num [ :tonum \$Value ];\r\
+    \n    :if (\$Multi = 0x100) do={\r\
+    \n      :if ([ :typeof \$Num ] = \"num\") do={\r\
+    \n        :set Return (\$Return + 0xff00);\r\
+    \n        :set Multi (\$Multi / 0x100);\r\
+    \n      } else={\r\
+    \n        :if (\$Value = \"zero\") do={ }\r\
+    \n        :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \
+    }\r\
+    \n        :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\
+    \r\
+    \n        :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\
+    lue * \$Multi)); }\r\
+    \n    :set Multi (\$Multi / 0x100);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptLock do={\r\
+    \n  :local Script  [ :tostr  \$1 ];\r\
+    \n  :local WaitMax [ :totime \$2 ];\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global ScriptLockOrder;\r\
+    \n  :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\
+    \n    :set ScriptLockOrder ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :local JobCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :return [ :len [ /system/script/job/find where script=\$Script ] ];\
+    \r\
+    \n  }\r\
+    \n  :local TicketCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :local Count 0;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \
+    + 1)}\r\
+    \n    }\r\
+    \n    :return \$Count;\r\
+    \n  }\r\
+    \n  :local IsFirstTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Check  [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if (\$Ticket = \$Check) do={:return true}\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\
+    o={:return false}\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local AddTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Add    [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :while (true) do={\r\
+    \n      :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\
+    \n      :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\
+    \n      :delay 10ms;\r\
+    \n      :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\
+    e}\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local RemoveTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Remove [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\
+    \n        :set (\$ScriptLockOrder->\$Script->\$Id);\r\
+    \n        :delay 10ms;\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local CleanupTickets do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\
+    \n    }\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\
+    \n  :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\
+    \n    :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\
+    ist!\");\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$JobCount \$Script ] = 0) do={\r\
+    \n    \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\
+    );\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\
+    \n    :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\
+    t . \"', resetting!\");\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n    /system/script/job/remove [ find where script=\$Script ];\r\
+    \n  }\r\
+    \n  :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\
+    \n  \$AddTicket \$Script \$MyTicket;\r\
+    \n  :local WaitInterval (\$WaitMax / 20);\r\
+    \n  :local WaitTime \$WaitMax;\r\
+    \n  :while (\$WaitTime > 0 && \\\r\
+    \n      ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\
+    \n      [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\
+    \n    :set WaitTime (\$WaitTime - \$WaitInterval);\r\
+    \n    :delay \$WaitInterval;\r\
+    \n  }\r\
+    \n  :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\
+    \n      [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\
+    \n    \$RemoveTicket \$Script \$MyTicket;\r\
+    \n    \$CleanupTickets \$Script;\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  \$RemoveTicket \$Script \$MyTicket;\r\
+    \n  \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \
+    once\" . \\\r\
+    \n    [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\
+    \_lock\" \"\" ] . \"...\");\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification do={ :onerror Err {\r\
+    \n  :global SendNotification2;\r\
+    \n  \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\
+    \_silent=\$4 });\r\
+    \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification2 do={\r\
+    \n  :local Notification \$1;\r\
+    \n  :global NotificationFunctions;\r\
+    \n  :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\
+    \n    (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\
+    ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolByUnicodeName do={\r\
+    \n  :local Name [ :tostr \$1 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global SymbolsExtra;\r\
+    \n  :local Symbols ({\r\
+    \n    \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\
+    \n    \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\
+    \n    \"arrow-down\"=\"\\E2\\AC\\87\";\r\
+    \n    \"arrow-up\"=\"\\E2\\AC\\86\";\r\
+    \n    \"calendar\"=\"\\F0\\9F\\93\\85\";\r\
+    \n    \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\
+    \n    \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\
+    \n    \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\
+    \n    \"cloud\"=\"\\E2\\98\\81\";\r\
+    \n    \"cross-mark\"=\"\\E2\\9D\\8C\";\r\
+    \n    \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\
+    \n    \"fire\"=\"\\F0\\9F\\94\\A5\";\r\
+    \n    \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\
+    \n    \"gear\"=\"\\E2\\9A\\99\";\r\
+    \n    \"heart\"=\"\\E2\\99\\A5\";\r\
+    \n    \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\
+    \n    \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\
+    \n    \"information\"=\"\\E2\\84\\B9\";\r\
+    \n    \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\
+    \n    \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\
+    \n    \"link\"=\"\\F0\\9F\\94\\97\";\r\
+    \n    \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\
+    \n    \"memo\"=\"\\F0\\9F\\93\\9D\";\r\
+    \n    \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\
+    \n    \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\
+    \n    \"scissors\"=\"\\E2\\9C\\82\";\r\
+    \n    \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\
+    \n    \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\
+    \n    \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\
+    \n    \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\
+    \n    \"sparkles\"=\"\\E2\\9C\\A8\";\r\
+    \n    \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\
+    \n    \"star\"=\"\\E2\\AD\\90\";\r\
+    \n    \"warning-sign\"=\"\\E2\\9A\\A0\";\r\
+    \n    \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\
+    \n  }, \$SymbolsExtra);\r\
+    \n  :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\
+    \n  :local Special {\r\
+    \n    \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\
+    \n    \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\
+    \n    \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\
+    \n    \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\
+    \n  :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\
+    '!\");\r\
+    \n    :return \"\";\r\
+    \n  }\r\
+    \n  :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\
+    me) ] . \"\\EF\\B8\\8F\");\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolForNotification do={\r\
+    \n  :global NotificationsWithSymbols;\r\
+    \n  :global SymbolByUnicodeName;\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\
+    \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\
+    \n  :local Return \"\";\r\
+    \n  :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\
+    mbolByUnicodeName \$Symbol ])}\r\
+    \n  :return (\$Return . \" \");\r\
+    \n}\r\
+    \n\r\
+    \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\
+    \n:set UrlEncode do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\
+    \n  :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\
+    %24\"; \"%25\"; \"%26\"; \"%27\";\r\
+    \n         \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \
+    \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\
+    \n         \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \
+    \"%7C\"; \"%7D\"; \"%7E\" };\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :local Replace [ :find \$Chars \$Char ];\r\
+    \n    :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\
+    ce)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsDNSResolving do={\r\
+    \n  :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsFullyConnected do={\r\
+    \n  :global IsDNSResolving;\r\
+    \n  :global IsTimeSync;\r\
+    \n  :if ([ \$IsDNSResolving ] = false) do={:return false};\r\
+    \n  :if ([ \$IsTimeSync ] = false) do={:return false};\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsTimeSync do={\r\
+    \n  :global IsTimeSyncCached;\r\
+    \n  :global IsTimeSyncResetNtp;\r\
+    \n  :if (\$IsTimeSyncCached = true) do={:return true}\r\
+    \n  :if ([ /system/ntp/client/get enabled ] = true) do={\r\
+    \n    :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :local Uptime [ /system/resource/get uptime ];\r\
+    \n    :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\
+    \n      :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    }\r\
+    \n    :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\
+    \n    :log warning \"\$0 The ntp client is configured, but did not sync.\"\
+    ;\r\
+    \n    :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    /system/ntp/client/set enabled=no;\r\
+    \n    :delay 20ms;\r\
+    \n    /system/ntp/client/set enabled=yes;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\
+    \n       [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\
+    \n    :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\
+    ee license and x86.\";\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ /ip/cloud/get update-time ] = true) do={\r\
+    \n    :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :log debug \"\$0 No time source configured! Returning gracefully...\";\
+    \r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchHugeFiles do={\r\
+    \n  :local ScriptName [ :tostr \$1 ];\r\
+    \n  :local Url        [ :tostr \$2 ];\r\
+    \n  :local CheckCert  [ :tostr \$3 ];\r\
+    \n\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global MkDir;\r\
+    \n  :global RmDir;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\
+    ithout-crl\" ];\r\
+    \n\r\
+    \n  :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\
+    \n  :if ([ \$MkDir \$DirName ] = false) do={\r\
+    \n    \$LogPrint error \$0 (\"Failed creating directory!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \
+    \$GetRandom20CharAlNum ]);\r\
+    \n  :onerror Err {\r\
+    \n    /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \
+    \\\r\
+    \n      http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\
+    lue;\r\
+    \n  } do={\r\
+    \n    :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\
+    \n      \$RmFile \$FileName;\r\
+    \n    }\r\
+    \n    \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\
+    \_. \$Err);\r\
+    \n    \$RmDir \$DirName;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\
+    \n    \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\
+    \_not show up.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileSize [ /file/get \$FileName size ];\r\
+    \n  :local Return \"\";\r\
+    \n  :local VarSize 0;\r\
+    \n  :while (\$VarSize != \$FileSize) do={\r\
+    \n    :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\
+    768 file=\$FileName as-value ]->\"data\"));\r\
+    \n    :set FileSize [ /file/get \$FileName size ];\r\
+    \n    :set VarSize [ :len \$Return ];\r\
+    \n    :if (\$VarSize > \$FileSize) do={\r\
+    \n      :delay 100ms;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  \$RmDir \$DirName;\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchUserAgentStr do={\r\
+    \n  :local Caller [ :tostr \$1 ];\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global CommitBrief;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Resource [ /system/resource/get ];\r\
+    \n  :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\
+    \_\$Resource->\"architecture-name\" . \\\r\
+    \n    \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\
+    CommitBrief ] . \")\");\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptInstallUpdate do={ :onerror Err {\r\
+    \n  :local Scripts    [ :toarray \$1 ];\r\
+    \n  :local NewComment [ :tostr   \$2 ];\r\
+    \n  :global InitSetup;\r\
+    \n\r\
+    \n  :global CommitId;\r\
+    \n  :global ScriptUpdatesCRLF;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global CheckSumsVerify;\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SumsDirAndFileName;\r\
+    \n  :global GlobalScriptsUrlSuffix;\r\
+    \n  :global EitherOr;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global Grep;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n  :global RequiredRouterOS;\r\
+    \n  :global SendNotification2;\r\
+    \n  :global SymbolForNotification;\r\
+    \n  :global ValidateSyntax;\r\
+    \n  :global CommentsInScripts;\r\
+    \n\r\
+    \n  :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\
+    hout.\");\r\
+    \n  }\r\
+    \n\r\
+    \n  :foreach Script in=\$Scripts do={\r\
+    \n    :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\
+    \r\
+    \n      \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\
+    \n      /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \
+    Vados\\n\" comment=\$NewComment;\r\
+    \n    }\r\
+    \n  }\r\
+    \n\r\
+    \n  :local CommitIdBefore \$CommitId;\r\
+    \n  :local GlobalConfVersionBefore \$GlobalConfVersion;\r\
+    \n  :local ReloadGlobal false;\r\
+    \n  :local DeviceMode [ /system/device-mode/get ];\r\
+    \n\r\
+    \n  :if (\$CheckSumsVerify = true) do={\r\
+    \n    :local CheckSums ({});\r\
+    \n     :do {\r\
+    \n     :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\
+    iptsUrlSuffix);\r\
+    \n      \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\
+    \r\
+    \n      :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\
+    ficate=yes-without-crl \\\r\
+    \n        http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\
+    =user as-value ]->\"data\") ];\r\
+    \n    } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\
+    \n    }\r\
+    \n\r\
+    \n  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\
+    s\" ] do={\r\
+    \n    :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n    :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \
+    ];\r\
+    \n    :local SourceNew;\r\
+    \n\r\
+    \n    :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\
+    \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\
+    \n      :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\
+    \n      :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\
+    iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \
+    \"'!\");\r\
+    \n        }\r\
+    \n    }\r\
+    \n    :do {\r\
+    \n      :if (\$ScriptInfo->\"ignore\" = true) do={\r\
+    \n        \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\
+    e\" . \"', as requested.\");\r\
+    \n        :error true;\r\
+    \n      }\r\
+    \n      :if (\$CheckSumsVerify = true) do={\r\
+    \n        :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\
+    \n        :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\
+    ptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n             [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\
+    rce\") ] ] = \$CheckSum) do={\r\
+    \n          \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\
+    >\"name\" . \"' matches, ignoring.\");\r\
+    \n          :error true;\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\
+    \n        :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\
+    fetch\" ] = false) do={\r\
+    \n          \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\
+    ng without.\");\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :onerror Err {\r\
+    \n        :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\
+    lScriptsUrl ];\r\
+    \n        :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\
+    lobalScriptsUrlSuffix ];\r\
+    \n        :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\
+    Suffix);\r\
+    \n        \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\
+    name\") . \"' from url: \" . \$Url);\r\
+    \n        :local Result [ /tool/fetch check-certificate=yes-without-crl \\\
+    \r\
+    \n          http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\
+    ut=user as-value ];\r\
+    \n        :if (\$Result->\"status\" = \"finished\") do={\r\
+    \n          :set SourceNew [ :tolf (\$Result->\"data\") ];\r\
+    \n        } \r\
+    \n      } do={\r\
+    \n        \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\
+    al->\"name\" . \"': \" . \$Err);\r\
+    \n        :if (\$Err != \"Fetch failed with status 404\") do={\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\
+    \n          \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\
+    \?\");\r\
+    \n          /system/script/remove \$Script;\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$CheckSumsVerify = true) do={\r\
+    \n          :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\
+    riptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n               [ :len \$CheckSum ] = 0) do={\r\
+    \n            \$LogPrint warning \$0 (\"Added the script manually\? Skip u\
+    pdates with 'ignore=true' in comment.\");\r\
+    \n          }\r\
+    \n        }\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :len \$SourceNew ] = 0) do={\r\
+    \n        \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\
+    >\"name\") . \"'.\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :local SourceCRLF [ :tocrlf \$SourceNew ];\r\
+    \n      :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\
+    lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\
+    \n        :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\
+    \$ScriptVal->\"source\")) do={\r\
+    \n          \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\") \
+    . \"' source did not change. End of lines set to CRLF.\");\r\
+    \n          if (\$ScriptUpdatesCRLF = false) do={\r\
+    \n            :put [ :tolf \$SourceNew ];\r\
+    \n            \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\"\
+    ) . \"' source update end of lines to LF.\");\r\
+    \n          }\r\
+    \n        :error false;\r\
+    \n        }\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\
+    l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\
+    );\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if (\$CommentsInScripts = true) do={\r\
+    \n         :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\
+    \_\") ];\r\
+    \n         :if ([ :len \$CommentLine ] = 0) do={\r\
+    \n           \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\
+    iptVal->\"name\") . \"' for comment in script body, is not found result Ig\
+    noring!\");\r\
+    \n           :error false;\r\
+    \n         } else={\r\
+    \n           :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\
+    ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\
+    ] + 2) [ :len \$CommentLine] ]) do={\r\
+    \n             \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\
+    \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\
+    ;\r\
+    \n             :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\
+    ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\
+    \n             \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\
+    omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\
+    ded!\");\r\
+    \n           } else={\r\
+    \n             \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\
+    al->\"name\") . \"' did not change.\");\r\
+    \n             :error false;\r\
+    \n           }\r\
+    \n         }   \r\
+    \n      }\r\
+    \n\r\
+    \n      :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\
+    \"\\23 requires RouterOS, \") ] ]->version);\r\
+    \n      :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\
+    \_false ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires RouterOS \" . \\\r\
+    \n            \$RequiredROS . \", which is not met by your installation. I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\
+    \\23 requires device-mode, \") ] ];\r\
+    \n      :local MissingDM ({});\r\
+    \n      :foreach Feature,Value in=\$RequiredDM do={\r\
+    \n        :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\
+    ceMode->\$Feature) = false) do={\r\
+    \n          :set MissingDM (\$MissingDM, \$Feature);\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len \$MissingDM ] > 0) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires disabled \" . \\\r\
+    \n            \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\
+    ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      \r\
+    \n      :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\
+    ript comment: \" . (\$ScriptVal->\"comment\"));\r\
+    \n\r\
+    \n      /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\
+    Val->\"comment\") \\\r\
+    \n          source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\
+    F \$SourceNew ] \$Script;\r\
+    \n      :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\
+    \n           \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\
+    \n           \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\
+    o={\r\
+    \n        :set ReloadGlobal true;\r\
+    \n      }\r\
+    \n    } on-error={ }\r\
+    \n  }\r\
+    \n  :if (\$ReloadGlobal = true) do={\r\
+    \n    \$LogPrint info \$0 (\"Reloading global configuration and functions.\
+    \");\r\
+    \n    :onerror Err {\r\
+    \n      :global InitSetup (a);\r\
+    \n      /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\
+    \n    } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\
+    ctions failed! \" . \$Err)}\r\
+    \n  }\r\
+    \n  :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\
+    \n    \$LogPrint warning \$0 (\"The configuration version decreased from \
+    \" . \\\r\
+    \n      \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\
+    \n      \". Installed an older version\?\");\r\
+    \n  }\r\
+    \n    :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\
+    \n    :global GlobalConfChanges;\r\
+    \n    :global GlobalConfMigration;\r\
+    \n    :local ChangeLogCode;\r\
+    \n    :if ([ :len \$ChangeLogCode ] > 0) do={\r\
+    \n      :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\
+    \n        :onerror Err {\r\
+    \n          [ :parse \$ChangeLogCode ];\r\
+    \n        } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \
+    . \$Err)}\r\
+    \n      } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\
+    dation!\")}\r\
+    \n    }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\
+    \n        :do {\r\
+    \n          :if ([ :typeof \$Migration ] != \"str\") do={\r\
+    \n            \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\
+    \_\" is not available.\");\r\
+    \n            :error false;\r\
+    \n          }\r\
+    \n          :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\
+    \n            \$LogPrint warning \$0 (\"Migration code for change \" . \$I\
+    \_. \" failed syntax validation!\");\r\
+    \n            :error false}\r\
+    \n          \$LogPrint info \$0 (\"Applying migration for change \" . \$I \
+    . \": \" . \$Migration);\r\
+    \n          :onerror Err {\r\
+    \n            [ :parse \$Migration ];\r\
+    \n          } do={\$LogPrint warning \$0 (\"Migration code for change \" .\
+    \_\$I . \" failed to run: \" . \$Err)}\r\
+    \n        } on-error={ }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :local NotificationMessage (\"The configuration version on \" . \$Id\
+    entity . \" increased \" . \\\r\
+    \n       \"to \" . \$GlobalConfVersion . \", current configuration may nee\
+    d modification. \" . \\\r\
+    \n       \"Please review and update global-config-overlay, then re-run glo\
+    bal-config.\");\r\
+    \n    \$LogPrint info \$0 (\$NotificationMessage);\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\
+    \");\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\
+    \n        :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\
+    \r\
+    \n            [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\
+    \n        \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\
+    \n      }\r\
+    \n    } else={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\
+    \_changes are not available.\");\r\
+    \n\r\
+    \n      }\r\
+    \n\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \
+    } else={ :global GlobalConfChanges (a); }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\
+    on; } else={ :global GlobalConfMigration (a); }\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n\r\
+    \n# load modules\r\
+    \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\
+    ns\\\\.d|mod)/.\" ] do={\r\
+    \n  :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n  :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\
+    \n    :onerror Err {\r\
+    \n      /system/script/run \$Script;\r\
+    \n    } do={\r\
+    \n      \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\
+    ailed to run: \" . \$Err);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\
+    led syntax validation, skipping.\");\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# Add and fix global scheduler\r\
+    \n:put \"Add or/and fix Global scheduler...\";\r\
+    \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\
+    ; }\";\r\
+    \n:local Comment \"Every Day Set Global Environment Variables\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \
+    = 0) do={\r\
+    \n  /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\
+    ent=\$OnEvent start-time=startup;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\
+    \_do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\
+    ) do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\
+    \n}\r\
+    \n# Add Update Script scheduler\r\
+    \n:put \"Add or/and fix Update Script scheduler\";\r\
+    \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\
+    \r\
+    \n:set Comment \"Every Day Check For Update Scripts\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\
+    \" ] ] = 0) do={\r\
+    \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \
+    start-time=startup interval=1d on-event=\$OnEvent;\r\
+    \n}\r\
+    \n\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\
+    \_not ready.\"); }; } delay=100ms max=5;\r\
+    \n\r\
+    \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\
+    \n    [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \
+    \") ] . \\\r\
+    \n    \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\
+    \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\
+    \n    # signal we are ready\r\
+    \n:set GlobalFuncReady true;\r\
+    \n:set ExitOK true;\r\
+    \n\r\
+    \n:log info (\$0 . \"Global configs ready!\");\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n}\r\
+    \n"
+add comment=\
+    "Lookup IP addresses for RKN list and add them to firewall address-list" \
+    dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="#!rsc by Vados\r\
+    \n# RouterOS script: AM-RKN-dnsLookup\r\
+    \n# Script comment: Lookup IP addresses for RKN list and add them to firew\
+    all address-list\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n# Script description: This script is intended to be run periodically, e.\
+    g. once a day, to update the IP addresses in the firewall address-list bas\
+    ed on the RKN list.\r\
+    \n#                     It resolves the domain names in the RKN list and a\
+    dds the corresponding IP addresses to the specified firewall address-list.\
+    \r\
+    \n#                     The script also handles CNAME records by following\
+    \_them until it finds A records.\r\
+    \n# Usage:\r\
+    \n# /system/script { run AM-RKN-dnsLookup; }\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n\r\
+    \n:global dnsLookupReady false;\r\
+    \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\
+    \_true; }\r\
+    \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\
+    \n:set dnsLookupReady false;\r\
+    \n\r\
+    \n:local arrRKN {\r\
+    \n  \"telegra.ph\"\r\
+    \n  \"grani.ru\"\r\
+    \n  \"xhamster.com\"\r\
+    \n  \"lostfilm.tv\"\r\
+    \n  \"rutracker.org\"\r\
+    \n  \"lurkmore.to\"\r\
+    \n  \"dou.ua\"\r\
+    \n  \"youporn.com\"\r\
+    \n  \"pornolab.net\"\r\
+    \n  \"crimerussia.com\"\r\
+    \n  \"telegram.org\"\r\
+    \n  \"api.telegram.org\"\r\
+    \n  \"facebook.com\"\r\
+    \n  \"instagram.com\"\r\
+    \n  \"x.com\"\r\
+    \n  \"twitter.com\"\r\
+    \n  \"youtube.com\"\r\
+    \n  \"googleapis.com\"\r\
+    \n  \"youtu.be\"\r\
+    \n  \"googlevideo.com\"\r\
+    \n  \"gstatic.com\"\r\
+    \n  \"googleusercontent.com\"\r\
+    \n  \"nhacmp3youtube.com\"\r\
+    \n  \"telegram.me\"\r\
+    \n  \"t.me\";}\r\
+    \n\r\
+    \n:local ListRKN \"RKN-dnsLookup\";\r\
+    \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\
+    \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\
+    ={\r\
+    \n    /ip firewall address-list remove \$aListItem;\r\
+    \n}\r\
+    \n:foreach aItem in=\$arrRKN do={\r\
+    \n#    :do {\r\
+    \n        :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\
+    ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\
+    \n#    } on-error={\r\
+    \n#        :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\
+    \n#    }\r\
+    \n    :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \
+    do={\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\
+    \n            :local newAddress [/ip dns cache all get \$dnsRecord data];\
+    \r\
+    \n            :do {\r\
+    \n             /ip firewall address-list add list=\$ListRKN address=\$newA\
+    ddress comment=\$aItem;\r\
+    \n                :log warning \"Successfully adding ip to list A record: \
+    \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            } on-error={\r\
+    \n                :log error \"error when adding ip to list A record: \$dn\
+    sRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            }\r\
+    \n        }\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\
+    \n            :local cname;\r\
+    \n            :local nextCname;\r\
+    \n            :local cnameAddress;\r\
+    \n            :set cname [/ip dns cache all find where (name=\$aItem && ty\
+    pe=\"CNAME\")];\r\
+    \n            :set nextCname [/ip dns cache all find where (name=[/ip dns \
+    cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            :while (\$nextCname != \"\") do={\r\
+    \n                :set cname \$nextCname;\r\
+    \n                :set nextCname [/ip dns cache all find where (name=[/ip \
+    dns cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            }\r\
+    \n            :foreach aRecord in=[/ip dns cache all find where (name=[/ip\
+    \_dns cache all get \$cname data] && type=\"A\")] do={\r\
+    \n                :do {\r\
+    \n                    :set cnameAddress [/ip dns cache all get \$aRecord d\
+    ata];\r\
+    \n                    /ip firewall address-list add list=\$ListRKN address\
+    =\$cnameAddress comment=\$aItem;\r\
+    \n                    :log warning \"Succesfully adding ip to list CNAME r\
+    ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \
+    \$aItem.\";\r\
+    \n#                    /ip firewall raw add action=add-dst-to-address-list\
+    \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\
+    g comment=\$aItem content=\$aItem;\r\
+    \n                } on-error={\r\
+    \n                    :log error \"error when adding ip to list CNAME reco\
+    rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\
+    tem.\";\r\
+    \n                }\r\
+    \n            }\r\
+    \n        }\r\
+    \n    }\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\
+    ={\r\
+    \n   :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\
+    ptName . \" is NOT SET! Fix It Now!\");\r\
+    \n    /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \
+    run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\
+    olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\
+    \_start-time=startup;\r\
+    \n  }\r\
+    \n:set dnsLookupReady true;\r\
+    \ndelay 2s;  \r\
+    \n:global dnsLookupReady (a);\r\
+    \n"
+add dont-require-permissions=no name="renameLists " owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    local oldName \"Test\";\
+    \n:local newName \"Test-IP\";\
+    \n/ip firewall address-list\
+    \n:foreach i in=[find list=\$oldName] do={\
+    \nset \$i list=\$newName;\
+    \n}\
+    \n"
+add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    #############Script Settings##################\
+    \n\
+    \n:local \"IF-TUN\" \"6to4-tun\"\
+    \n:local \"IF-LOC\" \"Bridge-LAN\"\
+    \n:local \"POOL-6TO4\" \"poolV6-local\"\
+    \n:local \"force-update\" false\
+    \n############ use then static ip #######################\
+    \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \
+    address]\
+    \n#:local \"interface\" \"ext\"\
+    \n:local bound 0\
+    \n\
+    \n###############################################\
+    \n\
+    \n:local 6to4prefix do={\
+    \n    :global dec2hex\
+    \n    :local ipv4 \$1\
+    \n    :local ipv6 \"2002:\"\
+    \n    :for i from=0 to=2 step=1 do={        \
+    \n        :if ( \$i = 2) do={\
+    \n            :set ipv6 (\$ipv6.\":\")\
+    \n        }\
+    \n        :local fp [:find \$ipv4 \".\"]\
+    \n        :if ( \$fp > 0 ) do={\
+    \n            :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\
+    \n            :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\
+    \n        }\
+    \n    }\
+    \n    :return (\$ipv6.[\$dec2hex \$ipv4])\
+    \n}\
+    \n:local \"str_replace\" do={\
+    \n    :local \"str-pos\" [:find \$1 \$2]\
+    \n    :local \"str-len\" [:len \$2]\
+    \n    :local str \"\"\
+    \n    :local rest \$1\
+    \n    :while (\$\"str-pos\" >= 0) do={\
+    \n        :local t [:pick \$rest 0 \$\"str-pos\"]\
+    \n        :if ( \$4 > 0 ) do={\
+    \n            :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\
+    \n                :set str (\$str.\$5)\
+    \n            }\
+    \n        }\
+    \n        :set str (\$str.\$t.\$3)\
+    \n        :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\
+    st]]\
+    \n        :set \"str-pos\" [:find \$rest \$2]\
+    \n    }\
+    \n    :return (\$str.\$rest)\
+    \n}\
+    \n\
+    \n:if (\$bound=1) do={\
+    \n    :local t [:find \$\"lease-address\" \"/\"]\
+    \n\
+    \n    :if ( \$t >= 0 ) do={\
+    \n        :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\
+    \n    }\
+    \n\
+    \n    :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\
+    ) do={\
+    \n        /interface 6to4 add !keepalive local-address=\$\"lease-address\"\
+    \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\
+    \n        :set \"force-update\" true\
+    \n    }\
+    \n\
+    \n    :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\
+    cal-address];\
+    \n\
+    \n    :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \
+    true) do={\
+    \n        /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\
+    ease-address\"\
+    \n        /ipv6 address remove [find interface=\$\"IF-TUN\"]\
+    \n        /ipv6 address remove [find interface=\$\"IF-LOC\"]\
+    \n        /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\
+    \"::/0\"]\
+    \n        :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\
+    \n        :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\
+    \_0) do={    \
+    \n            /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\
+    \".\":1::/64\")  prefix-length=64\
+    \n        } else={\
+    \n            /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \
+    prefix=(\$\"pool-prefix\".\":1::/64\")\
+    \n        }\
+    \n        /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\
+    \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\
+    ace=\$\"IF-TUN\" advertise=no\
+    \n        /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\
+    =\$\"IF-LOC\" advertise=yes\
+    \n        /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\
+    \"IF-TUN\")\
+    \n        :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\
+    s]\
+    \n        :set t [:pick \$t 0 [:find \$t \"/\"]]\
+    \n        :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\
+    \_= 0) do={\
+    \n            /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\
+    [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        } else={\
+    \n            /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \
+    where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        }\
+    \n        :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\
+    -LOC\"] = 0) do={\
+    \n            /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\
+    on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\
+    \n        }\
+    \n        :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \
+    0) do={\
+    \n            /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\
+    onfiguration=yes\
+    \n        }\
+    \n    }\
+    \n}"
+add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global MAC2EUI64 do={\
+    \n    :local EUI64 \"\"\
+    \n    :local MAC \$1\
+    \n    :local HEX2DEC \"0123456789ABCDEF\"\
+    \n    :for i from=0 to=5 step=1 do={\
+    \n        :if ( \$i = 0 ) do={\
+    \n            :set EUI64 [:pick \$MAC 0]\
+    \n            :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\
+    \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\
+    \n        }\
+    \n        :if ( \$i = 1 || \$i = 3) do={\
+    \n            :set EUI64 (\$EUI64.\":\")\
+    \n        }\
+    \n        :if ( \$i = 2 ) do={\
+    \n            :set EUI64 (\$EUI64.\"FF:FE\")\
+    \n        }\
+    \n        :if ( [:find \$MAC \":\"] = 2 ) do={\
+    \n            :set MAC [:pick \$MAC 3  [:len \$MAC]]\
+    \n            :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\
+    \n        }\
+    \n    }\
+    \n    :return (\$EUI64)\
+    \n}\
+    \n\
+    \n:global dec2hex do={\
+    \n    :local hex \"\"\
+    \n    :local dec [:tonum \$1]\
+    \n    :for i from=0 to=4 step=4 do={\
+    \n        :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\
+    c>>\$i)&0xf)+1)].\$hex)\
+    \n    }\
+    \n    :return ([:tostr \$hex])\
+    \n}"
+add comment=Generator dont-require-permissions=no name=proxySet owner=vados \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="# 2. WireGuard interface\r\
+    \n/interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDg\
+    uMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=21641\r\
+    \n/interface/wireguard/peers/add interface=wg-VDSina public-key=\"o5IgCl1/\
+    G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcYQnD9\
+    N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=10.30.30.33 endpoint-port=518\
+    20 allowed-address=0.0.0.0/0 persistent-keepalive=11\r\
+    \n/ip/address/add address=10.9.0.3/32 interface=wg-VDSina\r\
+    \n\r\
+    \n# 3. DNS\r\
+    \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\
+    n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\
+    \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /system/script/add name=VDS\
+    ina-prev-dns comment=\"\$prevDNS\" source=\"\" }\r\
+    \n/ip/dns/set servers=8.8.4.4\r\
+    \n/ip/route/add dst-address=8.8.4.4/32 gateway=wg-VDSina distance=1 commen\
+    t=VDSina-dns\r\
+    \n\r\
+    \n# 4. Enable WireGuard\r\
+    \n/interface/wireguard/enable wg-VDSina\r\
+    \n"
+add dont-require-permissions=no name=AM-Telegram-Send owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\
+    \n# RouterOS script: AM-Telegram-Send\
+    \n# Script comment: Mini script for send messages to admin Telegram chat\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\
+    \n#\
+    \n#\
+    \n# requires RouterOS, version=7.19\
+    \n# requires device-mode, fetch\
+    \n#\
+    \n# Script description: \
+    \n#\
+    \n#\
+    \n# Usage:\
+    \n# /system/script { run AM-Telegram-Send \"Message here )))\"; }\
+    \n\
+    \n/system/script\
+    \nadd name=telegram-send dont-require-permissions=no source={\
+    \n  :global TelegramTokenId;\
+    \n  :global TelegramChatId;\
+    \n  :local message [:tostr \$1];\
+    \n  :local identity [/system/identity/get name];\
+    \n  :local sendMsg (\"[\".\$identity.\"] \".\$message)\
+    \n  /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\
+    \n    \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\
+    \n    \"&text=\".\$sendMsg.\\\
+    \n    \"&parse_mode=HTML\") \\\
+    \n    mode=https keep-result=no\
+    \n}"
+add dont-require-permissions=no name=telegram-send owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\
+    \n  :global TelegramTokenId;\
+    \n  :global TelegramChatId;\
+    \n  :local message [:tostr \$1];\
+    \n  :local identity [/system/identity/get name];\
+    \n  :local sendMsg (\"[\".\$identity.\"] \".\$message)\
+    \n  /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\
+    \n    \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\
+    \n    \"&text=\".\$sendMsg.\\\
+    \n    \"&parse_mode=HTML\") \\\
+    \n    mode=https keep-result=no\
+    \n"
+/user group
+add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\
+    t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon"
+/ip smb
+set enabled=no interfaces=lo
+/interface bridge port
+add bridge=Bridge-LAN interface=ether5
+add bridge=Bridge-LAN interface=ether2
+add bridge=Bridge-LAN interface=ether4 trusted=yes
+add bridge=Bridge-LAN interface=ether3
+add bridge=Bridge-LAN interface=wlan2
+add bridge=Bridge-LAN interface=wlan1
+/interface bridge settings
+set use-ip-firewall=yes
+/ip firewall connection tracking
+set udp-timeout=10s
+/ip neighbor discovery-settings
+set discover-interface-list=LAN lldp-med=no lldp-poe-power=no
+/ip settings
+set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\
+    8192
+/ipv6 settings
+set disable-ipv6=yes disable-link-local-address=yes forward=no \
+    max-neighbor-entries=8192 multipath-hash-policy=l4
+/interface detect-internet
+set detect-interface-list=WAN internet-interface-list=Internet \
+    lan-interface-list=LAN request-interval=1m wan-interface-list=WAN
+#error exporting "/interface/l2tp-server/server" (timeout)
+/interface list member
+add interface=Unet-ether1 list=Internet
+add interface=WG list=WAN
+add interface=Bridge-LAN list=LAN
+add interface=Unet-ether1 list=WAN
+/interface wireguard peers
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\
+    109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \
+    persistent-keepalive=10s public-key=\
+    "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4="
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 disabled=yes \
+    endpoint-address=10.30.30.33 endpoint-port=55055 interface=wg-nuc name=\
+    NUC persistent-keepalive=11s public-key=\
+    "+OvzAjLC45Td52hjkQPmpGvC3RGhZ+Q2CDMJ1U/D4Rw="
+/interface wireless cap
+# 
+set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \
+    caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\
+    CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\
+    wlan2,wlan1 lock-to-caps-man=yes
+/ip address
+add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0
+add address=10.8.0.2/24 interface=WG network=10.8.0.0
+add address=192.168.33.2/24 disabled=yes interface=wg-nuc network=\
+    192.168.33.0
+/ip cloud
+set update-time=no
+/ip dhcp-client
+add add-default-route=special-classless check-gateway=arp comment=Unet-client \
+    default-route-distance=2 default-route-tables=main:2 dhcp-options=\
+    hostname,clientid_duid interface=Unet-ether1 name=UnetDHCP use-peer-dns=\
+    no use-peer-ntp=no
+/ip dhcp-server config
+set accounting=no
+/ip dhcp-server lease
+add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\
+    48:8F:5A:8E:EE:A8 server=masterDHCP
+add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\
+    F0:DE:F1:91:0D:1E server=masterDHCP
+add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\
+    00:80:77:EC:43:86 server=masterDHCP
+add address=10.30.30.70 dhcp-option=domain-search-list,HostName \
+    dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP
+add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\
+    04:7C:16:36:F5:37 server=masterDHCP
+add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\
+    10:2D:41:2C:20:C2 server=masterDHCP
+add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\
+    10:08:C1:81:59:5F server=masterDHCP
+add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\
+    10:38:1F:D2:5F:13 server=masterDHCP
+add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\
+    10:B1:DF:E9:D0:D5 server=masterDHCP
+add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\
+    FE:02:52:BE:3F:16 server=masterDHCP
+add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\
+    D4:6D:6D:FD:E5:49 server=masterDHCP
+add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\
+    CC:42:10:12:46:94 server=masterDHCP
+add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\
+    50:CC:F8:85:96:0A server=masterDHCP
+add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\
+    E4:18:6B:58:34:AB server=masterDHCP
+add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\
+    00:27:15:41:97:A9 server=masterDHCP
+add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \
+    mac-address=C4:82:E1:03:49:10 server=masterDHCP
+add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\
+    10:38:1F:82:81:F2 server=masterDHCP
+add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \
+    dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP
+add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \
+    dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP
+add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \
+    server=masterDHCP
+add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\
+    MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP
+add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \
+    mac-address=F0:75:5D:1E:5F:71 server=masterDHCP
+add address=10.30.30.100 client-id=iVados dhcp-option=HostName \
+    dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP
+add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\
+    ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \
+    dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \
+    use-src-mac=yes
+/ip dhcp-server network
+add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\
+    domain-search-list dhcp-option-set=domain-search-set dns-server=\
+    10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\
+    24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98
+/ip dns
+set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \
+    doh-max-server-connections=20 servers=8.8.8.8 verify-doh-cert=yes
+/ip dns static
+add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \
+    type=A
+add address=109.107.177.79 name=vds.vados.ru type=A
+add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \
+    regexp=*.vados.ru type=NS
+add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\
+    "\".*\\\\.vados\\\\.ru\"" type=FWD
+add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\
+    10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\
+    FWD
+add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\
+    ns.vados.ru.local type=A
+add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\
+    vados.ru ns=ns.vados.ru.local type=NS
+add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A
+add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\
+    dns.google type=A
+add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A
+add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A
+add address=10.30.30.33 name=ros.vados.ru type=A
+add address=10.30.30.95 name=vados-nuc type=A
+add address=10.30.30.33 name=amster-nuc type=A
+add address=10.30.30.33 name=amster type=A
+add address=10.30.30.33 name=amster-reg type=A
+add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A
+add address=10.30.30.33 name=mgr.vados.ru type=A
+add address=10.30.30.33 name=prt.vados.ru type=A
+add address=10.30.30.33 disabled=yes match-subdomain=yes name=\
+    mikrots.vados.ru type=A
+add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A
+add address=10.30.30.30 name=MILLER-LEN type=A
+add address=10.30.30.30 name=miller type=A
+add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\
+    dns.quad9.net type=A
+add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\
+    dns.quad9.net type=A
+add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \
+    type=A
+add address=10.30.30.81 comment=LocalNet name=MikroVados type=A
+add address=10.30.30.10 name=MikroNUC type=A
+add address=10.30.30.86 disabled=yes name=MikroYellow type=A
+add address=10.30.30.85 disabled=yes name=MikroMic type=A
+add address=10.30.30.95 name=VADOS-NUC type=A
+add address=10.30.30.98 name=VADOS-LEN type=A
+add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\
+    A
+add address=10.30.30.20 disabled=yes name=garage type=A
+/ip firewall address-list
+add address=91.215.120.206 list=TRUSTED
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=8.8.4.0/24 list=YouTube
+add address=8.8.8.0/24 list=YouTube
+add address=8.34.208.0/20 list=YouTube
+add address=8.35.192.0/20 list=YouTube
+add address=23.236.48.0/20 list=YouTube
+add address=23.251.128.0/19 list=YouTube
+add address=34.0.0.0/15 list=YouTube
+add address=34.2.0.0/16 list=YouTube
+add address=34.3.0.0/23 list=YouTube
+add address=34.3.3.0/24 list=YouTube
+add address=34.3.4.0/24 list=YouTube
+add address=34.3.8.0/21 list=YouTube
+add address=34.3.16.0/20 list=YouTube
+add address=34.3.32.0/19 list=YouTube
+add address=34.3.64.0/18 list=YouTube
+add address=34.4.0.0/14 list=YouTube
+add address=34.8.0.0/13 list=YouTube
+add address=34.16.0.0/12 list=YouTube
+add address=34.32.0.0/11 list=YouTube
+add address=34.64.0.0/10 list=YouTube
+add address=34.128.0.0/10 list=YouTube
+add address=35.184.0.0/13 list=YouTube
+add address=35.192.0.0/14 list=YouTube
+add address=35.196.0.0/15 list=YouTube
+add address=35.198.0.0/16 list=YouTube
+add address=35.199.0.0/17 list=YouTube
+add address=35.199.128.0/18 list=YouTube
+add address=35.200.0.0/13 list=YouTube
+add address=35.208.0.0/12 list=YouTube
+add address=35.224.0.0/12 list=YouTube
+add address=35.240.0.0/13 list=YouTube
+add address=57.140.192.0/18 list=YouTube
+add address=64.15.112.0/20 list=YouTube
+add address=64.233.160.0/19 list=YouTube
+add address=66.22.228.0/23 list=YouTube
+add address=66.102.0.0/20 list=YouTube
+add address=66.249.64.0/19 list=YouTube
+add address=70.32.128.0/19 list=YouTube
+add address=72.14.192.0/18 list=YouTube
+add address=74.125.0.0/16 list=YouTube
+add address=104.154.0.0/15 list=YouTube
+add address=104.196.0.0/14 list=YouTube
+add address=104.237.160.0/19 list=YouTube
+add address=107.167.160.0/19 list=YouTube
+add address=107.178.192.0/18 list=YouTube
+add address=108.59.80.0/20 list=YouTube
+add address=108.170.192.0/18 list=YouTube
+add address=108.177.0.0/17 list=YouTube
+add address=130.211.0.0/16 list=YouTube
+add address=136.22.160.0/20 list=YouTube
+add address=136.22.176.0/21 list=YouTube
+add address=136.22.184.0/23 list=YouTube
+add address=136.22.186.0/24 list=YouTube
+add address=142.250.0.0/15 list=YouTube
+add address=146.148.0.0/17 list=YouTube
+add address=152.65.208.0/22 list=YouTube
+add address=152.65.214.0/23 list=YouTube
+add address=152.65.218.0/23 list=YouTube
+add address=152.65.222.0/23 list=YouTube
+add address=152.65.224.0/19 list=YouTube
+add address=162.120.128.0/17 list=YouTube
+add address=162.216.148.0/22 list=YouTube
+add address=162.222.176.0/21 list=YouTube
+add address=172.110.32.0/21 list=YouTube
+add address=172.217.0.0/16 list=YouTube
+add address=172.253.0.0/16 list=YouTube
+add address=173.194.0.0/16 list=YouTube
+add address=173.255.112.0/20 list=YouTube
+add address=192.158.28.0/22 list=YouTube
+add address=192.178.0.0/15 list=YouTube
+add address=193.186.4.0/24 list=YouTube
+add address=199.36.154.0/23 list=YouTube
+add address=199.36.156.0/24 list=YouTube
+add address=199.192.112.0/22 list=YouTube
+add address=199.223.232.0/21 list=YouTube
+add address=207.223.160.0/20 list=YouTube
+add address=208.65.152.0/22 list=YouTube
+add address=208.68.108.0/22 list=YouTube
+add address=208.81.188.0/22 list=YouTube
+add address=208.117.224.0/19 list=YouTube
+add address=209.85.128.0/17 list=YouTube
+add address=216.58.192.0/19 list=YouTube
+add address=216.73.80.0/20 list=YouTube
+add address=216.239.32.0/19 list=YouTube
+add address=2ip.ru list=Test-IP
+add address=wg.vados.ru comment=VDSIna list=TRUSTED
+add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED
+add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina
+add address=love.ru comment=love.ru list=NoVdsina
+add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina
+add address=pochta.ru comment=pochta.ru list=NoVdsina
+add address=vdsina.com list=NoVdsina
+add address=vdsina.ru list=NoVdsina
+add address=youla.ru list=NoVdsina
+add address=kupiprodai.ru list=NoVdsina
+add address=myip.ru list=Test-IP
+add address=geoip.co list=NoVdsina
+add address=comp-lenta.ru list=NoVdsina
+add address=128.85.102.70 comment=update.microsoft.com list=\
+    windowsupdateslist
+add address=wu-b-net.trafficmanager.net. comment=\
+    ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\
+    ctldl.windowsupdate.com list=windowsupdateslist
+add address=redir.update.msft.com.trafficmanager.net. comment=\
+    update.microsoft.com list=windowsupdateslist
+add address=geo.prod.do.dsp.trafficmanager.net. comment=\
+    geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12437.d.akamaiedge.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \
+    comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \
+    list=windowsupdateslist
+add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\
+    sls.update.microsoft.com list=windowsupdateslist
+add address=fe3.delivery.mp.microsoft.com. comment=\
+    fe3cr.delivery.mp.microsoft.com list=windowsupdateslist
+add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\
+    fe3.delivery.mp.microsoft.com list=windowsupdateslist
+add address=fe2cr.update.msft.com.trafficmanager.net. comment=\
+    fe2cr.update.microsoft.com list=windowsupdateslist
+add address=download.windowsupdate.com.delivery.microsoft.com. comment=\
+    download.windowsupdate.com list=windowsupdateslist
+add address=wu-f-net.trafficmanager.net. comment=\
+    download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=tsfe.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \
+    comment=9.au.download.windowsupdate.com list=windowsupdateslist
+add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dspw65.akamai.net. comment=\
+    download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \
+    comment=licensing.mp.microsoft.com list=windowsupdateslist
+add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-nlu-net.trafficmanager.net. comment=\
+    star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-tlu-net.trafficmanager.net. comment=\
+    star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=storeedgefd.xbetservices.akadns.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \
+    comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\
+    windowsupdateslist
+add address=e16646.dscg.akamaiedge.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\
+    windowsupdateslist
+add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=bg.microsoft.map.fastly.net. comment=\
+    3.au.download.windowsupdate.com list=windowsupdateslist
+add list=windowsupdateslist
+add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\
+    star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a2033.dscd.akamai.net. comment=\
+    star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-nlu-net.trafficmanager.net. comment=\
+    dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-b-tlu-net.trafficmanager.net. comment=\
+    1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a122.dscg3.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist
+add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e10370.d.akamaiedge.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=a1683.dscd.akamai.net. comment=\
+    dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \
+    comment=collections.mp.microsoft.com list=windowsupdateslist
+add address=a1847.dscd.akamai.net. comment=\
+    wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=au.download.windowsupdate.com.edgesuite.net. comment=\
+    2.au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dscg3.akamai.net. comment=\
+    au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    4.au.download.windowsupdate.com list=windowsupdateslist
+add address=cl-glcb907925.gcdn.co. comment=\
+    4.au.download.windowsupdate.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \
+    comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=ts-frontend.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=sds.trafficmanager.net. comment=software-download.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\
+    windowsupdateslist
+add address=e12671.dscd.akamaiedge.net. comment=\
+    download.microsoft.com.edgekey.net list=windowsupdateslist
+add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12358.d.akamaiedge.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-tlu-net.trafficmanager.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a1856.dspw65.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina
+add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=purchase.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.mp.microsoft.com list=windowsupdateslist
+add address=e110219.a.akamaiedge.net. comment=\
+    purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.141 list=windowsupdateslist
+add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=storesdk.xbetservices.akadns.net. comment=\
+    storesdk.dsx.mp.microsoft.com list=windowsupdateslist
+add address=e16646.g.akamaiedge.net. comment=\
+    storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=software-download.microsoft.com.delivery.microsoft.com. comment=\
+    software-download.microsoft.com list=windowsupdateslist
+add address=download.prss.microsoft.com.akamaized.net. comment=\
+    software-download.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina
+add address=87.250.250.50 comment=YandexDisk list=NoVdsina
+add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\
+    purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\
+    cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=a1996.dscd.akamai.net. comment=\
+    wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\
+    tas02.sls.update.microsoft.com list=windowsupdateslist
+add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\
+    star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\
+    paymentinstruments.mp.microsoft.com list=windowsupdateslist
+add address=10.30.30.33 comment=amster list=NoWG
+add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG
+add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG
+add address=wg.vados.ru comment=VDSina-vpn list=VDSina
+add address=80.85.244.9 list=TRUSTED
+add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina
+add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS
+add address=dns.google comment=Google-dns list=Trusted-DNS
+add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\
+    Trusted-DNS
+add address=time.google.com comment=Google-time list=Trusted-NTP
+add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP
+add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=cp.vdsina.com comment=VDSina-vpn list=VDSina
+add address=vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns.vados.ru comment=VDSina-vpn list=VDSina
+add address=vdsina.com comment=VDSina-vpn list=VDSina
+add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=10.30.30.0/24 comment="Local Network" list=Local-Net
+add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net
+add address=146.120.64.208/29 comment="External Net" list=Unet
+add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina
+add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina
+add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina
+add address=10.30.30.30 comment=miller disabled=yes list=NoWG
+add address=10.30.30.33 comment="Direct connet to DNS servers" list=\
+    Direct-DNS
+add address=109.107.177.79 list=VPN-Server
+add address=10.0.0.0/8 list=RFC1918
+add address=172.16.0.0/12 list=RFC1918
+add address=192.168.0.0/16 list=RFC1918
+add address=8.8.4.4 disabled=yes list=to_vpn
+add address=myip.ru disabled=yes list=to_vpn
+add address=10.30.30.98 disabled=yes list=to_vpn
+/ip firewall filter
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=12h chain=input comment="block honeypot DNS" \
+    connection-state=new dst-port=53 in-interface=Unet-ether1 protocol=udp \
+    src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment=\
+    "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=!TRUSTED
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \
+    connection-state=new dst-port=5060 in-interface=Unet-ether1 protocol=udp
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot NTP" \
+    connection-state=new dst-port=123 in-interface=Unet-ether1 protocol=udp
+add action=fasttrack-connection chain=forward comment=\
+    "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \
+    connection-state=established,related,new disabled=yes
+add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \
+    protocol=tcp
+add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \
+    protocol=udp
+add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \
+    dst-port=53 protocol=tcp src-address=10.30.30.0/24
+add action=accept chain=input comment="udp Accept input DNS queries" \
+    dst-port=53 protocol=udp src-address=10.30.30.0/24
+add action=accept chain=output comment="accept WireGuard" disabled=yes \
+    dst-address-list=VPN-Server out-interface=Unet-ether1 protocol=udp \
+    src-port=13231
+add action=accept chain=output disabled=yes dst-address-list=VPN-Server \
+    dst-port=29185 out-interface=Unet-ether1 protocol=udp
+add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
+    connection-state=established,related,new disabled=yes routing-mark=\
+    !To-VPN
+add action=accept chain=output disabled=yes protocol=tcp src-port=443
+add action=accept chain=output disabled=yes src-address=127.0.0.1
+add action=accept chain=forward comment="defconf: accept in ipsec policy" \
+    disabled=yes ipsec-policy=in,ipsec
+add action=accept chain=forward comment="defconf: accept out ipsec policy" \
+    disabled=yes ipsec-policy=out,ipsec
+add action=accept chain=forward comment=\
+    "defconf: accept established,related, untracked" connection-state=\
+    established,related,untracked disabled=yes
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid in-interface=Unet-ether1 src-address=\
+    !10.30.30.0/24
+add action=drop chain=forward comment=\
+    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
+    connection-state=new in-interface=Unet-ether1 src-address-list=!VDSina
+add action=accept chain=input in-interface=Unet-ether1 protocol=icmp \
+    src-address-list=VDSina
+add action=accept chain=input connection-state=established
+add action=accept chain=input connection-state=related
+/ip firewall mangle
+add action=accept chain=prerouting comment=RFC1918 dst-address-list=RFC1918 \
+    in-interface-list=!WAN
+add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \
+    new-routing-mark=main passthrough=no src-address-list=NoWG
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for NoVdsina" disabled=yes dst-address-list=NoVdsina \
+    new-routing-mark=main passthrough=no src-address=10.30.30.0/24
+add action=mark-connection chain=prerouting comment=\
+    "Transit for address-list \"to_vpn\"" connection-mark=no-mark disabled=\
+    yes dst-address-list=to_vpn in-interface-list=!WAN new-connection-mark=\
+    to-vpn-conn routing-mark=!main
+add action=mark-routing chain=prerouting comment=\
+    "Find routing over table r_to_vpn" connection-mark=to-vpn-conn disabled=\
+    yes in-interface-list=!WAN new-routing-mark=r_to_vpn
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for VDSina" dst-address-list=VPN-Server \
+    new-routing-mark=main passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\
+    Unet new-routing-mark=main passthrough=no
+add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\
+    To-VPN src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \
+    new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment="WG for all" \
+    dst-address-list=!NoVdsina new-routing-mark=To-VPN src-address=\
+    10.30.30.0/24
+add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \
+    out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\
+    1381-65535
+add action=mark-connection chain=prerouting comment=\
+    "Mark VPN connections to exclude from FastTrack" disabled=yes \
+    new-connection-mark=VPN_No_FastTrack routing-mark=To-VPN
+add action=mark-routing chain=prerouting comment="VPN Network" disabled=yes \
+    dst-address=10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24
+add action=mark-connection chain=output comment="For this router" \
+    connection-mark=no-mark disabled=yes dst-address-list=to_vpn \
+    new-connection-mark=to-vpn-conn-local
+add action=mark-routing chain=output comment="For this router" \
+    connection-mark=to-vpn-conn-local disabled=yes new-routing-mark=r_to_vpn
+/ip firewall nat
+add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=masquerade chain=srcnat comment=\
+    "Nat Addresses for routing mark r_to_vpn" disabled=yes routing-mark=\
+    r_to_vpn
+add action=dst-nat chain=dstnat comment=\
+    "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=VPN-Server \
+    to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat comment=\
+    "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\
+    udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\
+    Unet-ether1 protocol=udp src-address=!10.30.30.0/24 to-addresses=\
+    10.30.30.33 to-ports=44333
+add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \
+    routing-mark=To-VPN
+add action=masquerade chain=srcnat comment="Default NAT" out-interface=\
+    Unet-ether1 routing-mark=!To-VPN src-address=10.30.30.0/24
+add action=dst-nat chain=dstnat dst-port=44044 in-interface=Unet-ether1 \
+    protocol=udp src-address=109.107.177.79 to-addresses=10.30.30.33 \
+    to-ports=44044
+add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \
+    fragment=no in-interface=Unet-ether1 protocol=tcp routing-mark=main \
+    to-addresses=10.30.30.33 to-ports=443
+add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \
+    dst-port=80 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=80
+add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \
+    dst-port=2904 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2904
+add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\
+    5000 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=5000
+add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\
+    2377 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=2377
+add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\
+    Unet-ether1 protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \
+    to-ports=81
+add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\
+    Unet-ether1 protocol=tcp src-address-list=TRUSTED to-addresses=\
+    10.30.30.33 to-ports=22
+add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \
+    dst-port=2377 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2377
+add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\
+    Unet-ether1 protocol=tcp routing-mark=!To-VPN to-addresses=10.30.30.33 \
+    to-ports=22
+add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \
+    dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \
+    time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\
+    Bridge-LAN protocol=tcp src-address-list=KIDS time=\
+    6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+/ip firewall raw
+add action=drop chain=prerouting comment="Drop Honeypot Hackers" \
+    in-interface=Unet-ether1 src-address-list="Honeypot Hacker"
+add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \
+    in-interface-list=WAN src-address-list=Trusted-DNS
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \
+    content=linux.duke.edu disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleapis.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googlevideo.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleusercontent.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    nhacmp3youtube.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \
+    content=rutube.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \
+    content=me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "icloud.com raw" content=icloud.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \
+    disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "api.db-ip.com raw" content=api.db-ip.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \
+    content=gosuslugi.ru disabled=yes
+/ip firewall service-port
+set ftp disabled=yes
+set tftp disabled=yes
+set irc disabled=no
+set sip disabled=yes
+set pptp disabled=yes
+set rtsp disabled=no
+#error exporting "/ip/ipsec/key/psk" (timeout)
+/ip ipsec settings
+set accounting=no
+/ip ipsec policy
+set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0
+/ip ipsec profile
+set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
+/ip proxy
+set cache-administrator="" max-cache-size=none port=80,443 src-address=\
+    0.0.0.0
+/ip route
+add check-gateway=none comment=WG-Default disabled=no distance=1 dst-address=\
+    0.0.0.0/0 gateway=WG routing-table=To-VPN scope=30 target-scope=10
+#error exporting "/ipv6/route" (timeout)
+/ip service
+set ftp disabled=yes
+set telnet disabled=yes
+set reverse-proxy disabled=yes
+set ssh address=10.30.30.0/24 port=2222
+set winbox address=10.30.30.0/24
+set api address=10.30.30.0/24
+set api-ssl address=10.30.30.0/24 disabled=yes
+set www-ssl certificate=Root-YE port=18443
+set www address=10.30.30.0/24 disabled=yes port=18880
+/ip service webserver
+set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\
+    no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \
+    webfig-secure=no
+/ip ssh
+set forwarding-enabled=both publickey-authentication-options=verify-required
+/ip upnp
+set enabled=yes
+/ip upnp interfaces
+add interface=Bridge-LAN type=internal
+add forced-ip=146.120.64.211 interface=Unet-ether1 type=external
+add forced-ip=109.107.177.79 interface=*E type=external
+add interface=lo type=internal
+add interface=wlan2 type=internal
+add interface=wlan1 type=internal
+/ipv6 dhcp-client
+add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\
+    info use-interface-duid=yes validate-server-duid=no
+/ipv6 dhcp-server option sets
+add name=domain-search-set options=domain-search-list
+add name="=\"Client ID\"" options=HostName
+/ipv6 firewall address-list
+add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
+add address=::1/128 comment="defconf: lo" list=bad_ipv6
+add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
+add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
+add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
+add address=100::/64 comment="defconf: discard only " list=bad_ipv6
+add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
+add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
+add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
+/ipv6 firewall filter
+add action=accept chain=input comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=input comment="defconf: drop invalid" connection-state=\
+    invalid
+add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=input comment="defconf: accept UDP traceroute" \
+    dst-port=33434-33534 protocol=udp
+add action=accept chain=input comment=\
+    "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
+    udp src-address=fe80::/10
+add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
+    protocol=udp
+add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=input comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=input comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+add action=accept chain=forward comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
+add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
+    hop-limit=equal:1 protocol=icmpv6
+add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=forward comment="defconf: accept HIP" protocol=139
+add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
+    500,4500 protocol=udp
+add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=forward comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=forward comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+/ipv6 nd
+set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \
+    managed-address-configuration=yes other-configuration=yes pref64=::/64
+/ipv6 nd prefix
+add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none
+/ipv6 nd prefix default
+set dhcp6-pd-preferred=yes
+/ipv6 nd proxy
+add disabled=yes interface=lo
+/ipv6 nd settings
+set router-advertisement-route-distance=100
+/routing settings
+set single-process=no
+/system clock
+set time-zone-name=Europe/Moscow
+/system clock manual
+set time-zone=+03:00
+/system identity
+set name=MikroMaster
+/system logging
+add action=email disabled=yes regex="* added|changed|removed *" topics=\
+    system,info
+/system ntp client
+set enabled=yes
+/system ntp server
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes
+/system ntp client servers
+add address=0.ru.pool.ntp.org
+add address=1.ru.pool.ntp.org
+add address=2.ru.pool.ntp.org
+add address=3.ru.pool.ntp.org
+add address=time.google.com disabled=yes
+/system package update
+set check-certificate=yes-without-crl ip-version=ipv4
+/system scheduler
+add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \
+    on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Every Day Check For Update Scripts" interval=1d name=\
+    AM-ScriptInstallUpdate on-event=\
+    ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\
+    AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+/system watchdog
+set watchdog-timer=no
+/tool e-mail
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \
+    server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com
+/tool mac-server
+set allowed-interface-list=LAN
+/tool mac-server mac-winbox
+set allowed-interface-list=LAN
+/tool netwatch
+add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\
+    -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\
+    e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \
+    interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\
+    https-get up-script=""
+add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\
+    flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\
+    oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \
+    name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \
+    up-script=""
+add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\
+    8.8.8.8 down-script="" host=dns.google http-codes="" name=\
+    "Google-DNS IPv4" test-script="" type=dns up-script=""
+add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\
+    rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\
+    -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \
+    http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\
+    "" test-script="" type=dns up-script=""
+add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \
+    dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \
+    interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \
+    test-script="" timeout=800ms type=dns up-script=""
+add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\
+    ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \
+    down-script="" host=149.112.112.112 http-codes="" interval=10s name=\
+    "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script=""
+add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \
+    down-script="" host=91.192.189.2 http-codes="" interval=10s name=\
+    ns1.unet.ws test-script="" type=simple up-script=""
+add check-certificate=yes comment=\
+    "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \
+    disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\
+    vds.vados.ru port=443 test-script="" type=https-get up-script=""
+add comment="WireGuard NAT " disabled=yes down-script="/log info \"[WG-Monitor\
+    ] WireGuard is NOT running - reverting rules\"\
+    \n/ip firewall nat remove [find comment=\"Redirect to Router\"]\
+    \n/ip dns set servers=8.8.8.8\
+    \n/ip dns cache flush\
+    \n/ip route remove [find comment=\"wg-auto-route\"]\
+    \n" host=10.8.0.1 http-codes="" interval=15s name=WG test-script="" \
+    timeout=5s type=simple up-script="/log info \"[WG-Monitor] WireGuard is RU\
+    NNING - applying rules\";\
+    \n:local routeFile \"ips.txt\";\
+    \n:local routeDefAddr \"0.0.0.0/0\";\
+    \n:local routeGateway \"10.8.0.1\";\
+    \n:local routeIF \"WG\";\
+    \n:local routeTable \"To-VPN\";\
+    \n:local routeComment \"wg-auto-route\";\
+    \n/ip dns cache flush;\
+    \n:if ([:len [/ip firewall nat find comment=\"Redirect to Router\"]] > 0) \
+    do={\
+    \n  /ip firewall nat remove [find comment=\"Redirect to Router\"];\
+    \n}\
+    \n/ip firewall nat add action=redirect chain=dstnat src-address-list=\"Red\
+    irectDNS\" dst-port=53 protocol=udp comment=\"Redirect to Router\";\
+    \n/ip dns set servers=\$routeGateway;\
+    \n:local content [/file get \$routeFile contents];\
+    \n:if ([:len \$content] > 0) do={\
+    \n    :local line \"\";\
+    \n    :for i from=0 to=([:len \$content] - 1) do={\
+    \n        :local char [:pick \$content \$i];\
+    \n        :if (\$char != \"\\r\" && \$char != \"\\n\") do={\
+    \n            :set line (\$line . \$char);\
+    \n        } else={\
+    \n            :if ([:len \$line] > 5) do={\
+    \n                :do { /ip route add disabled=no dst-address=\$routeDefAd\
+    dr gateway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$r\
+    outeTable comment=\$routeComment check-gateway=none } on-error={}\
+    \n            }\
+    \n            :set line \"\";\
+    \n        }\
+    \n    }\
+    \n    :if ([:len \$line] > 5) do={\
+    \n#         :do { /ip route add dst-address=\$line gateway=\$routeGateway \
+    distance=1 comment=\$routeComment } on-error={}\
+    \n           :do { /ip route add disabled=no dst-address=\$routeDefAddr ga\
+    teway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$routeT\
+    able comment=\$routeComment check-gateway=none } on-error={}\
+    \n    }\
+    \n}\
+    \n:local dotPos [:find \$routeGateway \".\"];\
+    \n:if (\$dotPos != \"\") do={\
+    \n    :local firstOctet [:pick \$routeGateway 0 \$dotPos];\
+    \n    :local derivedDstAddress (\$firstOctet . \".30.0.0/15\");\
+    \n    :do { /ip route add dst-address=\$derivedDstAddress gateway=\$routeG\
+    ateway distance=1 comment=\$routeComment } on-error={}\
+    \n}\
+    \n\
+    \n"
+add comment=WG-Default disabled=yes down-script=\
+    "/ip route disable [find comment=\"WG-Default\"];" host=10.8.0.1 \
+    interval=15s name=WG packet-count=20 test-script="" thr-loss-count=5 \
+    type=icmp up-script="/ip route enable [find comment=\"WG-Default\"];"
+/user aaa
+set accounting=no
diff --git a/MikroMaster/20260711/20260711230002-Config.rsc b/MikroMaster/20260711/20260711230002-Config.rsc
new file mode 100644
index 0000000..6e72e27
--- /dev/null
+++ b/MikroMaster/20260711/20260711230002-Config.rsc
@@ -0,0 +1,75 @@
+# 2026-07-11 23:00:09 by RouterOS 7.23.1
+# software id = A8L5-07YF
+#
+# model = RB952Ui-5ac2nD
+# serial number = D3D50CEDCD38
+#error exporting "/interface/pppoe-server" (timeout)
+/interface bridge
+add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\
+    "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\
+    Bridge-LAN port-cost-mode=short
+/interface ethernet
+set [ find default-name=ether1 ] comment=Unet-cable loop-protect=off name=\
+    Unet-ether1 rx-flow-control=auto tx-flow-control=auto
+set [ find default-name=ether2 ] comment=LAN-2
+set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3
+set [ find default-name=ether4 ] comment=LAN-4
+set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \
+    loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto
+/interface wireless
+# managed by CAPsMAN
+# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding
+set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados wireless-protocol=802.11
+# managed by CAPsMAN
+# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding
+set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados5g wireless-protocol=802.11
+/interface wireguard
+add comment=WG listen-port=13231 mtu=1320 name=WG
+add comment="WG interface for Amnezia route" disabled=yes listen-port=33033 \
+    mtu=1360 name=wg-nuc
+/interface list
+add include=static name=LAN
+add name=Internet
+add include=Internet name=WAN
+#error exporting "/interface/macsec/profile" (timeout)
+#error exporting "/queue/interface" (timeout)
+/interface wireless security-profiles
+set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
+    dynamic-keys supplicant-identity=MikroTik
+/iot wiliot servers
+set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East"
+/ip dhcp-server option
+add code=12 name=HostName
+add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00"
+/ip dhcp-server option sets
+add name=HP1505n options=HostName
+add name=StartLife1 options=HostName
+add name=amsterDev options=HostName
+add name=MiTV options=HostName
+add name=miller options=HostName
+add name=amster options=HostName
+add name=garage options=HostName
+add name=domain-search-set options=domain-search-list
+add name=VADOS-LEN options=HostName
+add name=VADOS-NUC options=HostName
+add name=MikroNUC options=HostName
+add name=master options=HostName
+add name=MikroYellow options=HostName
+add name="=\"Client ID\"" options=HostName
+add name=iVados options=HostName
+/ip dns forwarders
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no
+add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \
+    verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no
+#error exporting "/ip/ipsec/policy/group" (timeout)
diff --git a/MikroMaster/20260711/20260711232002-Config.rsc b/MikroMaster/20260711/20260711232002-Config.rsc
new file mode 100644
index 0000000..e4b1384
--- /dev/null
+++ b/MikroMaster/20260711/20260711232002-Config.rsc
@@ -0,0 +1,3840 @@
+# 2026-07-11 23:20:07 by RouterOS 7.23.1
+# software id = A8L5-07YF
+#
+# model = RB952Ui-5ac2nD
+# serial number = D3D50CEDCD38
+/interface bridge
+add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\
+    "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\
+    Bridge-LAN port-cost-mode=short
+/interface ethernet
+set [ find default-name=ether1 ] comment=Unet-cable loop-protect=off name=\
+    Unet-ether1 rx-flow-control=auto tx-flow-control=auto
+set [ find default-name=ether2 ] comment=LAN-2
+set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3
+set [ find default-name=ether4 ] comment=LAN-4
+set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \
+    loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto
+/interface wireless
+# managed by CAPsMAN
+# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding
+set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados wireless-protocol=802.11
+# managed by CAPsMAN
+# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding
+set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados5g wireless-protocol=802.11
+/interface wireguard
+add comment=WG listen-port=13231 mtu=1320 name=WG
+add comment="WG interface for Amnezia route" disabled=yes listen-port=33033 \
+    mtu=1360 name=wg-nuc
+/interface list
+add include=static name=LAN
+add name=Internet
+add include=Internet name=WAN
+/interface wireless security-profiles
+set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
+    dynamic-keys supplicant-identity=MikroTik
+/iot wiliot servers
+set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East"
+/ip dhcp-server option
+add code=12 name=HostName
+add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00"
+/ip dhcp-server option sets
+add name=HP1505n options=HostName
+add name=StartLife1 options=HostName
+add name=amsterDev options=HostName
+add name=MiTV options=HostName
+add name=miller options=HostName
+add name=amster options=HostName
+add name=garage options=HostName
+add name=domain-search-set options=domain-search-list
+add name=VADOS-LEN options=HostName
+add name=VADOS-NUC options=HostName
+add name=MikroNUC options=HostName
+add name=master options=HostName
+add name=MikroYellow options=HostName
+add name="=\"Client ID\"" options=HostName
+add name=iVados options=HostName
+/ip dns forwarders
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no
+add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \
+    verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no
+#error exporting "/ip/ipsec/policy/group" (timeout)
+#error exporting "/ip/dhcp-server" (timeout)
+/ip ipsec proposal
+set [ find default=yes ] disabled=yes
+/ip pool
+add name=dhcp ranges=10.30.30.83-10.30.30.254
+/ip smb users
+set [ find default=yes ] disabled=yes
+add disabled=yes name=vados
+/ipv6 dhcp-client option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=DUID value=0x00030001488f5a8e1abc
+add code=61 name=clientid
+/ipv6 dhcp-server option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=CLIENT_DUID
+add code=61 name=CLIENT_MAC
+/ppp profile
+set *FFFFFFFE use-upnp=no
+/routing bgp template
+set default disabled=no output.network=bgp-networks
+/routing table
+add disabled=no fib name=To-VPN
+add disabled=no fib name=r_to_vpn
+/system logging action
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email
+/system script
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\
+    \n\r\
+    \n#:local Script AM-setup\
+    \n;\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n\
+    \n\r\
+    \n#\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\
+    \n\r\
+    \n#\r\
+    \n\
+    \n#root.mnuc.backuper\
+    \n\
+    \n\r\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\
+    .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\
+    \n\
+    \n#:local Script AM-GlobalConfig;\
+    \n\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n#:local FetchFile AM-DOHCert.rsc\
+    \n\
+    \n\r\
+    \n\r\
+    \n#\
+    \n:global MkDir;\
+    \n\r\
+    \n\
+    \n#:local FetchFile Binary.backup\
+    \n:local localDir \"\";\
+    \n\
+    \n\r\
+    \n#\$MkDir \$localDir;\r\
+    \n\
+    \n#\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\
+    \$localDir . \$FetchFile);\r\
+    \n"
+add comment="Global Config Script" dont-require-permissions=no name=\
+    AM-GlobalConfig owner=AM-GlobalConfig policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GlobalConfig\r\
+    \n# Script comment: Global Config Script\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# Warning: Dont touch this line!\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global GlobalConfReady false;\r\
+    \n#\r\
+    \n#\r\
+    \n# Global Url For Amster scripts to fetch\r\
+    \n# most be defined in AM-Init-Script or AM-setup scripts\r\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n:global ScriptsUrlSuffix (a);\r\
+    \n:global CheckSumsVerify true;\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF true;\r\
+    \n:global CommentsInScripts true;\r\
+    \n\r\
+    \n# Debug output:\r\
+    \n:global PrintDebug true; #false;\r\
+    \n\r\
+    \n# Debug output for specific script:\r\
+    \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\
+    \n\r\
+    \n# Debug logs\r\
+    \n# Other actions (disk, email, remote or support) can be used as well.\r\
+    \n# I do not recommend using echo - use debug output instead (https://rsc.\
+    eworm.de/main/DEBUG.html#debug-output).\r\
+    \n#/system/logging/add topics=script,debug action=memory;\r\
+    \n\r\
+    \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\
+    \n:global Domain \"WORKGROUP\";\r\
+    \n\r\
+    \n:global EmailGeneralTo \"vados@vados.ru\";\r\
+    \n#:global EmailGeneralCc \"\";\r\
+    \n\r\
+    \n# \$ScriptInstallUpdate mod/notification-telegram\r\
+    \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\
+    \";\r\
+    \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\
+    \n# Use this to send notifications to a specific topic in group.\r\
+    \n#:global TelegramThreadId \"30\";\r\
+    \n# Using telegram-chat you have to define trusted chat ids (not group ids\
+    !)\r\
+    \n# or user names. Groups allow to chat with devices simultaneously.\r\
+    \n:global TelegramChatIdsTrusted {\r\
+    \n  \"454403445\"\r\
+    \n  \"-1003631309063\"\r\
+    \n  \"-5124482807\"\r\
+    \n  \"1087968824\";\r\
+    \n};\r\
+    \n#  \"-5294757340\";\r\
+    \n\r\
+    \n:global TelegramChatGroups \"(all)\";\r\
+    \n#:global TelegramChatGroups \"(all|home|office)\";\r\
+    \n\r\
+    \n:global NotificationFunctions {\r\
+    \n  \"email\"\r\
+    \n  \"telegram\";\r\
+    \n};\r\
+    \n# Toggle this to disable symbols in notifications.\r\
+    \n:global NotificationsWithSymbols true;\r\
+    \n:global TerminalColorOutput true;\r\
+    \n\r\
+    \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\
+    \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\
+    \n\r\
+    \n## Update channel. Possible values: stable, long-term, testing, developm\
+    ent\r\
+    \n:global updateChannel \"stable\";\r\
+    \n\r\
+    \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\
+    \");\r\
+    \n:global CertRenewTime 2w;\r\
+    \n:global CertRenewPass (a); #{\r\
+    \n#  \"\";\r\
+    \n#  \"v3ry-s3cr3t\";\r\
+    \n#  \"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n:global CertWarnTime 1w;\r\
+    \n:global CertIssuedExportPass (a); # {\r\
+    \n#  \"\";\r\
+    \n#  \"cert1-cn\"=\"v3ry-s3cr3t\";\r\
+    \n#  \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n\r\
+    \n# Script BackupAndUpdate mode, possible values: backup,\r\
+    \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\
+    n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;).  \r\
+    \n# osupdate - Update if available and creates backups before/after update\
+    \_(ignores `forceBackup`)\r\
+    \n#               Set `forceBackup` to true to always create backups, even\
+    \_without updates\r\
+    \n# osnotify - Set `forceBackup` to always create backups on every run\r\
+    \n:global DevInfoIncludeIP true;\r\
+    \n:global BackupAndUpdateMode \"osnotify\"\r\
+    \n\r\
+    \n:global forceBackup true;\r\
+    \n:global BackupPassword \"Peskar55\";\r\
+    \n\r\
+    \n# SFTP Backup Variables\r\
+    \n:global BackupRandomDelay 0;\r\
+    \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\
+    \n:global BackupUploadUser \$Identity;\r\
+    \n:global BackupUploadPass \"root.mnuc.backuper\";\r\
+    \n\r\
+    \n:global BackupSendBinary true;\r\
+    \n:global BackupSendExport true;\r\
+    \n:global BackupSendGlobalConfig true;\r\
+    \n:global BackupSendScripts true;\r\
+    \n\r\
+    \n# Remove local file after uploading if no errors\r\
+    \n:global BackupRmLocal true;\r\
+    \n\r\
+    \n# Local Backups Root Directory \r\
+    \n:global BackupLocalRoot \"tmpfs\";\r\
+    \n\r\
+    \n# Encrypt Backup\r\
+    \n:global BackupEncrypt true;\r\
+    \n\r\
+    \n# Sensitive information in Backups\r\
+    \n:global BackupSens true;\r\
+    \n\r\
+    \n# User Export\r\
+    \n:global BackupUser true;\r\
+    \n\r\
+    \n# License Export (not for CHR, will silently skip)\r\
+    \n:global BackupLicense false;\r\
+    \n\r\
+    \n# SSH Keys\r\
+    \n:global BackupSshKeys true;\r\
+    \n\r\
+    \n# Certificate Export\r\
+    \n:global BackupCerts true;\r\
+    \n\r\
+    \n# Certificate Password\r\
+    \n:global BackupCertsPasswd \"\";\r\
+    \n\r\
+    \n# User-Manager Export\r\
+    \n:global BackupUserMan false;\r\
+    \n\r\
+    \n# The Dude Export\r\
+    \n:global BackupDude false;\r\
+    \n\r\
+    \n# User Files to export, comma-separated string or array of strings\r\
+    \n# User Files are not removed on backup\r\
+    \n# Any directory paths will be removed (/ -> _) on remote file\r\
+    \n# Nonpresent files are silently skipped\r\
+    \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\
+    \n\r\
+    \n# load functions and any custom scripts\r\
+    \n#                    [ /system/script/find where name=\"global-config-ov\
+    erlay\" ], \\\r\
+    \n#                    [ /system/script/find where name~\"^global-config-o\
+    verlay\\\\.d/.\" ]\r\
+    \n#\r\
+    \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\
+    ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\
+    \r\
+    \n#  :onerror Err {\r\
+    \n#     /system/script/run \$Script;\r\
+    \n#     } do={\r\
+    \n#       :log error (\"Loading configuration from configs and functions\"\
+    \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\
+    \n#  }\r\
+    \n#}\r\
+    \n#:log info \"\\ndevMode = \$devMode\";\r\
+    \n#:log info \"\\ndevRunning = \$devRunning\";\r\
+    \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \
+    GlobalRUN\\r\?\\n\" ] do={\r\
+    \n  :onerror Err {\r\
+    \n    /system/script/run \$Script;\r\
+    \n       } do={\r\
+    \n       :log error (\"Run script \" . [ /system/script/get \$Script name \
+    ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# signal we are ready\r\
+    \n:set GlobalConfReady true;\r\
+    \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\
+    \n"
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \
+    owner=AM-GlobalFunc policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GglobalFunc\r\
+    \n# Script comment: Global functions\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch, scheduler\r\
+    \n:local ExitOK false;\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n#:global checkRunJob \$SriptName;\r\
+    \n#:global fixCRLF;\r\
+    \n#:if (\$fixCRLF !=  false) do={\r\
+    \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\
+    ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\
+    }\r\
+    \n#:if (\$fixCRLF !=  \"LF\") do={ /system/script/set source=[ :tocrlf [ g\
+    et \$fixScript source ] ] \$fixScript};};\r\
+    \n#}\r\
+    \n:global GlobalFuncReady false;\r\
+    \n\r\
+    \n# Git commit id & info, expected configuration version\r\
+    \n:global CommitId \"main/729/f42d43ae\";\r\
+    \n:global CommitTAG \"unknown\";\r\
+    \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\
+    r: root, in 00:05:03 01.07.2026.\";\r\
+    \n\r\
+    \n# The variables are received right here.\r\
+    \n:global GlobalConfVersion 140;\r\
+    \n\r\
+    \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\
+    \n\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global IdentityShort [:pick \$Identity 0 18];\r\
+    \n\r\
+    \n:global devBoardName [/system/resource/get board-name];\r\
+    \n:global devMode [/system/device-mode/get mode];\r\
+    \n:global devCurArch [/system/resource/get architecture-name];\r\
+    \n:global devCurVersion [/system/resource/get version];\r\
+    \n\r\
+    \n# Variables defined in AM-GlobalConfig.rsc\r\
+    \n:global TerminalColorOutput;\r\
+    \n:global CommentsInScripts;\r\
+    \n:global DetectIpAddrDefault;\r\
+    \n:global DetectIpAddrFallback;\r\
+    \n:global updateChannel;\r\
+    \n:global Domain;\r\
+    \n:global EmailGeneralTo;\r\
+    \n:global BackupAndUpdateMode;\r\
+    \n\r\
+    \n# Single functions, without nested functions.\r\
+    \n:global MiniDateTimeStamp;\r\
+    \n:global MicroDateTimeStamp;\r\
+    \n\r\
+    \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\
+    \n:global LogPrint;\r\
+    \n\r\
+    \n# DeviceInfo and Updates\r\
+    \n:global IsCheckUpdates;\r\
+    \n:global WaitCheckUpdates;\r\
+    \n:global GetPubIp;\r\
+    \n\r\
+    \n:global GetArrDeviceInfo;\r\
+    \n:global WaitArrDeviceInfo;\r\
+    \n\r\
+    \n:global devModel;\r\
+    \n:global devRunningMode;\r\
+    \n\r\
+    \n:global devRbRevision;\r\
+    \n:global devRbSerialNumber;\r\
+    \n:global devRbVerAvail;\r\
+    \n\r\
+    \n:global runningChannelVersion;\r\
+    \n:global runningChannel;\r\
+    \n:global runningVersion;\r\
+    \n\r\
+    \n:global devBuildTime;\r\
+    \n:global ROsVerAvail;\r\
+    \n:global PkgUpdStatus;\r\
+    \n:global currentUpdateChannel;\r\
+    \n\r\
+    \n:global ScriptInstallUpdate;\r\
+    \n\r\
+    \n:global DeviceInfo;\r\
+    \n\r\
+    \n:global OldMode;\r\
+    \n\r\
+    \n:global ParseKeyValueStore;\r\
+    \n:global RandomDelay;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global EscapeForRegEx;\r\
+    \n:global CharacterMultiply;\r\
+    \n:global CharacterReplace;\r\
+    \n:global CleanFilePath;\r\
+    \n:global CleanName;\r\
+    \n\r\
+    \n:global CommitBrief;\r\
+    \n\r\
+    \n:global EitherOr;\r\
+    \n:global FormatLine;\r\
+    \n:global GetRandom20CharAlNum;\r\
+    \n:global GetRandom20CharHex;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global Grep;\r\
+    \n:global IfThenElse;\r\
+    \n:global MAX;\r\
+    \n:global MIN;\r\
+    \n:global HumanReadableNum;\r\
+    \n\r\
+    \n:global IsFullyConnected;\r\
+    \n:global IsDNSResolving;\r\
+    \n:global IsTimeSync;\r\
+    \n:global IsTimeSyncCached;\r\
+    \n:global IsTimeSyncResetNtp;\r\
+    \n\r\
+    \n:global MkDir;\r\
+    \n:global RmDir;\r\
+    \n:global RmFile;\r\
+    \n:global FileGet;\r\
+    \n:global Unix2Dos;\r\
+    \n:global UrlEncode;\r\
+    \n:global WaitForFile;\r\
+    \n:global ScriptLock;\r\
+    \n:global SendTelegram;\r\
+    \n:global NotificationFunctions;\r\
+    \n:global SendNotification;\r\
+    \n:global SendNotification2;\r\
+    \n:global SymbolForNotification;\r\
+    \n:global SymbolByUnicodeName;\r\
+    \n:global ValidateSyntax;\r\
+    \n:global CheckSumsVerify;\r\
+    \n:global GlobalConfChanges;\r\
+    \n:global GlobalConfMigration;\r\
+    \n:global VersionToNum;\r\
+    \n:global RequiredRouterOS;\r\
+    \n:global ExitError;\r\
+    \n:global ExitOnError;\r\
+    \n\r\
+    \n:global FetchHugeFiles;\r\
+    \n:global FetchUserAgentStr;\r\
+    \n:global FileExists;\r\
+    \n:global CertificateAvailable;\r\
+    \n:global CertificateDownload;\r\
+    \n:global CertificateNameByCN;\r\
+    \n:global CharacterMultiply;\r\
+    \n\r\
+    \n:global InspectVar;\r\
+    \n:global InspectVarRet;\r\
+    \n:global ParseCustom;\r\
+    \n\r\
+    \n:set IsCheckUpdates do={\r\
+    \n  :local isInfo [:tobool \$1];\r\
+    \n  :global updateChannel;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\
+    \n  :local CurrentChannel [ /system/package/update/get channel ];\r\
+    \n  :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\
+    el) do={\r\
+    \n    :retry command={/system/package/update set channel=\$updateChannel} \
+    \_delay=300ms max=5 on-error={};\r\
+    \n    :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\
+    \n  }\r\
+    \n  :local Update [ /system/package/update/get ];\r\
+    \n  :local Channel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set currentUpdateChannel \$Channel;\r\
+    \n  :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\
+    \n  :local StatusPkg \"undefined\";\r\
+    \n  :log info (\$0 . \" Checking for updates...\");\r\
+    \n  :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\
+    dates without-paging as-value]->\"status\")} \\\r\
+    \n   delay=300ms max=5 on-error={};\r\
+    \n  :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\
+    \n  :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\
+    s true; } else={ :set PkgUpdStatus false; }\r\
+    \n  :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \
+    ] ];\r\
+    \n  :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n  :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\
+    \n    :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n    :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n      :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n    }\r\
+    \n    :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\
+    kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\
+    \n    :return true;\r\
+    \n  } else={\r\
+    \n    :return \$PkgUpdStatus;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitCheckUpdates do={\r\
+    \n  :global IsCheckUpdates;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :local Status \"\";\r\
+    \n  :local Update;\r\
+    \n  :local WaitCount 0;\r\
+    \n  :if ([ \$IsCheckUpdates true ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n  :while ((\$Status = \"\" || \$Status = \"finding out latest version...\
+    \") && \$WaitCount < 60) do={\r\
+    \n    :delay 1s;\r\
+    \n    :set WaitCount (\$WaitCount + 1);\r\
+    \n    :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n   }\r\
+    \n  :set Update [ /system/package/update/get ];\r\
+    \n  :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n  :if ((\$Update->\"status\") = \"New version is available\") do={\r\
+    \n    :set PkgUpdStatus true;\r\
+    \n  } else={\r\
+    \n    :set PkgUpdStatus false;\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n    :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n  }\r\
+    \n  :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\
+    \n  :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \
+    do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitArrDeviceInfo do={\r\
+    \n   :global GetArrDeviceInfo;\r\
+    \n   :while ([ \$GetArrDeviceInfo ] = false) do={\r\
+    \n    :delay 1s;\r\
+    \n   }\r\
+    \n}\r\
+    \n\r\
+    \n:set GetArrDeviceInfo do={\r\
+    \n   :global LogPrint;\r\
+    \n   :global arrDeviceInfo;\r\
+    \n   :global devBoardName;\r\
+    \n   :global devModel;\r\
+    \n   :global devRunning;\r\
+    \n   :global devCurArch;\r\
+    \n   :global devRbRevision;\r\
+    \n   :global devRbSerialNumber;\r\
+    \n   :global devBuildTime;\r\
+    \n   :global runningChannelVersion;\r\
+    \n   :global runningChannel;\r\
+    \n   :global runningVersion;\r\
+    \n   :global currentUpdateChannel;\r\
+    \n   :global ROsVerAvail;\r\
+    \n\r\
+    \n   :local DeviceInfo;\r\
+    \n   :local Resource [/system/resource/get];\r\
+    \n   :local Update [ /system/package/update/get ];\r\
+    \n   :local VersionString [ :tostr (\$Resource->\"version\") ];\r\
+    \n   :local ChannelStart [ :find \$VersionString \" (\" ];\r\
+    \n   :local RouterBoard;\r\
+    \n   :local IsRouterBoard false;\r\
+    \n   :local RunningMode \"\";\r\
+    \n\r\
+    \n   :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\
+    \n   :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\
+    \n   :set runningChannelVersion \$VersionString;\r\
+    \n   :set runningVersion \$VersionString;\r\
+    \n   :set runningChannel \"\";\r\
+    \n\r\
+    \n   :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\
+    {\r\
+    \n     :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\
+    \n     :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\
+    len \$VersionString ] ];\r\
+    \n     :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\
+    \n     :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\
+    \r\
+    \n       :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\
+    \n     }\r\
+    \n   }\r\
+    \n\r\
+    \n   :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\
+    \_3] != \"x86\") do={\r\
+    \n   :do {\r\
+    \n      :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\
+    \n#     :set RouterBoard [ /system/routerboard/get ];\r\
+    \n      :if ((\$RouterBoard->\"routerboard\") = true) do={\r\
+    \n        :set IsRouterBoard true;\r\
+    \n     }\r\
+    \n   } on-error={}\r\
+    \n    }\r\
+    \n\r\
+    \n   :do {\r\
+    \n     :set RunningMode [ /system/device-mode/get mode ];\r\
+    \n   } on-error={\r\
+    \n     :do {\r\
+    \n       :set RunningMode [ /system/device-mode/get running ];\r\
+    \n     } on-error={\r\
+    \n       :set RunningMode \"\";\r\
+    \n     }\r\
+    \n   }\r\
+    \n   :set devRunning \$RunningMode;\r\
+    \n\r\
+    \n   :if (\$IsRouterBoard = true) do={\r\
+    \n     :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\
+    \n     :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\
+    \n     :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \
+    ];\r\
+    \n   } else={\r\
+    \n     :set devModel \$devBoardName;\r\
+    \n     :set devRbRevision \"\";\r\
+    \n     :set devRbSerialNumber \"\";\r\
+    \n   }\r\
+    \n\r\
+    \n   :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n   :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n\r\
+    \n   :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\
+    \n   :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\
+    \n   :set (\$DeviceInfo->\"model\") \$devModel;\r\
+    \n   :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\
+    \n   :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\
+    \n   :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\
+    \n   :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\
+    \n   :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\
+    ion;\r\
+    \n   :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\
+    \n   :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\
+    \n   :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\
+    \n   :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\
+    current-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\
+    upgrade-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\
+    \n   :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\
+    alled-version\") ];\r\
+    \n   :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\
+    \n   :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\
+    ) ];\r\
+    \n\r\
+    \n   :set arrDeviceInfo \$DeviceInfo;\r\
+    \n   :return \$DeviceInfo;\r\
+    \n}\r\
+    \n\r\
+    \n:set DeviceInfo do={\r\
+    \n  :global GetArrDeviceInfo;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global FormatLine;\r\
+    \n  :global CommitBrief;\r\
+    \n\r\
+    \n  :local License [/system/license/get];\r\
+    \n  :local Snmp [ /snmp/get ];\r\
+    \n  :local Info [ \$GetArrDeviceInfo ];\r\
+    \n\r\
+    \n  :if ([ :typeof \$Info ] != \"array\") do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :return ( \\\r\
+    \n    [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\
+    \_. \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\
+    \_\\\r\
+    \n    \"Hardware:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Board\" (\$Info->\"board-name\") ] . \"\\n\" . \
+    \\\r\
+    \n    [ \$FormatLine \"    Arch\" (\$Info->\"architecture-name\") ] . \"\\\
+    n\" . \\\r\
+    \n    [ \$FormatLine \"    Model\" (\$Info->\"model\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\
+    \n      (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Serial\" (\$Info->\"serial-number\") ] . \"\
+    \\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"nlevel\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS:\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"level\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    [ \$FormatLine \"    Channel\" (\$Info->\"package-channel\") ] . \"\
+    \\n\" . \\\r\
+    \n    [ \$FormatLine \"    Installed\" (\$Info->\"installed-version\") ] .\
+    \_\"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Running\" ((\$Info->\"running-version\") . \
+    \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\
+    \n      ([ \$FormatLine \"    Running\" (\$Info->\"running-version\") ] . \
+    \"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\
+    \n        (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\
+    \_\\\r\
+    \n      ([ \$FormatLine \"    Available\" (\$Info->\"latest-version\") ] .\
+    \_\"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\
+    \n        (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\
+    ) \\\r\
+    \n      ([ \$FormatLine \"    Firmware\" ((\$Info->\"current-firmware\") .\
+    \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS-Scripts:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Version\" \$GlobalConfVersion ]);\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\
+    tionFunctions ({})}\r\
+    \n\r\
+    \n:set GetRandom20CharAlNum do={\r\
+    \n  :global EitherOr;\r\
+    \n  :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\
+    FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\
+    \n}\r\
+    \n\r\
+    \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\
+    \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\
+    \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\
+    \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\
+    \n\r\
+    \n:global checkRunJob;\r\
+    \n:set checkRunJob do={\r\
+    \n  :local Script [ :tostr \$1 ];\r\
+    \n  :global ScriptLock; \r\
+    \n  :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\
+    \n  :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\
+    :set Job [ /system/script/job/get \$Job ];\r\
+    \n    :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\
+    stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\
+    \n     :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\
+    lse; \r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVar do={\r\
+    \n  :global InspectVarRet;\r\
+    \n  :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\
+    \n}\r\
+    \n\r\
+    \n:set CommitBrief do={\r\
+    \n  :global CommitId;\r\
+    \n  :global CommitInfo;\r\
+    \n  :if (\$CommitId = \"unknown\") do={\r\
+    \n    :return \"unknown\";\r\
+    \n    }\r\
+    \n  :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVarRet do={\r\
+    \n  :local Input \$1;\r\
+    \n  :local Level (0 + [ :tonum \$2 ]);\r\
+    \n  :global CharacterReplace;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global InspectVarRet;\r\
+    \n  :local IndentReturn do={\r\
+    \n    :local Prefix [ :tostr \$1 ];\r\
+    \n    :local Value  [ :tostr \$2 ];\r\
+    \n    :local Level  [ :tonum \$3 ];\r\
+    \n    :global CharacterMultiply;\r\
+    \n    :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\
+    fix . \"-> \" . \$Value);\r\
+    \n  }\r\
+    \n  :local TypeOf [ :typeof \$Input ];\r\
+    \n  :local Len    [ :len \$Input ];\r\
+    \n  :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\
+    \n  :if (\$TypeOf = \"array\") do={\r\
+    \n    :foreach Key,Value in=\$Input do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n        [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\
+    \n        [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    :if (\$TypeOf = \"str\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n         [ \$IndentReturn \"len\" \$Len \$Level ]);\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\
+    \n      }\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if (\$TypeOf != \"nothing\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n       [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\
+    \_\\\r\
+    \n        ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set GetPubIp do={\r\
+    \n    :global DetectIpAddrDefault;\r\
+    \n    :global DetectIpAddrFallback;\r\
+    \n\r\
+    \n    :local PubIpAddr false;\r\
+    \n    :local Url \$DetectIpAddrDefault;\r\
+    \n    :local JobName [ :jobname ];\r\
+    \n\r\
+    \n    :do {\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using default serv\
+    ice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \
+    detect public IP using default service: \" . \$Url . \".\")}\r\
+    \n     } on-error={\r\
+    \n      :log error (\$0 . \" Failed to detect public IP using default serv\
+    ice: \" . \$Url . \".\");\r\
+    \n      :set Url \$DetectIpAddrFallBack;\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using fallback ser\
+    vice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\
+    \_detect public IP using fallback service: \" . \$Url . \".\")}\r\
+    \n    };\r\
+    \n    :local IpLen ([ :len \$PubIpAddr ] -1);\r\
+    \n    :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\
+    {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\
+    \n    :return \$PubIpAddr;\r\
+    \n}\r\
+    \n\r\
+    \n:set FormatLine do={\r\
+    \n  :local Key    [ :tostr \$1 ];\r\
+    \n  :local Value  [ :tostr \$2 ];\r\
+    \n  :local Indent [ :tonum \$3 ];\r\
+    \n  :local Spaces;\r\
+    \n  :local Return \"\";\r\
+    \n  :global CharacterMultiply;\r\
+    \n  :global EitherOr;\r\
+    \n  :set Indent [ \$EitherOr \$Indent 16 ];\r\
+    \n  :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\
+    \n  :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\
+    \n  :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\
+    n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\
+    \n  } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \
+    \$Return ]) ] . \$Value)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseCustom do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Start [:find [ \$Str ] [:tostr \$2]];\r\
+    \n  :local End [ :tostr \$3 ];\r\
+    \n  :local Num [ :tonum \$4 ];\r\
+    \n  :local Return;\r\
+    \n  :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\
+    \n  :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\
+    \n  :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\
+    lse={\r\
+    \n  :set End [:find \$rest \$End];\r\
+    \n  :set Return [:pick \$rest 0 \$End];\r\
+    \n  }\r\
+    \n:return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set LogPrint do={\r\
+    \n  :local Severity [ :tostr \$1 ];\r\
+    \n  :local Name     [ :tostr \$2 ];\r\
+    \n  :local Message  [ :tostr \$3 ];\r\
+    \n  :global PrintDebug;\r\
+    \n  :global PrintDebugOverride;\r\
+    \n  :global EitherOr;\r\
+    \n  :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \
+    ];\r\
+    \n  :local PrintSeverity do={\r\
+    \n  :global TerminalColorOutput;\r\
+    \n   :if (\$TerminalColorOutput != true) do={:return \$1}\r\
+    \n   :local Color { debug=96; info=97; warning=93; error=91 };\r\
+    \n   :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\
+    \n}\r\
+    \n  :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\
+    \r\
+    \n  :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\
+    \n    :if (\$Severity = \"debug\") do={:log debug \$Log}\r\
+    \n    :if (\$Severity = \"error\") do={:log error \$Log}\r\
+    \n    :if (\$Severity = \"info\" ) do={:log info  \$Log}\r\
+    \n  } else={:log warning \$Log; :set Severity \"warning\"}\r\
+    \n  :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\
+    erity \$Severity ] . \": \" . \$Message)}\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateAvailable do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :local UseFor     [ :tostr \$2 ];\r\
+    \n\r\
+    \n  :global CertificateDownload;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n\r\
+    \n  :if ([ :len \$UseFor ] = 0) do={\r\
+    \n    :log warning (\$0 . \"The intended use is undefined!\");\r\
+    \n    :set UseFor \"undefined\";\r\
+    \n  }\r\
+    \n  :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\
+    \n       [ /certificate/settings/get crl-download ] = true && \\\r\
+    \n       [ /certificate/settings/get crl-store ] = \"system\") do={\r\
+    \n    :log warning (\$0 . \"This system has low free flash space but \" . \
+    \\\r\
+    \n      \"is configured to download certificate CRLs to system!\");\r\
+    \n  }\r\
+    \n  :if ([ :len \$CommonName ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No CommonName given!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\
+    \r\
+    \n        (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\
+    \n        (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n       [ :len [ /certificate/builtin/find where common-name=\$CommonName\
+    \_] ] > 0) do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \
+    \"' not available.\");\r\
+    \n    :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\
+    ) do={\r\
+    \n    :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\
+    \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\
+    e ] ];\r\
+    \n  :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\
+    ertVal->\"skid\")) do={\r\
+    \n    :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\
+    \_= 0) do={\r\
+    \n      :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\
+    >\"CN\");\r\
+    \n      :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \
+    is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\
+    \n      :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\
+    \") ] ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateDownload do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :global ScriptUpdatesBaseUrl;\r\
+    \n  :global ScriptUpdatesUrlSuffix;\r\
+    \n  :global CertificateNameByCN;\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :log info (\$0 . \"Downloading and importing certificate with \" . \\\
+    \r\
+    \n      \"CommonName '\" . \$CommonName . \"'.\");\r\
+    \n  :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\
+    \n  :do {\r\
+    \n    /tool/fetch check-certificate=yes-without-crl mode=https http-header\
+    -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\
+    sUrlSuffix) \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n    \$WaitForFile \$FileName;\r\
+    \n  } on-error={\r\
+    \n    :log warning (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \\\r\
+    \n      \"' from repository! Trying fallback to mkcert.org...\");\r\
+    \n    :do {\r\
+    \n      :local CertSettings [ /certificate/settings/get ];\r\
+    \n      :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\
+    \_] ] = 0 && \\\r\
+    \n           !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \
+    || \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \
+    \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\
+    \r\
+    \n             [ :len [ /certificate/builtin/find where common-name=\"ISRG\
+    \_Root X1\" ] ] > 0)) do={\r\
+    \n        :log error (\$0 . \" Required certificate is not available.\");\
+    \r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n      /tool/fetch check-certificate=yes-without-crl mode=https http-head\
+    er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\
+    n ({ \$CommonName }) ] \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n      \$WaitForFile \$FileName;\r\
+    \n      :if ([ /file/get \$FileName size ] = 0) do={\r\
+    \n        \$RmFile \$FileName;\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n    } on-error={\r\
+    \n      :log error (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \"'!\");\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\
+    \n  :delay 1s;\r\
+    \n  \$RmFile \$FileName;\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\
+    +\\\$\") ];\r\
+    \n    :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\
+    e . \"' still unavailable!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \
+    \"_[0-9]+\\\$\") ] do={\r\
+    \n    \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateNameByCN do={\r\
+    \n  :local Match [ :tostr \$1 ];\r\
+    \n  :global CleanName;\r\
+    \n  :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\
+    rint=\$Match or name=\$Match) ]->0);\r\
+    \n  :if ([ :len \$Cert ] = 0) do={\r\
+    \n    :log warning (\$0 .\" No matching certificate found.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CommonName [ /certificate/get \$Cert common-name ];\r\
+    \n  /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileExists do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :local Type     [ :tostr \$2 ];\r\
+    \n  :global FileGet;\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={ :return false; }\r\
+    \n  :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\
+    \n  :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\
+    \_true; }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set Grep do={\r\
+    \n  :local Input  ([ :tostr \$1 ] . \"\\n\");\r\
+    \n  :local Pattern [ :tostr \$2 ];\r\
+    \n  :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\
+    }\r\
+    \n  :do {\r\
+    \n    :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\
+    \n    :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \
+    \$Line}\r\
+    \n    :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\
+    Input ] ];\r\
+    \n  } while=([ :len \$Input ] > 0);\r\
+    \n  :return [];\r\
+    \n}\r\
+    \n\r\
+    \n:set HumanReadableNum do={\r\
+    \n  :local Input [ :tonum \$1 ];\r\
+    \n  :local Base  [ :tonum \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Prefix \"kMGTPE\";\r\
+    \n  :local Pow 1;\r\
+    \n  :set Base [ \$EitherOr \$Base 1024 ];\r\
+    \n  :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\
+    \n  :if (\$Input < \$Base) do={:return \$Input}\r\
+    \n  :for I from=0 to=[ :len \$Prefix ] do={\r\
+    \n    :set Pow (\$Pow * \$Base);\r\
+    \n    :if (\$Input / \$Base < \$Pow) do={\r\
+    \n      :set Prefix [ :pick \$Prefix \$I ];\r\
+    \n      :local Tmp1 (\$Input * 100 / \$Pow);\r\
+    \n      :local Tmp2 (\$Tmp1 / 100);\r\
+    \n      :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\
+    \n      :return (\$Tmp2 . \".\" . \\\r\
+    \n          [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\
+    2 ] + 1) ] . \\\r\
+    \n          \$Prefix . \$Bin);\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanFilePath do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CharacterReplace;\r\
+    \n  :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \
+    \"//\" \"/\" ]; }\r\
+    \n  :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\
+    n \$Path ] ]; }\r\
+    \n  :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \
+    :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\
+    \n  :return \$Path;\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanName do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\
+    stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\
+    \n      :do {:if ([ :len \$Return ] = 0) do={:error true};\r\
+    \n        :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\
+    ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\
+    \n    };\r\
+    \n    :set Return (\$Return . \$Char)};\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set RandomDelay do={\r\
+    \n  :local Time [ :tonum \$1 ];\r\
+    \n  :local Unit [ :tostr \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global GetRandomNumber;\r\
+    \n  :global MAX;\r\
+    \n  :if (\$Time = 0) do={:return false}\r\
+    \n  :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \
+    [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\
+    \n}\r\
+    \n\r\
+    \n:set EscapeForRegEx do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitError do={\r\
+    \n  :local ExitOK [ :tostr \$1 ];\r\
+    \n  :local Name   [ :tostr \$2 ];\r\
+    \n  :local Error  [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$ExitOK = \"false\") do={\r\
+    \n    :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \
+    \\\r\
+    \n        \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\
+    ror\" . \\\r\
+    \n        [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \
+    \$Error) \".\" ]);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitOnError do={\r\
+    \n  :local Name   [ :tostr \$1 ];\r\
+    \n  :local Error  [ :tostr \$2 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\
+    \\\$\") \\\r\
+    \n      \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\
+    r\" . \\\r\
+    \n      [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\
+    rror) \".\" ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set MiniDateTimeStamp do={\r\
+    \n    :local mikro [ :tobool \$1 ];\r\
+    \n    /system/clock;\r\
+    \n    :local vdate [get date];\r\
+    \n    :local vtime [get time];\r\
+    \n    :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\
+    \n    :local MM    [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\
+    \n    :local M     [:tonum \$MM];\r\
+    \n    :if (\$vdate ~ \".../../....\") do={\r\
+    \n        :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\
+    \n        :set M     ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\
+    PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\
+    \n        :if (\$M>12) do={:set M (\$M - 12)}\r\
+    \n        :set MM    [:pick (100 + \$M) 1 3];\r\
+    \n    }\r\
+    \n    :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\
+    \n    :local dd   [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\
+    \n    :local HH   [:pick \$vtime 0  2];\r\
+    \n    :local mm   [:pick \$vtime 3  5];\r\
+    \n    :local ss   [:pick \$vtime 6  8];\r\
+    \n    :local Return;\r\
+    \n    :if (\$mikro = true) do={\r\
+    \n      :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\
+    \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\
+    \n    } else={\r\
+    \n    :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\
+    \r\
+    \n   }\r\
+    \n   :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitForFile do={\r\
+    \n  :local FileName [ :tostr  \$1 ];\r\
+    \n  :local WaitTime [ :totime \$2 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global EitherOr;\r\
+    \n  :global MAX;\r\
+    \n  :set FileName [ \$CleanFilePath \$FileName ];\r\
+    \n  :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } delay=\$Delay max=10;\r\
+    \n  } on-error={ }\r\
+    \n  :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\
+    \n    :do {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } on-error={ }\r\
+    \n    :delay \$Delay;\r\
+    \n    :set Delay (\$Delay * 3 / 2);\r\
+    \n  }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileGet do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global WaitForFile;\r\
+    \n  :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FileVal false;\r\
+    \n  :do {\r\
+    \n    :set FileVal [ /file/get \$FileName ];\r\
+    \n   } on-error={ }\r\
+    \n  :return \$FileVal;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmDir do={\r\
+    \n  :local DirName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing directory: \". \$DirName);\r\
+    \n  :local DirVal [ \$FileGet \$DirName ];\r\
+    \n  :if (\$DirVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  };\r\
+    \n  :if (\$DirVal->\"type\" != \"directory\") do={\r\
+    \n    :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\
+    ory.\");\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$DirName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\
+    : \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmFile do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing file: \". \$FileName);\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\
+    sk\") do={\r\
+    \n    :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\
+    \r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$FileName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\
+    \_. \$Err); :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MkDir do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global FileGet;\r\
+    \n  :global RmDir;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :local MkTmpfs do={\r\
+    \n   :global WaitForFile;\r\
+    \n   :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n   :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n     :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n       :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\
+    \n       /disk/enable \$TmpFs;\r\
+    \n      }\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :log info (\$0 . \" Creating disk of type tmpfs.\");\r\
+    \n    \$RmDir \"tmpfs\";\r\
+    \n    :onerror Err {\r\
+    \n      /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\
+    /get total-memory ] / 3);\r\
+    \n      \$WaitForFile \"tmpfs\";\r\
+    \n    } do={\r\
+    \n      :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\
+    Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :set Path [ \$CleanFilePath \$Path ];\r\
+    \n  :if (\$Path = \"\") do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log debug (\$0 . \" Making directory: \" . \$Path);\r\
+    \n  :local PathVal [ \$FileGet \$Path ];\r\
+    \n  :if (\$PathVal->\"type\" = \"directory\") do={\r\
+    \n    :log debug (\$0 . \" ... which already exists.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/add type=\"directory\" name=\$Path;\r\
+    \n    \$WaitForFile \$Path;\r\
+    \n  } do={\r\
+    \n    :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \
+    \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterReplace do={\r\
+    \n  :local String [ :tostr \$1 ];\r\
+    \n  :local ReplaceFrom [ :tostr \$2 ];\r\
+    \n  :local ReplaceWith [ :tostr \$3 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :if (\$ReplaceFrom = \"\") do={:return \$String}\r\
+    \n  :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\
+    \r\
+    \n    :local Pos [ :find \$String \$ReplaceFrom ];\r\
+    \n    :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\
+    \r\
+    \n    :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\
+    \_\$String ] ];\r\
+    \n  }\r\
+    \n  :return (\$Return . \$String);\r\
+    \n}\r\
+    \n\r\
+    \n:set IfThenElse do={\r\
+    \n  :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \
+    \$2};\r\
+    \n  :return \$3;\r\
+    \n}\r\
+    \n\r\
+    \n:set EitherOr do={\r\
+    \n  :global IfThenElse;\r\
+    \n  :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \
+    \$1 \$2 ]}\r\
+    \n  :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\
+    \_\$1 \$2 ]}\r\
+    \n# this works for boolean values, literal ones with parentheses\r\
+    \n  :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseKeyValueStore do={\r\
+    \n  :local Source \$1;\r\
+    \n  :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\
+    \n    :do {\r\
+    \n      :return [ :deserialize from=json \$Source ];\r\
+    \n    } on-error={ }\r\
+    \n  }   \r\
+    \n  :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\
+    }\r\
+    \n  :local Result ({});\r\
+    \n  :foreach KeyValue in=[ :toarray \$Source ] do={\r\
+    \n    :if ([ :find \$KeyValue \"=\" ]) do={\r\
+    \n      :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\
+    \n      :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\
+    \_:len \$KeyValue ] ];\r\
+    \n      :if (\$Value=\"true\") do={:set Value true}\r\
+    \n      :if (\$Value=\"false\") do={:set Value false}\r\
+    \n      :set (\$Result->\$Key) \$Value;\r\
+    \n      } else={:set (\$Result->\$KeyValue) true}\r\
+    \n  }\r\
+    \n  :return \$Result;\r\
+    \n}\r\
+    \n:set RequiredRouterOS do={\r\
+    \n  :local Caller   [ :tostr \$1 ];\r\
+    \n  :local Required [ :tostr \$2 ];\r\
+    \n  :local Warn     [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :global VersionToNum;\r\
+    \n  :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\
+    \\\$\")) do={\r\
+    \n    :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\
+    e/update/get installed-version ] ]) do={\r\
+    \n    :if (\$Warn = \"true\") do={\r\
+    \n      :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \
+    0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\
+    \n        \" '\" . \$Caller . \"' (at least specific functionality) requir\
+    es RouterOS \" . \$Required . \". Please update!\");\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set ValidateSyntax do={\r\
+    \n  :local Code [ :tostr \$1 ];\r\
+    \n  :global LogPrint;\r\
+    \n  :onerror Err {\r\
+    \n    [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\
+    \n  } do={\r\
+    \n    \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set VersionToNum do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Multi 0x1000000;\r\
+    \n  :local Return 0;\r\
+    \n  :global CharacterReplace;\r\
+    \n  :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\
+    \n  :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\
+    \n    :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\
+    \r\
+    \n  }\r\
+    \n  :foreach Value in=([ :toarray \$Input ], 0) do={\r\
+    \n    :local Num [ :tonum \$Value ];\r\
+    \n    :if (\$Multi = 0x100) do={\r\
+    \n      :if ([ :typeof \$Num ] = \"num\") do={\r\
+    \n        :set Return (\$Return + 0xff00);\r\
+    \n        :set Multi (\$Multi / 0x100);\r\
+    \n      } else={\r\
+    \n        :if (\$Value = \"zero\") do={ }\r\
+    \n        :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \
+    }\r\
+    \n        :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\
+    \r\
+    \n        :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\
+    lue * \$Multi)); }\r\
+    \n    :set Multi (\$Multi / 0x100);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptLock do={\r\
+    \n  :local Script  [ :tostr  \$1 ];\r\
+    \n  :local WaitMax [ :totime \$2 ];\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global ScriptLockOrder;\r\
+    \n  :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\
+    \n    :set ScriptLockOrder ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :local JobCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :return [ :len [ /system/script/job/find where script=\$Script ] ];\
+    \r\
+    \n  }\r\
+    \n  :local TicketCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :local Count 0;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \
+    + 1)}\r\
+    \n    }\r\
+    \n    :return \$Count;\r\
+    \n  }\r\
+    \n  :local IsFirstTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Check  [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if (\$Ticket = \$Check) do={:return true}\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\
+    o={:return false}\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local AddTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Add    [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :while (true) do={\r\
+    \n      :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\
+    \n      :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\
+    \n      :delay 10ms;\r\
+    \n      :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\
+    e}\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local RemoveTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Remove [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\
+    \n        :set (\$ScriptLockOrder->\$Script->\$Id);\r\
+    \n        :delay 10ms;\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local CleanupTickets do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\
+    \n    }\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\
+    \n  :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\
+    \n    :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\
+    ist!\");\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$JobCount \$Script ] = 0) do={\r\
+    \n    \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\
+    );\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\
+    \n    :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\
+    t . \"', resetting!\");\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n    /system/script/job/remove [ find where script=\$Script ];\r\
+    \n  }\r\
+    \n  :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\
+    \n  \$AddTicket \$Script \$MyTicket;\r\
+    \n  :local WaitInterval (\$WaitMax / 20);\r\
+    \n  :local WaitTime \$WaitMax;\r\
+    \n  :while (\$WaitTime > 0 && \\\r\
+    \n      ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\
+    \n      [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\
+    \n    :set WaitTime (\$WaitTime - \$WaitInterval);\r\
+    \n    :delay \$WaitInterval;\r\
+    \n  }\r\
+    \n  :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\
+    \n      [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\
+    \n    \$RemoveTicket \$Script \$MyTicket;\r\
+    \n    \$CleanupTickets \$Script;\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  \$RemoveTicket \$Script \$MyTicket;\r\
+    \n  \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \
+    once\" . \\\r\
+    \n    [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\
+    \_lock\" \"\" ] . \"...\");\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification do={ :onerror Err {\r\
+    \n  :global SendNotification2;\r\
+    \n  \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\
+    \_silent=\$4 });\r\
+    \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification2 do={\r\
+    \n  :local Notification \$1;\r\
+    \n  :global NotificationFunctions;\r\
+    \n  :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\
+    \n    (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\
+    ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolByUnicodeName do={\r\
+    \n  :local Name [ :tostr \$1 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global SymbolsExtra;\r\
+    \n  :local Symbols ({\r\
+    \n    \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\
+    \n    \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\
+    \n    \"arrow-down\"=\"\\E2\\AC\\87\";\r\
+    \n    \"arrow-up\"=\"\\E2\\AC\\86\";\r\
+    \n    \"calendar\"=\"\\F0\\9F\\93\\85\";\r\
+    \n    \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\
+    \n    \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\
+    \n    \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\
+    \n    \"cloud\"=\"\\E2\\98\\81\";\r\
+    \n    \"cross-mark\"=\"\\E2\\9D\\8C\";\r\
+    \n    \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\
+    \n    \"fire\"=\"\\F0\\9F\\94\\A5\";\r\
+    \n    \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\
+    \n    \"gear\"=\"\\E2\\9A\\99\";\r\
+    \n    \"heart\"=\"\\E2\\99\\A5\";\r\
+    \n    \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\
+    \n    \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\
+    \n    \"information\"=\"\\E2\\84\\B9\";\r\
+    \n    \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\
+    \n    \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\
+    \n    \"link\"=\"\\F0\\9F\\94\\97\";\r\
+    \n    \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\
+    \n    \"memo\"=\"\\F0\\9F\\93\\9D\";\r\
+    \n    \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\
+    \n    \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\
+    \n    \"scissors\"=\"\\E2\\9C\\82\";\r\
+    \n    \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\
+    \n    \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\
+    \n    \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\
+    \n    \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\
+    \n    \"sparkles\"=\"\\E2\\9C\\A8\";\r\
+    \n    \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\
+    \n    \"star\"=\"\\E2\\AD\\90\";\r\
+    \n    \"warning-sign\"=\"\\E2\\9A\\A0\";\r\
+    \n    \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\
+    \n  }, \$SymbolsExtra);\r\
+    \n  :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\
+    \n  :local Special {\r\
+    \n    \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\
+    \n    \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\
+    \n    \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\
+    \n    \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\
+    \n  :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\
+    '!\");\r\
+    \n    :return \"\";\r\
+    \n  }\r\
+    \n  :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\
+    me) ] . \"\\EF\\B8\\8F\");\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolForNotification do={\r\
+    \n  :global NotificationsWithSymbols;\r\
+    \n  :global SymbolByUnicodeName;\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\
+    \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\
+    \n  :local Return \"\";\r\
+    \n  :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\
+    mbolByUnicodeName \$Symbol ])}\r\
+    \n  :return (\$Return . \" \");\r\
+    \n}\r\
+    \n\r\
+    \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\
+    \n:set UrlEncode do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\
+    \n  :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\
+    %24\"; \"%25\"; \"%26\"; \"%27\";\r\
+    \n         \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \
+    \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\
+    \n         \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \
+    \"%7C\"; \"%7D\"; \"%7E\" };\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :local Replace [ :find \$Chars \$Char ];\r\
+    \n    :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\
+    ce)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsDNSResolving do={\r\
+    \n  :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsFullyConnected do={\r\
+    \n  :global IsDNSResolving;\r\
+    \n  :global IsTimeSync;\r\
+    \n  :if ([ \$IsDNSResolving ] = false) do={:return false};\r\
+    \n  :if ([ \$IsTimeSync ] = false) do={:return false};\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsTimeSync do={\r\
+    \n  :global IsTimeSyncCached;\r\
+    \n  :global IsTimeSyncResetNtp;\r\
+    \n  :if (\$IsTimeSyncCached = true) do={:return true}\r\
+    \n  :if ([ /system/ntp/client/get enabled ] = true) do={\r\
+    \n    :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :local Uptime [ /system/resource/get uptime ];\r\
+    \n    :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\
+    \n      :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    }\r\
+    \n    :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\
+    \n    :log warning \"\$0 The ntp client is configured, but did not sync.\"\
+    ;\r\
+    \n    :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    /system/ntp/client/set enabled=no;\r\
+    \n    :delay 20ms;\r\
+    \n    /system/ntp/client/set enabled=yes;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\
+    \n       [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\
+    \n    :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\
+    ee license and x86.\";\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ /ip/cloud/get update-time ] = true) do={\r\
+    \n    :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :log debug \"\$0 No time source configured! Returning gracefully...\";\
+    \r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchHugeFiles do={\r\
+    \n  :local ScriptName [ :tostr \$1 ];\r\
+    \n  :local Url        [ :tostr \$2 ];\r\
+    \n  :local CheckCert  [ :tostr \$3 ];\r\
+    \n\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global MkDir;\r\
+    \n  :global RmDir;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\
+    ithout-crl\" ];\r\
+    \n\r\
+    \n  :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\
+    \n  :if ([ \$MkDir \$DirName ] = false) do={\r\
+    \n    \$LogPrint error \$0 (\"Failed creating directory!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \
+    \$GetRandom20CharAlNum ]);\r\
+    \n  :onerror Err {\r\
+    \n    /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \
+    \\\r\
+    \n      http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\
+    lue;\r\
+    \n  } do={\r\
+    \n    :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\
+    \n      \$RmFile \$FileName;\r\
+    \n    }\r\
+    \n    \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\
+    \_. \$Err);\r\
+    \n    \$RmDir \$DirName;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\
+    \n    \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\
+    \_not show up.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileSize [ /file/get \$FileName size ];\r\
+    \n  :local Return \"\";\r\
+    \n  :local VarSize 0;\r\
+    \n  :while (\$VarSize != \$FileSize) do={\r\
+    \n    :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\
+    768 file=\$FileName as-value ]->\"data\"));\r\
+    \n    :set FileSize [ /file/get \$FileName size ];\r\
+    \n    :set VarSize [ :len \$Return ];\r\
+    \n    :if (\$VarSize > \$FileSize) do={\r\
+    \n      :delay 100ms;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  \$RmDir \$DirName;\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchUserAgentStr do={\r\
+    \n  :local Caller [ :tostr \$1 ];\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global CommitBrief;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Resource [ /system/resource/get ];\r\
+    \n  :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\
+    \_\$Resource->\"architecture-name\" . \\\r\
+    \n    \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\
+    CommitBrief ] . \")\");\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptInstallUpdate do={ :onerror Err {\r\
+    \n  :local Scripts    [ :toarray \$1 ];\r\
+    \n  :local NewComment [ :tostr   \$2 ];\r\
+    \n  :global InitSetup;\r\
+    \n\r\
+    \n  :global CommitId;\r\
+    \n  :global ScriptUpdatesCRLF;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global CheckSumsVerify;\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SumsDirAndFileName;\r\
+    \n  :global GlobalScriptsUrlSuffix;\r\
+    \n  :global EitherOr;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global Grep;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n  :global RequiredRouterOS;\r\
+    \n  :global SendNotification2;\r\
+    \n  :global SymbolForNotification;\r\
+    \n  :global ValidateSyntax;\r\
+    \n  :global CommentsInScripts;\r\
+    \n\r\
+    \n  :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\
+    hout.\");\r\
+    \n  }\r\
+    \n\r\
+    \n  :foreach Script in=\$Scripts do={\r\
+    \n    :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\
+    \r\
+    \n      \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\
+    \n      /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \
+    Vados\\n\" comment=\$NewComment;\r\
+    \n    }\r\
+    \n  }\r\
+    \n\r\
+    \n  :local CommitIdBefore \$CommitId;\r\
+    \n  :local GlobalConfVersionBefore \$GlobalConfVersion;\r\
+    \n  :local ReloadGlobal false;\r\
+    \n  :local DeviceMode [ /system/device-mode/get ];\r\
+    \n\r\
+    \n  :if (\$CheckSumsVerify = true) do={\r\
+    \n    :local CheckSums ({});\r\
+    \n     :do {\r\
+    \n     :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\
+    iptsUrlSuffix);\r\
+    \n      \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\
+    \r\
+    \n      :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\
+    ficate=yes-without-crl \\\r\
+    \n        http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\
+    =user as-value ]->\"data\") ];\r\
+    \n    } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\
+    \n    }\r\
+    \n\r\
+    \n  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\
+    s\" ] do={\r\
+    \n    :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n    :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \
+    ];\r\
+    \n    :local SourceNew;\r\
+    \n\r\
+    \n    :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\
+    \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\
+    \n      :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\
+    \n      :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\
+    iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \
+    \"'!\");\r\
+    \n        }\r\
+    \n    }\r\
+    \n    :do {\r\
+    \n      :if (\$ScriptInfo->\"ignore\" = true) do={\r\
+    \n        \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\
+    e\" . \"', as requested.\");\r\
+    \n        :error true;\r\
+    \n      }\r\
+    \n      :if (\$CheckSumsVerify = true) do={\r\
+    \n        :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\
+    \n        :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\
+    ptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n             [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\
+    rce\") ] ] = \$CheckSum) do={\r\
+    \n          \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\
+    >\"name\" . \"' matches, ignoring.\");\r\
+    \n          :error true;\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\
+    \n        :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\
+    fetch\" ] = false) do={\r\
+    \n          \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\
+    ng without.\");\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :onerror Err {\r\
+    \n        :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\
+    lScriptsUrl ];\r\
+    \n        :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\
+    lobalScriptsUrlSuffix ];\r\
+    \n        :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\
+    Suffix);\r\
+    \n        \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\
+    name\") . \"' from url: \" . \$Url);\r\
+    \n        :local Result [ /tool/fetch check-certificate=yes-without-crl \\\
+    \r\
+    \n          http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\
+    ut=user as-value ];\r\
+    \n        :if (\$Result->\"status\" = \"finished\") do={\r\
+    \n          :set SourceNew [ :tolf (\$Result->\"data\") ];\r\
+    \n        } \r\
+    \n      } do={\r\
+    \n        \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\
+    al->\"name\" . \"': \" . \$Err);\r\
+    \n        :if (\$Err != \"Fetch failed with status 404\") do={\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\
+    \n          \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\
+    \?\");\r\
+    \n          /system/script/remove \$Script;\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$CheckSumsVerify = true) do={\r\
+    \n          :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\
+    riptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n               [ :len \$CheckSum ] = 0) do={\r\
+    \n            \$LogPrint warning \$0 (\"Added the script manually\? Skip u\
+    pdates with 'ignore=true' in comment.\");\r\
+    \n          }\r\
+    \n        }\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :len \$SourceNew ] = 0) do={\r\
+    \n        \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\
+    >\"name\") . \"'.\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :local SourceCRLF [ :tocrlf \$SourceNew ];\r\
+    \n      :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\
+    lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\
+    \n        :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\
+    \$ScriptVal->\"source\")) do={\r\
+    \n          \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\") \
+    . \"' source did not change. End of lines set to CRLF.\");\r\
+    \n          if (\$ScriptUpdatesCRLF = false) do={\r\
+    \n            :put [ :tolf \$SourceNew ];\r\
+    \n            \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\"\
+    ) . \"' source update end of lines to LF.\");\r\
+    \n          }\r\
+    \n        :error false;\r\
+    \n        }\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\
+    l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\
+    );\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if (\$CommentsInScripts = true) do={\r\
+    \n         :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\
+    \_\") ];\r\
+    \n         :if ([ :len \$CommentLine ] = 0) do={\r\
+    \n           \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\
+    iptVal->\"name\") . \"' for comment in script body, is not found result Ig\
+    noring!\");\r\
+    \n           :error false;\r\
+    \n         } else={\r\
+    \n           :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\
+    ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\
+    ] + 2) [ :len \$CommentLine] ]) do={\r\
+    \n             \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\
+    \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\
+    ;\r\
+    \n             :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\
+    ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\
+    \n             \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\
+    omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\
+    ded!\");\r\
+    \n           } else={\r\
+    \n             \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\
+    al->\"name\") . \"' did not change.\");\r\
+    \n             :error false;\r\
+    \n           }\r\
+    \n         }   \r\
+    \n      }\r\
+    \n\r\
+    \n      :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\
+    \"\\23 requires RouterOS, \") ] ]->version);\r\
+    \n      :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\
+    \_false ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires RouterOS \" . \\\r\
+    \n            \$RequiredROS . \", which is not met by your installation. I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\
+    \\23 requires device-mode, \") ] ];\r\
+    \n      :local MissingDM ({});\r\
+    \n      :foreach Feature,Value in=\$RequiredDM do={\r\
+    \n        :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\
+    ceMode->\$Feature) = false) do={\r\
+    \n          :set MissingDM (\$MissingDM, \$Feature);\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len \$MissingDM ] > 0) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires disabled \" . \\\r\
+    \n            \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\
+    ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      \r\
+    \n      :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\
+    ript comment: \" . (\$ScriptVal->\"comment\"));\r\
+    \n\r\
+    \n      /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\
+    Val->\"comment\") \\\r\
+    \n          source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\
+    F \$SourceNew ] \$Script;\r\
+    \n      :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\
+    \n           \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\
+    \n           \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\
+    o={\r\
+    \n        :set ReloadGlobal true;\r\
+    \n      }\r\
+    \n    } on-error={ }\r\
+    \n  }\r\
+    \n  :if (\$ReloadGlobal = true) do={\r\
+    \n    \$LogPrint info \$0 (\"Reloading global configuration and functions.\
+    \");\r\
+    \n    :onerror Err {\r\
+    \n      :global InitSetup (a);\r\
+    \n      /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\
+    \n    } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\
+    ctions failed! \" . \$Err)}\r\
+    \n  }\r\
+    \n  :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\
+    \n    \$LogPrint warning \$0 (\"The configuration version decreased from \
+    \" . \\\r\
+    \n      \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\
+    \n      \". Installed an older version\?\");\r\
+    \n  }\r\
+    \n    :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\
+    \n    :global GlobalConfChanges;\r\
+    \n    :global GlobalConfMigration;\r\
+    \n    :local ChangeLogCode;\r\
+    \n    :if ([ :len \$ChangeLogCode ] > 0) do={\r\
+    \n      :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\
+    \n        :onerror Err {\r\
+    \n          [ :parse \$ChangeLogCode ];\r\
+    \n        } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \
+    . \$Err)}\r\
+    \n      } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\
+    dation!\")}\r\
+    \n    }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\
+    \n        :do {\r\
+    \n          :if ([ :typeof \$Migration ] != \"str\") do={\r\
+    \n            \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\
+    \_\" is not available.\");\r\
+    \n            :error false;\r\
+    \n          }\r\
+    \n          :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\
+    \n            \$LogPrint warning \$0 (\"Migration code for change \" . \$I\
+    \_. \" failed syntax validation!\");\r\
+    \n            :error false}\r\
+    \n          \$LogPrint info \$0 (\"Applying migration for change \" . \$I \
+    . \": \" . \$Migration);\r\
+    \n          :onerror Err {\r\
+    \n            [ :parse \$Migration ];\r\
+    \n          } do={\$LogPrint warning \$0 (\"Migration code for change \" .\
+    \_\$I . \" failed to run: \" . \$Err)}\r\
+    \n        } on-error={ }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :local NotificationMessage (\"The configuration version on \" . \$Id\
+    entity . \" increased \" . \\\r\
+    \n       \"to \" . \$GlobalConfVersion . \", current configuration may nee\
+    d modification. \" . \\\r\
+    \n       \"Please review and update global-config-overlay, then re-run glo\
+    bal-config.\");\r\
+    \n    \$LogPrint info \$0 (\$NotificationMessage);\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\
+    \");\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\
+    \n        :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\
+    \r\
+    \n            [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\
+    \n        \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\
+    \n      }\r\
+    \n    } else={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\
+    \_changes are not available.\");\r\
+    \n\r\
+    \n      }\r\
+    \n\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \
+    } else={ :global GlobalConfChanges (a); }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\
+    on; } else={ :global GlobalConfMigration (a); }\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n\r\
+    \n# load modules\r\
+    \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\
+    ns\\\\.d|mod)/.\" ] do={\r\
+    \n  :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n  :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\
+    \n    :onerror Err {\r\
+    \n      /system/script/run \$Script;\r\
+    \n    } do={\r\
+    \n      \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\
+    ailed to run: \" . \$Err);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\
+    led syntax validation, skipping.\");\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# Add and fix global scheduler\r\
+    \n:put \"Add or/and fix Global scheduler...\";\r\
+    \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\
+    ; }\";\r\
+    \n:local Comment \"Every Day Set Global Environment Variables\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \
+    = 0) do={\r\
+    \n  /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\
+    ent=\$OnEvent start-time=startup;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\
+    \_do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\
+    ) do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\
+    \n}\r\
+    \n# Add Update Script scheduler\r\
+    \n:put \"Add or/and fix Update Script scheduler\";\r\
+    \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\
+    \r\
+    \n:set Comment \"Every Day Check For Update Scripts\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\
+    \" ] ] = 0) do={\r\
+    \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \
+    start-time=startup interval=1d on-event=\$OnEvent;\r\
+    \n}\r\
+    \n\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\
+    \_not ready.\"); }; } delay=100ms max=5;\r\
+    \n\r\
+    \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\
+    \n    [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \
+    \") ] . \\\r\
+    \n    \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\
+    \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\
+    \n    # signal we are ready\r\
+    \n:set GlobalFuncReady true;\r\
+    \n:set ExitOK true;\r\
+    \n\r\
+    \n:log info (\$0 . \"Global configs ready!\");\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n}\r\
+    \n"
+add comment=\
+    "Lookup IP addresses for RKN list and add them to firewall address-list" \
+    dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="#!rsc by Vados\r\
+    \n# RouterOS script: AM-RKN-dnsLookup\r\
+    \n# Script comment: Lookup IP addresses for RKN list and add them to firew\
+    all address-list\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n# Script description: This script is intended to be run periodically, e.\
+    g. once a day, to update the IP addresses in the firewall address-list bas\
+    ed on the RKN list.\r\
+    \n#                     It resolves the domain names in the RKN list and a\
+    dds the corresponding IP addresses to the specified firewall address-list.\
+    \r\
+    \n#                     The script also handles CNAME records by following\
+    \_them until it finds A records.\r\
+    \n# Usage:\r\
+    \n# /system/script { run AM-RKN-dnsLookup; }\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n\r\
+    \n:global dnsLookupReady false;\r\
+    \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\
+    \_true; }\r\
+    \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\
+    \n:set dnsLookupReady false;\r\
+    \n\r\
+    \n:local arrRKN {\r\
+    \n  \"telegra.ph\"\r\
+    \n  \"grani.ru\"\r\
+    \n  \"xhamster.com\"\r\
+    \n  \"lostfilm.tv\"\r\
+    \n  \"rutracker.org\"\r\
+    \n  \"lurkmore.to\"\r\
+    \n  \"dou.ua\"\r\
+    \n  \"youporn.com\"\r\
+    \n  \"pornolab.net\"\r\
+    \n  \"crimerussia.com\"\r\
+    \n  \"telegram.org\"\r\
+    \n  \"api.telegram.org\"\r\
+    \n  \"facebook.com\"\r\
+    \n  \"instagram.com\"\r\
+    \n  \"x.com\"\r\
+    \n  \"twitter.com\"\r\
+    \n  \"youtube.com\"\r\
+    \n  \"googleapis.com\"\r\
+    \n  \"youtu.be\"\r\
+    \n  \"googlevideo.com\"\r\
+    \n  \"gstatic.com\"\r\
+    \n  \"googleusercontent.com\"\r\
+    \n  \"nhacmp3youtube.com\"\r\
+    \n  \"telegram.me\"\r\
+    \n  \"t.me\";}\r\
+    \n\r\
+    \n:local ListRKN \"RKN-dnsLookup\";\r\
+    \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\
+    \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\
+    ={\r\
+    \n    /ip firewall address-list remove \$aListItem;\r\
+    \n}\r\
+    \n:foreach aItem in=\$arrRKN do={\r\
+    \n#    :do {\r\
+    \n        :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\
+    ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\
+    \n#    } on-error={\r\
+    \n#        :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\
+    \n#    }\r\
+    \n    :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \
+    do={\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\
+    \n            :local newAddress [/ip dns cache all get \$dnsRecord data];\
+    \r\
+    \n            :do {\r\
+    \n             /ip firewall address-list add list=\$ListRKN address=\$newA\
+    ddress comment=\$aItem;\r\
+    \n                :log warning \"Successfully adding ip to list A record: \
+    \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            } on-error={\r\
+    \n                :log error \"error when adding ip to list A record: \$dn\
+    sRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            }\r\
+    \n        }\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\
+    \n            :local cname;\r\
+    \n            :local nextCname;\r\
+    \n            :local cnameAddress;\r\
+    \n            :set cname [/ip dns cache all find where (name=\$aItem && ty\
+    pe=\"CNAME\")];\r\
+    \n            :set nextCname [/ip dns cache all find where (name=[/ip dns \
+    cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            :while (\$nextCname != \"\") do={\r\
+    \n                :set cname \$nextCname;\r\
+    \n                :set nextCname [/ip dns cache all find where (name=[/ip \
+    dns cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            }\r\
+    \n            :foreach aRecord in=[/ip dns cache all find where (name=[/ip\
+    \_dns cache all get \$cname data] && type=\"A\")] do={\r\
+    \n                :do {\r\
+    \n                    :set cnameAddress [/ip dns cache all get \$aRecord d\
+    ata];\r\
+    \n                    /ip firewall address-list add list=\$ListRKN address\
+    =\$cnameAddress comment=\$aItem;\r\
+    \n                    :log warning \"Succesfully adding ip to list CNAME r\
+    ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \
+    \$aItem.\";\r\
+    \n#                    /ip firewall raw add action=add-dst-to-address-list\
+    \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\
+    g comment=\$aItem content=\$aItem;\r\
+    \n                } on-error={\r\
+    \n                    :log error \"error when adding ip to list CNAME reco\
+    rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\
+    tem.\";\r\
+    \n                }\r\
+    \n            }\r\
+    \n        }\r\
+    \n    }\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\
+    ={\r\
+    \n   :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\
+    ptName . \" is NOT SET! Fix It Now!\");\r\
+    \n    /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \
+    run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\
+    olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\
+    \_start-time=startup;\r\
+    \n  }\r\
+    \n:set dnsLookupReady true;\r\
+    \ndelay 2s;  \r\
+    \n:global dnsLookupReady (a);\r\
+    \n"
+add dont-require-permissions=no name="renameLists " owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    local oldName \"Test\";\
+    \n:local newName \"Test-IP\";\
+    \n/ip firewall address-list\
+    \n:foreach i in=[find list=\$oldName] do={\
+    \nset \$i list=\$newName;\
+    \n}\
+    \n"
+add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    #############Script Settings##################\
+    \n\
+    \n:local \"IF-TUN\" \"6to4-tun\"\
+    \n:local \"IF-LOC\" \"Bridge-LAN\"\
+    \n:local \"POOL-6TO4\" \"poolV6-local\"\
+    \n:local \"force-update\" false\
+    \n############ use then static ip #######################\
+    \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \
+    address]\
+    \n#:local \"interface\" \"ext\"\
+    \n:local bound 0\
+    \n\
+    \n###############################################\
+    \n\
+    \n:local 6to4prefix do={\
+    \n    :global dec2hex\
+    \n    :local ipv4 \$1\
+    \n    :local ipv6 \"2002:\"\
+    \n    :for i from=0 to=2 step=1 do={        \
+    \n        :if ( \$i = 2) do={\
+    \n            :set ipv6 (\$ipv6.\":\")\
+    \n        }\
+    \n        :local fp [:find \$ipv4 \".\"]\
+    \n        :if ( \$fp > 0 ) do={\
+    \n            :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\
+    \n            :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\
+    \n        }\
+    \n    }\
+    \n    :return (\$ipv6.[\$dec2hex \$ipv4])\
+    \n}\
+    \n:local \"str_replace\" do={\
+    \n    :local \"str-pos\" [:find \$1 \$2]\
+    \n    :local \"str-len\" [:len \$2]\
+    \n    :local str \"\"\
+    \n    :local rest \$1\
+    \n    :while (\$\"str-pos\" >= 0) do={\
+    \n        :local t [:pick \$rest 0 \$\"str-pos\"]\
+    \n        :if ( \$4 > 0 ) do={\
+    \n            :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\
+    \n                :set str (\$str.\$5)\
+    \n            }\
+    \n        }\
+    \n        :set str (\$str.\$t.\$3)\
+    \n        :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\
+    st]]\
+    \n        :set \"str-pos\" [:find \$rest \$2]\
+    \n    }\
+    \n    :return (\$str.\$rest)\
+    \n}\
+    \n\
+    \n:if (\$bound=1) do={\
+    \n    :local t [:find \$\"lease-address\" \"/\"]\
+    \n\
+    \n    :if ( \$t >= 0 ) do={\
+    \n        :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\
+    \n    }\
+    \n\
+    \n    :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\
+    ) do={\
+    \n        /interface 6to4 add !keepalive local-address=\$\"lease-address\"\
+    \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\
+    \n        :set \"force-update\" true\
+    \n    }\
+    \n\
+    \n    :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\
+    cal-address];\
+    \n\
+    \n    :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \
+    true) do={\
+    \n        /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\
+    ease-address\"\
+    \n        /ipv6 address remove [find interface=\$\"IF-TUN\"]\
+    \n        /ipv6 address remove [find interface=\$\"IF-LOC\"]\
+    \n        /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\
+    \"::/0\"]\
+    \n        :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\
+    \n        :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\
+    \_0) do={    \
+    \n            /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\
+    \".\":1::/64\")  prefix-length=64\
+    \n        } else={\
+    \n            /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \
+    prefix=(\$\"pool-prefix\".\":1::/64\")\
+    \n        }\
+    \n        /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\
+    \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\
+    ace=\$\"IF-TUN\" advertise=no\
+    \n        /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\
+    =\$\"IF-LOC\" advertise=yes\
+    \n        /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\
+    \"IF-TUN\")\
+    \n        :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\
+    s]\
+    \n        :set t [:pick \$t 0 [:find \$t \"/\"]]\
+    \n        :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\
+    \_= 0) do={\
+    \n            /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\
+    [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        } else={\
+    \n            /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \
+    where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        }\
+    \n        :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\
+    -LOC\"] = 0) do={\
+    \n            /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\
+    on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\
+    \n        }\
+    \n        :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \
+    0) do={\
+    \n            /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\
+    onfiguration=yes\
+    \n        }\
+    \n    }\
+    \n}"
+add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global MAC2EUI64 do={\
+    \n    :local EUI64 \"\"\
+    \n    :local MAC \$1\
+    \n    :local HEX2DEC \"0123456789ABCDEF\"\
+    \n    :for i from=0 to=5 step=1 do={\
+    \n        :if ( \$i = 0 ) do={\
+    \n            :set EUI64 [:pick \$MAC 0]\
+    \n            :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\
+    \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\
+    \n        }\
+    \n        :if ( \$i = 1 || \$i = 3) do={\
+    \n            :set EUI64 (\$EUI64.\":\")\
+    \n        }\
+    \n        :if ( \$i = 2 ) do={\
+    \n            :set EUI64 (\$EUI64.\"FF:FE\")\
+    \n        }\
+    \n        :if ( [:find \$MAC \":\"] = 2 ) do={\
+    \n            :set MAC [:pick \$MAC 3  [:len \$MAC]]\
+    \n            :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\
+    \n        }\
+    \n    }\
+    \n    :return (\$EUI64)\
+    \n}\
+    \n\
+    \n:global dec2hex do={\
+    \n    :local hex \"\"\
+    \n    :local dec [:tonum \$1]\
+    \n    :for i from=0 to=4 step=4 do={\
+    \n        :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\
+    c>>\$i)&0xf)+1)].\$hex)\
+    \n    }\
+    \n    :return ([:tostr \$hex])\
+    \n}"
+add comment=Generator dont-require-permissions=no name=proxySet owner=vados \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="# 2. WireGuard interface\r\
+    \n/interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDg\
+    uMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=21641\r\
+    \n/interface/wireguard/peers/add interface=wg-VDSina public-key=\"o5IgCl1/\
+    G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcYQnD9\
+    N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=10.30.30.33 endpoint-port=518\
+    20 allowed-address=0.0.0.0/0 persistent-keepalive=11\r\
+    \n/ip/address/add address=10.9.0.3/32 interface=wg-VDSina\r\
+    \n\r\
+    \n# 3. DNS\r\
+    \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\
+    n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\
+    \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /system/script/add name=VDS\
+    ina-prev-dns comment=\"\$prevDNS\" source=\"\" }\r\
+    \n/ip/dns/set servers=8.8.4.4\r\
+    \n/ip/route/add dst-address=8.8.4.4/32 gateway=wg-VDSina distance=1 commen\
+    t=VDSina-dns\r\
+    \n\r\
+    \n# 4. Enable WireGuard\r\
+    \n/interface/wireguard/enable wg-VDSina\r\
+    \n"
+add dont-require-permissions=no name=AM-Telegram-Send owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\
+    \n# RouterOS script: AM-Telegram-Send\
+    \n# Script comment: Mini script for send messages to admin Telegram chat\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\
+    \n#\
+    \n#\
+    \n# requires RouterOS, version=7.19\
+    \n# requires device-mode, fetch\
+    \n#\
+    \n# Script description: \
+    \n#\
+    \n#\
+    \n# Usage:\
+    \n# /system/script { run AM-Telegram-Send \"Message here )))\"; }\
+    \n\
+    \n/system/script\
+    \nadd name=telegram-send dont-require-permissions=no source={\
+    \n  :global TelegramTokenId;\
+    \n  :global TelegramChatId;\
+    \n  :local message [:tostr \$1];\
+    \n  :local identity [/system/identity/get name];\
+    \n  :local sendMsg (\"[\".\$identity.\"] \".\$message)\
+    \n  /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\
+    \n    \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\
+    \n    \"&text=\".\$sendMsg.\\\
+    \n    \"&parse_mode=HTML\") \\\
+    \n    mode=https keep-result=no\
+    \n}"
+add dont-require-permissions=no name=telegram-send owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\
+    \n  :global TelegramTokenId;\
+    \n  :global TelegramChatId;\
+    \n  :local message [:tostr \$1];\
+    \n  :local identity [/system/identity/get name];\
+    \n  :local sendMsg (\"[\".\$identity.\"] \".\$message)\
+    \n  /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\
+    \n    \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\
+    \n    \"&text=\".\$sendMsg.\\\
+    \n    \"&parse_mode=HTML\") \\\
+    \n    mode=https keep-result=no\
+    \n"
+/user group
+add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\
+    t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon"
+/ip smb
+set enabled=no interfaces=lo
+/interface bridge port
+add bridge=Bridge-LAN interface=ether5
+add bridge=Bridge-LAN interface=ether2
+add bridge=Bridge-LAN interface=ether4 trusted=yes
+add bridge=Bridge-LAN interface=ether3
+add bridge=Bridge-LAN interface=wlan2
+add bridge=Bridge-LAN interface=wlan1
+/interface bridge settings
+set use-ip-firewall=yes
+/ip firewall connection tracking
+set udp-timeout=10s
+/ip neighbor discovery-settings
+set discover-interface-list=LAN lldp-med=no lldp-poe-power=no
+/ip settings
+set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\
+    8192
+/ipv6 settings
+set disable-ipv6=yes disable-link-local-address=yes forward=no \
+    max-neighbor-entries=8192 multipath-hash-policy=l4
+/interface detect-internet
+set detect-interface-list=WAN internet-interface-list=Internet \
+    lan-interface-list=LAN request-interval=1m wan-interface-list=WAN
+/interface l2tp-server server
+set authentication=mschap2 use-ipsec=yes
+/interface list member
+add interface=Unet-ether1 list=Internet
+add interface=WG list=WAN
+add interface=Bridge-LAN list=LAN
+add interface=Unet-ether1 list=WAN
+/interface wireguard peers
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\
+    109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \
+    persistent-keepalive=10s public-key=\
+    "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4="
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 disabled=yes \
+    endpoint-address=10.30.30.33 endpoint-port=55055 interface=wg-nuc name=\
+    NUC persistent-keepalive=11s public-key=\
+    "+OvzAjLC45Td52hjkQPmpGvC3RGhZ+Q2CDMJ1U/D4Rw="
+/interface wireless cap
+# 
+set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \
+    caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\
+    CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\
+    wlan2,wlan1 lock-to-caps-man=yes
+/ip address
+add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0
+add address=10.8.0.2/24 interface=WG network=10.8.0.0
+add address=192.168.33.2/24 disabled=yes interface=wg-nuc network=\
+    192.168.33.0
+/ip cloud
+set update-time=no
+/ip dhcp-client
+add add-default-route=special-classless check-gateway=arp comment=Unet-client \
+    default-route-distance=2 default-route-tables=main:2 dhcp-options=\
+    hostname,clientid_duid interface=Unet-ether1 name=UnetDHCP use-peer-dns=\
+    no use-peer-ntp=no
+/ip dhcp-server config
+set accounting=no
+/ip dhcp-server lease
+add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\
+    48:8F:5A:8E:EE:A8 server=masterDHCP
+add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\
+    F0:DE:F1:91:0D:1E server=masterDHCP
+add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\
+    00:80:77:EC:43:86 server=masterDHCP
+add address=10.30.30.70 dhcp-option=domain-search-list,HostName \
+    dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP
+add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\
+    04:7C:16:36:F5:37 server=masterDHCP
+add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\
+    10:2D:41:2C:20:C2 server=masterDHCP
+add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\
+    10:08:C1:81:59:5F server=masterDHCP
+add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\
+    10:38:1F:D2:5F:13 server=masterDHCP
+add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\
+    10:B1:DF:E9:D0:D5 server=masterDHCP
+add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\
+    FE:02:52:BE:3F:16 server=masterDHCP
+add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\
+    D4:6D:6D:FD:E5:49 server=masterDHCP
+add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\
+    CC:42:10:12:46:94 server=masterDHCP
+add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\
+    50:CC:F8:85:96:0A server=masterDHCP
+add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\
+    E4:18:6B:58:34:AB server=masterDHCP
+add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\
+    00:27:15:41:97:A9 server=masterDHCP
+add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \
+    mac-address=C4:82:E1:03:49:10 server=masterDHCP
+add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\
+    10:38:1F:82:81:F2 server=masterDHCP
+add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \
+    dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP
+add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \
+    dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP
+add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \
+    server=masterDHCP
+add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\
+    MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP
+add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \
+    mac-address=F0:75:5D:1E:5F:71 server=masterDHCP
+add address=10.30.30.100 client-id=iVados dhcp-option=HostName \
+    dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP
+add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\
+    ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \
+    dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \
+    use-src-mac=yes
+/ip dhcp-server network
+add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\
+    domain-search-list dhcp-option-set=domain-search-set dns-server=\
+    10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\
+    24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98
+/ip dns
+set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \
+    doh-max-server-connections=20 servers=8.8.8.8 verify-doh-cert=yes
+/ip dns static
+add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \
+    type=A
+add address=109.107.177.79 name=vds.vados.ru type=A
+add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \
+    regexp=*.vados.ru type=NS
+add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\
+    "\".*\\\\.vados\\\\.ru\"" type=FWD
+add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\
+    10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\
+    FWD
+add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\
+    ns.vados.ru.local type=A
+add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\
+    vados.ru ns=ns.vados.ru.local type=NS
+add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A
+add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\
+    dns.google type=A
+add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A
+add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A
+add address=10.30.30.33 name=ros.vados.ru type=A
+add address=10.30.30.95 name=vados-nuc type=A
+add address=10.30.30.33 name=amster-nuc type=A
+add address=10.30.30.33 name=amster type=A
+add address=10.30.30.33 name=amster-reg type=A
+add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A
+add address=10.30.30.33 name=mgr.vados.ru type=A
+add address=10.30.30.33 name=prt.vados.ru type=A
+add address=10.30.30.33 disabled=yes match-subdomain=yes name=\
+    mikrots.vados.ru type=A
+add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A
+add address=10.30.30.30 name=MILLER-LEN type=A
+add address=10.30.30.30 name=miller type=A
+add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\
+    dns.quad9.net type=A
+add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\
+    dns.quad9.net type=A
+add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \
+    type=A
+add address=10.30.30.81 comment=LocalNet name=MikroVados type=A
+add address=10.30.30.10 name=MikroNUC type=A
+add address=10.30.30.86 disabled=yes name=MikroYellow type=A
+add address=10.30.30.85 disabled=yes name=MikroMic type=A
+add address=10.30.30.95 name=VADOS-NUC type=A
+add address=10.30.30.98 name=VADOS-LEN type=A
+add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\
+    A
+add address=10.30.30.20 disabled=yes name=garage type=A
+/ip firewall address-list
+add address=91.215.120.206 list=TRUSTED
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=8.8.4.0/24 list=YouTube
+add address=8.8.8.0/24 list=YouTube
+add address=8.34.208.0/20 list=YouTube
+add address=8.35.192.0/20 list=YouTube
+add address=23.236.48.0/20 list=YouTube
+add address=23.251.128.0/19 list=YouTube
+add address=34.0.0.0/15 list=YouTube
+add address=34.2.0.0/16 list=YouTube
+add address=34.3.0.0/23 list=YouTube
+add address=34.3.3.0/24 list=YouTube
+add address=34.3.4.0/24 list=YouTube
+add address=34.3.8.0/21 list=YouTube
+add address=34.3.16.0/20 list=YouTube
+add address=34.3.32.0/19 list=YouTube
+add address=34.3.64.0/18 list=YouTube
+add address=34.4.0.0/14 list=YouTube
+add address=34.8.0.0/13 list=YouTube
+add address=34.16.0.0/12 list=YouTube
+add address=34.32.0.0/11 list=YouTube
+add address=34.64.0.0/10 list=YouTube
+add address=34.128.0.0/10 list=YouTube
+add address=35.184.0.0/13 list=YouTube
+add address=35.192.0.0/14 list=YouTube
+add address=35.196.0.0/15 list=YouTube
+add address=35.198.0.0/16 list=YouTube
+add address=35.199.0.0/17 list=YouTube
+add address=35.199.128.0/18 list=YouTube
+add address=35.200.0.0/13 list=YouTube
+add address=35.208.0.0/12 list=YouTube
+add address=35.224.0.0/12 list=YouTube
+add address=35.240.0.0/13 list=YouTube
+add address=57.140.192.0/18 list=YouTube
+add address=64.15.112.0/20 list=YouTube
+add address=64.233.160.0/19 list=YouTube
+add address=66.22.228.0/23 list=YouTube
+add address=66.102.0.0/20 list=YouTube
+add address=66.249.64.0/19 list=YouTube
+add address=70.32.128.0/19 list=YouTube
+add address=72.14.192.0/18 list=YouTube
+add address=74.125.0.0/16 list=YouTube
+add address=104.154.0.0/15 list=YouTube
+add address=104.196.0.0/14 list=YouTube
+add address=104.237.160.0/19 list=YouTube
+add address=107.167.160.0/19 list=YouTube
+add address=107.178.192.0/18 list=YouTube
+add address=108.59.80.0/20 list=YouTube
+add address=108.170.192.0/18 list=YouTube
+add address=108.177.0.0/17 list=YouTube
+add address=130.211.0.0/16 list=YouTube
+add address=136.22.160.0/20 list=YouTube
+add address=136.22.176.0/21 list=YouTube
+add address=136.22.184.0/23 list=YouTube
+add address=136.22.186.0/24 list=YouTube
+add address=142.250.0.0/15 list=YouTube
+add address=146.148.0.0/17 list=YouTube
+add address=152.65.208.0/22 list=YouTube
+add address=152.65.214.0/23 list=YouTube
+add address=152.65.218.0/23 list=YouTube
+add address=152.65.222.0/23 list=YouTube
+add address=152.65.224.0/19 list=YouTube
+add address=162.120.128.0/17 list=YouTube
+add address=162.216.148.0/22 list=YouTube
+add address=162.222.176.0/21 list=YouTube
+add address=172.110.32.0/21 list=YouTube
+add address=172.217.0.0/16 list=YouTube
+add address=172.253.0.0/16 list=YouTube
+add address=173.194.0.0/16 list=YouTube
+add address=173.255.112.0/20 list=YouTube
+add address=192.158.28.0/22 list=YouTube
+add address=192.178.0.0/15 list=YouTube
+add address=193.186.4.0/24 list=YouTube
+add address=199.36.154.0/23 list=YouTube
+add address=199.36.156.0/24 list=YouTube
+add address=199.192.112.0/22 list=YouTube
+add address=199.223.232.0/21 list=YouTube
+add address=207.223.160.0/20 list=YouTube
+add address=208.65.152.0/22 list=YouTube
+add address=208.68.108.0/22 list=YouTube
+add address=208.81.188.0/22 list=YouTube
+add address=208.117.224.0/19 list=YouTube
+add address=209.85.128.0/17 list=YouTube
+add address=216.58.192.0/19 list=YouTube
+add address=216.73.80.0/20 list=YouTube
+add address=216.239.32.0/19 list=YouTube
+add address=2ip.ru list=Test-IP
+add address=wg.vados.ru comment=VDSIna list=TRUSTED
+add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED
+add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina
+add address=love.ru comment=love.ru list=NoVdsina
+add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina
+add address=pochta.ru comment=pochta.ru list=NoVdsina
+add address=vdsina.com list=NoVdsina
+add address=vdsina.ru list=NoVdsina
+add address=youla.ru list=NoVdsina
+add address=kupiprodai.ru list=NoVdsina
+add address=myip.ru list=Test-IP
+add address=geoip.co list=NoVdsina
+add address=comp-lenta.ru list=NoVdsina
+add address=128.85.102.70 comment=update.microsoft.com list=\
+    windowsupdateslist
+add address=wu-b-net.trafficmanager.net. comment=\
+    ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\
+    ctldl.windowsupdate.com list=windowsupdateslist
+add address=redir.update.msft.com.trafficmanager.net. comment=\
+    update.microsoft.com list=windowsupdateslist
+add address=geo.prod.do.dsp.trafficmanager.net. comment=\
+    geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12437.d.akamaiedge.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \
+    comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \
+    list=windowsupdateslist
+add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\
+    sls.update.microsoft.com list=windowsupdateslist
+add address=fe3.delivery.mp.microsoft.com. comment=\
+    fe3cr.delivery.mp.microsoft.com list=windowsupdateslist
+add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\
+    fe3.delivery.mp.microsoft.com list=windowsupdateslist
+add address=fe2cr.update.msft.com.trafficmanager.net. comment=\
+    fe2cr.update.microsoft.com list=windowsupdateslist
+add address=download.windowsupdate.com.delivery.microsoft.com. comment=\
+    download.windowsupdate.com list=windowsupdateslist
+add address=wu-f-net.trafficmanager.net. comment=\
+    download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=tsfe.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \
+    comment=9.au.download.windowsupdate.com list=windowsupdateslist
+add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dspw65.akamai.net. comment=\
+    download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \
+    comment=licensing.mp.microsoft.com list=windowsupdateslist
+add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-nlu-net.trafficmanager.net. comment=\
+    star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-tlu-net.trafficmanager.net. comment=\
+    star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=storeedgefd.xbetservices.akadns.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \
+    comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\
+    windowsupdateslist
+add address=e16646.dscg.akamaiedge.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\
+    windowsupdateslist
+add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=bg.microsoft.map.fastly.net. comment=\
+    3.au.download.windowsupdate.com list=windowsupdateslist
+add list=windowsupdateslist
+add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\
+    star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a2033.dscd.akamai.net. comment=\
+    star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-nlu-net.trafficmanager.net. comment=\
+    dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-b-tlu-net.trafficmanager.net. comment=\
+    1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a122.dscg3.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist
+add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e10370.d.akamaiedge.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=a1683.dscd.akamai.net. comment=\
+    dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \
+    comment=collections.mp.microsoft.com list=windowsupdateslist
+add address=a1847.dscd.akamai.net. comment=\
+    wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=au.download.windowsupdate.com.edgesuite.net. comment=\
+    2.au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dscg3.akamai.net. comment=\
+    au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    4.au.download.windowsupdate.com list=windowsupdateslist
+add address=cl-glcb907925.gcdn.co. comment=\
+    4.au.download.windowsupdate.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \
+    comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=ts-frontend.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=sds.trafficmanager.net. comment=software-download.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\
+    windowsupdateslist
+add address=e12671.dscd.akamaiedge.net. comment=\
+    download.microsoft.com.edgekey.net list=windowsupdateslist
+add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12358.d.akamaiedge.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-tlu-net.trafficmanager.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a1856.dspw65.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina
+add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=purchase.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.mp.microsoft.com list=windowsupdateslist
+add address=e110219.a.akamaiedge.net. comment=\
+    purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.141 list=windowsupdateslist
+add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=storesdk.xbetservices.akadns.net. comment=\
+    storesdk.dsx.mp.microsoft.com list=windowsupdateslist
+add address=e16646.g.akamaiedge.net. comment=\
+    storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=software-download.microsoft.com.delivery.microsoft.com. comment=\
+    software-download.microsoft.com list=windowsupdateslist
+add address=download.prss.microsoft.com.akamaized.net. comment=\
+    software-download.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina
+add address=87.250.250.50 comment=YandexDisk list=NoVdsina
+add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\
+    purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\
+    cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=a1996.dscd.akamai.net. comment=\
+    wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\
+    tas02.sls.update.microsoft.com list=windowsupdateslist
+add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\
+    star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\
+    paymentinstruments.mp.microsoft.com list=windowsupdateslist
+add address=10.30.30.33 comment=amster list=NoWG
+add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG
+add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG
+add address=wg.vados.ru comment=VDSina-vpn list=VDSina
+add address=80.85.244.9 list=TRUSTED
+add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina
+add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS
+add address=dns.google comment=Google-dns list=Trusted-DNS
+add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\
+    Trusted-DNS
+add address=time.google.com comment=Google-time list=Trusted-NTP
+add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP
+add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=cp.vdsina.com comment=VDSina-vpn list=VDSina
+add address=vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns.vados.ru comment=VDSina-vpn list=VDSina
+add address=vdsina.com comment=VDSina-vpn list=VDSina
+add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=10.30.30.0/24 comment="Local Network" list=Local-Net
+add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net
+add address=146.120.64.208/29 comment="External Net" list=Unet
+add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina
+add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina
+add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina
+add address=10.30.30.30 comment=miller disabled=yes list=NoWG
+add address=10.30.30.33 comment="Direct connet to DNS servers" list=\
+    Direct-DNS
+add address=109.107.177.79 list=VPN-Server
+add address=10.0.0.0/8 list=RFC1918
+add address=172.16.0.0/12 list=RFC1918
+add address=192.168.0.0/16 list=RFC1918
+add address=8.8.4.4 disabled=yes list=to_vpn
+add address=myip.ru disabled=yes list=to_vpn
+add address=10.30.30.98 disabled=yes list=to_vpn
+/ip firewall filter
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=12h chain=input comment="block honeypot DNS" \
+    connection-state=new dst-port=53 in-interface=Unet-ether1 protocol=udp \
+    src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment=\
+    "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=!TRUSTED
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \
+    connection-state=new dst-port=5060 in-interface=Unet-ether1 protocol=udp
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot NTP" \
+    connection-state=new dst-port=123 in-interface=Unet-ether1 protocol=udp
+add action=fasttrack-connection chain=forward comment=\
+    "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \
+    connection-state=established,related,new disabled=yes
+add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \
+    protocol=tcp
+add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \
+    protocol=udp
+add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \
+    dst-port=53 protocol=tcp src-address=10.30.30.0/24
+add action=accept chain=input comment="udp Accept input DNS queries" \
+    dst-port=53 protocol=udp src-address=10.30.30.0/24
+add action=accept chain=output comment="accept WireGuard" disabled=yes \
+    dst-address-list=VPN-Server out-interface=Unet-ether1 protocol=udp \
+    src-port=13231
+add action=accept chain=output disabled=yes dst-address-list=VPN-Server \
+    dst-port=29185 out-interface=Unet-ether1 protocol=udp
+add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
+    connection-state=established,related,new disabled=yes routing-mark=\
+    !To-VPN
+add action=accept chain=output disabled=yes protocol=tcp src-port=443
+add action=accept chain=output disabled=yes src-address=127.0.0.1
+add action=accept chain=forward comment="defconf: accept in ipsec policy" \
+    disabled=yes ipsec-policy=in,ipsec
+add action=accept chain=forward comment="defconf: accept out ipsec policy" \
+    disabled=yes ipsec-policy=out,ipsec
+add action=accept chain=forward comment=\
+    "defconf: accept established,related, untracked" connection-state=\
+    established,related,untracked disabled=yes
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid in-interface=Unet-ether1 src-address=\
+    !10.30.30.0/24
+add action=drop chain=forward comment=\
+    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
+    connection-state=new in-interface=Unet-ether1 src-address-list=!VDSina
+add action=accept chain=input in-interface=Unet-ether1 protocol=icmp \
+    src-address-list=VDSina
+add action=accept chain=input connection-state=established
+add action=accept chain=input connection-state=related
+/ip firewall mangle
+add action=accept chain=prerouting comment=RFC1918 dst-address-list=RFC1918 \
+    in-interface-list=!WAN
+add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \
+    new-routing-mark=main passthrough=no src-address-list=NoWG
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for NoVdsina" disabled=yes dst-address-list=NoVdsina \
+    new-routing-mark=main passthrough=no src-address=10.30.30.0/24
+add action=mark-connection chain=prerouting comment=\
+    "Transit for address-list \"to_vpn\"" connection-mark=no-mark disabled=\
+    yes dst-address-list=to_vpn in-interface-list=!WAN new-connection-mark=\
+    to-vpn-conn routing-mark=!main
+add action=mark-routing chain=prerouting comment=\
+    "Find routing over table r_to_vpn" connection-mark=to-vpn-conn disabled=\
+    yes in-interface-list=!WAN new-routing-mark=r_to_vpn
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for VDSina" dst-address-list=VPN-Server \
+    new-routing-mark=main passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\
+    Unet new-routing-mark=main passthrough=no
+add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\
+    To-VPN src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \
+    new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment="WG for all" \
+    dst-address-list=!NoVdsina new-routing-mark=To-VPN src-address=\
+    10.30.30.0/24
+add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \
+    out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\
+    1381-65535
+add action=mark-connection chain=prerouting comment=\
+    "Mark VPN connections to exclude from FastTrack" disabled=yes \
+    new-connection-mark=VPN_No_FastTrack routing-mark=To-VPN
+add action=mark-routing chain=prerouting comment="VPN Network" disabled=yes \
+    dst-address=10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24
+add action=mark-connection chain=output comment="For this router" \
+    connection-mark=no-mark disabled=yes dst-address-list=to_vpn \
+    new-connection-mark=to-vpn-conn-local
+add action=mark-routing chain=output comment="For this router" \
+    connection-mark=to-vpn-conn-local disabled=yes new-routing-mark=r_to_vpn
+/ip firewall nat
+add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=masquerade chain=srcnat comment=\
+    "Nat Addresses for routing mark r_to_vpn" disabled=yes routing-mark=\
+    r_to_vpn
+add action=dst-nat chain=dstnat comment=\
+    "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=VPN-Server \
+    to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat comment=\
+    "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\
+    udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\
+    Unet-ether1 protocol=udp src-address=!10.30.30.0/24 to-addresses=\
+    10.30.30.33 to-ports=44333
+add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \
+    routing-mark=To-VPN
+add action=masquerade chain=srcnat comment="Default NAT" out-interface=\
+    Unet-ether1 routing-mark=!To-VPN src-address=10.30.30.0/24
+add action=dst-nat chain=dstnat dst-port=44044 in-interface=Unet-ether1 \
+    protocol=udp src-address=109.107.177.79 to-addresses=10.30.30.33 \
+    to-ports=44044
+add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \
+    fragment=no in-interface=Unet-ether1 protocol=tcp routing-mark=main \
+    to-addresses=10.30.30.33 to-ports=443
+add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \
+    dst-port=80 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=80
+add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \
+    dst-port=2904 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2904
+add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\
+    5000 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=5000
+add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\
+    2377 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=2377
+add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\
+    Unet-ether1 protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \
+    to-ports=81
+add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\
+    Unet-ether1 protocol=tcp src-address-list=TRUSTED to-addresses=\
+    10.30.30.33 to-ports=22
+add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \
+    dst-port=2377 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2377
+add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\
+    Unet-ether1 protocol=tcp routing-mark=!To-VPN to-addresses=10.30.30.33 \
+    to-ports=22
+add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \
+    dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \
+    time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\
+    Bridge-LAN protocol=tcp src-address-list=KIDS time=\
+    6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+/ip firewall raw
+add action=drop chain=prerouting comment="Drop Honeypot Hackers" \
+    in-interface=Unet-ether1 src-address-list="Honeypot Hacker"
+add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \
+    in-interface-list=WAN src-address-list=Trusted-DNS
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \
+    content=linux.duke.edu disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleapis.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googlevideo.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleusercontent.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    nhacmp3youtube.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \
+    content=rutube.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \
+    content=me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "icloud.com raw" content=icloud.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \
+    disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "api.db-ip.com raw" content=api.db-ip.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \
+    content=gosuslugi.ru disabled=yes
+/ip firewall service-port
+set ftp disabled=yes
+set tftp disabled=yes
+set irc disabled=no
+set sip disabled=yes
+set pptp disabled=yes
+set rtsp disabled=no
+#error exporting "/ip/ipsec/key/psk" (timeout)
+/ip ipsec settings
+set accounting=no
+/ip ipsec policy
+set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0
+/ip ipsec profile
+set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
+/ip proxy
+set cache-administrator="" max-cache-size=none port=80,443 src-address=\
+    0.0.0.0
+/ip route
+add check-gateway=none comment=WG-Default disabled=no distance=1 dst-address=\
+    0.0.0.0/0 gateway=WG routing-table=To-VPN scope=30 target-scope=10
+/ip service
+set ftp disabled=yes
+set telnet disabled=yes
+set reverse-proxy disabled=yes
+set ssh address=10.30.30.0/24 port=2222
+set winbox address=10.30.30.0/24
+set api address=10.30.30.0/24
+set api-ssl address=10.30.30.0/24 disabled=yes
+set www-ssl certificate=Root-YE port=18443
+set www address=10.30.30.0/24 disabled=yes port=18880
+/ip service webserver
+set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\
+    no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \
+    webfig-secure=no
+/ip ssh
+set forwarding-enabled=both publickey-authentication-options=verify-required
+/ip upnp
+set enabled=yes
+/ip upnp interfaces
+add interface=Bridge-LAN type=internal
+add forced-ip=146.120.64.211 interface=Unet-ether1 type=external
+add forced-ip=109.107.177.79 interface=*E type=external
+add interface=lo type=internal
+add interface=wlan2 type=internal
+add interface=wlan1 type=internal
+/ipv6 dhcp-client
+add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\
+    info use-interface-duid=yes validate-server-duid=no
+/ipv6 dhcp-server option sets
+add name=domain-search-set options=domain-search-list
+add name="=\"Client ID\"" options=HostName
+/ipv6 firewall address-list
+add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
+add address=::1/128 comment="defconf: lo" list=bad_ipv6
+add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
+add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
+add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
+add address=100::/64 comment="defconf: discard only " list=bad_ipv6
+add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
+add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
+add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
+/ipv6 firewall filter
+add action=accept chain=input comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=input comment="defconf: drop invalid" connection-state=\
+    invalid
+add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=input comment="defconf: accept UDP traceroute" \
+    dst-port=33434-33534 protocol=udp
+add action=accept chain=input comment=\
+    "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
+    udp src-address=fe80::/10
+add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
+    protocol=udp
+add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=input comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=input comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+add action=accept chain=forward comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
+add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
+    hop-limit=equal:1 protocol=icmpv6
+add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=forward comment="defconf: accept HIP" protocol=139
+add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
+    500,4500 protocol=udp
+add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=forward comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=forward comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+/ipv6 nd
+set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \
+    managed-address-configuration=yes other-configuration=yes pref64=::/64
+/ipv6 nd prefix
+add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none
+/ipv6 nd prefix default
+set dhcp6-pd-preferred=yes
+/ipv6 nd proxy
+add disabled=yes interface=lo
+/ipv6 nd settings
+set router-advertisement-route-distance=100
+/routing settings
+set single-process=no
+/system clock
+set time-zone-name=Europe/Moscow
+/system clock manual
+set time-zone=+03:00
+/system identity
+set name=MikroMaster
+/system logging
+add action=email disabled=yes regex="* added|changed|removed *" topics=\
+    system,info
+/system ntp client
+set enabled=yes
+/system ntp server
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes
+/system ntp client servers
+add address=0.ru.pool.ntp.org
+add address=1.ru.pool.ntp.org
+add address=2.ru.pool.ntp.org
+add address=3.ru.pool.ntp.org
+add address=time.google.com disabled=yes
+/system package update
+set check-certificate=yes-without-crl ip-version=ipv4
+/system scheduler
+add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \
+    on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Every Day Check For Update Scripts" interval=1d name=\
+    AM-ScriptInstallUpdate on-event=\
+    ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\
+    AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+/system watchdog
+set watchdog-timer=no
+/tool e-mail
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \
+    server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com
+/tool mac-server
+set allowed-interface-list=LAN
+/tool mac-server mac-winbox
+set allowed-interface-list=LAN
+/tool netwatch
+add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\
+    -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\
+    e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \
+    interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\
+    https-get up-script=""
+add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\
+    flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\
+    oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \
+    name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \
+    up-script=""
+add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\
+    8.8.8.8 down-script="" host=dns.google http-codes="" name=\
+    "Google-DNS IPv4" test-script="" type=dns up-script=""
+add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\
+    rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\
+    -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \
+    http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\
+    "" test-script="" type=dns up-script=""
+add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \
+    dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \
+    interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \
+    test-script="" timeout=800ms type=dns up-script=""
+add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\
+    ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \
+    down-script="" host=149.112.112.112 http-codes="" interval=10s name=\
+    "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script=""
+add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \
+    down-script="" host=91.192.189.2 http-codes="" interval=10s name=\
+    ns1.unet.ws test-script="" type=simple up-script=""
+add check-certificate=yes comment=\
+    "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \
+    disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\
+    vds.vados.ru port=443 test-script="" type=https-get up-script=""
+add comment="WireGuard NAT " disabled=yes down-script="/log info \"[WG-Monitor\
+    ] WireGuard is NOT running - reverting rules\"\
+    \n/ip firewall nat remove [find comment=\"Redirect to Router\"]\
+    \n/ip dns set servers=8.8.8.8\
+    \n/ip dns cache flush\
+    \n/ip route remove [find comment=\"wg-auto-route\"]\
+    \n" host=10.8.0.1 http-codes="" interval=15s name=WG test-script="" \
+    timeout=5s type=simple up-script="/log info \"[WG-Monitor] WireGuard is RU\
+    NNING - applying rules\";\
+    \n:local routeFile \"ips.txt\";\
+    \n:local routeDefAddr \"0.0.0.0/0\";\
+    \n:local routeGateway \"10.8.0.1\";\
+    \n:local routeIF \"WG\";\
+    \n:local routeTable \"To-VPN\";\
+    \n:local routeComment \"wg-auto-route\";\
+    \n/ip dns cache flush;\
+    \n:if ([:len [/ip firewall nat find comment=\"Redirect to Router\"]] > 0) \
+    do={\
+    \n  /ip firewall nat remove [find comment=\"Redirect to Router\"];\
+    \n}\
+    \n/ip firewall nat add action=redirect chain=dstnat src-address-list=\"Red\
+    irectDNS\" dst-port=53 protocol=udp comment=\"Redirect to Router\";\
+    \n/ip dns set servers=\$routeGateway;\
+    \n:local content [/file get \$routeFile contents];\
+    \n:if ([:len \$content] > 0) do={\
+    \n    :local line \"\";\
+    \n    :for i from=0 to=([:len \$content] - 1) do={\
+    \n        :local char [:pick \$content \$i];\
+    \n        :if (\$char != \"\\r\" && \$char != \"\\n\") do={\
+    \n            :set line (\$line . \$char);\
+    \n        } else={\
+    \n            :if ([:len \$line] > 5) do={\
+    \n                :do { /ip route add disabled=no dst-address=\$routeDefAd\
+    dr gateway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$r\
+    outeTable comment=\$routeComment check-gateway=none } on-error={}\
+    \n            }\
+    \n            :set line \"\";\
+    \n        }\
+    \n    }\
+    \n    :if ([:len \$line] > 5) do={\
+    \n#         :do { /ip route add dst-address=\$line gateway=\$routeGateway \
+    distance=1 comment=\$routeComment } on-error={}\
+    \n           :do { /ip route add disabled=no dst-address=\$routeDefAddr ga\
+    teway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$routeT\
+    able comment=\$routeComment check-gateway=none } on-error={}\
+    \n    }\
+    \n}\
+    \n:local dotPos [:find \$routeGateway \".\"];\
+    \n:if (\$dotPos != \"\") do={\
+    \n    :local firstOctet [:pick \$routeGateway 0 \$dotPos];\
+    \n    :local derivedDstAddress (\$firstOctet . \".30.0.0/15\");\
+    \n    :do { /ip route add dst-address=\$derivedDstAddress gateway=\$routeG\
+    ateway distance=1 comment=\$routeComment } on-error={}\
+    \n}\
+    \n\
+    \n"
+add comment=WG-Default disabled=yes down-script=\
+    "/ip route disable [find comment=\"WG-Default\"];" host=10.8.0.1 \
+    interval=15s name=WG packet-count=20 test-script="" thr-loss-count=5 \
+    type=icmp up-script="/ip route enable [find comment=\"WG-Default\"];"
+/user aaa
+set accounting=no
diff --git a/MikroMaster/20260711/20260711234002-Config.rsc b/MikroMaster/20260711/20260711234002-Config.rsc
new file mode 100644
index 0000000..af68144
--- /dev/null
+++ b/MikroMaster/20260711/20260711234002-Config.rsc
@@ -0,0 +1,3842 @@
+# 2026-07-11 23:40:06 by RouterOS 7.23.1
+# software id = A8L5-07YF
+#
+# model = RB952Ui-5ac2nD
+# serial number = D3D50CEDCD38
+/interface bridge
+add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\
+    "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\
+    Bridge-LAN port-cost-mode=short
+/interface ethernet
+set [ find default-name=ether1 ] comment=Unet-cable loop-protect=off name=\
+    Unet-ether1 rx-flow-control=auto tx-flow-control=auto
+set [ find default-name=ether2 ] comment=LAN-2
+set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3
+set [ find default-name=ether4 ] comment=LAN-4
+set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \
+    loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto
+/interface wireless
+# managed by CAPsMAN
+# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding
+set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados wireless-protocol=802.11
+# managed by CAPsMAN
+# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding
+set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados5g wireless-protocol=802.11
+/interface wireguard
+add comment=WG listen-port=13231 mtu=1320 name=WG
+add comment="WG interface for Amnezia route" disabled=yes listen-port=33033 \
+    mtu=1360 name=wg-nuc
+/interface list
+add include=static name=LAN
+add name=Internet
+add include=Internet name=WAN
+#error exporting "/interface/macsec/profile" (timeout)
+/interface wireless security-profiles
+set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
+    dynamic-keys supplicant-identity=MikroTik
+/iot wiliot servers
+set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East"
+/ip dhcp-server option
+add code=12 name=HostName
+add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00"
+/ip dhcp-server option sets
+add name=HP1505n options=HostName
+add name=StartLife1 options=HostName
+add name=amsterDev options=HostName
+add name=MiTV options=HostName
+add name=miller options=HostName
+add name=amster options=HostName
+add name=garage options=HostName
+add name=domain-search-set options=domain-search-list
+add name=VADOS-LEN options=HostName
+add name=VADOS-NUC options=HostName
+add name=MikroNUC options=HostName
+add name=master options=HostName
+add name=MikroYellow options=HostName
+add name="=\"Client ID\"" options=HostName
+add name=iVados options=HostName
+/ip dns forwarders
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no
+add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \
+    verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no
+/ip ipsec proposal
+set [ find default=yes ] disabled=yes
+/ip pool
+add name=dhcp ranges=10.30.30.83-10.30.30.254
+/ip dhcp-server
+add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \
+    dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \
+    name=masterDHCP server-address=10.30.30.81
+/ip smb users
+set [ find default=yes ] disabled=yes
+add disabled=yes name=vados
+/ipv6 dhcp-client option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=DUID value=0x00030001488f5a8e1abc
+add code=61 name=clientid
+/ipv6 dhcp-server option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=CLIENT_DUID
+add code=61 name=CLIENT_MAC
+/ppp profile
+set *FFFFFFFE use-upnp=no
+/routing bgp template
+set default disabled=no output.network=bgp-networks
+/routing table
+add disabled=no fib name=To-VPN
+add disabled=no fib name=r_to_vpn
+/system logging action
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email
+/system script
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\
+    \n\r\
+    \n#:local Script AM-setup\
+    \n;\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n\
+    \n\r\
+    \n#\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\
+    \n\r\
+    \n#\r\
+    \n\
+    \n#root.mnuc.backuper\
+    \n\
+    \n\r\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\
+    .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\
+    \n\
+    \n#:local Script AM-GlobalConfig;\
+    \n\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n#:local FetchFile AM-DOHCert.rsc\
+    \n\
+    \n\r\
+    \n\r\
+    \n#\
+    \n:global MkDir;\
+    \n\r\
+    \n\
+    \n#:local FetchFile Binary.backup\
+    \n:local localDir \"\";\
+    \n\
+    \n\r\
+    \n#\$MkDir \$localDir;\r\
+    \n\
+    \n#\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\
+    \$localDir . \$FetchFile);\r\
+    \n"
+add comment="Global Config Script" dont-require-permissions=no name=\
+    AM-GlobalConfig owner=AM-GlobalConfig policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GlobalConfig\r\
+    \n# Script comment: Global Config Script\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# Warning: Dont touch this line!\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global GlobalConfReady false;\r\
+    \n#\r\
+    \n#\r\
+    \n# Global Url For Amster scripts to fetch\r\
+    \n# most be defined in AM-Init-Script or AM-setup scripts\r\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n:global ScriptsUrlSuffix (a);\r\
+    \n:global CheckSumsVerify true;\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF true;\r\
+    \n:global CommentsInScripts true;\r\
+    \n\r\
+    \n# Debug output:\r\
+    \n:global PrintDebug true; #false;\r\
+    \n\r\
+    \n# Debug output for specific script:\r\
+    \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\
+    \n\r\
+    \n# Debug logs\r\
+    \n# Other actions (disk, email, remote or support) can be used as well.\r\
+    \n# I do not recommend using echo - use debug output instead (https://rsc.\
+    eworm.de/main/DEBUG.html#debug-output).\r\
+    \n#/system/logging/add topics=script,debug action=memory;\r\
+    \n\r\
+    \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\
+    \n:global Domain \"WORKGROUP\";\r\
+    \n\r\
+    \n:global EmailGeneralTo \"vados@vados.ru\";\r\
+    \n#:global EmailGeneralCc \"\";\r\
+    \n\r\
+    \n# \$ScriptInstallUpdate mod/notification-telegram\r\
+    \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\
+    \";\r\
+    \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\
+    \n# Use this to send notifications to a specific topic in group.\r\
+    \n#:global TelegramThreadId \"30\";\r\
+    \n# Using telegram-chat you have to define trusted chat ids (not group ids\
+    !)\r\
+    \n# or user names. Groups allow to chat with devices simultaneously.\r\
+    \n:global TelegramChatIdsTrusted {\r\
+    \n  \"454403445\"\r\
+    \n  \"-1003631309063\"\r\
+    \n  \"-5124482807\"\r\
+    \n  \"1087968824\";\r\
+    \n};\r\
+    \n#  \"-5294757340\";\r\
+    \n\r\
+    \n:global TelegramChatGroups \"(all)\";\r\
+    \n#:global TelegramChatGroups \"(all|home|office)\";\r\
+    \n\r\
+    \n:global NotificationFunctions {\r\
+    \n  \"email\"\r\
+    \n  \"telegram\";\r\
+    \n};\r\
+    \n# Toggle this to disable symbols in notifications.\r\
+    \n:global NotificationsWithSymbols true;\r\
+    \n:global TerminalColorOutput true;\r\
+    \n\r\
+    \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\
+    \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\
+    \n\r\
+    \n## Update channel. Possible values: stable, long-term, testing, developm\
+    ent\r\
+    \n:global updateChannel \"stable\";\r\
+    \n\r\
+    \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\
+    \");\r\
+    \n:global CertRenewTime 2w;\r\
+    \n:global CertRenewPass (a); #{\r\
+    \n#  \"\";\r\
+    \n#  \"v3ry-s3cr3t\";\r\
+    \n#  \"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n:global CertWarnTime 1w;\r\
+    \n:global CertIssuedExportPass (a); # {\r\
+    \n#  \"\";\r\
+    \n#  \"cert1-cn\"=\"v3ry-s3cr3t\";\r\
+    \n#  \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n\r\
+    \n# Script BackupAndUpdate mode, possible values: backup,\r\
+    \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\
+    n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;).  \r\
+    \n# osupdate - Update if available and creates backups before/after update\
+    \_(ignores `forceBackup`)\r\
+    \n#               Set `forceBackup` to true to always create backups, even\
+    \_without updates\r\
+    \n# osnotify - Set `forceBackup` to always create backups on every run\r\
+    \n:global DevInfoIncludeIP true;\r\
+    \n:global BackupAndUpdateMode \"osnotify\"\r\
+    \n\r\
+    \n:global forceBackup true;\r\
+    \n:global BackupPassword \"Peskar55\";\r\
+    \n\r\
+    \n# SFTP Backup Variables\r\
+    \n:global BackupRandomDelay 0;\r\
+    \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\
+    \n:global BackupUploadUser \$Identity;\r\
+    \n:global BackupUploadPass \"root.mnuc.backuper\";\r\
+    \n\r\
+    \n:global BackupSendBinary true;\r\
+    \n:global BackupSendExport true;\r\
+    \n:global BackupSendGlobalConfig true;\r\
+    \n:global BackupSendScripts true;\r\
+    \n\r\
+    \n# Remove local file after uploading if no errors\r\
+    \n:global BackupRmLocal true;\r\
+    \n\r\
+    \n# Local Backups Root Directory \r\
+    \n:global BackupLocalRoot \"tmpfs\";\r\
+    \n\r\
+    \n# Encrypt Backup\r\
+    \n:global BackupEncrypt true;\r\
+    \n\r\
+    \n# Sensitive information in Backups\r\
+    \n:global BackupSens true;\r\
+    \n\r\
+    \n# User Export\r\
+    \n:global BackupUser true;\r\
+    \n\r\
+    \n# License Export (not for CHR, will silently skip)\r\
+    \n:global BackupLicense false;\r\
+    \n\r\
+    \n# SSH Keys\r\
+    \n:global BackupSshKeys true;\r\
+    \n\r\
+    \n# Certificate Export\r\
+    \n:global BackupCerts true;\r\
+    \n\r\
+    \n# Certificate Password\r\
+    \n:global BackupCertsPasswd \"\";\r\
+    \n\r\
+    \n# User-Manager Export\r\
+    \n:global BackupUserMan false;\r\
+    \n\r\
+    \n# The Dude Export\r\
+    \n:global BackupDude false;\r\
+    \n\r\
+    \n# User Files to export, comma-separated string or array of strings\r\
+    \n# User Files are not removed on backup\r\
+    \n# Any directory paths will be removed (/ -> _) on remote file\r\
+    \n# Nonpresent files are silently skipped\r\
+    \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\
+    \n\r\
+    \n# load functions and any custom scripts\r\
+    \n#                    [ /system/script/find where name=\"global-config-ov\
+    erlay\" ], \\\r\
+    \n#                    [ /system/script/find where name~\"^global-config-o\
+    verlay\\\\.d/.\" ]\r\
+    \n#\r\
+    \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\
+    ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\
+    \r\
+    \n#  :onerror Err {\r\
+    \n#     /system/script/run \$Script;\r\
+    \n#     } do={\r\
+    \n#       :log error (\"Loading configuration from configs and functions\"\
+    \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\
+    \n#  }\r\
+    \n#}\r\
+    \n#:log info \"\\ndevMode = \$devMode\";\r\
+    \n#:log info \"\\ndevRunning = \$devRunning\";\r\
+    \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \
+    GlobalRUN\\r\?\\n\" ] do={\r\
+    \n  :onerror Err {\r\
+    \n    /system/script/run \$Script;\r\
+    \n       } do={\r\
+    \n       :log error (\"Run script \" . [ /system/script/get \$Script name \
+    ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# signal we are ready\r\
+    \n:set GlobalConfReady true;\r\
+    \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\
+    \n"
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \
+    owner=AM-GlobalFunc policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GglobalFunc\r\
+    \n# Script comment: Global functions\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch, scheduler\r\
+    \n:local ExitOK false;\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n#:global checkRunJob \$SriptName;\r\
+    \n#:global fixCRLF;\r\
+    \n#:if (\$fixCRLF !=  false) do={\r\
+    \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\
+    ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\
+    }\r\
+    \n#:if (\$fixCRLF !=  \"LF\") do={ /system/script/set source=[ :tocrlf [ g\
+    et \$fixScript source ] ] \$fixScript};};\r\
+    \n#}\r\
+    \n:global GlobalFuncReady false;\r\
+    \n\r\
+    \n# Git commit id & info, expected configuration version\r\
+    \n:global CommitId \"main/729/f42d43ae\";\r\
+    \n:global CommitTAG \"unknown\";\r\
+    \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\
+    r: root, in 00:05:03 01.07.2026.\";\r\
+    \n\r\
+    \n# The variables are received right here.\r\
+    \n:global GlobalConfVersion 140;\r\
+    \n\r\
+    \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\
+    \n\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global IdentityShort [:pick \$Identity 0 18];\r\
+    \n\r\
+    \n:global devBoardName [/system/resource/get board-name];\r\
+    \n:global devMode [/system/device-mode/get mode];\r\
+    \n:global devCurArch [/system/resource/get architecture-name];\r\
+    \n:global devCurVersion [/system/resource/get version];\r\
+    \n\r\
+    \n# Variables defined in AM-GlobalConfig.rsc\r\
+    \n:global TerminalColorOutput;\r\
+    \n:global CommentsInScripts;\r\
+    \n:global DetectIpAddrDefault;\r\
+    \n:global DetectIpAddrFallback;\r\
+    \n:global updateChannel;\r\
+    \n:global Domain;\r\
+    \n:global EmailGeneralTo;\r\
+    \n:global BackupAndUpdateMode;\r\
+    \n\r\
+    \n# Single functions, without nested functions.\r\
+    \n:global MiniDateTimeStamp;\r\
+    \n:global MicroDateTimeStamp;\r\
+    \n\r\
+    \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\
+    \n:global LogPrint;\r\
+    \n\r\
+    \n# DeviceInfo and Updates\r\
+    \n:global IsCheckUpdates;\r\
+    \n:global WaitCheckUpdates;\r\
+    \n:global GetPubIp;\r\
+    \n\r\
+    \n:global GetArrDeviceInfo;\r\
+    \n:global WaitArrDeviceInfo;\r\
+    \n\r\
+    \n:global devModel;\r\
+    \n:global devRunningMode;\r\
+    \n\r\
+    \n:global devRbRevision;\r\
+    \n:global devRbSerialNumber;\r\
+    \n:global devRbVerAvail;\r\
+    \n\r\
+    \n:global runningChannelVersion;\r\
+    \n:global runningChannel;\r\
+    \n:global runningVersion;\r\
+    \n\r\
+    \n:global devBuildTime;\r\
+    \n:global ROsVerAvail;\r\
+    \n:global PkgUpdStatus;\r\
+    \n:global currentUpdateChannel;\r\
+    \n\r\
+    \n:global ScriptInstallUpdate;\r\
+    \n\r\
+    \n:global DeviceInfo;\r\
+    \n\r\
+    \n:global OldMode;\r\
+    \n\r\
+    \n:global ParseKeyValueStore;\r\
+    \n:global RandomDelay;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global EscapeForRegEx;\r\
+    \n:global CharacterMultiply;\r\
+    \n:global CharacterReplace;\r\
+    \n:global CleanFilePath;\r\
+    \n:global CleanName;\r\
+    \n\r\
+    \n:global CommitBrief;\r\
+    \n\r\
+    \n:global EitherOr;\r\
+    \n:global FormatLine;\r\
+    \n:global GetRandom20CharAlNum;\r\
+    \n:global GetRandom20CharHex;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global Grep;\r\
+    \n:global IfThenElse;\r\
+    \n:global MAX;\r\
+    \n:global MIN;\r\
+    \n:global HumanReadableNum;\r\
+    \n\r\
+    \n:global IsFullyConnected;\r\
+    \n:global IsDNSResolving;\r\
+    \n:global IsTimeSync;\r\
+    \n:global IsTimeSyncCached;\r\
+    \n:global IsTimeSyncResetNtp;\r\
+    \n\r\
+    \n:global MkDir;\r\
+    \n:global RmDir;\r\
+    \n:global RmFile;\r\
+    \n:global FileGet;\r\
+    \n:global Unix2Dos;\r\
+    \n:global UrlEncode;\r\
+    \n:global WaitForFile;\r\
+    \n:global ScriptLock;\r\
+    \n:global SendTelegram;\r\
+    \n:global NotificationFunctions;\r\
+    \n:global SendNotification;\r\
+    \n:global SendNotification2;\r\
+    \n:global SymbolForNotification;\r\
+    \n:global SymbolByUnicodeName;\r\
+    \n:global ValidateSyntax;\r\
+    \n:global CheckSumsVerify;\r\
+    \n:global GlobalConfChanges;\r\
+    \n:global GlobalConfMigration;\r\
+    \n:global VersionToNum;\r\
+    \n:global RequiredRouterOS;\r\
+    \n:global ExitError;\r\
+    \n:global ExitOnError;\r\
+    \n\r\
+    \n:global FetchHugeFiles;\r\
+    \n:global FetchUserAgentStr;\r\
+    \n:global FileExists;\r\
+    \n:global CertificateAvailable;\r\
+    \n:global CertificateDownload;\r\
+    \n:global CertificateNameByCN;\r\
+    \n:global CharacterMultiply;\r\
+    \n\r\
+    \n:global InspectVar;\r\
+    \n:global InspectVarRet;\r\
+    \n:global ParseCustom;\r\
+    \n\r\
+    \n:set IsCheckUpdates do={\r\
+    \n  :local isInfo [:tobool \$1];\r\
+    \n  :global updateChannel;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\
+    \n  :local CurrentChannel [ /system/package/update/get channel ];\r\
+    \n  :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\
+    el) do={\r\
+    \n    :retry command={/system/package/update set channel=\$updateChannel} \
+    \_delay=300ms max=5 on-error={};\r\
+    \n    :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\
+    \n  }\r\
+    \n  :local Update [ /system/package/update/get ];\r\
+    \n  :local Channel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set currentUpdateChannel \$Channel;\r\
+    \n  :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\
+    \n  :local StatusPkg \"undefined\";\r\
+    \n  :log info (\$0 . \" Checking for updates...\");\r\
+    \n  :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\
+    dates without-paging as-value]->\"status\")} \\\r\
+    \n   delay=300ms max=5 on-error={};\r\
+    \n  :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\
+    \n  :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\
+    s true; } else={ :set PkgUpdStatus false; }\r\
+    \n  :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \
+    ] ];\r\
+    \n  :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n  :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\
+    \n    :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n    :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n      :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n    }\r\
+    \n    :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\
+    kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\
+    \n    :return true;\r\
+    \n  } else={\r\
+    \n    :return \$PkgUpdStatus;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitCheckUpdates do={\r\
+    \n  :global IsCheckUpdates;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :local Status \"\";\r\
+    \n  :local Update;\r\
+    \n  :local WaitCount 0;\r\
+    \n  :if ([ \$IsCheckUpdates true ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n  :while ((\$Status = \"\" || \$Status = \"finding out latest version...\
+    \") && \$WaitCount < 60) do={\r\
+    \n    :delay 1s;\r\
+    \n    :set WaitCount (\$WaitCount + 1);\r\
+    \n    :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n   }\r\
+    \n  :set Update [ /system/package/update/get ];\r\
+    \n  :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n  :if ((\$Update->\"status\") = \"New version is available\") do={\r\
+    \n    :set PkgUpdStatus true;\r\
+    \n  } else={\r\
+    \n    :set PkgUpdStatus false;\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n    :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n  }\r\
+    \n  :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\
+    \n  :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \
+    do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitArrDeviceInfo do={\r\
+    \n   :global GetArrDeviceInfo;\r\
+    \n   :while ([ \$GetArrDeviceInfo ] = false) do={\r\
+    \n    :delay 1s;\r\
+    \n   }\r\
+    \n}\r\
+    \n\r\
+    \n:set GetArrDeviceInfo do={\r\
+    \n   :global LogPrint;\r\
+    \n   :global arrDeviceInfo;\r\
+    \n   :global devBoardName;\r\
+    \n   :global devModel;\r\
+    \n   :global devRunning;\r\
+    \n   :global devCurArch;\r\
+    \n   :global devRbRevision;\r\
+    \n   :global devRbSerialNumber;\r\
+    \n   :global devBuildTime;\r\
+    \n   :global runningChannelVersion;\r\
+    \n   :global runningChannel;\r\
+    \n   :global runningVersion;\r\
+    \n   :global currentUpdateChannel;\r\
+    \n   :global ROsVerAvail;\r\
+    \n\r\
+    \n   :local DeviceInfo;\r\
+    \n   :local Resource [/system/resource/get];\r\
+    \n   :local Update [ /system/package/update/get ];\r\
+    \n   :local VersionString [ :tostr (\$Resource->\"version\") ];\r\
+    \n   :local ChannelStart [ :find \$VersionString \" (\" ];\r\
+    \n   :local RouterBoard;\r\
+    \n   :local IsRouterBoard false;\r\
+    \n   :local RunningMode \"\";\r\
+    \n\r\
+    \n   :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\
+    \n   :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\
+    \n   :set runningChannelVersion \$VersionString;\r\
+    \n   :set runningVersion \$VersionString;\r\
+    \n   :set runningChannel \"\";\r\
+    \n\r\
+    \n   :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\
+    {\r\
+    \n     :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\
+    \n     :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\
+    len \$VersionString ] ];\r\
+    \n     :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\
+    \n     :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\
+    \r\
+    \n       :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\
+    \n     }\r\
+    \n   }\r\
+    \n\r\
+    \n   :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\
+    \_3] != \"x86\") do={\r\
+    \n   :do {\r\
+    \n      :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\
+    \n#     :set RouterBoard [ /system/routerboard/get ];\r\
+    \n      :if ((\$RouterBoard->\"routerboard\") = true) do={\r\
+    \n        :set IsRouterBoard true;\r\
+    \n     }\r\
+    \n   } on-error={}\r\
+    \n    }\r\
+    \n\r\
+    \n   :do {\r\
+    \n     :set RunningMode [ /system/device-mode/get mode ];\r\
+    \n   } on-error={\r\
+    \n     :do {\r\
+    \n       :set RunningMode [ /system/device-mode/get running ];\r\
+    \n     } on-error={\r\
+    \n       :set RunningMode \"\";\r\
+    \n     }\r\
+    \n   }\r\
+    \n   :set devRunning \$RunningMode;\r\
+    \n\r\
+    \n   :if (\$IsRouterBoard = true) do={\r\
+    \n     :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\
+    \n     :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\
+    \n     :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \
+    ];\r\
+    \n   } else={\r\
+    \n     :set devModel \$devBoardName;\r\
+    \n     :set devRbRevision \"\";\r\
+    \n     :set devRbSerialNumber \"\";\r\
+    \n   }\r\
+    \n\r\
+    \n   :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n   :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n\r\
+    \n   :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\
+    \n   :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\
+    \n   :set (\$DeviceInfo->\"model\") \$devModel;\r\
+    \n   :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\
+    \n   :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\
+    \n   :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\
+    \n   :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\
+    \n   :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\
+    ion;\r\
+    \n   :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\
+    \n   :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\
+    \n   :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\
+    \n   :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\
+    current-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\
+    upgrade-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\
+    \n   :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\
+    alled-version\") ];\r\
+    \n   :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\
+    \n   :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\
+    ) ];\r\
+    \n\r\
+    \n   :set arrDeviceInfo \$DeviceInfo;\r\
+    \n   :return \$DeviceInfo;\r\
+    \n}\r\
+    \n\r\
+    \n:set DeviceInfo do={\r\
+    \n  :global GetArrDeviceInfo;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global FormatLine;\r\
+    \n  :global CommitBrief;\r\
+    \n\r\
+    \n  :local License [/system/license/get];\r\
+    \n  :local Snmp [ /snmp/get ];\r\
+    \n  :local Info [ \$GetArrDeviceInfo ];\r\
+    \n\r\
+    \n  :if ([ :typeof \$Info ] != \"array\") do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :return ( \\\r\
+    \n    [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\
+    \_. \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\
+    \_\\\r\
+    \n    \"Hardware:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Board\" (\$Info->\"board-name\") ] . \"\\n\" . \
+    \\\r\
+    \n    [ \$FormatLine \"    Arch\" (\$Info->\"architecture-name\") ] . \"\\\
+    n\" . \\\r\
+    \n    [ \$FormatLine \"    Model\" (\$Info->\"model\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\
+    \n      (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Serial\" (\$Info->\"serial-number\") ] . \"\
+    \\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"nlevel\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS:\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"level\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    [ \$FormatLine \"    Channel\" (\$Info->\"package-channel\") ] . \"\
+    \\n\" . \\\r\
+    \n    [ \$FormatLine \"    Installed\" (\$Info->\"installed-version\") ] .\
+    \_\"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Running\" ((\$Info->\"running-version\") . \
+    \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\
+    \n      ([ \$FormatLine \"    Running\" (\$Info->\"running-version\") ] . \
+    \"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\
+    \n        (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\
+    \_\\\r\
+    \n      ([ \$FormatLine \"    Available\" (\$Info->\"latest-version\") ] .\
+    \_\"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\
+    \n        (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\
+    ) \\\r\
+    \n      ([ \$FormatLine \"    Firmware\" ((\$Info->\"current-firmware\") .\
+    \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS-Scripts:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Version\" \$GlobalConfVersion ]);\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\
+    tionFunctions ({})}\r\
+    \n\r\
+    \n:set GetRandom20CharAlNum do={\r\
+    \n  :global EitherOr;\r\
+    \n  :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\
+    FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\
+    \n}\r\
+    \n\r\
+    \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\
+    \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\
+    \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\
+    \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\
+    \n\r\
+    \n:global checkRunJob;\r\
+    \n:set checkRunJob do={\r\
+    \n  :local Script [ :tostr \$1 ];\r\
+    \n  :global ScriptLock; \r\
+    \n  :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\
+    \n  :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\
+    :set Job [ /system/script/job/get \$Job ];\r\
+    \n    :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\
+    stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\
+    \n     :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\
+    lse; \r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVar do={\r\
+    \n  :global InspectVarRet;\r\
+    \n  :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\
+    \n}\r\
+    \n\r\
+    \n:set CommitBrief do={\r\
+    \n  :global CommitId;\r\
+    \n  :global CommitInfo;\r\
+    \n  :if (\$CommitId = \"unknown\") do={\r\
+    \n    :return \"unknown\";\r\
+    \n    }\r\
+    \n  :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVarRet do={\r\
+    \n  :local Input \$1;\r\
+    \n  :local Level (0 + [ :tonum \$2 ]);\r\
+    \n  :global CharacterReplace;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global InspectVarRet;\r\
+    \n  :local IndentReturn do={\r\
+    \n    :local Prefix [ :tostr \$1 ];\r\
+    \n    :local Value  [ :tostr \$2 ];\r\
+    \n    :local Level  [ :tonum \$3 ];\r\
+    \n    :global CharacterMultiply;\r\
+    \n    :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\
+    fix . \"-> \" . \$Value);\r\
+    \n  }\r\
+    \n  :local TypeOf [ :typeof \$Input ];\r\
+    \n  :local Len    [ :len \$Input ];\r\
+    \n  :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\
+    \n  :if (\$TypeOf = \"array\") do={\r\
+    \n    :foreach Key,Value in=\$Input do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n        [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\
+    \n        [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    :if (\$TypeOf = \"str\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n         [ \$IndentReturn \"len\" \$Len \$Level ]);\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\
+    \n      }\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if (\$TypeOf != \"nothing\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n       [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\
+    \_\\\r\
+    \n        ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set GetPubIp do={\r\
+    \n    :global DetectIpAddrDefault;\r\
+    \n    :global DetectIpAddrFallback;\r\
+    \n\r\
+    \n    :local PubIpAddr false;\r\
+    \n    :local Url \$DetectIpAddrDefault;\r\
+    \n    :local JobName [ :jobname ];\r\
+    \n\r\
+    \n    :do {\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using default serv\
+    ice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \
+    detect public IP using default service: \" . \$Url . \".\")}\r\
+    \n     } on-error={\r\
+    \n      :log error (\$0 . \" Failed to detect public IP using default serv\
+    ice: \" . \$Url . \".\");\r\
+    \n      :set Url \$DetectIpAddrFallBack;\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using fallback ser\
+    vice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\
+    \_detect public IP using fallback service: \" . \$Url . \".\")}\r\
+    \n    };\r\
+    \n    :local IpLen ([ :len \$PubIpAddr ] -1);\r\
+    \n    :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\
+    {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\
+    \n    :return \$PubIpAddr;\r\
+    \n}\r\
+    \n\r\
+    \n:set FormatLine do={\r\
+    \n  :local Key    [ :tostr \$1 ];\r\
+    \n  :local Value  [ :tostr \$2 ];\r\
+    \n  :local Indent [ :tonum \$3 ];\r\
+    \n  :local Spaces;\r\
+    \n  :local Return \"\";\r\
+    \n  :global CharacterMultiply;\r\
+    \n  :global EitherOr;\r\
+    \n  :set Indent [ \$EitherOr \$Indent 16 ];\r\
+    \n  :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\
+    \n  :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\
+    \n  :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\
+    n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\
+    \n  } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \
+    \$Return ]) ] . \$Value)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseCustom do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Start [:find [ \$Str ] [:tostr \$2]];\r\
+    \n  :local End [ :tostr \$3 ];\r\
+    \n  :local Num [ :tonum \$4 ];\r\
+    \n  :local Return;\r\
+    \n  :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\
+    \n  :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\
+    \n  :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\
+    lse={\r\
+    \n  :set End [:find \$rest \$End];\r\
+    \n  :set Return [:pick \$rest 0 \$End];\r\
+    \n  }\r\
+    \n:return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set LogPrint do={\r\
+    \n  :local Severity [ :tostr \$1 ];\r\
+    \n  :local Name     [ :tostr \$2 ];\r\
+    \n  :local Message  [ :tostr \$3 ];\r\
+    \n  :global PrintDebug;\r\
+    \n  :global PrintDebugOverride;\r\
+    \n  :global EitherOr;\r\
+    \n  :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \
+    ];\r\
+    \n  :local PrintSeverity do={\r\
+    \n  :global TerminalColorOutput;\r\
+    \n   :if (\$TerminalColorOutput != true) do={:return \$1}\r\
+    \n   :local Color { debug=96; info=97; warning=93; error=91 };\r\
+    \n   :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\
+    \n}\r\
+    \n  :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\
+    \r\
+    \n  :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\
+    \n    :if (\$Severity = \"debug\") do={:log debug \$Log}\r\
+    \n    :if (\$Severity = \"error\") do={:log error \$Log}\r\
+    \n    :if (\$Severity = \"info\" ) do={:log info  \$Log}\r\
+    \n  } else={:log warning \$Log; :set Severity \"warning\"}\r\
+    \n  :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\
+    erity \$Severity ] . \": \" . \$Message)}\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateAvailable do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :local UseFor     [ :tostr \$2 ];\r\
+    \n\r\
+    \n  :global CertificateDownload;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n\r\
+    \n  :if ([ :len \$UseFor ] = 0) do={\r\
+    \n    :log warning (\$0 . \"The intended use is undefined!\");\r\
+    \n    :set UseFor \"undefined\";\r\
+    \n  }\r\
+    \n  :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\
+    \n       [ /certificate/settings/get crl-download ] = true && \\\r\
+    \n       [ /certificate/settings/get crl-store ] = \"system\") do={\r\
+    \n    :log warning (\$0 . \"This system has low free flash space but \" . \
+    \\\r\
+    \n      \"is configured to download certificate CRLs to system!\");\r\
+    \n  }\r\
+    \n  :if ([ :len \$CommonName ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No CommonName given!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\
+    \r\
+    \n        (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\
+    \n        (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n       [ :len [ /certificate/builtin/find where common-name=\$CommonName\
+    \_] ] > 0) do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \
+    \"' not available.\");\r\
+    \n    :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\
+    ) do={\r\
+    \n    :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\
+    \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\
+    e ] ];\r\
+    \n  :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\
+    ertVal->\"skid\")) do={\r\
+    \n    :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\
+    \_= 0) do={\r\
+    \n      :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\
+    >\"CN\");\r\
+    \n      :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \
+    is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\
+    \n      :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\
+    \") ] ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateDownload do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :global ScriptUpdatesBaseUrl;\r\
+    \n  :global ScriptUpdatesUrlSuffix;\r\
+    \n  :global CertificateNameByCN;\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :log info (\$0 . \"Downloading and importing certificate with \" . \\\
+    \r\
+    \n      \"CommonName '\" . \$CommonName . \"'.\");\r\
+    \n  :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\
+    \n  :do {\r\
+    \n    /tool/fetch check-certificate=yes-without-crl mode=https http-header\
+    -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\
+    sUrlSuffix) \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n    \$WaitForFile \$FileName;\r\
+    \n  } on-error={\r\
+    \n    :log warning (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \\\r\
+    \n      \"' from repository! Trying fallback to mkcert.org...\");\r\
+    \n    :do {\r\
+    \n      :local CertSettings [ /certificate/settings/get ];\r\
+    \n      :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\
+    \_] ] = 0 && \\\r\
+    \n           !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \
+    || \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \
+    \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\
+    \r\
+    \n             [ :len [ /certificate/builtin/find where common-name=\"ISRG\
+    \_Root X1\" ] ] > 0)) do={\r\
+    \n        :log error (\$0 . \" Required certificate is not available.\");\
+    \r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n      /tool/fetch check-certificate=yes-without-crl mode=https http-head\
+    er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\
+    n ({ \$CommonName }) ] \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n      \$WaitForFile \$FileName;\r\
+    \n      :if ([ /file/get \$FileName size ] = 0) do={\r\
+    \n        \$RmFile \$FileName;\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n    } on-error={\r\
+    \n      :log error (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \"'!\");\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\
+    \n  :delay 1s;\r\
+    \n  \$RmFile \$FileName;\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\
+    +\\\$\") ];\r\
+    \n    :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\
+    e . \"' still unavailable!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \
+    \"_[0-9]+\\\$\") ] do={\r\
+    \n    \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateNameByCN do={\r\
+    \n  :local Match [ :tostr \$1 ];\r\
+    \n  :global CleanName;\r\
+    \n  :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\
+    rint=\$Match or name=\$Match) ]->0);\r\
+    \n  :if ([ :len \$Cert ] = 0) do={\r\
+    \n    :log warning (\$0 .\" No matching certificate found.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CommonName [ /certificate/get \$Cert common-name ];\r\
+    \n  /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileExists do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :local Type     [ :tostr \$2 ];\r\
+    \n  :global FileGet;\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={ :return false; }\r\
+    \n  :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\
+    \n  :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\
+    \_true; }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set Grep do={\r\
+    \n  :local Input  ([ :tostr \$1 ] . \"\\n\");\r\
+    \n  :local Pattern [ :tostr \$2 ];\r\
+    \n  :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\
+    }\r\
+    \n  :do {\r\
+    \n    :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\
+    \n    :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \
+    \$Line}\r\
+    \n    :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\
+    Input ] ];\r\
+    \n  } while=([ :len \$Input ] > 0);\r\
+    \n  :return [];\r\
+    \n}\r\
+    \n\r\
+    \n:set HumanReadableNum do={\r\
+    \n  :local Input [ :tonum \$1 ];\r\
+    \n  :local Base  [ :tonum \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Prefix \"kMGTPE\";\r\
+    \n  :local Pow 1;\r\
+    \n  :set Base [ \$EitherOr \$Base 1024 ];\r\
+    \n  :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\
+    \n  :if (\$Input < \$Base) do={:return \$Input}\r\
+    \n  :for I from=0 to=[ :len \$Prefix ] do={\r\
+    \n    :set Pow (\$Pow * \$Base);\r\
+    \n    :if (\$Input / \$Base < \$Pow) do={\r\
+    \n      :set Prefix [ :pick \$Prefix \$I ];\r\
+    \n      :local Tmp1 (\$Input * 100 / \$Pow);\r\
+    \n      :local Tmp2 (\$Tmp1 / 100);\r\
+    \n      :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\
+    \n      :return (\$Tmp2 . \".\" . \\\r\
+    \n          [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\
+    2 ] + 1) ] . \\\r\
+    \n          \$Prefix . \$Bin);\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanFilePath do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CharacterReplace;\r\
+    \n  :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \
+    \"//\" \"/\" ]; }\r\
+    \n  :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\
+    n \$Path ] ]; }\r\
+    \n  :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \
+    :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\
+    \n  :return \$Path;\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanName do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\
+    stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\
+    \n      :do {:if ([ :len \$Return ] = 0) do={:error true};\r\
+    \n        :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\
+    ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\
+    \n    };\r\
+    \n    :set Return (\$Return . \$Char)};\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set RandomDelay do={\r\
+    \n  :local Time [ :tonum \$1 ];\r\
+    \n  :local Unit [ :tostr \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global GetRandomNumber;\r\
+    \n  :global MAX;\r\
+    \n  :if (\$Time = 0) do={:return false}\r\
+    \n  :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \
+    [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\
+    \n}\r\
+    \n\r\
+    \n:set EscapeForRegEx do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitError do={\r\
+    \n  :local ExitOK [ :tostr \$1 ];\r\
+    \n  :local Name   [ :tostr \$2 ];\r\
+    \n  :local Error  [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$ExitOK = \"false\") do={\r\
+    \n    :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \
+    \\\r\
+    \n        \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\
+    ror\" . \\\r\
+    \n        [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \
+    \$Error) \".\" ]);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitOnError do={\r\
+    \n  :local Name   [ :tostr \$1 ];\r\
+    \n  :local Error  [ :tostr \$2 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\
+    \\\$\") \\\r\
+    \n      \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\
+    r\" . \\\r\
+    \n      [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\
+    rror) \".\" ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set MiniDateTimeStamp do={\r\
+    \n    :local mikro [ :tobool \$1 ];\r\
+    \n    /system/clock;\r\
+    \n    :local vdate [get date];\r\
+    \n    :local vtime [get time];\r\
+    \n    :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\
+    \n    :local MM    [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\
+    \n    :local M     [:tonum \$MM];\r\
+    \n    :if (\$vdate ~ \".../../....\") do={\r\
+    \n        :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\
+    \n        :set M     ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\
+    PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\
+    \n        :if (\$M>12) do={:set M (\$M - 12)}\r\
+    \n        :set MM    [:pick (100 + \$M) 1 3];\r\
+    \n    }\r\
+    \n    :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\
+    \n    :local dd   [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\
+    \n    :local HH   [:pick \$vtime 0  2];\r\
+    \n    :local mm   [:pick \$vtime 3  5];\r\
+    \n    :local ss   [:pick \$vtime 6  8];\r\
+    \n    :local Return;\r\
+    \n    :if (\$mikro = true) do={\r\
+    \n      :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\
+    \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\
+    \n    } else={\r\
+    \n    :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\
+    \r\
+    \n   }\r\
+    \n   :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitForFile do={\r\
+    \n  :local FileName [ :tostr  \$1 ];\r\
+    \n  :local WaitTime [ :totime \$2 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global EitherOr;\r\
+    \n  :global MAX;\r\
+    \n  :set FileName [ \$CleanFilePath \$FileName ];\r\
+    \n  :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } delay=\$Delay max=10;\r\
+    \n  } on-error={ }\r\
+    \n  :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\
+    \n    :do {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } on-error={ }\r\
+    \n    :delay \$Delay;\r\
+    \n    :set Delay (\$Delay * 3 / 2);\r\
+    \n  }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileGet do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global WaitForFile;\r\
+    \n  :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FileVal false;\r\
+    \n  :do {\r\
+    \n    :set FileVal [ /file/get \$FileName ];\r\
+    \n   } on-error={ }\r\
+    \n  :return \$FileVal;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmDir do={\r\
+    \n  :local DirName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing directory: \". \$DirName);\r\
+    \n  :local DirVal [ \$FileGet \$DirName ];\r\
+    \n  :if (\$DirVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  };\r\
+    \n  :if (\$DirVal->\"type\" != \"directory\") do={\r\
+    \n    :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\
+    ory.\");\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$DirName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\
+    : \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmFile do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing file: \". \$FileName);\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\
+    sk\") do={\r\
+    \n    :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\
+    \r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$FileName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\
+    \_. \$Err); :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MkDir do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global FileGet;\r\
+    \n  :global RmDir;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :local MkTmpfs do={\r\
+    \n   :global WaitForFile;\r\
+    \n   :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n   :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n     :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n       :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\
+    \n       /disk/enable \$TmpFs;\r\
+    \n      }\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :log info (\$0 . \" Creating disk of type tmpfs.\");\r\
+    \n    \$RmDir \"tmpfs\";\r\
+    \n    :onerror Err {\r\
+    \n      /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\
+    /get total-memory ] / 3);\r\
+    \n      \$WaitForFile \"tmpfs\";\r\
+    \n    } do={\r\
+    \n      :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\
+    Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :set Path [ \$CleanFilePath \$Path ];\r\
+    \n  :if (\$Path = \"\") do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log debug (\$0 . \" Making directory: \" . \$Path);\r\
+    \n  :local PathVal [ \$FileGet \$Path ];\r\
+    \n  :if (\$PathVal->\"type\" = \"directory\") do={\r\
+    \n    :log debug (\$0 . \" ... which already exists.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/add type=\"directory\" name=\$Path;\r\
+    \n    \$WaitForFile \$Path;\r\
+    \n  } do={\r\
+    \n    :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \
+    \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterReplace do={\r\
+    \n  :local String [ :tostr \$1 ];\r\
+    \n  :local ReplaceFrom [ :tostr \$2 ];\r\
+    \n  :local ReplaceWith [ :tostr \$3 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :if (\$ReplaceFrom = \"\") do={:return \$String}\r\
+    \n  :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\
+    \r\
+    \n    :local Pos [ :find \$String \$ReplaceFrom ];\r\
+    \n    :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\
+    \r\
+    \n    :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\
+    \_\$String ] ];\r\
+    \n  }\r\
+    \n  :return (\$Return . \$String);\r\
+    \n}\r\
+    \n\r\
+    \n:set IfThenElse do={\r\
+    \n  :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \
+    \$2};\r\
+    \n  :return \$3;\r\
+    \n}\r\
+    \n\r\
+    \n:set EitherOr do={\r\
+    \n  :global IfThenElse;\r\
+    \n  :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \
+    \$1 \$2 ]}\r\
+    \n  :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\
+    \_\$1 \$2 ]}\r\
+    \n# this works for boolean values, literal ones with parentheses\r\
+    \n  :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseKeyValueStore do={\r\
+    \n  :local Source \$1;\r\
+    \n  :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\
+    \n    :do {\r\
+    \n      :return [ :deserialize from=json \$Source ];\r\
+    \n    } on-error={ }\r\
+    \n  }   \r\
+    \n  :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\
+    }\r\
+    \n  :local Result ({});\r\
+    \n  :foreach KeyValue in=[ :toarray \$Source ] do={\r\
+    \n    :if ([ :find \$KeyValue \"=\" ]) do={\r\
+    \n      :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\
+    \n      :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\
+    \_:len \$KeyValue ] ];\r\
+    \n      :if (\$Value=\"true\") do={:set Value true}\r\
+    \n      :if (\$Value=\"false\") do={:set Value false}\r\
+    \n      :set (\$Result->\$Key) \$Value;\r\
+    \n      } else={:set (\$Result->\$KeyValue) true}\r\
+    \n  }\r\
+    \n  :return \$Result;\r\
+    \n}\r\
+    \n:set RequiredRouterOS do={\r\
+    \n  :local Caller   [ :tostr \$1 ];\r\
+    \n  :local Required [ :tostr \$2 ];\r\
+    \n  :local Warn     [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :global VersionToNum;\r\
+    \n  :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\
+    \\\$\")) do={\r\
+    \n    :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\
+    e/update/get installed-version ] ]) do={\r\
+    \n    :if (\$Warn = \"true\") do={\r\
+    \n      :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \
+    0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\
+    \n        \" '\" . \$Caller . \"' (at least specific functionality) requir\
+    es RouterOS \" . \$Required . \". Please update!\");\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set ValidateSyntax do={\r\
+    \n  :local Code [ :tostr \$1 ];\r\
+    \n  :global LogPrint;\r\
+    \n  :onerror Err {\r\
+    \n    [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\
+    \n  } do={\r\
+    \n    \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set VersionToNum do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Multi 0x1000000;\r\
+    \n  :local Return 0;\r\
+    \n  :global CharacterReplace;\r\
+    \n  :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\
+    \n  :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\
+    \n    :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\
+    \r\
+    \n  }\r\
+    \n  :foreach Value in=([ :toarray \$Input ], 0) do={\r\
+    \n    :local Num [ :tonum \$Value ];\r\
+    \n    :if (\$Multi = 0x100) do={\r\
+    \n      :if ([ :typeof \$Num ] = \"num\") do={\r\
+    \n        :set Return (\$Return + 0xff00);\r\
+    \n        :set Multi (\$Multi / 0x100);\r\
+    \n      } else={\r\
+    \n        :if (\$Value = \"zero\") do={ }\r\
+    \n        :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \
+    }\r\
+    \n        :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\
+    \r\
+    \n        :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\
+    lue * \$Multi)); }\r\
+    \n    :set Multi (\$Multi / 0x100);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptLock do={\r\
+    \n  :local Script  [ :tostr  \$1 ];\r\
+    \n  :local WaitMax [ :totime \$2 ];\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global ScriptLockOrder;\r\
+    \n  :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\
+    \n    :set ScriptLockOrder ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :local JobCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :return [ :len [ /system/script/job/find where script=\$Script ] ];\
+    \r\
+    \n  }\r\
+    \n  :local TicketCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :local Count 0;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \
+    + 1)}\r\
+    \n    }\r\
+    \n    :return \$Count;\r\
+    \n  }\r\
+    \n  :local IsFirstTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Check  [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if (\$Ticket = \$Check) do={:return true}\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\
+    o={:return false}\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local AddTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Add    [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :while (true) do={\r\
+    \n      :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\
+    \n      :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\
+    \n      :delay 10ms;\r\
+    \n      :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\
+    e}\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local RemoveTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Remove [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\
+    \n        :set (\$ScriptLockOrder->\$Script->\$Id);\r\
+    \n        :delay 10ms;\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local CleanupTickets do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\
+    \n    }\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\
+    \n  :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\
+    \n    :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\
+    ist!\");\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$JobCount \$Script ] = 0) do={\r\
+    \n    \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\
+    );\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\
+    \n    :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\
+    t . \"', resetting!\");\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n    /system/script/job/remove [ find where script=\$Script ];\r\
+    \n  }\r\
+    \n  :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\
+    \n  \$AddTicket \$Script \$MyTicket;\r\
+    \n  :local WaitInterval (\$WaitMax / 20);\r\
+    \n  :local WaitTime \$WaitMax;\r\
+    \n  :while (\$WaitTime > 0 && \\\r\
+    \n      ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\
+    \n      [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\
+    \n    :set WaitTime (\$WaitTime - \$WaitInterval);\r\
+    \n    :delay \$WaitInterval;\r\
+    \n  }\r\
+    \n  :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\
+    \n      [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\
+    \n    \$RemoveTicket \$Script \$MyTicket;\r\
+    \n    \$CleanupTickets \$Script;\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  \$RemoveTicket \$Script \$MyTicket;\r\
+    \n  \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \
+    once\" . \\\r\
+    \n    [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\
+    \_lock\" \"\" ] . \"...\");\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification do={ :onerror Err {\r\
+    \n  :global SendNotification2;\r\
+    \n  \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\
+    \_silent=\$4 });\r\
+    \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification2 do={\r\
+    \n  :local Notification \$1;\r\
+    \n  :global NotificationFunctions;\r\
+    \n  :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\
+    \n    (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\
+    ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolByUnicodeName do={\r\
+    \n  :local Name [ :tostr \$1 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global SymbolsExtra;\r\
+    \n  :local Symbols ({\r\
+    \n    \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\
+    \n    \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\
+    \n    \"arrow-down\"=\"\\E2\\AC\\87\";\r\
+    \n    \"arrow-up\"=\"\\E2\\AC\\86\";\r\
+    \n    \"calendar\"=\"\\F0\\9F\\93\\85\";\r\
+    \n    \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\
+    \n    \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\
+    \n    \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\
+    \n    \"cloud\"=\"\\E2\\98\\81\";\r\
+    \n    \"cross-mark\"=\"\\E2\\9D\\8C\";\r\
+    \n    \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\
+    \n    \"fire\"=\"\\F0\\9F\\94\\A5\";\r\
+    \n    \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\
+    \n    \"gear\"=\"\\E2\\9A\\99\";\r\
+    \n    \"heart\"=\"\\E2\\99\\A5\";\r\
+    \n    \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\
+    \n    \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\
+    \n    \"information\"=\"\\E2\\84\\B9\";\r\
+    \n    \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\
+    \n    \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\
+    \n    \"link\"=\"\\F0\\9F\\94\\97\";\r\
+    \n    \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\
+    \n    \"memo\"=\"\\F0\\9F\\93\\9D\";\r\
+    \n    \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\
+    \n    \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\
+    \n    \"scissors\"=\"\\E2\\9C\\82\";\r\
+    \n    \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\
+    \n    \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\
+    \n    \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\
+    \n    \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\
+    \n    \"sparkles\"=\"\\E2\\9C\\A8\";\r\
+    \n    \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\
+    \n    \"star\"=\"\\E2\\AD\\90\";\r\
+    \n    \"warning-sign\"=\"\\E2\\9A\\A0\";\r\
+    \n    \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\
+    \n  }, \$SymbolsExtra);\r\
+    \n  :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\
+    \n  :local Special {\r\
+    \n    \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\
+    \n    \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\
+    \n    \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\
+    \n    \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\
+    \n  :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\
+    '!\");\r\
+    \n    :return \"\";\r\
+    \n  }\r\
+    \n  :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\
+    me) ] . \"\\EF\\B8\\8F\");\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolForNotification do={\r\
+    \n  :global NotificationsWithSymbols;\r\
+    \n  :global SymbolByUnicodeName;\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\
+    \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\
+    \n  :local Return \"\";\r\
+    \n  :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\
+    mbolByUnicodeName \$Symbol ])}\r\
+    \n  :return (\$Return . \" \");\r\
+    \n}\r\
+    \n\r\
+    \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\
+    \n:set UrlEncode do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\
+    \n  :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\
+    %24\"; \"%25\"; \"%26\"; \"%27\";\r\
+    \n         \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \
+    \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\
+    \n         \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \
+    \"%7C\"; \"%7D\"; \"%7E\" };\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :local Replace [ :find \$Chars \$Char ];\r\
+    \n    :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\
+    ce)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsDNSResolving do={\r\
+    \n  :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsFullyConnected do={\r\
+    \n  :global IsDNSResolving;\r\
+    \n  :global IsTimeSync;\r\
+    \n  :if ([ \$IsDNSResolving ] = false) do={:return false};\r\
+    \n  :if ([ \$IsTimeSync ] = false) do={:return false};\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsTimeSync do={\r\
+    \n  :global IsTimeSyncCached;\r\
+    \n  :global IsTimeSyncResetNtp;\r\
+    \n  :if (\$IsTimeSyncCached = true) do={:return true}\r\
+    \n  :if ([ /system/ntp/client/get enabled ] = true) do={\r\
+    \n    :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :local Uptime [ /system/resource/get uptime ];\r\
+    \n    :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\
+    \n      :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    }\r\
+    \n    :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\
+    \n    :log warning \"\$0 The ntp client is configured, but did not sync.\"\
+    ;\r\
+    \n    :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    /system/ntp/client/set enabled=no;\r\
+    \n    :delay 20ms;\r\
+    \n    /system/ntp/client/set enabled=yes;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\
+    \n       [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\
+    \n    :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\
+    ee license and x86.\";\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ /ip/cloud/get update-time ] = true) do={\r\
+    \n    :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :log debug \"\$0 No time source configured! Returning gracefully...\";\
+    \r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchHugeFiles do={\r\
+    \n  :local ScriptName [ :tostr \$1 ];\r\
+    \n  :local Url        [ :tostr \$2 ];\r\
+    \n  :local CheckCert  [ :tostr \$3 ];\r\
+    \n\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global MkDir;\r\
+    \n  :global RmDir;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\
+    ithout-crl\" ];\r\
+    \n\r\
+    \n  :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\
+    \n  :if ([ \$MkDir \$DirName ] = false) do={\r\
+    \n    \$LogPrint error \$0 (\"Failed creating directory!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \
+    \$GetRandom20CharAlNum ]);\r\
+    \n  :onerror Err {\r\
+    \n    /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \
+    \\\r\
+    \n      http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\
+    lue;\r\
+    \n  } do={\r\
+    \n    :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\
+    \n      \$RmFile \$FileName;\r\
+    \n    }\r\
+    \n    \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\
+    \_. \$Err);\r\
+    \n    \$RmDir \$DirName;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\
+    \n    \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\
+    \_not show up.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileSize [ /file/get \$FileName size ];\r\
+    \n  :local Return \"\";\r\
+    \n  :local VarSize 0;\r\
+    \n  :while (\$VarSize != \$FileSize) do={\r\
+    \n    :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\
+    768 file=\$FileName as-value ]->\"data\"));\r\
+    \n    :set FileSize [ /file/get \$FileName size ];\r\
+    \n    :set VarSize [ :len \$Return ];\r\
+    \n    :if (\$VarSize > \$FileSize) do={\r\
+    \n      :delay 100ms;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  \$RmDir \$DirName;\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchUserAgentStr do={\r\
+    \n  :local Caller [ :tostr \$1 ];\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global CommitBrief;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Resource [ /system/resource/get ];\r\
+    \n  :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\
+    \_\$Resource->\"architecture-name\" . \\\r\
+    \n    \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\
+    CommitBrief ] . \")\");\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptInstallUpdate do={ :onerror Err {\r\
+    \n  :local Scripts    [ :toarray \$1 ];\r\
+    \n  :local NewComment [ :tostr   \$2 ];\r\
+    \n  :global InitSetup;\r\
+    \n\r\
+    \n  :global CommitId;\r\
+    \n  :global ScriptUpdatesCRLF;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global CheckSumsVerify;\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SumsDirAndFileName;\r\
+    \n  :global GlobalScriptsUrlSuffix;\r\
+    \n  :global EitherOr;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global Grep;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n  :global RequiredRouterOS;\r\
+    \n  :global SendNotification2;\r\
+    \n  :global SymbolForNotification;\r\
+    \n  :global ValidateSyntax;\r\
+    \n  :global CommentsInScripts;\r\
+    \n\r\
+    \n  :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\
+    hout.\");\r\
+    \n  }\r\
+    \n\r\
+    \n  :foreach Script in=\$Scripts do={\r\
+    \n    :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\
+    \r\
+    \n      \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\
+    \n      /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \
+    Vados\\n\" comment=\$NewComment;\r\
+    \n    }\r\
+    \n  }\r\
+    \n\r\
+    \n  :local CommitIdBefore \$CommitId;\r\
+    \n  :local GlobalConfVersionBefore \$GlobalConfVersion;\r\
+    \n  :local ReloadGlobal false;\r\
+    \n  :local DeviceMode [ /system/device-mode/get ];\r\
+    \n\r\
+    \n  :if (\$CheckSumsVerify = true) do={\r\
+    \n    :local CheckSums ({});\r\
+    \n     :do {\r\
+    \n     :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\
+    iptsUrlSuffix);\r\
+    \n      \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\
+    \r\
+    \n      :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\
+    ficate=yes-without-crl \\\r\
+    \n        http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\
+    =user as-value ]->\"data\") ];\r\
+    \n    } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\
+    \n    }\r\
+    \n\r\
+    \n  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\
+    s\" ] do={\r\
+    \n    :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n    :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \
+    ];\r\
+    \n    :local SourceNew;\r\
+    \n\r\
+    \n    :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\
+    \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\
+    \n      :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\
+    \n      :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\
+    iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \
+    \"'!\");\r\
+    \n        }\r\
+    \n    }\r\
+    \n    :do {\r\
+    \n      :if (\$ScriptInfo->\"ignore\" = true) do={\r\
+    \n        \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\
+    e\" . \"', as requested.\");\r\
+    \n        :error true;\r\
+    \n      }\r\
+    \n      :if (\$CheckSumsVerify = true) do={\r\
+    \n        :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\
+    \n        :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\
+    ptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n             [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\
+    rce\") ] ] = \$CheckSum) do={\r\
+    \n          \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\
+    >\"name\" . \"' matches, ignoring.\");\r\
+    \n          :error true;\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\
+    \n        :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\
+    fetch\" ] = false) do={\r\
+    \n          \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\
+    ng without.\");\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :onerror Err {\r\
+    \n        :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\
+    lScriptsUrl ];\r\
+    \n        :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\
+    lobalScriptsUrlSuffix ];\r\
+    \n        :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\
+    Suffix);\r\
+    \n        \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\
+    name\") . \"' from url: \" . \$Url);\r\
+    \n        :local Result [ /tool/fetch check-certificate=yes-without-crl \\\
+    \r\
+    \n          http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\
+    ut=user as-value ];\r\
+    \n        :if (\$Result->\"status\" = \"finished\") do={\r\
+    \n          :set SourceNew [ :tolf (\$Result->\"data\") ];\r\
+    \n        } \r\
+    \n      } do={\r\
+    \n        \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\
+    al->\"name\" . \"': \" . \$Err);\r\
+    \n        :if (\$Err != \"Fetch failed with status 404\") do={\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\
+    \n          \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\
+    \?\");\r\
+    \n          /system/script/remove \$Script;\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$CheckSumsVerify = true) do={\r\
+    \n          :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\
+    riptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n               [ :len \$CheckSum ] = 0) do={\r\
+    \n            \$LogPrint warning \$0 (\"Added the script manually\? Skip u\
+    pdates with 'ignore=true' in comment.\");\r\
+    \n          }\r\
+    \n        }\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :len \$SourceNew ] = 0) do={\r\
+    \n        \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\
+    >\"name\") . \"'.\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :local SourceCRLF [ :tocrlf \$SourceNew ];\r\
+    \n      :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\
+    lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\
+    \n        :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\
+    \$ScriptVal->\"source\")) do={\r\
+    \n          \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\") \
+    . \"' source did not change. End of lines set to CRLF.\");\r\
+    \n          if (\$ScriptUpdatesCRLF = false) do={\r\
+    \n            :put [ :tolf \$SourceNew ];\r\
+    \n            \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\"\
+    ) . \"' source update end of lines to LF.\");\r\
+    \n          }\r\
+    \n        :error false;\r\
+    \n        }\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\
+    l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\
+    );\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if (\$CommentsInScripts = true) do={\r\
+    \n         :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\
+    \_\") ];\r\
+    \n         :if ([ :len \$CommentLine ] = 0) do={\r\
+    \n           \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\
+    iptVal->\"name\") . \"' for comment in script body, is not found result Ig\
+    noring!\");\r\
+    \n           :error false;\r\
+    \n         } else={\r\
+    \n           :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\
+    ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\
+    ] + 2) [ :len \$CommentLine] ]) do={\r\
+    \n             \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\
+    \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\
+    ;\r\
+    \n             :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\
+    ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\
+    \n             \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\
+    omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\
+    ded!\");\r\
+    \n           } else={\r\
+    \n             \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\
+    al->\"name\") . \"' did not change.\");\r\
+    \n             :error false;\r\
+    \n           }\r\
+    \n         }   \r\
+    \n      }\r\
+    \n\r\
+    \n      :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\
+    \"\\23 requires RouterOS, \") ] ]->version);\r\
+    \n      :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\
+    \_false ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires RouterOS \" . \\\r\
+    \n            \$RequiredROS . \", which is not met by your installation. I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\
+    \\23 requires device-mode, \") ] ];\r\
+    \n      :local MissingDM ({});\r\
+    \n      :foreach Feature,Value in=\$RequiredDM do={\r\
+    \n        :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\
+    ceMode->\$Feature) = false) do={\r\
+    \n          :set MissingDM (\$MissingDM, \$Feature);\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len \$MissingDM ] > 0) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires disabled \" . \\\r\
+    \n            \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\
+    ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      \r\
+    \n      :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\
+    ript comment: \" . (\$ScriptVal->\"comment\"));\r\
+    \n\r\
+    \n      /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\
+    Val->\"comment\") \\\r\
+    \n          source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\
+    F \$SourceNew ] \$Script;\r\
+    \n      :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\
+    \n           \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\
+    \n           \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\
+    o={\r\
+    \n        :set ReloadGlobal true;\r\
+    \n      }\r\
+    \n    } on-error={ }\r\
+    \n  }\r\
+    \n  :if (\$ReloadGlobal = true) do={\r\
+    \n    \$LogPrint info \$0 (\"Reloading global configuration and functions.\
+    \");\r\
+    \n    :onerror Err {\r\
+    \n      :global InitSetup (a);\r\
+    \n      /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\
+    \n    } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\
+    ctions failed! \" . \$Err)}\r\
+    \n  }\r\
+    \n  :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\
+    \n    \$LogPrint warning \$0 (\"The configuration version decreased from \
+    \" . \\\r\
+    \n      \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\
+    \n      \". Installed an older version\?\");\r\
+    \n  }\r\
+    \n    :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\
+    \n    :global GlobalConfChanges;\r\
+    \n    :global GlobalConfMigration;\r\
+    \n    :local ChangeLogCode;\r\
+    \n    :if ([ :len \$ChangeLogCode ] > 0) do={\r\
+    \n      :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\
+    \n        :onerror Err {\r\
+    \n          [ :parse \$ChangeLogCode ];\r\
+    \n        } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \
+    . \$Err)}\r\
+    \n      } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\
+    dation!\")}\r\
+    \n    }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\
+    \n        :do {\r\
+    \n          :if ([ :typeof \$Migration ] != \"str\") do={\r\
+    \n            \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\
+    \_\" is not available.\");\r\
+    \n            :error false;\r\
+    \n          }\r\
+    \n          :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\
+    \n            \$LogPrint warning \$0 (\"Migration code for change \" . \$I\
+    \_. \" failed syntax validation!\");\r\
+    \n            :error false}\r\
+    \n          \$LogPrint info \$0 (\"Applying migration for change \" . \$I \
+    . \": \" . \$Migration);\r\
+    \n          :onerror Err {\r\
+    \n            [ :parse \$Migration ];\r\
+    \n          } do={\$LogPrint warning \$0 (\"Migration code for change \" .\
+    \_\$I . \" failed to run: \" . \$Err)}\r\
+    \n        } on-error={ }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :local NotificationMessage (\"The configuration version on \" . \$Id\
+    entity . \" increased \" . \\\r\
+    \n       \"to \" . \$GlobalConfVersion . \", current configuration may nee\
+    d modification. \" . \\\r\
+    \n       \"Please review and update global-config-overlay, then re-run glo\
+    bal-config.\");\r\
+    \n    \$LogPrint info \$0 (\$NotificationMessage);\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\
+    \");\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\
+    \n        :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\
+    \r\
+    \n            [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\
+    \n        \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\
+    \n      }\r\
+    \n    } else={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\
+    \_changes are not available.\");\r\
+    \n\r\
+    \n      }\r\
+    \n\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \
+    } else={ :global GlobalConfChanges (a); }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\
+    on; } else={ :global GlobalConfMigration (a); }\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n\r\
+    \n# load modules\r\
+    \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\
+    ns\\\\.d|mod)/.\" ] do={\r\
+    \n  :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n  :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\
+    \n    :onerror Err {\r\
+    \n      /system/script/run \$Script;\r\
+    \n    } do={\r\
+    \n      \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\
+    ailed to run: \" . \$Err);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\
+    led syntax validation, skipping.\");\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# Add and fix global scheduler\r\
+    \n:put \"Add or/and fix Global scheduler...\";\r\
+    \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\
+    ; }\";\r\
+    \n:local Comment \"Every Day Set Global Environment Variables\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \
+    = 0) do={\r\
+    \n  /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\
+    ent=\$OnEvent start-time=startup;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\
+    \_do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\
+    ) do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\
+    \n}\r\
+    \n# Add Update Script scheduler\r\
+    \n:put \"Add or/and fix Update Script scheduler\";\r\
+    \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\
+    \r\
+    \n:set Comment \"Every Day Check For Update Scripts\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\
+    \" ] ] = 0) do={\r\
+    \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \
+    start-time=startup interval=1d on-event=\$OnEvent;\r\
+    \n}\r\
+    \n\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\
+    \_not ready.\"); }; } delay=100ms max=5;\r\
+    \n\r\
+    \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\
+    \n    [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \
+    \") ] . \\\r\
+    \n    \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\
+    \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\
+    \n    # signal we are ready\r\
+    \n:set GlobalFuncReady true;\r\
+    \n:set ExitOK true;\r\
+    \n\r\
+    \n:log info (\$0 . \"Global configs ready!\");\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n}\r\
+    \n"
+add comment=\
+    "Lookup IP addresses for RKN list and add them to firewall address-list" \
+    dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="#!rsc by Vados\r\
+    \n# RouterOS script: AM-RKN-dnsLookup\r\
+    \n# Script comment: Lookup IP addresses for RKN list and add them to firew\
+    all address-list\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n# Script description: This script is intended to be run periodically, e.\
+    g. once a day, to update the IP addresses in the firewall address-list bas\
+    ed on the RKN list.\r\
+    \n#                     It resolves the domain names in the RKN list and a\
+    dds the corresponding IP addresses to the specified firewall address-list.\
+    \r\
+    \n#                     The script also handles CNAME records by following\
+    \_them until it finds A records.\r\
+    \n# Usage:\r\
+    \n# /system/script { run AM-RKN-dnsLookup; }\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n\r\
+    \n:global dnsLookupReady false;\r\
+    \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\
+    \_true; }\r\
+    \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\
+    \n:set dnsLookupReady false;\r\
+    \n\r\
+    \n:local arrRKN {\r\
+    \n  \"telegra.ph\"\r\
+    \n  \"grani.ru\"\r\
+    \n  \"xhamster.com\"\r\
+    \n  \"lostfilm.tv\"\r\
+    \n  \"rutracker.org\"\r\
+    \n  \"lurkmore.to\"\r\
+    \n  \"dou.ua\"\r\
+    \n  \"youporn.com\"\r\
+    \n  \"pornolab.net\"\r\
+    \n  \"crimerussia.com\"\r\
+    \n  \"telegram.org\"\r\
+    \n  \"api.telegram.org\"\r\
+    \n  \"facebook.com\"\r\
+    \n  \"instagram.com\"\r\
+    \n  \"x.com\"\r\
+    \n  \"twitter.com\"\r\
+    \n  \"youtube.com\"\r\
+    \n  \"googleapis.com\"\r\
+    \n  \"youtu.be\"\r\
+    \n  \"googlevideo.com\"\r\
+    \n  \"gstatic.com\"\r\
+    \n  \"googleusercontent.com\"\r\
+    \n  \"nhacmp3youtube.com\"\r\
+    \n  \"telegram.me\"\r\
+    \n  \"t.me\";}\r\
+    \n\r\
+    \n:local ListRKN \"RKN-dnsLookup\";\r\
+    \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\
+    \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\
+    ={\r\
+    \n    /ip firewall address-list remove \$aListItem;\r\
+    \n}\r\
+    \n:foreach aItem in=\$arrRKN do={\r\
+    \n#    :do {\r\
+    \n        :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\
+    ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\
+    \n#    } on-error={\r\
+    \n#        :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\
+    \n#    }\r\
+    \n    :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \
+    do={\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\
+    \n            :local newAddress [/ip dns cache all get \$dnsRecord data];\
+    \r\
+    \n            :do {\r\
+    \n             /ip firewall address-list add list=\$ListRKN address=\$newA\
+    ddress comment=\$aItem;\r\
+    \n                :log warning \"Successfully adding ip to list A record: \
+    \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            } on-error={\r\
+    \n                :log error \"error when adding ip to list A record: \$dn\
+    sRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            }\r\
+    \n        }\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\
+    \n            :local cname;\r\
+    \n            :local nextCname;\r\
+    \n            :local cnameAddress;\r\
+    \n            :set cname [/ip dns cache all find where (name=\$aItem && ty\
+    pe=\"CNAME\")];\r\
+    \n            :set nextCname [/ip dns cache all find where (name=[/ip dns \
+    cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            :while (\$nextCname != \"\") do={\r\
+    \n                :set cname \$nextCname;\r\
+    \n                :set nextCname [/ip dns cache all find where (name=[/ip \
+    dns cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            }\r\
+    \n            :foreach aRecord in=[/ip dns cache all find where (name=[/ip\
+    \_dns cache all get \$cname data] && type=\"A\")] do={\r\
+    \n                :do {\r\
+    \n                    :set cnameAddress [/ip dns cache all get \$aRecord d\
+    ata];\r\
+    \n                    /ip firewall address-list add list=\$ListRKN address\
+    =\$cnameAddress comment=\$aItem;\r\
+    \n                    :log warning \"Succesfully adding ip to list CNAME r\
+    ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \
+    \$aItem.\";\r\
+    \n#                    /ip firewall raw add action=add-dst-to-address-list\
+    \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\
+    g comment=\$aItem content=\$aItem;\r\
+    \n                } on-error={\r\
+    \n                    :log error \"error when adding ip to list CNAME reco\
+    rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\
+    tem.\";\r\
+    \n                }\r\
+    \n            }\r\
+    \n        }\r\
+    \n    }\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\
+    ={\r\
+    \n   :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\
+    ptName . \" is NOT SET! Fix It Now!\");\r\
+    \n    /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \
+    run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\
+    olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\
+    \_start-time=startup;\r\
+    \n  }\r\
+    \n:set dnsLookupReady true;\r\
+    \ndelay 2s;  \r\
+    \n:global dnsLookupReady (a);\r\
+    \n"
+add dont-require-permissions=no name="renameLists " owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    local oldName \"Test\";\
+    \n:local newName \"Test-IP\";\
+    \n/ip firewall address-list\
+    \n:foreach i in=[find list=\$oldName] do={\
+    \nset \$i list=\$newName;\
+    \n}\
+    \n"
+add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    #############Script Settings##################\
+    \n\
+    \n:local \"IF-TUN\" \"6to4-tun\"\
+    \n:local \"IF-LOC\" \"Bridge-LAN\"\
+    \n:local \"POOL-6TO4\" \"poolV6-local\"\
+    \n:local \"force-update\" false\
+    \n############ use then static ip #######################\
+    \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \
+    address]\
+    \n#:local \"interface\" \"ext\"\
+    \n:local bound 0\
+    \n\
+    \n###############################################\
+    \n\
+    \n:local 6to4prefix do={\
+    \n    :global dec2hex\
+    \n    :local ipv4 \$1\
+    \n    :local ipv6 \"2002:\"\
+    \n    :for i from=0 to=2 step=1 do={        \
+    \n        :if ( \$i = 2) do={\
+    \n            :set ipv6 (\$ipv6.\":\")\
+    \n        }\
+    \n        :local fp [:find \$ipv4 \".\"]\
+    \n        :if ( \$fp > 0 ) do={\
+    \n            :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\
+    \n            :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\
+    \n        }\
+    \n    }\
+    \n    :return (\$ipv6.[\$dec2hex \$ipv4])\
+    \n}\
+    \n:local \"str_replace\" do={\
+    \n    :local \"str-pos\" [:find \$1 \$2]\
+    \n    :local \"str-len\" [:len \$2]\
+    \n    :local str \"\"\
+    \n    :local rest \$1\
+    \n    :while (\$\"str-pos\" >= 0) do={\
+    \n        :local t [:pick \$rest 0 \$\"str-pos\"]\
+    \n        :if ( \$4 > 0 ) do={\
+    \n            :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\
+    \n                :set str (\$str.\$5)\
+    \n            }\
+    \n        }\
+    \n        :set str (\$str.\$t.\$3)\
+    \n        :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\
+    st]]\
+    \n        :set \"str-pos\" [:find \$rest \$2]\
+    \n    }\
+    \n    :return (\$str.\$rest)\
+    \n}\
+    \n\
+    \n:if (\$bound=1) do={\
+    \n    :local t [:find \$\"lease-address\" \"/\"]\
+    \n\
+    \n    :if ( \$t >= 0 ) do={\
+    \n        :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\
+    \n    }\
+    \n\
+    \n    :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\
+    ) do={\
+    \n        /interface 6to4 add !keepalive local-address=\$\"lease-address\"\
+    \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\
+    \n        :set \"force-update\" true\
+    \n    }\
+    \n\
+    \n    :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\
+    cal-address];\
+    \n\
+    \n    :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \
+    true) do={\
+    \n        /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\
+    ease-address\"\
+    \n        /ipv6 address remove [find interface=\$\"IF-TUN\"]\
+    \n        /ipv6 address remove [find interface=\$\"IF-LOC\"]\
+    \n        /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\
+    \"::/0\"]\
+    \n        :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\
+    \n        :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\
+    \_0) do={    \
+    \n            /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\
+    \".\":1::/64\")  prefix-length=64\
+    \n        } else={\
+    \n            /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \
+    prefix=(\$\"pool-prefix\".\":1::/64\")\
+    \n        }\
+    \n        /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\
+    \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\
+    ace=\$\"IF-TUN\" advertise=no\
+    \n        /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\
+    =\$\"IF-LOC\" advertise=yes\
+    \n        /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\
+    \"IF-TUN\")\
+    \n        :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\
+    s]\
+    \n        :set t [:pick \$t 0 [:find \$t \"/\"]]\
+    \n        :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\
+    \_= 0) do={\
+    \n            /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\
+    [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        } else={\
+    \n            /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \
+    where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        }\
+    \n        :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\
+    -LOC\"] = 0) do={\
+    \n            /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\
+    on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\
+    \n        }\
+    \n        :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \
+    0) do={\
+    \n            /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\
+    onfiguration=yes\
+    \n        }\
+    \n    }\
+    \n}"
+add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global MAC2EUI64 do={\
+    \n    :local EUI64 \"\"\
+    \n    :local MAC \$1\
+    \n    :local HEX2DEC \"0123456789ABCDEF\"\
+    \n    :for i from=0 to=5 step=1 do={\
+    \n        :if ( \$i = 0 ) do={\
+    \n            :set EUI64 [:pick \$MAC 0]\
+    \n            :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\
+    \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\
+    \n        }\
+    \n        :if ( \$i = 1 || \$i = 3) do={\
+    \n            :set EUI64 (\$EUI64.\":\")\
+    \n        }\
+    \n        :if ( \$i = 2 ) do={\
+    \n            :set EUI64 (\$EUI64.\"FF:FE\")\
+    \n        }\
+    \n        :if ( [:find \$MAC \":\"] = 2 ) do={\
+    \n            :set MAC [:pick \$MAC 3  [:len \$MAC]]\
+    \n            :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\
+    \n        }\
+    \n    }\
+    \n    :return (\$EUI64)\
+    \n}\
+    \n\
+    \n:global dec2hex do={\
+    \n    :local hex \"\"\
+    \n    :local dec [:tonum \$1]\
+    \n    :for i from=0 to=4 step=4 do={\
+    \n        :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\
+    c>>\$i)&0xf)+1)].\$hex)\
+    \n    }\
+    \n    :return ([:tostr \$hex])\
+    \n}"
+add comment=Generator dont-require-permissions=no name=proxySet owner=vados \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="# 2. WireGuard interface\r\
+    \n/interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDg\
+    uMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=21641\r\
+    \n/interface/wireguard/peers/add interface=wg-VDSina public-key=\"o5IgCl1/\
+    G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcYQnD9\
+    N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=10.30.30.33 endpoint-port=518\
+    20 allowed-address=0.0.0.0/0 persistent-keepalive=11\r\
+    \n/ip/address/add address=10.9.0.3/32 interface=wg-VDSina\r\
+    \n\r\
+    \n# 3. DNS\r\
+    \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\
+    n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\
+    \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /system/script/add name=VDS\
+    ina-prev-dns comment=\"\$prevDNS\" source=\"\" }\r\
+    \n/ip/dns/set servers=8.8.4.4\r\
+    \n/ip/route/add dst-address=8.8.4.4/32 gateway=wg-VDSina distance=1 commen\
+    t=VDSina-dns\r\
+    \n\r\
+    \n# 4. Enable WireGuard\r\
+    \n/interface/wireguard/enable wg-VDSina\r\
+    \n"
+add dont-require-permissions=no name=AM-Telegram-Send owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\
+    \n# RouterOS script: AM-Telegram-Send\
+    \n# Script comment: Mini script for send messages to admin Telegram chat\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\
+    \n#\
+    \n#\
+    \n# requires RouterOS, version=7.19\
+    \n# requires device-mode, fetch\
+    \n#\
+    \n# Script description: \
+    \n#\
+    \n#\
+    \n# Usage:\
+    \n# /system/script { run AM-Telegram-Send \"Message here )))\"; }\
+    \n\
+    \n/system/script\
+    \nadd name=telegram-send dont-require-permissions=no source={\
+    \n  :global TelegramTokenId;\
+    \n  :global TelegramChatId;\
+    \n  :local message [:tostr \$1];\
+    \n  :local identity [/system/identity/get name];\
+    \n  :local sendMsg (\"[\".\$identity.\"] \".\$message)\
+    \n  /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\
+    \n    \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\
+    \n    \"&text=\".\$sendMsg.\\\
+    \n    \"&parse_mode=HTML\") \\\
+    \n    mode=https keep-result=no\
+    \n}"
+add dont-require-permissions=no name=telegram-send owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\
+    \n  :global TelegramTokenId;\
+    \n  :global TelegramChatId;\
+    \n  :local message [:tostr \$1];\
+    \n  :local identity [/system/identity/get name];\
+    \n  :local sendMsg (\"[\".\$identity.\"] \".\$message)\
+    \n  /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\
+    \n    \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\
+    \n    \"&text=\".\$sendMsg.\\\
+    \n    \"&parse_mode=HTML\") \\\
+    \n    mode=https keep-result=no\
+    \n"
+/user group
+add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\
+    t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon"
+/ip smb
+set enabled=no interfaces=lo
+/interface bridge port
+add bridge=Bridge-LAN interface=ether5
+add bridge=Bridge-LAN interface=ether2
+add bridge=Bridge-LAN interface=ether4 trusted=yes
+add bridge=Bridge-LAN interface=ether3
+add bridge=Bridge-LAN interface=wlan2
+add bridge=Bridge-LAN interface=wlan1
+/interface bridge settings
+set use-ip-firewall=yes
+/ip firewall connection tracking
+set udp-timeout=10s
+/ip neighbor discovery-settings
+set discover-interface-list=LAN lldp-med=no lldp-poe-power=no
+/ip settings
+set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\
+    8192
+/ipv6 settings
+set disable-ipv6=yes disable-link-local-address=yes forward=no \
+    max-neighbor-entries=8192 multipath-hash-policy=l4
+/interface detect-internet
+set detect-interface-list=WAN internet-interface-list=Internet \
+    lan-interface-list=LAN request-interval=1m wan-interface-list=WAN
+/interface l2tp-server server
+set authentication=mschap2 use-ipsec=yes
+/interface list member
+add interface=Unet-ether1 list=Internet
+add interface=WG list=WAN
+add interface=Bridge-LAN list=LAN
+add interface=Unet-ether1 list=WAN
+/interface wireguard peers
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\
+    109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \
+    persistent-keepalive=10s public-key=\
+    "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4="
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 disabled=yes \
+    endpoint-address=10.30.30.33 endpoint-port=55055 interface=wg-nuc name=\
+    NUC persistent-keepalive=11s public-key=\
+    "+OvzAjLC45Td52hjkQPmpGvC3RGhZ+Q2CDMJ1U/D4Rw="
+/interface wireless cap
+# 
+set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \
+    caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\
+    CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\
+    wlan2,wlan1 lock-to-caps-man=yes
+/ip address
+add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0
+add address=10.8.0.2/24 interface=WG network=10.8.0.0
+add address=192.168.33.2/24 disabled=yes interface=wg-nuc network=\
+    192.168.33.0
+/ip cloud
+set update-time=no
+/ip dhcp-client
+add add-default-route=special-classless check-gateway=arp comment=Unet-client \
+    default-route-distance=2 default-route-tables=main:2 dhcp-options=\
+    hostname,clientid_duid interface=Unet-ether1 name=UnetDHCP use-peer-dns=\
+    no use-peer-ntp=no
+/ip dhcp-server config
+set accounting=no
+/ip dhcp-server lease
+add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\
+    48:8F:5A:8E:EE:A8 server=masterDHCP
+add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\
+    F0:DE:F1:91:0D:1E server=masterDHCP
+add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\
+    00:80:77:EC:43:86 server=masterDHCP
+add address=10.30.30.70 dhcp-option=domain-search-list,HostName \
+    dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP
+add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\
+    04:7C:16:36:F5:37 server=masterDHCP
+add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\
+    10:2D:41:2C:20:C2 server=masterDHCP
+add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\
+    10:08:C1:81:59:5F server=masterDHCP
+add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\
+    10:38:1F:D2:5F:13 server=masterDHCP
+add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\
+    10:B1:DF:E9:D0:D5 server=masterDHCP
+add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\
+    FE:02:52:BE:3F:16 server=masterDHCP
+add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\
+    D4:6D:6D:FD:E5:49 server=masterDHCP
+add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\
+    CC:42:10:12:46:94 server=masterDHCP
+add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\
+    50:CC:F8:85:96:0A server=masterDHCP
+add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\
+    E4:18:6B:58:34:AB server=masterDHCP
+add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\
+    00:27:15:41:97:A9 server=masterDHCP
+add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \
+    mac-address=C4:82:E1:03:49:10 server=masterDHCP
+add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\
+    10:38:1F:82:81:F2 server=masterDHCP
+add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \
+    dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP
+add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \
+    dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP
+add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \
+    server=masterDHCP
+add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\
+    MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP
+add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \
+    mac-address=F0:75:5D:1E:5F:71 server=masterDHCP
+add address=10.30.30.100 client-id=iVados dhcp-option=HostName \
+    dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP
+add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\
+    ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \
+    dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \
+    use-src-mac=yes
+/ip dhcp-server network
+add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\
+    domain-search-list dhcp-option-set=domain-search-set dns-server=\
+    10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\
+    24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98
+/ip dns
+set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \
+    doh-max-server-connections=20 servers=8.8.8.8 verify-doh-cert=yes
+/ip dns static
+add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \
+    type=A
+add address=109.107.177.79 name=vds.vados.ru type=A
+add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \
+    regexp=*.vados.ru type=NS
+add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\
+    "\".*\\\\.vados\\\\.ru\"" type=FWD
+add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\
+    10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\
+    FWD
+add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\
+    ns.vados.ru.local type=A
+add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\
+    vados.ru ns=ns.vados.ru.local type=NS
+add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A
+add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\
+    dns.google type=A
+add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A
+add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A
+add address=10.30.30.33 name=ros.vados.ru type=A
+add address=10.30.30.95 name=vados-nuc type=A
+add address=10.30.30.33 name=amster-nuc type=A
+add address=10.30.30.33 name=amster type=A
+add address=10.30.30.33 name=amster-reg type=A
+add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A
+add address=10.30.30.33 name=mgr.vados.ru type=A
+add address=10.30.30.33 name=prt.vados.ru type=A
+add address=10.30.30.33 disabled=yes match-subdomain=yes name=\
+    mikrots.vados.ru type=A
+add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A
+add address=10.30.30.30 name=MILLER-LEN type=A
+add address=10.30.30.30 name=miller type=A
+add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\
+    dns.quad9.net type=A
+add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\
+    dns.quad9.net type=A
+add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \
+    type=A
+add address=10.30.30.81 comment=LocalNet name=MikroVados type=A
+add address=10.30.30.10 name=MikroNUC type=A
+add address=10.30.30.86 disabled=yes name=MikroYellow type=A
+add address=10.30.30.85 disabled=yes name=MikroMic type=A
+add address=10.30.30.95 name=VADOS-NUC type=A
+add address=10.30.30.98 name=VADOS-LEN type=A
+add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\
+    A
+add address=10.30.30.20 disabled=yes name=garage type=A
+/ip firewall address-list
+add address=91.215.120.206 list=TRUSTED
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=8.8.4.0/24 list=YouTube
+add address=8.8.8.0/24 list=YouTube
+add address=8.34.208.0/20 list=YouTube
+add address=8.35.192.0/20 list=YouTube
+add address=23.236.48.0/20 list=YouTube
+add address=23.251.128.0/19 list=YouTube
+add address=34.0.0.0/15 list=YouTube
+add address=34.2.0.0/16 list=YouTube
+add address=34.3.0.0/23 list=YouTube
+add address=34.3.3.0/24 list=YouTube
+add address=34.3.4.0/24 list=YouTube
+add address=34.3.8.0/21 list=YouTube
+add address=34.3.16.0/20 list=YouTube
+add address=34.3.32.0/19 list=YouTube
+add address=34.3.64.0/18 list=YouTube
+add address=34.4.0.0/14 list=YouTube
+add address=34.8.0.0/13 list=YouTube
+add address=34.16.0.0/12 list=YouTube
+add address=34.32.0.0/11 list=YouTube
+add address=34.64.0.0/10 list=YouTube
+add address=34.128.0.0/10 list=YouTube
+add address=35.184.0.0/13 list=YouTube
+add address=35.192.0.0/14 list=YouTube
+add address=35.196.0.0/15 list=YouTube
+add address=35.198.0.0/16 list=YouTube
+add address=35.199.0.0/17 list=YouTube
+add address=35.199.128.0/18 list=YouTube
+add address=35.200.0.0/13 list=YouTube
+add address=35.208.0.0/12 list=YouTube
+add address=35.224.0.0/12 list=YouTube
+add address=35.240.0.0/13 list=YouTube
+add address=57.140.192.0/18 list=YouTube
+add address=64.15.112.0/20 list=YouTube
+add address=64.233.160.0/19 list=YouTube
+add address=66.22.228.0/23 list=YouTube
+add address=66.102.0.0/20 list=YouTube
+add address=66.249.64.0/19 list=YouTube
+add address=70.32.128.0/19 list=YouTube
+add address=72.14.192.0/18 list=YouTube
+add address=74.125.0.0/16 list=YouTube
+add address=104.154.0.0/15 list=YouTube
+add address=104.196.0.0/14 list=YouTube
+add address=104.237.160.0/19 list=YouTube
+add address=107.167.160.0/19 list=YouTube
+add address=107.178.192.0/18 list=YouTube
+add address=108.59.80.0/20 list=YouTube
+add address=108.170.192.0/18 list=YouTube
+add address=108.177.0.0/17 list=YouTube
+add address=130.211.0.0/16 list=YouTube
+add address=136.22.160.0/20 list=YouTube
+add address=136.22.176.0/21 list=YouTube
+add address=136.22.184.0/23 list=YouTube
+add address=136.22.186.0/24 list=YouTube
+add address=142.250.0.0/15 list=YouTube
+add address=146.148.0.0/17 list=YouTube
+add address=152.65.208.0/22 list=YouTube
+add address=152.65.214.0/23 list=YouTube
+add address=152.65.218.0/23 list=YouTube
+add address=152.65.222.0/23 list=YouTube
+add address=152.65.224.0/19 list=YouTube
+add address=162.120.128.0/17 list=YouTube
+add address=162.216.148.0/22 list=YouTube
+add address=162.222.176.0/21 list=YouTube
+add address=172.110.32.0/21 list=YouTube
+add address=172.217.0.0/16 list=YouTube
+add address=172.253.0.0/16 list=YouTube
+add address=173.194.0.0/16 list=YouTube
+add address=173.255.112.0/20 list=YouTube
+add address=192.158.28.0/22 list=YouTube
+add address=192.178.0.0/15 list=YouTube
+add address=193.186.4.0/24 list=YouTube
+add address=199.36.154.0/23 list=YouTube
+add address=199.36.156.0/24 list=YouTube
+add address=199.192.112.0/22 list=YouTube
+add address=199.223.232.0/21 list=YouTube
+add address=207.223.160.0/20 list=YouTube
+add address=208.65.152.0/22 list=YouTube
+add address=208.68.108.0/22 list=YouTube
+add address=208.81.188.0/22 list=YouTube
+add address=208.117.224.0/19 list=YouTube
+add address=209.85.128.0/17 list=YouTube
+add address=216.58.192.0/19 list=YouTube
+add address=216.73.80.0/20 list=YouTube
+add address=216.239.32.0/19 list=YouTube
+add address=2ip.ru list=Test-IP
+add address=wg.vados.ru comment=VDSIna list=TRUSTED
+add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED
+add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina
+add address=love.ru comment=love.ru list=NoVdsina
+add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina
+add address=pochta.ru comment=pochta.ru list=NoVdsina
+add address=vdsina.com list=NoVdsina
+add address=vdsina.ru list=NoVdsina
+add address=youla.ru list=NoVdsina
+add address=kupiprodai.ru list=NoVdsina
+add address=myip.ru list=Test-IP
+add address=geoip.co list=NoVdsina
+add address=comp-lenta.ru list=NoVdsina
+add address=128.85.102.70 comment=update.microsoft.com list=\
+    windowsupdateslist
+add address=wu-b-net.trafficmanager.net. comment=\
+    ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\
+    ctldl.windowsupdate.com list=windowsupdateslist
+add address=redir.update.msft.com.trafficmanager.net. comment=\
+    update.microsoft.com list=windowsupdateslist
+add address=geo.prod.do.dsp.trafficmanager.net. comment=\
+    geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12437.d.akamaiedge.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \
+    comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \
+    list=windowsupdateslist
+add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\
+    sls.update.microsoft.com list=windowsupdateslist
+add address=fe3.delivery.mp.microsoft.com. comment=\
+    fe3cr.delivery.mp.microsoft.com list=windowsupdateslist
+add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\
+    fe3.delivery.mp.microsoft.com list=windowsupdateslist
+add address=fe2cr.update.msft.com.trafficmanager.net. comment=\
+    fe2cr.update.microsoft.com list=windowsupdateslist
+add address=download.windowsupdate.com.delivery.microsoft.com. comment=\
+    download.windowsupdate.com list=windowsupdateslist
+add address=wu-f-net.trafficmanager.net. comment=\
+    download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=tsfe.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \
+    comment=9.au.download.windowsupdate.com list=windowsupdateslist
+add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dspw65.akamai.net. comment=\
+    download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \
+    comment=licensing.mp.microsoft.com list=windowsupdateslist
+add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-nlu-net.trafficmanager.net. comment=\
+    star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-tlu-net.trafficmanager.net. comment=\
+    star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=storeedgefd.xbetservices.akadns.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \
+    comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\
+    windowsupdateslist
+add address=e16646.dscg.akamaiedge.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\
+    windowsupdateslist
+add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=bg.microsoft.map.fastly.net. comment=\
+    3.au.download.windowsupdate.com list=windowsupdateslist
+add list=windowsupdateslist
+add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\
+    star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a2033.dscd.akamai.net. comment=\
+    star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-nlu-net.trafficmanager.net. comment=\
+    dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-b-tlu-net.trafficmanager.net. comment=\
+    1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a122.dscg3.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist
+add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e10370.d.akamaiedge.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=a1683.dscd.akamai.net. comment=\
+    dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \
+    comment=collections.mp.microsoft.com list=windowsupdateslist
+add address=a1847.dscd.akamai.net. comment=\
+    wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=au.download.windowsupdate.com.edgesuite.net. comment=\
+    2.au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dscg3.akamai.net. comment=\
+    au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    4.au.download.windowsupdate.com list=windowsupdateslist
+add address=cl-glcb907925.gcdn.co. comment=\
+    4.au.download.windowsupdate.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \
+    comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=ts-frontend.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=sds.trafficmanager.net. comment=software-download.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\
+    windowsupdateslist
+add address=e12671.dscd.akamaiedge.net. comment=\
+    download.microsoft.com.edgekey.net list=windowsupdateslist
+add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12358.d.akamaiedge.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-tlu-net.trafficmanager.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a1856.dspw65.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina
+add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=purchase.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.mp.microsoft.com list=windowsupdateslist
+add address=e110219.a.akamaiedge.net. comment=\
+    purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.141 list=windowsupdateslist
+add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=storesdk.xbetservices.akadns.net. comment=\
+    storesdk.dsx.mp.microsoft.com list=windowsupdateslist
+add address=e16646.g.akamaiedge.net. comment=\
+    storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=software-download.microsoft.com.delivery.microsoft.com. comment=\
+    software-download.microsoft.com list=windowsupdateslist
+add address=download.prss.microsoft.com.akamaized.net. comment=\
+    software-download.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina
+add address=87.250.250.50 comment=YandexDisk list=NoVdsina
+add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\
+    purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\
+    cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=a1996.dscd.akamai.net. comment=\
+    wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\
+    tas02.sls.update.microsoft.com list=windowsupdateslist
+add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\
+    star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\
+    paymentinstruments.mp.microsoft.com list=windowsupdateslist
+add address=10.30.30.33 comment=amster list=NoWG
+add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG
+add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG
+add address=wg.vados.ru comment=VDSina-vpn list=VDSina
+add address=80.85.244.9 list=TRUSTED
+add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina
+add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS
+add address=dns.google comment=Google-dns list=Trusted-DNS
+add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\
+    Trusted-DNS
+add address=time.google.com comment=Google-time list=Trusted-NTP
+add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP
+add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=cp.vdsina.com comment=VDSina-vpn list=VDSina
+add address=vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns.vados.ru comment=VDSina-vpn list=VDSina
+add address=vdsina.com comment=VDSina-vpn list=VDSina
+add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=10.30.30.0/24 comment="Local Network" list=Local-Net
+add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net
+add address=146.120.64.208/29 comment="External Net" list=Unet
+add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina
+add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina
+add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina
+add address=10.30.30.30 comment=miller disabled=yes list=NoWG
+add address=10.30.30.33 comment="Direct connet to DNS servers" list=\
+    Direct-DNS
+add address=109.107.177.79 list=VPN-Server
+add address=10.0.0.0/8 list=RFC1918
+add address=172.16.0.0/12 list=RFC1918
+add address=192.168.0.0/16 list=RFC1918
+add address=8.8.4.4 disabled=yes list=to_vpn
+add address=myip.ru disabled=yes list=to_vpn
+add address=10.30.30.98 disabled=yes list=to_vpn
+/ip firewall filter
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=12h chain=input comment="block honeypot DNS" \
+    connection-state=new dst-port=53 in-interface=Unet-ether1 protocol=udp \
+    src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment=\
+    "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=!TRUSTED
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \
+    connection-state=new dst-port=5060 in-interface=Unet-ether1 protocol=udp
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot NTP" \
+    connection-state=new dst-port=123 in-interface=Unet-ether1 protocol=udp
+add action=fasttrack-connection chain=forward comment=\
+    "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \
+    connection-state=established,related,new disabled=yes
+add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \
+    protocol=tcp
+add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \
+    protocol=udp
+add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \
+    dst-port=53 protocol=tcp src-address=10.30.30.0/24
+add action=accept chain=input comment="udp Accept input DNS queries" \
+    dst-port=53 protocol=udp src-address=10.30.30.0/24
+add action=accept chain=output comment="accept WireGuard" disabled=yes \
+    dst-address-list=VPN-Server out-interface=Unet-ether1 protocol=udp \
+    src-port=13231
+add action=accept chain=output disabled=yes dst-address-list=VPN-Server \
+    dst-port=29185 out-interface=Unet-ether1 protocol=udp
+add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
+    connection-state=established,related,new disabled=yes routing-mark=\
+    !To-VPN
+add action=accept chain=output disabled=yes protocol=tcp src-port=443
+add action=accept chain=output disabled=yes src-address=127.0.0.1
+add action=accept chain=forward comment="defconf: accept in ipsec policy" \
+    disabled=yes ipsec-policy=in,ipsec
+add action=accept chain=forward comment="defconf: accept out ipsec policy" \
+    disabled=yes ipsec-policy=out,ipsec
+add action=accept chain=forward comment=\
+    "defconf: accept established,related, untracked" connection-state=\
+    established,related,untracked disabled=yes
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid in-interface=Unet-ether1 src-address=\
+    !10.30.30.0/24
+add action=drop chain=forward comment=\
+    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
+    connection-state=new in-interface=Unet-ether1 src-address-list=!VDSina
+add action=accept chain=input in-interface=Unet-ether1 protocol=icmp \
+    src-address-list=VDSina
+add action=accept chain=input connection-state=established
+add action=accept chain=input connection-state=related
+/ip firewall mangle
+add action=accept chain=prerouting comment=RFC1918 dst-address-list=RFC1918 \
+    in-interface-list=!WAN
+add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \
+    new-routing-mark=main passthrough=no src-address-list=NoWG
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for NoVdsina" disabled=yes dst-address-list=NoVdsina \
+    new-routing-mark=main passthrough=no src-address=10.30.30.0/24
+add action=mark-connection chain=prerouting comment=\
+    "Transit for address-list \"to_vpn\"" connection-mark=no-mark disabled=\
+    yes dst-address-list=to_vpn in-interface-list=!WAN new-connection-mark=\
+    to-vpn-conn routing-mark=!main
+add action=mark-routing chain=prerouting comment=\
+    "Find routing over table r_to_vpn" connection-mark=to-vpn-conn disabled=\
+    yes in-interface-list=!WAN new-routing-mark=r_to_vpn
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for VDSina" dst-address-list=VPN-Server \
+    new-routing-mark=main passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\
+    Unet new-routing-mark=main passthrough=no
+add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\
+    To-VPN src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \
+    new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment="WG for all" \
+    dst-address-list=!NoVdsina new-routing-mark=To-VPN src-address=\
+    10.30.30.0/24
+add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \
+    out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\
+    1381-65535
+add action=mark-connection chain=prerouting comment=\
+    "Mark VPN connections to exclude from FastTrack" disabled=yes \
+    new-connection-mark=VPN_No_FastTrack routing-mark=To-VPN
+add action=mark-routing chain=prerouting comment="VPN Network" disabled=yes \
+    dst-address=10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24
+add action=mark-connection chain=output comment="For this router" \
+    connection-mark=no-mark disabled=yes dst-address-list=to_vpn \
+    new-connection-mark=to-vpn-conn-local
+add action=mark-routing chain=output comment="For this router" \
+    connection-mark=to-vpn-conn-local disabled=yes new-routing-mark=r_to_vpn
+/ip firewall nat
+add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=masquerade chain=srcnat comment=\
+    "Nat Addresses for routing mark r_to_vpn" disabled=yes routing-mark=\
+    r_to_vpn
+add action=dst-nat chain=dstnat comment=\
+    "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=VPN-Server \
+    to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat comment=\
+    "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\
+    udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\
+    Unet-ether1 protocol=udp src-address=!10.30.30.0/24 to-addresses=\
+    10.30.30.33 to-ports=44333
+add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \
+    routing-mark=To-VPN
+add action=masquerade chain=srcnat comment="Default NAT" out-interface=\
+    Unet-ether1 routing-mark=!To-VPN src-address=10.30.30.0/24
+add action=dst-nat chain=dstnat dst-port=44044 in-interface=Unet-ether1 \
+    protocol=udp src-address=109.107.177.79 to-addresses=10.30.30.33 \
+    to-ports=44044
+add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \
+    fragment=no in-interface=Unet-ether1 protocol=tcp routing-mark=main \
+    to-addresses=10.30.30.33 to-ports=443
+add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \
+    dst-port=80 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=80
+add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \
+    dst-port=2904 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2904
+add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\
+    5000 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=5000
+add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\
+    2377 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=2377
+add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\
+    Unet-ether1 protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \
+    to-ports=81
+add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\
+    Unet-ether1 protocol=tcp src-address-list=TRUSTED to-addresses=\
+    10.30.30.33 to-ports=22
+add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \
+    dst-port=2377 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2377
+add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\
+    Unet-ether1 protocol=tcp routing-mark=!To-VPN to-addresses=10.30.30.33 \
+    to-ports=22
+add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \
+    dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \
+    time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\
+    Bridge-LAN protocol=tcp src-address-list=KIDS time=\
+    6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+/ip firewall raw
+add action=drop chain=prerouting comment="Drop Honeypot Hackers" \
+    in-interface=Unet-ether1 src-address-list="Honeypot Hacker"
+add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \
+    in-interface-list=WAN src-address-list=Trusted-DNS
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \
+    content=linux.duke.edu disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleapis.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googlevideo.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleusercontent.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    nhacmp3youtube.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \
+    content=rutube.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \
+    content=me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "icloud.com raw" content=icloud.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \
+    disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "api.db-ip.com raw" content=api.db-ip.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \
+    content=gosuslugi.ru disabled=yes
+/ip firewall service-port
+set ftp disabled=yes
+set tftp disabled=yes
+set irc disabled=no
+set sip disabled=yes
+set pptp disabled=yes
+set rtsp disabled=no
+/ip ipsec settings
+set accounting=no
+/ip ipsec policy
+set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0
+/ip ipsec profile
+set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
+/ip proxy
+set cache-administrator="" max-cache-size=none port=80,443 src-address=\
+    0.0.0.0
+/ip route
+add check-gateway=none comment=WG-Default disabled=no distance=1 dst-address=\
+    0.0.0.0/0 gateway=WG routing-table=To-VPN scope=30 target-scope=10
+/ip service
+set ftp disabled=yes
+set telnet disabled=yes
+set reverse-proxy disabled=yes
+set ssh address=10.30.30.0/24 port=2222
+set winbox address=10.30.30.0/24
+set api address=10.30.30.0/24
+set api-ssl address=10.30.30.0/24 disabled=yes
+set www-ssl certificate=Root-YE port=18443
+set www address=10.30.30.0/24 disabled=yes port=18880
+/ip service webserver
+set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\
+    no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \
+    webfig-secure=no
+/ip ssh
+set forwarding-enabled=both publickey-authentication-options=verify-required
+/ip upnp
+set enabled=yes
+/ip upnp interfaces
+add interface=Bridge-LAN type=internal
+add forced-ip=146.120.64.211 interface=Unet-ether1 type=external
+add forced-ip=109.107.177.79 interface=*E type=external
+add interface=lo type=internal
+add interface=wlan2 type=internal
+add interface=wlan1 type=internal
+/ipv6 dhcp-client
+add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\
+    info use-interface-duid=yes validate-server-duid=no
+/ipv6 dhcp-server option sets
+add name=domain-search-set options=domain-search-list
+add name="=\"Client ID\"" options=HostName
+/ipv6 firewall address-list
+add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
+add address=::1/128 comment="defconf: lo" list=bad_ipv6
+add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
+add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
+add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
+add address=100::/64 comment="defconf: discard only " list=bad_ipv6
+add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
+add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
+add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
+/ipv6 firewall filter
+add action=accept chain=input comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=input comment="defconf: drop invalid" connection-state=\
+    invalid
+add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=input comment="defconf: accept UDP traceroute" \
+    dst-port=33434-33534 protocol=udp
+add action=accept chain=input comment=\
+    "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
+    udp src-address=fe80::/10
+add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
+    protocol=udp
+add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=input comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=input comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+add action=accept chain=forward comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
+add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
+    hop-limit=equal:1 protocol=icmpv6
+add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=forward comment="defconf: accept HIP" protocol=139
+add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
+    500,4500 protocol=udp
+add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=forward comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=forward comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+/ipv6 nd
+set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \
+    managed-address-configuration=yes other-configuration=yes pref64=::/64
+/ipv6 nd prefix
+add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none
+/ipv6 nd prefix default
+set dhcp6-pd-preferred=yes
+/ipv6 nd proxy
+add disabled=yes interface=lo
+/ipv6 nd settings
+set router-advertisement-route-distance=100
+/routing settings
+set single-process=no
+/system clock
+set time-zone-name=Europe/Moscow
+/system clock manual
+set time-zone=+03:00
+/system identity
+set name=MikroMaster
+/system logging
+add action=email disabled=yes regex="* added|changed|removed *" topics=\
+    system,info
+/system ntp client
+set enabled=yes
+/system ntp server
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes
+/system ntp client servers
+add address=0.ru.pool.ntp.org
+add address=1.ru.pool.ntp.org
+add address=2.ru.pool.ntp.org
+add address=3.ru.pool.ntp.org
+add address=time.google.com disabled=yes
+/system package update
+set check-certificate=yes-without-crl ip-version=ipv4
+/system scheduler
+add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \
+    on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Every Day Check For Update Scripts" interval=1d name=\
+    AM-ScriptInstallUpdate on-event=\
+    ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\
+    AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+/system watchdog
+set watchdog-timer=no
+/tool e-mail
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \
+    server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com
+/tool mac-server
+set allowed-interface-list=LAN
+/tool mac-server mac-winbox
+set allowed-interface-list=LAN
+/tool netwatch
+add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\
+    -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\
+    e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \
+    interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\
+    https-get up-script=""
+add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\
+    flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\
+    oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \
+    name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \
+    up-script=""
+add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\
+    8.8.8.8 down-script="" host=dns.google http-codes="" name=\
+    "Google-DNS IPv4" test-script="" type=dns up-script=""
+add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\
+    rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\
+    -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \
+    http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\
+    "" test-script="" type=dns up-script=""
+add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \
+    dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \
+    interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \
+    test-script="" timeout=800ms type=dns up-script=""
+add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\
+    ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \
+    down-script="" host=149.112.112.112 http-codes="" interval=10s name=\
+    "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script=""
+add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \
+    down-script="" host=91.192.189.2 http-codes="" interval=10s name=\
+    ns1.unet.ws test-script="" type=simple up-script=""
+add check-certificate=yes comment=\
+    "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \
+    disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\
+    vds.vados.ru port=443 test-script="" type=https-get up-script=""
+add comment="WireGuard NAT " disabled=yes down-script="/log info \"[WG-Monitor\
+    ] WireGuard is NOT running - reverting rules\"\
+    \n/ip firewall nat remove [find comment=\"Redirect to Router\"]\
+    \n/ip dns set servers=8.8.8.8\
+    \n/ip dns cache flush\
+    \n/ip route remove [find comment=\"wg-auto-route\"]\
+    \n" host=10.8.0.1 http-codes="" interval=15s name=WG test-script="" \
+    timeout=5s type=simple up-script="/log info \"[WG-Monitor] WireGuard is RU\
+    NNING - applying rules\";\
+    \n:local routeFile \"ips.txt\";\
+    \n:local routeDefAddr \"0.0.0.0/0\";\
+    \n:local routeGateway \"10.8.0.1\";\
+    \n:local routeIF \"WG\";\
+    \n:local routeTable \"To-VPN\";\
+    \n:local routeComment \"wg-auto-route\";\
+    \n/ip dns cache flush;\
+    \n:if ([:len [/ip firewall nat find comment=\"Redirect to Router\"]] > 0) \
+    do={\
+    \n  /ip firewall nat remove [find comment=\"Redirect to Router\"];\
+    \n}\
+    \n/ip firewall nat add action=redirect chain=dstnat src-address-list=\"Red\
+    irectDNS\" dst-port=53 protocol=udp comment=\"Redirect to Router\";\
+    \n/ip dns set servers=\$routeGateway;\
+    \n:local content [/file get \$routeFile contents];\
+    \n:if ([:len \$content] > 0) do={\
+    \n    :local line \"\";\
+    \n    :for i from=0 to=([:len \$content] - 1) do={\
+    \n        :local char [:pick \$content \$i];\
+    \n        :if (\$char != \"\\r\" && \$char != \"\\n\") do={\
+    \n            :set line (\$line . \$char);\
+    \n        } else={\
+    \n            :if ([:len \$line] > 5) do={\
+    \n                :do { /ip route add disabled=no dst-address=\$routeDefAd\
+    dr gateway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$r\
+    outeTable comment=\$routeComment check-gateway=none } on-error={}\
+    \n            }\
+    \n            :set line \"\";\
+    \n        }\
+    \n    }\
+    \n    :if ([:len \$line] > 5) do={\
+    \n#         :do { /ip route add dst-address=\$line gateway=\$routeGateway \
+    distance=1 comment=\$routeComment } on-error={}\
+    \n           :do { /ip route add disabled=no dst-address=\$routeDefAddr ga\
+    teway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$routeT\
+    able comment=\$routeComment check-gateway=none } on-error={}\
+    \n    }\
+    \n}\
+    \n:local dotPos [:find \$routeGateway \".\"];\
+    \n:if (\$dotPos != \"\") do={\
+    \n    :local firstOctet [:pick \$routeGateway 0 \$dotPos];\
+    \n    :local derivedDstAddress (\$firstOctet . \".30.0.0/15\");\
+    \n    :do { /ip route add dst-address=\$derivedDstAddress gateway=\$routeG\
+    ateway distance=1 comment=\$routeComment } on-error={}\
+    \n}\
+    \n\
+    \n"
+add comment=WG-Default disabled=yes down-script=\
+    "/ip route disable [find comment=\"WG-Default\"];" host=10.8.0.1 \
+    interval=15s name=WG packet-count=20 test-script="" thr-loss-count=5 \
+    type=icmp up-script="/ip route enable [find comment=\"WG-Default\"];"
+/user aaa
+set accounting=no
diff --git a/MikroMaster/20260712/20260712000002-Config.rsc b/MikroMaster/20260712/20260712000002-Config.rsc
new file mode 100644
index 0000000..af15403
--- /dev/null
+++ b/MikroMaster/20260712/20260712000002-Config.rsc
@@ -0,0 +1,3841 @@
+# 2026-07-12 00:00:06 by RouterOS 7.23.1
+# software id = A8L5-07YF
+#
+# model = RB952Ui-5ac2nD
+# serial number = D3D50CEDCD38
+/interface bridge
+add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\
+    "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\
+    Bridge-LAN port-cost-mode=short
+/interface ethernet
+set [ find default-name=ether1 ] comment=Unet-cable loop-protect=off name=\
+    Unet-ether1 rx-flow-control=auto tx-flow-control=auto
+set [ find default-name=ether2 ] comment=LAN-2
+set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3
+set [ find default-name=ether4 ] comment=LAN-4
+set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \
+    loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto
+/interface wireless
+# managed by CAPsMAN
+# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding
+set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados wireless-protocol=802.11
+# managed by CAPsMAN
+# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding
+set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados5g wireless-protocol=802.11
+/interface wireguard
+add comment=WG listen-port=13231 mtu=1320 name=WG
+add comment="WG interface for Amnezia route" disabled=yes listen-port=33033 \
+    mtu=1360 name=wg-nuc
+/interface list
+add include=static name=LAN
+add name=Internet
+add include=Internet name=WAN
+/interface wireless security-profiles
+set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
+    dynamic-keys supplicant-identity=MikroTik
+/iot wiliot servers
+set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East"
+/ip dhcp-server option
+add code=12 name=HostName
+add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00"
+/ip dhcp-server option sets
+add name=HP1505n options=HostName
+add name=StartLife1 options=HostName
+add name=amsterDev options=HostName
+add name=MiTV options=HostName
+add name=miller options=HostName
+add name=amster options=HostName
+add name=garage options=HostName
+add name=domain-search-set options=domain-search-list
+add name=VADOS-LEN options=HostName
+add name=VADOS-NUC options=HostName
+add name=MikroNUC options=HostName
+add name=master options=HostName
+add name=MikroYellow options=HostName
+add name="=\"Client ID\"" options=HostName
+add name=iVados options=HostName
+/ip dns forwarders
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no
+add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \
+    verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no
+/ip ipsec proposal
+set [ find default=yes ] disabled=yes
+/ip pool
+add name=dhcp ranges=10.30.30.83-10.30.30.254
+/ip dhcp-server
+add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \
+    dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \
+    name=masterDHCP server-address=10.30.30.81
+/ip smb users
+set [ find default=yes ] disabled=yes
+add disabled=yes name=vados
+/ipv6 dhcp-client option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=DUID value=0x00030001488f5a8e1abc
+add code=61 name=clientid
+/ipv6 dhcp-server option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=CLIENT_DUID
+add code=61 name=CLIENT_MAC
+/ppp profile
+set *FFFFFFFE use-upnp=no
+/routing bgp template
+set default disabled=no output.network=bgp-networks
+/routing table
+add disabled=no fib name=To-VPN
+add disabled=no fib name=r_to_vpn
+/system logging action
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email
+/system script
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\
+    \n\r\
+    \n#:local Script AM-setup\
+    \n;\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n\
+    \n\r\
+    \n#\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\
+    \n\r\
+    \n#\r\
+    \n\
+    \n#root.mnuc.backuper\
+    \n\
+    \n\r\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\
+    .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\
+    \n\
+    \n#:local Script AM-GlobalConfig;\
+    \n\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n#:local FetchFile AM-DOHCert.rsc\
+    \n\
+    \n\r\
+    \n\r\
+    \n#\
+    \n:global MkDir;\
+    \n\r\
+    \n\
+    \n#:local FetchFile Binary.backup\
+    \n:local localDir \"\";\
+    \n\
+    \n\r\
+    \n#\$MkDir \$localDir;\r\
+    \n\
+    \n#\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\
+    \$localDir . \$FetchFile);\r\
+    \n"
+add comment="Global Config Script" dont-require-permissions=no name=\
+    AM-GlobalConfig owner=AM-GlobalConfig policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GlobalConfig\r\
+    \n# Script comment: Global Config Script\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# Warning: Dont touch this line!\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global GlobalConfReady false;\r\
+    \n#\r\
+    \n#\r\
+    \n# Global Url For Amster scripts to fetch\r\
+    \n# most be defined in AM-Init-Script or AM-setup scripts\r\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n:global ScriptsUrlSuffix (a);\r\
+    \n:global CheckSumsVerify true;\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF true;\r\
+    \n:global CommentsInScripts true;\r\
+    \n\r\
+    \n# Debug output:\r\
+    \n:global PrintDebug true; #false;\r\
+    \n\r\
+    \n# Debug output for specific script:\r\
+    \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\
+    \n\r\
+    \n# Debug logs\r\
+    \n# Other actions (disk, email, remote or support) can be used as well.\r\
+    \n# I do not recommend using echo - use debug output instead (https://rsc.\
+    eworm.de/main/DEBUG.html#debug-output).\r\
+    \n#/system/logging/add topics=script,debug action=memory;\r\
+    \n\r\
+    \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\
+    \n:global Domain \"WORKGROUP\";\r\
+    \n\r\
+    \n:global EmailGeneralTo \"vados@vados.ru\";\r\
+    \n#:global EmailGeneralCc \"\";\r\
+    \n\r\
+    \n# \$ScriptInstallUpdate mod/notification-telegram\r\
+    \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\
+    \";\r\
+    \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\
+    \n# Use this to send notifications to a specific topic in group.\r\
+    \n#:global TelegramThreadId \"30\";\r\
+    \n# Using telegram-chat you have to define trusted chat ids (not group ids\
+    !)\r\
+    \n# or user names. Groups allow to chat with devices simultaneously.\r\
+    \n:global TelegramChatIdsTrusted {\r\
+    \n  \"454403445\"\r\
+    \n  \"-1003631309063\"\r\
+    \n  \"-5124482807\"\r\
+    \n  \"1087968824\";\r\
+    \n};\r\
+    \n#  \"-5294757340\";\r\
+    \n\r\
+    \n:global TelegramChatGroups \"(all)\";\r\
+    \n#:global TelegramChatGroups \"(all|home|office)\";\r\
+    \n\r\
+    \n:global NotificationFunctions {\r\
+    \n  \"email\"\r\
+    \n  \"telegram\";\r\
+    \n};\r\
+    \n# Toggle this to disable symbols in notifications.\r\
+    \n:global NotificationsWithSymbols true;\r\
+    \n:global TerminalColorOutput true;\r\
+    \n\r\
+    \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\
+    \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\
+    \n\r\
+    \n## Update channel. Possible values: stable, long-term, testing, developm\
+    ent\r\
+    \n:global updateChannel \"stable\";\r\
+    \n\r\
+    \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\
+    \");\r\
+    \n:global CertRenewTime 2w;\r\
+    \n:global CertRenewPass (a); #{\r\
+    \n#  \"\";\r\
+    \n#  \"v3ry-s3cr3t\";\r\
+    \n#  \"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n:global CertWarnTime 1w;\r\
+    \n:global CertIssuedExportPass (a); # {\r\
+    \n#  \"\";\r\
+    \n#  \"cert1-cn\"=\"v3ry-s3cr3t\";\r\
+    \n#  \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n\r\
+    \n# Script BackupAndUpdate mode, possible values: backup,\r\
+    \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\
+    n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;).  \r\
+    \n# osupdate - Update if available and creates backups before/after update\
+    \_(ignores `forceBackup`)\r\
+    \n#               Set `forceBackup` to true to always create backups, even\
+    \_without updates\r\
+    \n# osnotify - Set `forceBackup` to always create backups on every run\r\
+    \n:global DevInfoIncludeIP true;\r\
+    \n:global BackupAndUpdateMode \"osnotify\"\r\
+    \n\r\
+    \n:global forceBackup true;\r\
+    \n:global BackupPassword \"Peskar55\";\r\
+    \n\r\
+    \n# SFTP Backup Variables\r\
+    \n:global BackupRandomDelay 0;\r\
+    \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\
+    \n:global BackupUploadUser \$Identity;\r\
+    \n:global BackupUploadPass \"root.mnuc.backuper\";\r\
+    \n\r\
+    \n:global BackupSendBinary true;\r\
+    \n:global BackupSendExport true;\r\
+    \n:global BackupSendGlobalConfig true;\r\
+    \n:global BackupSendScripts true;\r\
+    \n\r\
+    \n# Remove local file after uploading if no errors\r\
+    \n:global BackupRmLocal true;\r\
+    \n\r\
+    \n# Local Backups Root Directory \r\
+    \n:global BackupLocalRoot \"tmpfs\";\r\
+    \n\r\
+    \n# Encrypt Backup\r\
+    \n:global BackupEncrypt true;\r\
+    \n\r\
+    \n# Sensitive information in Backups\r\
+    \n:global BackupSens true;\r\
+    \n\r\
+    \n# User Export\r\
+    \n:global BackupUser true;\r\
+    \n\r\
+    \n# License Export (not for CHR, will silently skip)\r\
+    \n:global BackupLicense false;\r\
+    \n\r\
+    \n# SSH Keys\r\
+    \n:global BackupSshKeys true;\r\
+    \n\r\
+    \n# Certificate Export\r\
+    \n:global BackupCerts true;\r\
+    \n\r\
+    \n# Certificate Password\r\
+    \n:global BackupCertsPasswd \"\";\r\
+    \n\r\
+    \n# User-Manager Export\r\
+    \n:global BackupUserMan false;\r\
+    \n\r\
+    \n# The Dude Export\r\
+    \n:global BackupDude false;\r\
+    \n\r\
+    \n# User Files to export, comma-separated string or array of strings\r\
+    \n# User Files are not removed on backup\r\
+    \n# Any directory paths will be removed (/ -> _) on remote file\r\
+    \n# Nonpresent files are silently skipped\r\
+    \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\
+    \n\r\
+    \n# load functions and any custom scripts\r\
+    \n#                    [ /system/script/find where name=\"global-config-ov\
+    erlay\" ], \\\r\
+    \n#                    [ /system/script/find where name~\"^global-config-o\
+    verlay\\\\.d/.\" ]\r\
+    \n#\r\
+    \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\
+    ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\
+    \r\
+    \n#  :onerror Err {\r\
+    \n#     /system/script/run \$Script;\r\
+    \n#     } do={\r\
+    \n#       :log error (\"Loading configuration from configs and functions\"\
+    \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\
+    \n#  }\r\
+    \n#}\r\
+    \n#:log info \"\\ndevMode = \$devMode\";\r\
+    \n#:log info \"\\ndevRunning = \$devRunning\";\r\
+    \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \
+    GlobalRUN\\r\?\\n\" ] do={\r\
+    \n  :onerror Err {\r\
+    \n    /system/script/run \$Script;\r\
+    \n       } do={\r\
+    \n       :log error (\"Run script \" . [ /system/script/get \$Script name \
+    ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# signal we are ready\r\
+    \n:set GlobalConfReady true;\r\
+    \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\
+    \n"
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \
+    owner=AM-GlobalFunc policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GglobalFunc\r\
+    \n# Script comment: Global functions\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch, scheduler\r\
+    \n:local ExitOK false;\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n#:global checkRunJob \$SriptName;\r\
+    \n#:global fixCRLF;\r\
+    \n#:if (\$fixCRLF !=  false) do={\r\
+    \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\
+    ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\
+    }\r\
+    \n#:if (\$fixCRLF !=  \"LF\") do={ /system/script/set source=[ :tocrlf [ g\
+    et \$fixScript source ] ] \$fixScript};};\r\
+    \n#}\r\
+    \n:global GlobalFuncReady false;\r\
+    \n\r\
+    \n# Git commit id & info, expected configuration version\r\
+    \n:global CommitId \"main/729/f42d43ae\";\r\
+    \n:global CommitTAG \"unknown\";\r\
+    \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\
+    r: root, in 00:05:03 01.07.2026.\";\r\
+    \n\r\
+    \n# The variables are received right here.\r\
+    \n:global GlobalConfVersion 140;\r\
+    \n\r\
+    \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\
+    \n\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global IdentityShort [:pick \$Identity 0 18];\r\
+    \n\r\
+    \n:global devBoardName [/system/resource/get board-name];\r\
+    \n:global devMode [/system/device-mode/get mode];\r\
+    \n:global devCurArch [/system/resource/get architecture-name];\r\
+    \n:global devCurVersion [/system/resource/get version];\r\
+    \n\r\
+    \n# Variables defined in AM-GlobalConfig.rsc\r\
+    \n:global TerminalColorOutput;\r\
+    \n:global CommentsInScripts;\r\
+    \n:global DetectIpAddrDefault;\r\
+    \n:global DetectIpAddrFallback;\r\
+    \n:global updateChannel;\r\
+    \n:global Domain;\r\
+    \n:global EmailGeneralTo;\r\
+    \n:global BackupAndUpdateMode;\r\
+    \n\r\
+    \n# Single functions, without nested functions.\r\
+    \n:global MiniDateTimeStamp;\r\
+    \n:global MicroDateTimeStamp;\r\
+    \n\r\
+    \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\
+    \n:global LogPrint;\r\
+    \n\r\
+    \n# DeviceInfo and Updates\r\
+    \n:global IsCheckUpdates;\r\
+    \n:global WaitCheckUpdates;\r\
+    \n:global GetPubIp;\r\
+    \n\r\
+    \n:global GetArrDeviceInfo;\r\
+    \n:global WaitArrDeviceInfo;\r\
+    \n\r\
+    \n:global devModel;\r\
+    \n:global devRunningMode;\r\
+    \n\r\
+    \n:global devRbRevision;\r\
+    \n:global devRbSerialNumber;\r\
+    \n:global devRbVerAvail;\r\
+    \n\r\
+    \n:global runningChannelVersion;\r\
+    \n:global runningChannel;\r\
+    \n:global runningVersion;\r\
+    \n\r\
+    \n:global devBuildTime;\r\
+    \n:global ROsVerAvail;\r\
+    \n:global PkgUpdStatus;\r\
+    \n:global currentUpdateChannel;\r\
+    \n\r\
+    \n:global ScriptInstallUpdate;\r\
+    \n\r\
+    \n:global DeviceInfo;\r\
+    \n\r\
+    \n:global OldMode;\r\
+    \n\r\
+    \n:global ParseKeyValueStore;\r\
+    \n:global RandomDelay;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global EscapeForRegEx;\r\
+    \n:global CharacterMultiply;\r\
+    \n:global CharacterReplace;\r\
+    \n:global CleanFilePath;\r\
+    \n:global CleanName;\r\
+    \n\r\
+    \n:global CommitBrief;\r\
+    \n\r\
+    \n:global EitherOr;\r\
+    \n:global FormatLine;\r\
+    \n:global GetRandom20CharAlNum;\r\
+    \n:global GetRandom20CharHex;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global Grep;\r\
+    \n:global IfThenElse;\r\
+    \n:global MAX;\r\
+    \n:global MIN;\r\
+    \n:global HumanReadableNum;\r\
+    \n\r\
+    \n:global IsFullyConnected;\r\
+    \n:global IsDNSResolving;\r\
+    \n:global IsTimeSync;\r\
+    \n:global IsTimeSyncCached;\r\
+    \n:global IsTimeSyncResetNtp;\r\
+    \n\r\
+    \n:global MkDir;\r\
+    \n:global RmDir;\r\
+    \n:global RmFile;\r\
+    \n:global FileGet;\r\
+    \n:global Unix2Dos;\r\
+    \n:global UrlEncode;\r\
+    \n:global WaitForFile;\r\
+    \n:global ScriptLock;\r\
+    \n:global SendTelegram;\r\
+    \n:global NotificationFunctions;\r\
+    \n:global SendNotification;\r\
+    \n:global SendNotification2;\r\
+    \n:global SymbolForNotification;\r\
+    \n:global SymbolByUnicodeName;\r\
+    \n:global ValidateSyntax;\r\
+    \n:global CheckSumsVerify;\r\
+    \n:global GlobalConfChanges;\r\
+    \n:global GlobalConfMigration;\r\
+    \n:global VersionToNum;\r\
+    \n:global RequiredRouterOS;\r\
+    \n:global ExitError;\r\
+    \n:global ExitOnError;\r\
+    \n\r\
+    \n:global FetchHugeFiles;\r\
+    \n:global FetchUserAgentStr;\r\
+    \n:global FileExists;\r\
+    \n:global CertificateAvailable;\r\
+    \n:global CertificateDownload;\r\
+    \n:global CertificateNameByCN;\r\
+    \n:global CharacterMultiply;\r\
+    \n\r\
+    \n:global InspectVar;\r\
+    \n:global InspectVarRet;\r\
+    \n:global ParseCustom;\r\
+    \n\r\
+    \n:set IsCheckUpdates do={\r\
+    \n  :local isInfo [:tobool \$1];\r\
+    \n  :global updateChannel;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\
+    \n  :local CurrentChannel [ /system/package/update/get channel ];\r\
+    \n  :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\
+    el) do={\r\
+    \n    :retry command={/system/package/update set channel=\$updateChannel} \
+    \_delay=300ms max=5 on-error={};\r\
+    \n    :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\
+    \n  }\r\
+    \n  :local Update [ /system/package/update/get ];\r\
+    \n  :local Channel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set currentUpdateChannel \$Channel;\r\
+    \n  :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\
+    \n  :local StatusPkg \"undefined\";\r\
+    \n  :log info (\$0 . \" Checking for updates...\");\r\
+    \n  :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\
+    dates without-paging as-value]->\"status\")} \\\r\
+    \n   delay=300ms max=5 on-error={};\r\
+    \n  :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\
+    \n  :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\
+    s true; } else={ :set PkgUpdStatus false; }\r\
+    \n  :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \
+    ] ];\r\
+    \n  :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n  :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\
+    \n    :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n    :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n      :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n    }\r\
+    \n    :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\
+    kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\
+    \n    :return true;\r\
+    \n  } else={\r\
+    \n    :return \$PkgUpdStatus;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitCheckUpdates do={\r\
+    \n  :global IsCheckUpdates;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :local Status \"\";\r\
+    \n  :local Update;\r\
+    \n  :local WaitCount 0;\r\
+    \n  :if ([ \$IsCheckUpdates true ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n  :while ((\$Status = \"\" || \$Status = \"finding out latest version...\
+    \") && \$WaitCount < 60) do={\r\
+    \n    :delay 1s;\r\
+    \n    :set WaitCount (\$WaitCount + 1);\r\
+    \n    :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n   }\r\
+    \n  :set Update [ /system/package/update/get ];\r\
+    \n  :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n  :if ((\$Update->\"status\") = \"New version is available\") do={\r\
+    \n    :set PkgUpdStatus true;\r\
+    \n  } else={\r\
+    \n    :set PkgUpdStatus false;\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n    :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n  }\r\
+    \n  :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\
+    \n  :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \
+    do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitArrDeviceInfo do={\r\
+    \n   :global GetArrDeviceInfo;\r\
+    \n   :while ([ \$GetArrDeviceInfo ] = false) do={\r\
+    \n    :delay 1s;\r\
+    \n   }\r\
+    \n}\r\
+    \n\r\
+    \n:set GetArrDeviceInfo do={\r\
+    \n   :global LogPrint;\r\
+    \n   :global arrDeviceInfo;\r\
+    \n   :global devBoardName;\r\
+    \n   :global devModel;\r\
+    \n   :global devRunning;\r\
+    \n   :global devCurArch;\r\
+    \n   :global devRbRevision;\r\
+    \n   :global devRbSerialNumber;\r\
+    \n   :global devBuildTime;\r\
+    \n   :global runningChannelVersion;\r\
+    \n   :global runningChannel;\r\
+    \n   :global runningVersion;\r\
+    \n   :global currentUpdateChannel;\r\
+    \n   :global ROsVerAvail;\r\
+    \n\r\
+    \n   :local DeviceInfo;\r\
+    \n   :local Resource [/system/resource/get];\r\
+    \n   :local Update [ /system/package/update/get ];\r\
+    \n   :local VersionString [ :tostr (\$Resource->\"version\") ];\r\
+    \n   :local ChannelStart [ :find \$VersionString \" (\" ];\r\
+    \n   :local RouterBoard;\r\
+    \n   :local IsRouterBoard false;\r\
+    \n   :local RunningMode \"\";\r\
+    \n\r\
+    \n   :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\
+    \n   :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\
+    \n   :set runningChannelVersion \$VersionString;\r\
+    \n   :set runningVersion \$VersionString;\r\
+    \n   :set runningChannel \"\";\r\
+    \n\r\
+    \n   :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\
+    {\r\
+    \n     :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\
+    \n     :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\
+    len \$VersionString ] ];\r\
+    \n     :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\
+    \n     :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\
+    \r\
+    \n       :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\
+    \n     }\r\
+    \n   }\r\
+    \n\r\
+    \n   :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\
+    \_3] != \"x86\") do={\r\
+    \n   :do {\r\
+    \n      :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\
+    \n#     :set RouterBoard [ /system/routerboard/get ];\r\
+    \n      :if ((\$RouterBoard->\"routerboard\") = true) do={\r\
+    \n        :set IsRouterBoard true;\r\
+    \n     }\r\
+    \n   } on-error={}\r\
+    \n    }\r\
+    \n\r\
+    \n   :do {\r\
+    \n     :set RunningMode [ /system/device-mode/get mode ];\r\
+    \n   } on-error={\r\
+    \n     :do {\r\
+    \n       :set RunningMode [ /system/device-mode/get running ];\r\
+    \n     } on-error={\r\
+    \n       :set RunningMode \"\";\r\
+    \n     }\r\
+    \n   }\r\
+    \n   :set devRunning \$RunningMode;\r\
+    \n\r\
+    \n   :if (\$IsRouterBoard = true) do={\r\
+    \n     :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\
+    \n     :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\
+    \n     :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \
+    ];\r\
+    \n   } else={\r\
+    \n     :set devModel \$devBoardName;\r\
+    \n     :set devRbRevision \"\";\r\
+    \n     :set devRbSerialNumber \"\";\r\
+    \n   }\r\
+    \n\r\
+    \n   :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n   :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n\r\
+    \n   :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\
+    \n   :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\
+    \n   :set (\$DeviceInfo->\"model\") \$devModel;\r\
+    \n   :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\
+    \n   :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\
+    \n   :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\
+    \n   :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\
+    \n   :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\
+    ion;\r\
+    \n   :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\
+    \n   :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\
+    \n   :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\
+    \n   :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\
+    current-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\
+    upgrade-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\
+    \n   :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\
+    alled-version\") ];\r\
+    \n   :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\
+    \n   :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\
+    ) ];\r\
+    \n\r\
+    \n   :set arrDeviceInfo \$DeviceInfo;\r\
+    \n   :return \$DeviceInfo;\r\
+    \n}\r\
+    \n\r\
+    \n:set DeviceInfo do={\r\
+    \n  :global GetArrDeviceInfo;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global FormatLine;\r\
+    \n  :global CommitBrief;\r\
+    \n\r\
+    \n  :local License [/system/license/get];\r\
+    \n  :local Snmp [ /snmp/get ];\r\
+    \n  :local Info [ \$GetArrDeviceInfo ];\r\
+    \n\r\
+    \n  :if ([ :typeof \$Info ] != \"array\") do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :return ( \\\r\
+    \n    [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\
+    \_. \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\
+    \_\\\r\
+    \n    \"Hardware:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Board\" (\$Info->\"board-name\") ] . \"\\n\" . \
+    \\\r\
+    \n    [ \$FormatLine \"    Arch\" (\$Info->\"architecture-name\") ] . \"\\\
+    n\" . \\\r\
+    \n    [ \$FormatLine \"    Model\" (\$Info->\"model\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\
+    \n      (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Serial\" (\$Info->\"serial-number\") ] . \"\
+    \\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"nlevel\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS:\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"level\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    [ \$FormatLine \"    Channel\" (\$Info->\"package-channel\") ] . \"\
+    \\n\" . \\\r\
+    \n    [ \$FormatLine \"    Installed\" (\$Info->\"installed-version\") ] .\
+    \_\"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Running\" ((\$Info->\"running-version\") . \
+    \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\
+    \n      ([ \$FormatLine \"    Running\" (\$Info->\"running-version\") ] . \
+    \"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\
+    \n        (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\
+    \_\\\r\
+    \n      ([ \$FormatLine \"    Available\" (\$Info->\"latest-version\") ] .\
+    \_\"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\
+    \n        (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\
+    ) \\\r\
+    \n      ([ \$FormatLine \"    Firmware\" ((\$Info->\"current-firmware\") .\
+    \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS-Scripts:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Version\" \$GlobalConfVersion ]);\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\
+    tionFunctions ({})}\r\
+    \n\r\
+    \n:set GetRandom20CharAlNum do={\r\
+    \n  :global EitherOr;\r\
+    \n  :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\
+    FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\
+    \n}\r\
+    \n\r\
+    \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\
+    \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\
+    \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\
+    \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\
+    \n\r\
+    \n:global checkRunJob;\r\
+    \n:set checkRunJob do={\r\
+    \n  :local Script [ :tostr \$1 ];\r\
+    \n  :global ScriptLock; \r\
+    \n  :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\
+    \n  :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\
+    :set Job [ /system/script/job/get \$Job ];\r\
+    \n    :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\
+    stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\
+    \n     :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\
+    lse; \r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVar do={\r\
+    \n  :global InspectVarRet;\r\
+    \n  :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\
+    \n}\r\
+    \n\r\
+    \n:set CommitBrief do={\r\
+    \n  :global CommitId;\r\
+    \n  :global CommitInfo;\r\
+    \n  :if (\$CommitId = \"unknown\") do={\r\
+    \n    :return \"unknown\";\r\
+    \n    }\r\
+    \n  :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVarRet do={\r\
+    \n  :local Input \$1;\r\
+    \n  :local Level (0 + [ :tonum \$2 ]);\r\
+    \n  :global CharacterReplace;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global InspectVarRet;\r\
+    \n  :local IndentReturn do={\r\
+    \n    :local Prefix [ :tostr \$1 ];\r\
+    \n    :local Value  [ :tostr \$2 ];\r\
+    \n    :local Level  [ :tonum \$3 ];\r\
+    \n    :global CharacterMultiply;\r\
+    \n    :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\
+    fix . \"-> \" . \$Value);\r\
+    \n  }\r\
+    \n  :local TypeOf [ :typeof \$Input ];\r\
+    \n  :local Len    [ :len \$Input ];\r\
+    \n  :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\
+    \n  :if (\$TypeOf = \"array\") do={\r\
+    \n    :foreach Key,Value in=\$Input do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n        [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\
+    \n        [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    :if (\$TypeOf = \"str\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n         [ \$IndentReturn \"len\" \$Len \$Level ]);\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\
+    \n      }\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if (\$TypeOf != \"nothing\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n       [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\
+    \_\\\r\
+    \n        ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set GetPubIp do={\r\
+    \n    :global DetectIpAddrDefault;\r\
+    \n    :global DetectIpAddrFallback;\r\
+    \n\r\
+    \n    :local PubIpAddr false;\r\
+    \n    :local Url \$DetectIpAddrDefault;\r\
+    \n    :local JobName [ :jobname ];\r\
+    \n\r\
+    \n    :do {\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using default serv\
+    ice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \
+    detect public IP using default service: \" . \$Url . \".\")}\r\
+    \n     } on-error={\r\
+    \n      :log error (\$0 . \" Failed to detect public IP using default serv\
+    ice: \" . \$Url . \".\");\r\
+    \n      :set Url \$DetectIpAddrFallBack;\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using fallback ser\
+    vice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\
+    \_detect public IP using fallback service: \" . \$Url . \".\")}\r\
+    \n    };\r\
+    \n    :local IpLen ([ :len \$PubIpAddr ] -1);\r\
+    \n    :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\
+    {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\
+    \n    :return \$PubIpAddr;\r\
+    \n}\r\
+    \n\r\
+    \n:set FormatLine do={\r\
+    \n  :local Key    [ :tostr \$1 ];\r\
+    \n  :local Value  [ :tostr \$2 ];\r\
+    \n  :local Indent [ :tonum \$3 ];\r\
+    \n  :local Spaces;\r\
+    \n  :local Return \"\";\r\
+    \n  :global CharacterMultiply;\r\
+    \n  :global EitherOr;\r\
+    \n  :set Indent [ \$EitherOr \$Indent 16 ];\r\
+    \n  :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\
+    \n  :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\
+    \n  :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\
+    n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\
+    \n  } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \
+    \$Return ]) ] . \$Value)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseCustom do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Start [:find [ \$Str ] [:tostr \$2]];\r\
+    \n  :local End [ :tostr \$3 ];\r\
+    \n  :local Num [ :tonum \$4 ];\r\
+    \n  :local Return;\r\
+    \n  :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\
+    \n  :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\
+    \n  :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\
+    lse={\r\
+    \n  :set End [:find \$rest \$End];\r\
+    \n  :set Return [:pick \$rest 0 \$End];\r\
+    \n  }\r\
+    \n:return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set LogPrint do={\r\
+    \n  :local Severity [ :tostr \$1 ];\r\
+    \n  :local Name     [ :tostr \$2 ];\r\
+    \n  :local Message  [ :tostr \$3 ];\r\
+    \n  :global PrintDebug;\r\
+    \n  :global PrintDebugOverride;\r\
+    \n  :global EitherOr;\r\
+    \n  :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \
+    ];\r\
+    \n  :local PrintSeverity do={\r\
+    \n  :global TerminalColorOutput;\r\
+    \n   :if (\$TerminalColorOutput != true) do={:return \$1}\r\
+    \n   :local Color { debug=96; info=97; warning=93; error=91 };\r\
+    \n   :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\
+    \n}\r\
+    \n  :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\
+    \r\
+    \n  :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\
+    \n    :if (\$Severity = \"debug\") do={:log debug \$Log}\r\
+    \n    :if (\$Severity = \"error\") do={:log error \$Log}\r\
+    \n    :if (\$Severity = \"info\" ) do={:log info  \$Log}\r\
+    \n  } else={:log warning \$Log; :set Severity \"warning\"}\r\
+    \n  :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\
+    erity \$Severity ] . \": \" . \$Message)}\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateAvailable do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :local UseFor     [ :tostr \$2 ];\r\
+    \n\r\
+    \n  :global CertificateDownload;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n\r\
+    \n  :if ([ :len \$UseFor ] = 0) do={\r\
+    \n    :log warning (\$0 . \"The intended use is undefined!\");\r\
+    \n    :set UseFor \"undefined\";\r\
+    \n  }\r\
+    \n  :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\
+    \n       [ /certificate/settings/get crl-download ] = true && \\\r\
+    \n       [ /certificate/settings/get crl-store ] = \"system\") do={\r\
+    \n    :log warning (\$0 . \"This system has low free flash space but \" . \
+    \\\r\
+    \n      \"is configured to download certificate CRLs to system!\");\r\
+    \n  }\r\
+    \n  :if ([ :len \$CommonName ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No CommonName given!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\
+    \r\
+    \n        (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\
+    \n        (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n       [ :len [ /certificate/builtin/find where common-name=\$CommonName\
+    \_] ] > 0) do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \
+    \"' not available.\");\r\
+    \n    :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\
+    ) do={\r\
+    \n    :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\
+    \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\
+    e ] ];\r\
+    \n  :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\
+    ertVal->\"skid\")) do={\r\
+    \n    :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\
+    \_= 0) do={\r\
+    \n      :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\
+    >\"CN\");\r\
+    \n      :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \
+    is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\
+    \n      :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\
+    \") ] ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateDownload do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :global ScriptUpdatesBaseUrl;\r\
+    \n  :global ScriptUpdatesUrlSuffix;\r\
+    \n  :global CertificateNameByCN;\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :log info (\$0 . \"Downloading and importing certificate with \" . \\\
+    \r\
+    \n      \"CommonName '\" . \$CommonName . \"'.\");\r\
+    \n  :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\
+    \n  :do {\r\
+    \n    /tool/fetch check-certificate=yes-without-crl mode=https http-header\
+    -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\
+    sUrlSuffix) \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n    \$WaitForFile \$FileName;\r\
+    \n  } on-error={\r\
+    \n    :log warning (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \\\r\
+    \n      \"' from repository! Trying fallback to mkcert.org...\");\r\
+    \n    :do {\r\
+    \n      :local CertSettings [ /certificate/settings/get ];\r\
+    \n      :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\
+    \_] ] = 0 && \\\r\
+    \n           !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \
+    || \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \
+    \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\
+    \r\
+    \n             [ :len [ /certificate/builtin/find where common-name=\"ISRG\
+    \_Root X1\" ] ] > 0)) do={\r\
+    \n        :log error (\$0 . \" Required certificate is not available.\");\
+    \r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n      /tool/fetch check-certificate=yes-without-crl mode=https http-head\
+    er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\
+    n ({ \$CommonName }) ] \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n      \$WaitForFile \$FileName;\r\
+    \n      :if ([ /file/get \$FileName size ] = 0) do={\r\
+    \n        \$RmFile \$FileName;\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n    } on-error={\r\
+    \n      :log error (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \"'!\");\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\
+    \n  :delay 1s;\r\
+    \n  \$RmFile \$FileName;\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\
+    +\\\$\") ];\r\
+    \n    :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\
+    e . \"' still unavailable!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \
+    \"_[0-9]+\\\$\") ] do={\r\
+    \n    \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateNameByCN do={\r\
+    \n  :local Match [ :tostr \$1 ];\r\
+    \n  :global CleanName;\r\
+    \n  :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\
+    rint=\$Match or name=\$Match) ]->0);\r\
+    \n  :if ([ :len \$Cert ] = 0) do={\r\
+    \n    :log warning (\$0 .\" No matching certificate found.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CommonName [ /certificate/get \$Cert common-name ];\r\
+    \n  /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileExists do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :local Type     [ :tostr \$2 ];\r\
+    \n  :global FileGet;\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={ :return false; }\r\
+    \n  :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\
+    \n  :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\
+    \_true; }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set Grep do={\r\
+    \n  :local Input  ([ :tostr \$1 ] . \"\\n\");\r\
+    \n  :local Pattern [ :tostr \$2 ];\r\
+    \n  :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\
+    }\r\
+    \n  :do {\r\
+    \n    :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\
+    \n    :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \
+    \$Line}\r\
+    \n    :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\
+    Input ] ];\r\
+    \n  } while=([ :len \$Input ] > 0);\r\
+    \n  :return [];\r\
+    \n}\r\
+    \n\r\
+    \n:set HumanReadableNum do={\r\
+    \n  :local Input [ :tonum \$1 ];\r\
+    \n  :local Base  [ :tonum \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Prefix \"kMGTPE\";\r\
+    \n  :local Pow 1;\r\
+    \n  :set Base [ \$EitherOr \$Base 1024 ];\r\
+    \n  :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\
+    \n  :if (\$Input < \$Base) do={:return \$Input}\r\
+    \n  :for I from=0 to=[ :len \$Prefix ] do={\r\
+    \n    :set Pow (\$Pow * \$Base);\r\
+    \n    :if (\$Input / \$Base < \$Pow) do={\r\
+    \n      :set Prefix [ :pick \$Prefix \$I ];\r\
+    \n      :local Tmp1 (\$Input * 100 / \$Pow);\r\
+    \n      :local Tmp2 (\$Tmp1 / 100);\r\
+    \n      :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\
+    \n      :return (\$Tmp2 . \".\" . \\\r\
+    \n          [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\
+    2 ] + 1) ] . \\\r\
+    \n          \$Prefix . \$Bin);\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanFilePath do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CharacterReplace;\r\
+    \n  :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \
+    \"//\" \"/\" ]; }\r\
+    \n  :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\
+    n \$Path ] ]; }\r\
+    \n  :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \
+    :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\
+    \n  :return \$Path;\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanName do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\
+    stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\
+    \n      :do {:if ([ :len \$Return ] = 0) do={:error true};\r\
+    \n        :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\
+    ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\
+    \n    };\r\
+    \n    :set Return (\$Return . \$Char)};\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set RandomDelay do={\r\
+    \n  :local Time [ :tonum \$1 ];\r\
+    \n  :local Unit [ :tostr \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global GetRandomNumber;\r\
+    \n  :global MAX;\r\
+    \n  :if (\$Time = 0) do={:return false}\r\
+    \n  :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \
+    [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\
+    \n}\r\
+    \n\r\
+    \n:set EscapeForRegEx do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitError do={\r\
+    \n  :local ExitOK [ :tostr \$1 ];\r\
+    \n  :local Name   [ :tostr \$2 ];\r\
+    \n  :local Error  [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$ExitOK = \"false\") do={\r\
+    \n    :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \
+    \\\r\
+    \n        \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\
+    ror\" . \\\r\
+    \n        [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \
+    \$Error) \".\" ]);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitOnError do={\r\
+    \n  :local Name   [ :tostr \$1 ];\r\
+    \n  :local Error  [ :tostr \$2 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\
+    \\\$\") \\\r\
+    \n      \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\
+    r\" . \\\r\
+    \n      [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\
+    rror) \".\" ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set MiniDateTimeStamp do={\r\
+    \n    :local mikro [ :tobool \$1 ];\r\
+    \n    /system/clock;\r\
+    \n    :local vdate [get date];\r\
+    \n    :local vtime [get time];\r\
+    \n    :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\
+    \n    :local MM    [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\
+    \n    :local M     [:tonum \$MM];\r\
+    \n    :if (\$vdate ~ \".../../....\") do={\r\
+    \n        :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\
+    \n        :set M     ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\
+    PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\
+    \n        :if (\$M>12) do={:set M (\$M - 12)}\r\
+    \n        :set MM    [:pick (100 + \$M) 1 3];\r\
+    \n    }\r\
+    \n    :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\
+    \n    :local dd   [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\
+    \n    :local HH   [:pick \$vtime 0  2];\r\
+    \n    :local mm   [:pick \$vtime 3  5];\r\
+    \n    :local ss   [:pick \$vtime 6  8];\r\
+    \n    :local Return;\r\
+    \n    :if (\$mikro = true) do={\r\
+    \n      :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\
+    \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\
+    \n    } else={\r\
+    \n    :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\
+    \r\
+    \n   }\r\
+    \n   :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitForFile do={\r\
+    \n  :local FileName [ :tostr  \$1 ];\r\
+    \n  :local WaitTime [ :totime \$2 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global EitherOr;\r\
+    \n  :global MAX;\r\
+    \n  :set FileName [ \$CleanFilePath \$FileName ];\r\
+    \n  :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } delay=\$Delay max=10;\r\
+    \n  } on-error={ }\r\
+    \n  :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\
+    \n    :do {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } on-error={ }\r\
+    \n    :delay \$Delay;\r\
+    \n    :set Delay (\$Delay * 3 / 2);\r\
+    \n  }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileGet do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global WaitForFile;\r\
+    \n  :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FileVal false;\r\
+    \n  :do {\r\
+    \n    :set FileVal [ /file/get \$FileName ];\r\
+    \n   } on-error={ }\r\
+    \n  :return \$FileVal;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmDir do={\r\
+    \n  :local DirName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing directory: \". \$DirName);\r\
+    \n  :local DirVal [ \$FileGet \$DirName ];\r\
+    \n  :if (\$DirVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  };\r\
+    \n  :if (\$DirVal->\"type\" != \"directory\") do={\r\
+    \n    :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\
+    ory.\");\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$DirName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\
+    : \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmFile do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing file: \". \$FileName);\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\
+    sk\") do={\r\
+    \n    :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\
+    \r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$FileName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\
+    \_. \$Err); :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MkDir do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global FileGet;\r\
+    \n  :global RmDir;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :local MkTmpfs do={\r\
+    \n   :global WaitForFile;\r\
+    \n   :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n   :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n     :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n       :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\
+    \n       /disk/enable \$TmpFs;\r\
+    \n      }\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :log info (\$0 . \" Creating disk of type tmpfs.\");\r\
+    \n    \$RmDir \"tmpfs\";\r\
+    \n    :onerror Err {\r\
+    \n      /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\
+    /get total-memory ] / 3);\r\
+    \n      \$WaitForFile \"tmpfs\";\r\
+    \n    } do={\r\
+    \n      :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\
+    Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :set Path [ \$CleanFilePath \$Path ];\r\
+    \n  :if (\$Path = \"\") do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log debug (\$0 . \" Making directory: \" . \$Path);\r\
+    \n  :local PathVal [ \$FileGet \$Path ];\r\
+    \n  :if (\$PathVal->\"type\" = \"directory\") do={\r\
+    \n    :log debug (\$0 . \" ... which already exists.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/add type=\"directory\" name=\$Path;\r\
+    \n    \$WaitForFile \$Path;\r\
+    \n  } do={\r\
+    \n    :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \
+    \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterReplace do={\r\
+    \n  :local String [ :tostr \$1 ];\r\
+    \n  :local ReplaceFrom [ :tostr \$2 ];\r\
+    \n  :local ReplaceWith [ :tostr \$3 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :if (\$ReplaceFrom = \"\") do={:return \$String}\r\
+    \n  :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\
+    \r\
+    \n    :local Pos [ :find \$String \$ReplaceFrom ];\r\
+    \n    :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\
+    \r\
+    \n    :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\
+    \_\$String ] ];\r\
+    \n  }\r\
+    \n  :return (\$Return . \$String);\r\
+    \n}\r\
+    \n\r\
+    \n:set IfThenElse do={\r\
+    \n  :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \
+    \$2};\r\
+    \n  :return \$3;\r\
+    \n}\r\
+    \n\r\
+    \n:set EitherOr do={\r\
+    \n  :global IfThenElse;\r\
+    \n  :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \
+    \$1 \$2 ]}\r\
+    \n  :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\
+    \_\$1 \$2 ]}\r\
+    \n# this works for boolean values, literal ones with parentheses\r\
+    \n  :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseKeyValueStore do={\r\
+    \n  :local Source \$1;\r\
+    \n  :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\
+    \n    :do {\r\
+    \n      :return [ :deserialize from=json \$Source ];\r\
+    \n    } on-error={ }\r\
+    \n  }   \r\
+    \n  :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\
+    }\r\
+    \n  :local Result ({});\r\
+    \n  :foreach KeyValue in=[ :toarray \$Source ] do={\r\
+    \n    :if ([ :find \$KeyValue \"=\" ]) do={\r\
+    \n      :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\
+    \n      :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\
+    \_:len \$KeyValue ] ];\r\
+    \n      :if (\$Value=\"true\") do={:set Value true}\r\
+    \n      :if (\$Value=\"false\") do={:set Value false}\r\
+    \n      :set (\$Result->\$Key) \$Value;\r\
+    \n      } else={:set (\$Result->\$KeyValue) true}\r\
+    \n  }\r\
+    \n  :return \$Result;\r\
+    \n}\r\
+    \n:set RequiredRouterOS do={\r\
+    \n  :local Caller   [ :tostr \$1 ];\r\
+    \n  :local Required [ :tostr \$2 ];\r\
+    \n  :local Warn     [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :global VersionToNum;\r\
+    \n  :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\
+    \\\$\")) do={\r\
+    \n    :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\
+    e/update/get installed-version ] ]) do={\r\
+    \n    :if (\$Warn = \"true\") do={\r\
+    \n      :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \
+    0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\
+    \n        \" '\" . \$Caller . \"' (at least specific functionality) requir\
+    es RouterOS \" . \$Required . \". Please update!\");\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set ValidateSyntax do={\r\
+    \n  :local Code [ :tostr \$1 ];\r\
+    \n  :global LogPrint;\r\
+    \n  :onerror Err {\r\
+    \n    [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\
+    \n  } do={\r\
+    \n    \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set VersionToNum do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Multi 0x1000000;\r\
+    \n  :local Return 0;\r\
+    \n  :global CharacterReplace;\r\
+    \n  :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\
+    \n  :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\
+    \n    :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\
+    \r\
+    \n  }\r\
+    \n  :foreach Value in=([ :toarray \$Input ], 0) do={\r\
+    \n    :local Num [ :tonum \$Value ];\r\
+    \n    :if (\$Multi = 0x100) do={\r\
+    \n      :if ([ :typeof \$Num ] = \"num\") do={\r\
+    \n        :set Return (\$Return + 0xff00);\r\
+    \n        :set Multi (\$Multi / 0x100);\r\
+    \n      } else={\r\
+    \n        :if (\$Value = \"zero\") do={ }\r\
+    \n        :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \
+    }\r\
+    \n        :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\
+    \r\
+    \n        :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\
+    lue * \$Multi)); }\r\
+    \n    :set Multi (\$Multi / 0x100);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptLock do={\r\
+    \n  :local Script  [ :tostr  \$1 ];\r\
+    \n  :local WaitMax [ :totime \$2 ];\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global ScriptLockOrder;\r\
+    \n  :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\
+    \n    :set ScriptLockOrder ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :local JobCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :return [ :len [ /system/script/job/find where script=\$Script ] ];\
+    \r\
+    \n  }\r\
+    \n  :local TicketCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :local Count 0;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \
+    + 1)}\r\
+    \n    }\r\
+    \n    :return \$Count;\r\
+    \n  }\r\
+    \n  :local IsFirstTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Check  [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if (\$Ticket = \$Check) do={:return true}\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\
+    o={:return false}\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local AddTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Add    [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :while (true) do={\r\
+    \n      :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\
+    \n      :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\
+    \n      :delay 10ms;\r\
+    \n      :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\
+    e}\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local RemoveTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Remove [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\
+    \n        :set (\$ScriptLockOrder->\$Script->\$Id);\r\
+    \n        :delay 10ms;\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local CleanupTickets do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\
+    \n    }\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\
+    \n  :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\
+    \n    :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\
+    ist!\");\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$JobCount \$Script ] = 0) do={\r\
+    \n    \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\
+    );\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\
+    \n    :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\
+    t . \"', resetting!\");\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n    /system/script/job/remove [ find where script=\$Script ];\r\
+    \n  }\r\
+    \n  :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\
+    \n  \$AddTicket \$Script \$MyTicket;\r\
+    \n  :local WaitInterval (\$WaitMax / 20);\r\
+    \n  :local WaitTime \$WaitMax;\r\
+    \n  :while (\$WaitTime > 0 && \\\r\
+    \n      ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\
+    \n      [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\
+    \n    :set WaitTime (\$WaitTime - \$WaitInterval);\r\
+    \n    :delay \$WaitInterval;\r\
+    \n  }\r\
+    \n  :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\
+    \n      [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\
+    \n    \$RemoveTicket \$Script \$MyTicket;\r\
+    \n    \$CleanupTickets \$Script;\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  \$RemoveTicket \$Script \$MyTicket;\r\
+    \n  \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \
+    once\" . \\\r\
+    \n    [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\
+    \_lock\" \"\" ] . \"...\");\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification do={ :onerror Err {\r\
+    \n  :global SendNotification2;\r\
+    \n  \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\
+    \_silent=\$4 });\r\
+    \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification2 do={\r\
+    \n  :local Notification \$1;\r\
+    \n  :global NotificationFunctions;\r\
+    \n  :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\
+    \n    (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\
+    ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolByUnicodeName do={\r\
+    \n  :local Name [ :tostr \$1 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global SymbolsExtra;\r\
+    \n  :local Symbols ({\r\
+    \n    \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\
+    \n    \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\
+    \n    \"arrow-down\"=\"\\E2\\AC\\87\";\r\
+    \n    \"arrow-up\"=\"\\E2\\AC\\86\";\r\
+    \n    \"calendar\"=\"\\F0\\9F\\93\\85\";\r\
+    \n    \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\
+    \n    \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\
+    \n    \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\
+    \n    \"cloud\"=\"\\E2\\98\\81\";\r\
+    \n    \"cross-mark\"=\"\\E2\\9D\\8C\";\r\
+    \n    \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\
+    \n    \"fire\"=\"\\F0\\9F\\94\\A5\";\r\
+    \n    \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\
+    \n    \"gear\"=\"\\E2\\9A\\99\";\r\
+    \n    \"heart\"=\"\\E2\\99\\A5\";\r\
+    \n    \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\
+    \n    \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\
+    \n    \"information\"=\"\\E2\\84\\B9\";\r\
+    \n    \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\
+    \n    \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\
+    \n    \"link\"=\"\\F0\\9F\\94\\97\";\r\
+    \n    \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\
+    \n    \"memo\"=\"\\F0\\9F\\93\\9D\";\r\
+    \n    \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\
+    \n    \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\
+    \n    \"scissors\"=\"\\E2\\9C\\82\";\r\
+    \n    \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\
+    \n    \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\
+    \n    \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\
+    \n    \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\
+    \n    \"sparkles\"=\"\\E2\\9C\\A8\";\r\
+    \n    \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\
+    \n    \"star\"=\"\\E2\\AD\\90\";\r\
+    \n    \"warning-sign\"=\"\\E2\\9A\\A0\";\r\
+    \n    \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\
+    \n  }, \$SymbolsExtra);\r\
+    \n  :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\
+    \n  :local Special {\r\
+    \n    \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\
+    \n    \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\
+    \n    \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\
+    \n    \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\
+    \n  :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\
+    '!\");\r\
+    \n    :return \"\";\r\
+    \n  }\r\
+    \n  :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\
+    me) ] . \"\\EF\\B8\\8F\");\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolForNotification do={\r\
+    \n  :global NotificationsWithSymbols;\r\
+    \n  :global SymbolByUnicodeName;\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\
+    \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\
+    \n  :local Return \"\";\r\
+    \n  :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\
+    mbolByUnicodeName \$Symbol ])}\r\
+    \n  :return (\$Return . \" \");\r\
+    \n}\r\
+    \n\r\
+    \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\
+    \n:set UrlEncode do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\
+    \n  :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\
+    %24\"; \"%25\"; \"%26\"; \"%27\";\r\
+    \n         \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \
+    \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\
+    \n         \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \
+    \"%7C\"; \"%7D\"; \"%7E\" };\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :local Replace [ :find \$Chars \$Char ];\r\
+    \n    :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\
+    ce)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsDNSResolving do={\r\
+    \n  :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsFullyConnected do={\r\
+    \n  :global IsDNSResolving;\r\
+    \n  :global IsTimeSync;\r\
+    \n  :if ([ \$IsDNSResolving ] = false) do={:return false};\r\
+    \n  :if ([ \$IsTimeSync ] = false) do={:return false};\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsTimeSync do={\r\
+    \n  :global IsTimeSyncCached;\r\
+    \n  :global IsTimeSyncResetNtp;\r\
+    \n  :if (\$IsTimeSyncCached = true) do={:return true}\r\
+    \n  :if ([ /system/ntp/client/get enabled ] = true) do={\r\
+    \n    :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :local Uptime [ /system/resource/get uptime ];\r\
+    \n    :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\
+    \n      :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    }\r\
+    \n    :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\
+    \n    :log warning \"\$0 The ntp client is configured, but did not sync.\"\
+    ;\r\
+    \n    :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    /system/ntp/client/set enabled=no;\r\
+    \n    :delay 20ms;\r\
+    \n    /system/ntp/client/set enabled=yes;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\
+    \n       [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\
+    \n    :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\
+    ee license and x86.\";\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ /ip/cloud/get update-time ] = true) do={\r\
+    \n    :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :log debug \"\$0 No time source configured! Returning gracefully...\";\
+    \r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchHugeFiles do={\r\
+    \n  :local ScriptName [ :tostr \$1 ];\r\
+    \n  :local Url        [ :tostr \$2 ];\r\
+    \n  :local CheckCert  [ :tostr \$3 ];\r\
+    \n\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global MkDir;\r\
+    \n  :global RmDir;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\
+    ithout-crl\" ];\r\
+    \n\r\
+    \n  :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\
+    \n  :if ([ \$MkDir \$DirName ] = false) do={\r\
+    \n    \$LogPrint error \$0 (\"Failed creating directory!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \
+    \$GetRandom20CharAlNum ]);\r\
+    \n  :onerror Err {\r\
+    \n    /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \
+    \\\r\
+    \n      http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\
+    lue;\r\
+    \n  } do={\r\
+    \n    :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\
+    \n      \$RmFile \$FileName;\r\
+    \n    }\r\
+    \n    \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\
+    \_. \$Err);\r\
+    \n    \$RmDir \$DirName;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\
+    \n    \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\
+    \_not show up.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileSize [ /file/get \$FileName size ];\r\
+    \n  :local Return \"\";\r\
+    \n  :local VarSize 0;\r\
+    \n  :while (\$VarSize != \$FileSize) do={\r\
+    \n    :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\
+    768 file=\$FileName as-value ]->\"data\"));\r\
+    \n    :set FileSize [ /file/get \$FileName size ];\r\
+    \n    :set VarSize [ :len \$Return ];\r\
+    \n    :if (\$VarSize > \$FileSize) do={\r\
+    \n      :delay 100ms;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  \$RmDir \$DirName;\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchUserAgentStr do={\r\
+    \n  :local Caller [ :tostr \$1 ];\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global CommitBrief;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Resource [ /system/resource/get ];\r\
+    \n  :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\
+    \_\$Resource->\"architecture-name\" . \\\r\
+    \n    \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\
+    CommitBrief ] . \")\");\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptInstallUpdate do={ :onerror Err {\r\
+    \n  :local Scripts    [ :toarray \$1 ];\r\
+    \n  :local NewComment [ :tostr   \$2 ];\r\
+    \n  :global InitSetup;\r\
+    \n\r\
+    \n  :global CommitId;\r\
+    \n  :global ScriptUpdatesCRLF;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global CheckSumsVerify;\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SumsDirAndFileName;\r\
+    \n  :global GlobalScriptsUrlSuffix;\r\
+    \n  :global EitherOr;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global Grep;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n  :global RequiredRouterOS;\r\
+    \n  :global SendNotification2;\r\
+    \n  :global SymbolForNotification;\r\
+    \n  :global ValidateSyntax;\r\
+    \n  :global CommentsInScripts;\r\
+    \n\r\
+    \n  :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\
+    hout.\");\r\
+    \n  }\r\
+    \n\r\
+    \n  :foreach Script in=\$Scripts do={\r\
+    \n    :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\
+    \r\
+    \n      \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\
+    \n      /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \
+    Vados\\n\" comment=\$NewComment;\r\
+    \n    }\r\
+    \n  }\r\
+    \n\r\
+    \n  :local CommitIdBefore \$CommitId;\r\
+    \n  :local GlobalConfVersionBefore \$GlobalConfVersion;\r\
+    \n  :local ReloadGlobal false;\r\
+    \n  :local DeviceMode [ /system/device-mode/get ];\r\
+    \n\r\
+    \n  :if (\$CheckSumsVerify = true) do={\r\
+    \n    :local CheckSums ({});\r\
+    \n     :do {\r\
+    \n     :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\
+    iptsUrlSuffix);\r\
+    \n      \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\
+    \r\
+    \n      :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\
+    ficate=yes-without-crl \\\r\
+    \n        http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\
+    =user as-value ]->\"data\") ];\r\
+    \n    } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\
+    \n    }\r\
+    \n\r\
+    \n  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\
+    s\" ] do={\r\
+    \n    :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n    :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \
+    ];\r\
+    \n    :local SourceNew;\r\
+    \n\r\
+    \n    :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\
+    \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\
+    \n      :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\
+    \n      :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\
+    iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \
+    \"'!\");\r\
+    \n        }\r\
+    \n    }\r\
+    \n    :do {\r\
+    \n      :if (\$ScriptInfo->\"ignore\" = true) do={\r\
+    \n        \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\
+    e\" . \"', as requested.\");\r\
+    \n        :error true;\r\
+    \n      }\r\
+    \n      :if (\$CheckSumsVerify = true) do={\r\
+    \n        :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\
+    \n        :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\
+    ptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n             [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\
+    rce\") ] ] = \$CheckSum) do={\r\
+    \n          \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\
+    >\"name\" . \"' matches, ignoring.\");\r\
+    \n          :error true;\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\
+    \n        :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\
+    fetch\" ] = false) do={\r\
+    \n          \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\
+    ng without.\");\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :onerror Err {\r\
+    \n        :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\
+    lScriptsUrl ];\r\
+    \n        :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\
+    lobalScriptsUrlSuffix ];\r\
+    \n        :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\
+    Suffix);\r\
+    \n        \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\
+    name\") . \"' from url: \" . \$Url);\r\
+    \n        :local Result [ /tool/fetch check-certificate=yes-without-crl \\\
+    \r\
+    \n          http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\
+    ut=user as-value ];\r\
+    \n        :if (\$Result->\"status\" = \"finished\") do={\r\
+    \n          :set SourceNew [ :tolf (\$Result->\"data\") ];\r\
+    \n        } \r\
+    \n      } do={\r\
+    \n        \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\
+    al->\"name\" . \"': \" . \$Err);\r\
+    \n        :if (\$Err != \"Fetch failed with status 404\") do={\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\
+    \n          \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\
+    \?\");\r\
+    \n          /system/script/remove \$Script;\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$CheckSumsVerify = true) do={\r\
+    \n          :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\
+    riptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n               [ :len \$CheckSum ] = 0) do={\r\
+    \n            \$LogPrint warning \$0 (\"Added the script manually\? Skip u\
+    pdates with 'ignore=true' in comment.\");\r\
+    \n          }\r\
+    \n        }\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :len \$SourceNew ] = 0) do={\r\
+    \n        \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\
+    >\"name\") . \"'.\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :local SourceCRLF [ :tocrlf \$SourceNew ];\r\
+    \n      :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\
+    lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\
+    \n        :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\
+    \$ScriptVal->\"source\")) do={\r\
+    \n          \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\") \
+    . \"' source did not change. End of lines set to CRLF.\");\r\
+    \n          if (\$ScriptUpdatesCRLF = false) do={\r\
+    \n            :put [ :tolf \$SourceNew ];\r\
+    \n            \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\"\
+    ) . \"' source update end of lines to LF.\");\r\
+    \n          }\r\
+    \n        :error false;\r\
+    \n        }\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\
+    l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\
+    );\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if (\$CommentsInScripts = true) do={\r\
+    \n         :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\
+    \_\") ];\r\
+    \n         :if ([ :len \$CommentLine ] = 0) do={\r\
+    \n           \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\
+    iptVal->\"name\") . \"' for comment in script body, is not found result Ig\
+    noring!\");\r\
+    \n           :error false;\r\
+    \n         } else={\r\
+    \n           :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\
+    ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\
+    ] + 2) [ :len \$CommentLine] ]) do={\r\
+    \n             \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\
+    \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\
+    ;\r\
+    \n             :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\
+    ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\
+    \n             \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\
+    omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\
+    ded!\");\r\
+    \n           } else={\r\
+    \n             \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\
+    al->\"name\") . \"' did not change.\");\r\
+    \n             :error false;\r\
+    \n           }\r\
+    \n         }   \r\
+    \n      }\r\
+    \n\r\
+    \n      :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\
+    \"\\23 requires RouterOS, \") ] ]->version);\r\
+    \n      :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\
+    \_false ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires RouterOS \" . \\\r\
+    \n            \$RequiredROS . \", which is not met by your installation. I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\
+    \\23 requires device-mode, \") ] ];\r\
+    \n      :local MissingDM ({});\r\
+    \n      :foreach Feature,Value in=\$RequiredDM do={\r\
+    \n        :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\
+    ceMode->\$Feature) = false) do={\r\
+    \n          :set MissingDM (\$MissingDM, \$Feature);\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len \$MissingDM ] > 0) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires disabled \" . \\\r\
+    \n            \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\
+    ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      \r\
+    \n      :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\
+    ript comment: \" . (\$ScriptVal->\"comment\"));\r\
+    \n\r\
+    \n      /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\
+    Val->\"comment\") \\\r\
+    \n          source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\
+    F \$SourceNew ] \$Script;\r\
+    \n      :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\
+    \n           \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\
+    \n           \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\
+    o={\r\
+    \n        :set ReloadGlobal true;\r\
+    \n      }\r\
+    \n    } on-error={ }\r\
+    \n  }\r\
+    \n  :if (\$ReloadGlobal = true) do={\r\
+    \n    \$LogPrint info \$0 (\"Reloading global configuration and functions.\
+    \");\r\
+    \n    :onerror Err {\r\
+    \n      :global InitSetup (a);\r\
+    \n      /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\
+    \n    } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\
+    ctions failed! \" . \$Err)}\r\
+    \n  }\r\
+    \n  :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\
+    \n    \$LogPrint warning \$0 (\"The configuration version decreased from \
+    \" . \\\r\
+    \n      \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\
+    \n      \". Installed an older version\?\");\r\
+    \n  }\r\
+    \n    :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\
+    \n    :global GlobalConfChanges;\r\
+    \n    :global GlobalConfMigration;\r\
+    \n    :local ChangeLogCode;\r\
+    \n    :if ([ :len \$ChangeLogCode ] > 0) do={\r\
+    \n      :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\
+    \n        :onerror Err {\r\
+    \n          [ :parse \$ChangeLogCode ];\r\
+    \n        } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \
+    . \$Err)}\r\
+    \n      } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\
+    dation!\")}\r\
+    \n    }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\
+    \n        :do {\r\
+    \n          :if ([ :typeof \$Migration ] != \"str\") do={\r\
+    \n            \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\
+    \_\" is not available.\");\r\
+    \n            :error false;\r\
+    \n          }\r\
+    \n          :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\
+    \n            \$LogPrint warning \$0 (\"Migration code for change \" . \$I\
+    \_. \" failed syntax validation!\");\r\
+    \n            :error false}\r\
+    \n          \$LogPrint info \$0 (\"Applying migration for change \" . \$I \
+    . \": \" . \$Migration);\r\
+    \n          :onerror Err {\r\
+    \n            [ :parse \$Migration ];\r\
+    \n          } do={\$LogPrint warning \$0 (\"Migration code for change \" .\
+    \_\$I . \" failed to run: \" . \$Err)}\r\
+    \n        } on-error={ }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :local NotificationMessage (\"The configuration version on \" . \$Id\
+    entity . \" increased \" . \\\r\
+    \n       \"to \" . \$GlobalConfVersion . \", current configuration may nee\
+    d modification. \" . \\\r\
+    \n       \"Please review and update global-config-overlay, then re-run glo\
+    bal-config.\");\r\
+    \n    \$LogPrint info \$0 (\$NotificationMessage);\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\
+    \");\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\
+    \n        :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\
+    \r\
+    \n            [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\
+    \n        \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\
+    \n      }\r\
+    \n    } else={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\
+    \_changes are not available.\");\r\
+    \n\r\
+    \n      }\r\
+    \n\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \
+    } else={ :global GlobalConfChanges (a); }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\
+    on; } else={ :global GlobalConfMigration (a); }\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n\r\
+    \n# load modules\r\
+    \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\
+    ns\\\\.d|mod)/.\" ] do={\r\
+    \n  :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n  :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\
+    \n    :onerror Err {\r\
+    \n      /system/script/run \$Script;\r\
+    \n    } do={\r\
+    \n      \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\
+    ailed to run: \" . \$Err);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\
+    led syntax validation, skipping.\");\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# Add and fix global scheduler\r\
+    \n:put \"Add or/and fix Global scheduler...\";\r\
+    \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\
+    ; }\";\r\
+    \n:local Comment \"Every Day Set Global Environment Variables\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \
+    = 0) do={\r\
+    \n  /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\
+    ent=\$OnEvent start-time=startup;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\
+    \_do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\
+    ) do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\
+    \n}\r\
+    \n# Add Update Script scheduler\r\
+    \n:put \"Add or/and fix Update Script scheduler\";\r\
+    \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\
+    \r\
+    \n:set Comment \"Every Day Check For Update Scripts\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\
+    \" ] ] = 0) do={\r\
+    \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \
+    start-time=startup interval=1d on-event=\$OnEvent;\r\
+    \n}\r\
+    \n\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\
+    \_not ready.\"); }; } delay=100ms max=5;\r\
+    \n\r\
+    \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\
+    \n    [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \
+    \") ] . \\\r\
+    \n    \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\
+    \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\
+    \n    # signal we are ready\r\
+    \n:set GlobalFuncReady true;\r\
+    \n:set ExitOK true;\r\
+    \n\r\
+    \n:log info (\$0 . \"Global configs ready!\");\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n}\r\
+    \n"
+add comment=\
+    "Lookup IP addresses for RKN list and add them to firewall address-list" \
+    dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="#!rsc by Vados\r\
+    \n# RouterOS script: AM-RKN-dnsLookup\r\
+    \n# Script comment: Lookup IP addresses for RKN list and add them to firew\
+    all address-list\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n# Script description: This script is intended to be run periodically, e.\
+    g. once a day, to update the IP addresses in the firewall address-list bas\
+    ed on the RKN list.\r\
+    \n#                     It resolves the domain names in the RKN list and a\
+    dds the corresponding IP addresses to the specified firewall address-list.\
+    \r\
+    \n#                     The script also handles CNAME records by following\
+    \_them until it finds A records.\r\
+    \n# Usage:\r\
+    \n# /system/script { run AM-RKN-dnsLookup; }\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n\r\
+    \n:global dnsLookupReady false;\r\
+    \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\
+    \_true; }\r\
+    \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\
+    \n:set dnsLookupReady false;\r\
+    \n\r\
+    \n:local arrRKN {\r\
+    \n  \"telegra.ph\"\r\
+    \n  \"grani.ru\"\r\
+    \n  \"xhamster.com\"\r\
+    \n  \"lostfilm.tv\"\r\
+    \n  \"rutracker.org\"\r\
+    \n  \"lurkmore.to\"\r\
+    \n  \"dou.ua\"\r\
+    \n  \"youporn.com\"\r\
+    \n  \"pornolab.net\"\r\
+    \n  \"crimerussia.com\"\r\
+    \n  \"telegram.org\"\r\
+    \n  \"api.telegram.org\"\r\
+    \n  \"facebook.com\"\r\
+    \n  \"instagram.com\"\r\
+    \n  \"x.com\"\r\
+    \n  \"twitter.com\"\r\
+    \n  \"youtube.com\"\r\
+    \n  \"googleapis.com\"\r\
+    \n  \"youtu.be\"\r\
+    \n  \"googlevideo.com\"\r\
+    \n  \"gstatic.com\"\r\
+    \n  \"googleusercontent.com\"\r\
+    \n  \"nhacmp3youtube.com\"\r\
+    \n  \"telegram.me\"\r\
+    \n  \"t.me\";}\r\
+    \n\r\
+    \n:local ListRKN \"RKN-dnsLookup\";\r\
+    \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\
+    \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\
+    ={\r\
+    \n    /ip firewall address-list remove \$aListItem;\r\
+    \n}\r\
+    \n:foreach aItem in=\$arrRKN do={\r\
+    \n#    :do {\r\
+    \n        :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\
+    ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\
+    \n#    } on-error={\r\
+    \n#        :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\
+    \n#    }\r\
+    \n    :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \
+    do={\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\
+    \n            :local newAddress [/ip dns cache all get \$dnsRecord data];\
+    \r\
+    \n            :do {\r\
+    \n             /ip firewall address-list add list=\$ListRKN address=\$newA\
+    ddress comment=\$aItem;\r\
+    \n                :log warning \"Successfully adding ip to list A record: \
+    \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            } on-error={\r\
+    \n                :log error \"error when adding ip to list A record: \$dn\
+    sRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            }\r\
+    \n        }\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\
+    \n            :local cname;\r\
+    \n            :local nextCname;\r\
+    \n            :local cnameAddress;\r\
+    \n            :set cname [/ip dns cache all find where (name=\$aItem && ty\
+    pe=\"CNAME\")];\r\
+    \n            :set nextCname [/ip dns cache all find where (name=[/ip dns \
+    cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            :while (\$nextCname != \"\") do={\r\
+    \n                :set cname \$nextCname;\r\
+    \n                :set nextCname [/ip dns cache all find where (name=[/ip \
+    dns cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            }\r\
+    \n            :foreach aRecord in=[/ip dns cache all find where (name=[/ip\
+    \_dns cache all get \$cname data] && type=\"A\")] do={\r\
+    \n                :do {\r\
+    \n                    :set cnameAddress [/ip dns cache all get \$aRecord d\
+    ata];\r\
+    \n                    /ip firewall address-list add list=\$ListRKN address\
+    =\$cnameAddress comment=\$aItem;\r\
+    \n                    :log warning \"Succesfully adding ip to list CNAME r\
+    ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \
+    \$aItem.\";\r\
+    \n#                    /ip firewall raw add action=add-dst-to-address-list\
+    \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\
+    g comment=\$aItem content=\$aItem;\r\
+    \n                } on-error={\r\
+    \n                    :log error \"error when adding ip to list CNAME reco\
+    rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\
+    tem.\";\r\
+    \n                }\r\
+    \n            }\r\
+    \n        }\r\
+    \n    }\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\
+    ={\r\
+    \n   :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\
+    ptName . \" is NOT SET! Fix It Now!\");\r\
+    \n    /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \
+    run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\
+    olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\
+    \_start-time=startup;\r\
+    \n  }\r\
+    \n:set dnsLookupReady true;\r\
+    \ndelay 2s;  \r\
+    \n:global dnsLookupReady (a);\r\
+    \n"
+add dont-require-permissions=no name="renameLists " owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    local oldName \"Test\";\
+    \n:local newName \"Test-IP\";\
+    \n/ip firewall address-list\
+    \n:foreach i in=[find list=\$oldName] do={\
+    \nset \$i list=\$newName;\
+    \n}\
+    \n"
+add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    #############Script Settings##################\
+    \n\
+    \n:local \"IF-TUN\" \"6to4-tun\"\
+    \n:local \"IF-LOC\" \"Bridge-LAN\"\
+    \n:local \"POOL-6TO4\" \"poolV6-local\"\
+    \n:local \"force-update\" false\
+    \n############ use then static ip #######################\
+    \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \
+    address]\
+    \n#:local \"interface\" \"ext\"\
+    \n:local bound 0\
+    \n\
+    \n###############################################\
+    \n\
+    \n:local 6to4prefix do={\
+    \n    :global dec2hex\
+    \n    :local ipv4 \$1\
+    \n    :local ipv6 \"2002:\"\
+    \n    :for i from=0 to=2 step=1 do={        \
+    \n        :if ( \$i = 2) do={\
+    \n            :set ipv6 (\$ipv6.\":\")\
+    \n        }\
+    \n        :local fp [:find \$ipv4 \".\"]\
+    \n        :if ( \$fp > 0 ) do={\
+    \n            :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\
+    \n            :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\
+    \n        }\
+    \n    }\
+    \n    :return (\$ipv6.[\$dec2hex \$ipv4])\
+    \n}\
+    \n:local \"str_replace\" do={\
+    \n    :local \"str-pos\" [:find \$1 \$2]\
+    \n    :local \"str-len\" [:len \$2]\
+    \n    :local str \"\"\
+    \n    :local rest \$1\
+    \n    :while (\$\"str-pos\" >= 0) do={\
+    \n        :local t [:pick \$rest 0 \$\"str-pos\"]\
+    \n        :if ( \$4 > 0 ) do={\
+    \n            :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\
+    \n                :set str (\$str.\$5)\
+    \n            }\
+    \n        }\
+    \n        :set str (\$str.\$t.\$3)\
+    \n        :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\
+    st]]\
+    \n        :set \"str-pos\" [:find \$rest \$2]\
+    \n    }\
+    \n    :return (\$str.\$rest)\
+    \n}\
+    \n\
+    \n:if (\$bound=1) do={\
+    \n    :local t [:find \$\"lease-address\" \"/\"]\
+    \n\
+    \n    :if ( \$t >= 0 ) do={\
+    \n        :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\
+    \n    }\
+    \n\
+    \n    :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\
+    ) do={\
+    \n        /interface 6to4 add !keepalive local-address=\$\"lease-address\"\
+    \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\
+    \n        :set \"force-update\" true\
+    \n    }\
+    \n\
+    \n    :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\
+    cal-address];\
+    \n\
+    \n    :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \
+    true) do={\
+    \n        /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\
+    ease-address\"\
+    \n        /ipv6 address remove [find interface=\$\"IF-TUN\"]\
+    \n        /ipv6 address remove [find interface=\$\"IF-LOC\"]\
+    \n        /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\
+    \"::/0\"]\
+    \n        :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\
+    \n        :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\
+    \_0) do={    \
+    \n            /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\
+    \".\":1::/64\")  prefix-length=64\
+    \n        } else={\
+    \n            /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \
+    prefix=(\$\"pool-prefix\".\":1::/64\")\
+    \n        }\
+    \n        /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\
+    \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\
+    ace=\$\"IF-TUN\" advertise=no\
+    \n        /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\
+    =\$\"IF-LOC\" advertise=yes\
+    \n        /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\
+    \"IF-TUN\")\
+    \n        :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\
+    s]\
+    \n        :set t [:pick \$t 0 [:find \$t \"/\"]]\
+    \n        :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\
+    \_= 0) do={\
+    \n            /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\
+    [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        } else={\
+    \n            /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \
+    where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        }\
+    \n        :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\
+    -LOC\"] = 0) do={\
+    \n            /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\
+    on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\
+    \n        }\
+    \n        :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \
+    0) do={\
+    \n            /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\
+    onfiguration=yes\
+    \n        }\
+    \n    }\
+    \n}"
+add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global MAC2EUI64 do={\
+    \n    :local EUI64 \"\"\
+    \n    :local MAC \$1\
+    \n    :local HEX2DEC \"0123456789ABCDEF\"\
+    \n    :for i from=0 to=5 step=1 do={\
+    \n        :if ( \$i = 0 ) do={\
+    \n            :set EUI64 [:pick \$MAC 0]\
+    \n            :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\
+    \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\
+    \n        }\
+    \n        :if ( \$i = 1 || \$i = 3) do={\
+    \n            :set EUI64 (\$EUI64.\":\")\
+    \n        }\
+    \n        :if ( \$i = 2 ) do={\
+    \n            :set EUI64 (\$EUI64.\"FF:FE\")\
+    \n        }\
+    \n        :if ( [:find \$MAC \":\"] = 2 ) do={\
+    \n            :set MAC [:pick \$MAC 3  [:len \$MAC]]\
+    \n            :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\
+    \n        }\
+    \n    }\
+    \n    :return (\$EUI64)\
+    \n}\
+    \n\
+    \n:global dec2hex do={\
+    \n    :local hex \"\"\
+    \n    :local dec [:tonum \$1]\
+    \n    :for i from=0 to=4 step=4 do={\
+    \n        :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\
+    c>>\$i)&0xf)+1)].\$hex)\
+    \n    }\
+    \n    :return ([:tostr \$hex])\
+    \n}"
+add comment=Generator dont-require-permissions=no name=proxySet owner=vados \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="# 2. WireGuard interface\r\
+    \n/interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDg\
+    uMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=21641\r\
+    \n/interface/wireguard/peers/add interface=wg-VDSina public-key=\"o5IgCl1/\
+    G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcYQnD9\
+    N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=10.30.30.33 endpoint-port=518\
+    20 allowed-address=0.0.0.0/0 persistent-keepalive=11\r\
+    \n/ip/address/add address=10.9.0.3/32 interface=wg-VDSina\r\
+    \n\r\
+    \n# 3. DNS\r\
+    \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\
+    n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\
+    \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /system/script/add name=VDS\
+    ina-prev-dns comment=\"\$prevDNS\" source=\"\" }\r\
+    \n/ip/dns/set servers=8.8.4.4\r\
+    \n/ip/route/add dst-address=8.8.4.4/32 gateway=wg-VDSina distance=1 commen\
+    t=VDSina-dns\r\
+    \n\r\
+    \n# 4. Enable WireGuard\r\
+    \n/interface/wireguard/enable wg-VDSina\r\
+    \n"
+add dont-require-permissions=no name=AM-Telegram-Send owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\
+    \n# RouterOS script: AM-Telegram-Send\
+    \n# Script comment: Mini script for send messages to admin Telegram chat\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\
+    \n#\
+    \n#\
+    \n# requires RouterOS, version=7.19\
+    \n# requires device-mode, fetch\
+    \n#\
+    \n# Script description: \
+    \n#\
+    \n#\
+    \n# Usage:\
+    \n# /system/script { run AM-Telegram-Send \"Message here )))\"; }\
+    \n\
+    \n/system/script\
+    \nadd name=telegram-send dont-require-permissions=no source={\
+    \n  :global TelegramTokenId;\
+    \n  :global TelegramChatId;\
+    \n  :local message [:tostr \$1];\
+    \n  :local identity [/system/identity/get name];\
+    \n  :local sendMsg (\"[\".\$identity.\"] \".\$message)\
+    \n  /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\
+    \n    \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\
+    \n    \"&text=\".\$sendMsg.\\\
+    \n    \"&parse_mode=HTML\") \\\
+    \n    mode=https keep-result=no\
+    \n}"
+add dont-require-permissions=no name=telegram-send owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\
+    \n  :global TelegramTokenId;\
+    \n  :global TelegramChatId;\
+    \n  :local message [:tostr \$1];\
+    \n  :local identity [/system/identity/get name];\
+    \n  :local sendMsg (\"[\".\$identity.\"] \".\$message)\
+    \n  /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\
+    \n    \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\
+    \n    \"&text=\".\$sendMsg.\\\
+    \n    \"&parse_mode=HTML\") \\\
+    \n    mode=https keep-result=no\
+    \n"
+/user group
+add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\
+    t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon"
+/ip smb
+set enabled=no interfaces=lo
+/interface bridge port
+add bridge=Bridge-LAN interface=ether5
+add bridge=Bridge-LAN interface=ether2
+add bridge=Bridge-LAN interface=ether4 trusted=yes
+add bridge=Bridge-LAN interface=ether3
+add bridge=Bridge-LAN interface=wlan2
+add bridge=Bridge-LAN interface=wlan1
+/interface bridge settings
+set use-ip-firewall=yes
+/ip firewall connection tracking
+set udp-timeout=10s
+/ip neighbor discovery-settings
+set discover-interface-list=LAN lldp-med=no lldp-poe-power=no
+/ip settings
+set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\
+    8192
+/ipv6 settings
+set disable-ipv6=yes disable-link-local-address=yes forward=no \
+    max-neighbor-entries=8192 multipath-hash-policy=l4
+/interface detect-internet
+set detect-interface-list=WAN internet-interface-list=Internet \
+    lan-interface-list=LAN request-interval=1m wan-interface-list=WAN
+/interface l2tp-server server
+set authentication=mschap2 use-ipsec=yes
+/interface list member
+add interface=Unet-ether1 list=Internet
+add interface=WG list=WAN
+add interface=Bridge-LAN list=LAN
+add interface=Unet-ether1 list=WAN
+/interface wireguard peers
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\
+    109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \
+    persistent-keepalive=10s public-key=\
+    "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4="
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 disabled=yes \
+    endpoint-address=10.30.30.33 endpoint-port=55055 interface=wg-nuc name=\
+    NUC persistent-keepalive=11s public-key=\
+    "+OvzAjLC45Td52hjkQPmpGvC3RGhZ+Q2CDMJ1U/D4Rw="
+/interface wireless cap
+# 
+set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \
+    caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\
+    CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\
+    wlan2,wlan1 lock-to-caps-man=yes
+/ip address
+add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0
+add address=10.8.0.2/24 interface=WG network=10.8.0.0
+add address=192.168.33.2/24 disabled=yes interface=wg-nuc network=\
+    192.168.33.0
+/ip cloud
+set update-time=no
+/ip dhcp-client
+add add-default-route=special-classless check-gateway=arp comment=Unet-client \
+    default-route-distance=2 default-route-tables=main:2 dhcp-options=\
+    hostname,clientid_duid interface=Unet-ether1 name=UnetDHCP use-peer-dns=\
+    no use-peer-ntp=no
+/ip dhcp-server config
+set accounting=no
+/ip dhcp-server lease
+add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\
+    48:8F:5A:8E:EE:A8 server=masterDHCP
+add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\
+    F0:DE:F1:91:0D:1E server=masterDHCP
+add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\
+    00:80:77:EC:43:86 server=masterDHCP
+add address=10.30.30.70 dhcp-option=domain-search-list,HostName \
+    dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP
+add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\
+    04:7C:16:36:F5:37 server=masterDHCP
+add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\
+    10:2D:41:2C:20:C2 server=masterDHCP
+add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\
+    10:08:C1:81:59:5F server=masterDHCP
+add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\
+    10:38:1F:D2:5F:13 server=masterDHCP
+add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\
+    10:B1:DF:E9:D0:D5 server=masterDHCP
+add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\
+    FE:02:52:BE:3F:16 server=masterDHCP
+add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\
+    D4:6D:6D:FD:E5:49 server=masterDHCP
+add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\
+    CC:42:10:12:46:94 server=masterDHCP
+add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\
+    50:CC:F8:85:96:0A server=masterDHCP
+add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\
+    E4:18:6B:58:34:AB server=masterDHCP
+add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\
+    00:27:15:41:97:A9 server=masterDHCP
+add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \
+    mac-address=C4:82:E1:03:49:10 server=masterDHCP
+add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\
+    10:38:1F:82:81:F2 server=masterDHCP
+add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \
+    dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP
+add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \
+    dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP
+add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \
+    server=masterDHCP
+add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\
+    MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP
+add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \
+    mac-address=F0:75:5D:1E:5F:71 server=masterDHCP
+add address=10.30.30.100 client-id=iVados dhcp-option=HostName \
+    dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP
+add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\
+    ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \
+    dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \
+    use-src-mac=yes
+/ip dhcp-server network
+add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\
+    domain-search-list dhcp-option-set=domain-search-set dns-server=\
+    10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\
+    24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98
+/ip dns
+set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \
+    doh-max-server-connections=20 servers=8.8.8.8 verify-doh-cert=yes
+/ip dns static
+add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \
+    type=A
+add address=109.107.177.79 name=vds.vados.ru type=A
+add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \
+    regexp=*.vados.ru type=NS
+add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\
+    "\".*\\\\.vados\\\\.ru\"" type=FWD
+add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\
+    10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\
+    FWD
+add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\
+    ns.vados.ru.local type=A
+add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\
+    vados.ru ns=ns.vados.ru.local type=NS
+add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A
+add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\
+    dns.google type=A
+add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A
+add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A
+add address=10.30.30.33 name=ros.vados.ru type=A
+add address=10.30.30.95 name=vados-nuc type=A
+add address=10.30.30.33 name=amster-nuc type=A
+add address=10.30.30.33 name=amster type=A
+add address=10.30.30.33 name=amster-reg type=A
+add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A
+add address=10.30.30.33 name=mgr.vados.ru type=A
+add address=10.30.30.33 name=prt.vados.ru type=A
+add address=10.30.30.33 disabled=yes match-subdomain=yes name=\
+    mikrots.vados.ru type=A
+add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A
+add address=10.30.30.30 name=MILLER-LEN type=A
+add address=10.30.30.30 name=miller type=A
+add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\
+    dns.quad9.net type=A
+add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\
+    dns.quad9.net type=A
+add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \
+    type=A
+add address=10.30.30.81 comment=LocalNet name=MikroVados type=A
+add address=10.30.30.10 name=MikroNUC type=A
+add address=10.30.30.86 disabled=yes name=MikroYellow type=A
+add address=10.30.30.85 disabled=yes name=MikroMic type=A
+add address=10.30.30.95 name=VADOS-NUC type=A
+add address=10.30.30.98 name=VADOS-LEN type=A
+add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\
+    A
+add address=10.30.30.20 disabled=yes name=garage type=A
+/ip firewall address-list
+add address=91.215.120.206 list=TRUSTED
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=8.8.4.0/24 list=YouTube
+add address=8.8.8.0/24 list=YouTube
+add address=8.34.208.0/20 list=YouTube
+add address=8.35.192.0/20 list=YouTube
+add address=23.236.48.0/20 list=YouTube
+add address=23.251.128.0/19 list=YouTube
+add address=34.0.0.0/15 list=YouTube
+add address=34.2.0.0/16 list=YouTube
+add address=34.3.0.0/23 list=YouTube
+add address=34.3.3.0/24 list=YouTube
+add address=34.3.4.0/24 list=YouTube
+add address=34.3.8.0/21 list=YouTube
+add address=34.3.16.0/20 list=YouTube
+add address=34.3.32.0/19 list=YouTube
+add address=34.3.64.0/18 list=YouTube
+add address=34.4.0.0/14 list=YouTube
+add address=34.8.0.0/13 list=YouTube
+add address=34.16.0.0/12 list=YouTube
+add address=34.32.0.0/11 list=YouTube
+add address=34.64.0.0/10 list=YouTube
+add address=34.128.0.0/10 list=YouTube
+add address=35.184.0.0/13 list=YouTube
+add address=35.192.0.0/14 list=YouTube
+add address=35.196.0.0/15 list=YouTube
+add address=35.198.0.0/16 list=YouTube
+add address=35.199.0.0/17 list=YouTube
+add address=35.199.128.0/18 list=YouTube
+add address=35.200.0.0/13 list=YouTube
+add address=35.208.0.0/12 list=YouTube
+add address=35.224.0.0/12 list=YouTube
+add address=35.240.0.0/13 list=YouTube
+add address=57.140.192.0/18 list=YouTube
+add address=64.15.112.0/20 list=YouTube
+add address=64.233.160.0/19 list=YouTube
+add address=66.22.228.0/23 list=YouTube
+add address=66.102.0.0/20 list=YouTube
+add address=66.249.64.0/19 list=YouTube
+add address=70.32.128.0/19 list=YouTube
+add address=72.14.192.0/18 list=YouTube
+add address=74.125.0.0/16 list=YouTube
+add address=104.154.0.0/15 list=YouTube
+add address=104.196.0.0/14 list=YouTube
+add address=104.237.160.0/19 list=YouTube
+add address=107.167.160.0/19 list=YouTube
+add address=107.178.192.0/18 list=YouTube
+add address=108.59.80.0/20 list=YouTube
+add address=108.170.192.0/18 list=YouTube
+add address=108.177.0.0/17 list=YouTube
+add address=130.211.0.0/16 list=YouTube
+add address=136.22.160.0/20 list=YouTube
+add address=136.22.176.0/21 list=YouTube
+add address=136.22.184.0/23 list=YouTube
+add address=136.22.186.0/24 list=YouTube
+add address=142.250.0.0/15 list=YouTube
+add address=146.148.0.0/17 list=YouTube
+add address=152.65.208.0/22 list=YouTube
+add address=152.65.214.0/23 list=YouTube
+add address=152.65.218.0/23 list=YouTube
+add address=152.65.222.0/23 list=YouTube
+add address=152.65.224.0/19 list=YouTube
+add address=162.120.128.0/17 list=YouTube
+add address=162.216.148.0/22 list=YouTube
+add address=162.222.176.0/21 list=YouTube
+add address=172.110.32.0/21 list=YouTube
+add address=172.217.0.0/16 list=YouTube
+add address=172.253.0.0/16 list=YouTube
+add address=173.194.0.0/16 list=YouTube
+add address=173.255.112.0/20 list=YouTube
+add address=192.158.28.0/22 list=YouTube
+add address=192.178.0.0/15 list=YouTube
+add address=193.186.4.0/24 list=YouTube
+add address=199.36.154.0/23 list=YouTube
+add address=199.36.156.0/24 list=YouTube
+add address=199.192.112.0/22 list=YouTube
+add address=199.223.232.0/21 list=YouTube
+add address=207.223.160.0/20 list=YouTube
+add address=208.65.152.0/22 list=YouTube
+add address=208.68.108.0/22 list=YouTube
+add address=208.81.188.0/22 list=YouTube
+add address=208.117.224.0/19 list=YouTube
+add address=209.85.128.0/17 list=YouTube
+add address=216.58.192.0/19 list=YouTube
+add address=216.73.80.0/20 list=YouTube
+add address=216.239.32.0/19 list=YouTube
+add address=2ip.ru list=Test-IP
+add address=wg.vados.ru comment=VDSIna list=TRUSTED
+add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED
+add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina
+add address=love.ru comment=love.ru list=NoVdsina
+add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina
+add address=pochta.ru comment=pochta.ru list=NoVdsina
+add address=vdsina.com list=NoVdsina
+add address=vdsina.ru list=NoVdsina
+add address=youla.ru list=NoVdsina
+add address=kupiprodai.ru list=NoVdsina
+add address=myip.ru list=Test-IP
+add address=geoip.co list=NoVdsina
+add address=comp-lenta.ru list=NoVdsina
+add address=128.85.102.70 comment=update.microsoft.com list=\
+    windowsupdateslist
+add address=wu-b-net.trafficmanager.net. comment=\
+    ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\
+    ctldl.windowsupdate.com list=windowsupdateslist
+add address=redir.update.msft.com.trafficmanager.net. comment=\
+    update.microsoft.com list=windowsupdateslist
+add address=geo.prod.do.dsp.trafficmanager.net. comment=\
+    geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12437.d.akamaiedge.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \
+    comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \
+    list=windowsupdateslist
+add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\
+    sls.update.microsoft.com list=windowsupdateslist
+add address=fe3.delivery.mp.microsoft.com. comment=\
+    fe3cr.delivery.mp.microsoft.com list=windowsupdateslist
+add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\
+    fe3.delivery.mp.microsoft.com list=windowsupdateslist
+add address=fe2cr.update.msft.com.trafficmanager.net. comment=\
+    fe2cr.update.microsoft.com list=windowsupdateslist
+add address=download.windowsupdate.com.delivery.microsoft.com. comment=\
+    download.windowsupdate.com list=windowsupdateslist
+add address=wu-f-net.trafficmanager.net. comment=\
+    download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=tsfe.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \
+    comment=9.au.download.windowsupdate.com list=windowsupdateslist
+add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dspw65.akamai.net. comment=\
+    download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \
+    comment=licensing.mp.microsoft.com list=windowsupdateslist
+add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-nlu-net.trafficmanager.net. comment=\
+    star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-tlu-net.trafficmanager.net. comment=\
+    star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=storeedgefd.xbetservices.akadns.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \
+    comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\
+    windowsupdateslist
+add address=e16646.dscg.akamaiedge.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\
+    windowsupdateslist
+add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=bg.microsoft.map.fastly.net. comment=\
+    3.au.download.windowsupdate.com list=windowsupdateslist
+add list=windowsupdateslist
+add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\
+    star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a2033.dscd.akamai.net. comment=\
+    star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-nlu-net.trafficmanager.net. comment=\
+    dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-b-tlu-net.trafficmanager.net. comment=\
+    1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a122.dscg3.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist
+add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e10370.d.akamaiedge.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=a1683.dscd.akamai.net. comment=\
+    dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \
+    comment=collections.mp.microsoft.com list=windowsupdateslist
+add address=a1847.dscd.akamai.net. comment=\
+    wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=au.download.windowsupdate.com.edgesuite.net. comment=\
+    2.au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dscg3.akamai.net. comment=\
+    au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    4.au.download.windowsupdate.com list=windowsupdateslist
+add address=cl-glcb907925.gcdn.co. comment=\
+    4.au.download.windowsupdate.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \
+    comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=ts-frontend.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=sds.trafficmanager.net. comment=software-download.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\
+    windowsupdateslist
+add address=e12671.dscd.akamaiedge.net. comment=\
+    download.microsoft.com.edgekey.net list=windowsupdateslist
+add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12358.d.akamaiedge.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-tlu-net.trafficmanager.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a1856.dspw65.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina
+add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=purchase.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.mp.microsoft.com list=windowsupdateslist
+add address=e110219.a.akamaiedge.net. comment=\
+    purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.141 list=windowsupdateslist
+add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=storesdk.xbetservices.akadns.net. comment=\
+    storesdk.dsx.mp.microsoft.com list=windowsupdateslist
+add address=e16646.g.akamaiedge.net. comment=\
+    storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=software-download.microsoft.com.delivery.microsoft.com. comment=\
+    software-download.microsoft.com list=windowsupdateslist
+add address=download.prss.microsoft.com.akamaized.net. comment=\
+    software-download.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina
+add address=87.250.250.50 comment=YandexDisk list=NoVdsina
+add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\
+    purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\
+    cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=a1996.dscd.akamai.net. comment=\
+    wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\
+    tas02.sls.update.microsoft.com list=windowsupdateslist
+add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\
+    star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\
+    paymentinstruments.mp.microsoft.com list=windowsupdateslist
+add address=10.30.30.33 comment=amster list=NoWG
+add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG
+add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG
+add address=wg.vados.ru comment=VDSina-vpn list=VDSina
+add address=80.85.244.9 list=TRUSTED
+add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina
+add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS
+add address=dns.google comment=Google-dns list=Trusted-DNS
+add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\
+    Trusted-DNS
+add address=time.google.com comment=Google-time list=Trusted-NTP
+add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP
+add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=cp.vdsina.com comment=VDSina-vpn list=VDSina
+add address=vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns.vados.ru comment=VDSina-vpn list=VDSina
+add address=vdsina.com comment=VDSina-vpn list=VDSina
+add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=10.30.30.0/24 comment="Local Network" list=Local-Net
+add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net
+add address=146.120.64.208/29 comment="External Net" list=Unet
+add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina
+add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina
+add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina
+add address=10.30.30.30 comment=miller disabled=yes list=NoWG
+add address=10.30.30.33 comment="Direct connet to DNS servers" list=\
+    Direct-DNS
+add address=109.107.177.79 list=VPN-Server
+add address=10.0.0.0/8 list=RFC1918
+add address=172.16.0.0/12 list=RFC1918
+add address=192.168.0.0/16 list=RFC1918
+add address=8.8.4.4 disabled=yes list=to_vpn
+add address=myip.ru disabled=yes list=to_vpn
+add address=10.30.30.98 disabled=yes list=to_vpn
+/ip firewall filter
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=12h chain=input comment="block honeypot DNS" \
+    connection-state=new dst-port=53 in-interface=Unet-ether1 protocol=udp \
+    src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment=\
+    "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=!TRUSTED
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \
+    connection-state=new dst-port=5060 in-interface=Unet-ether1 protocol=udp
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot NTP" \
+    connection-state=new dst-port=123 in-interface=Unet-ether1 protocol=udp
+add action=fasttrack-connection chain=forward comment=\
+    "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \
+    connection-state=established,related,new disabled=yes
+add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \
+    protocol=tcp
+add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \
+    protocol=udp
+add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \
+    dst-port=53 protocol=tcp src-address=10.30.30.0/24
+add action=accept chain=input comment="udp Accept input DNS queries" \
+    dst-port=53 protocol=udp src-address=10.30.30.0/24
+add action=accept chain=output comment="accept WireGuard" disabled=yes \
+    dst-address-list=VPN-Server out-interface=Unet-ether1 protocol=udp \
+    src-port=13231
+add action=accept chain=output disabled=yes dst-address-list=VPN-Server \
+    dst-port=29185 out-interface=Unet-ether1 protocol=udp
+add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
+    connection-state=established,related,new disabled=yes routing-mark=\
+    !To-VPN
+add action=accept chain=output disabled=yes protocol=tcp src-port=443
+add action=accept chain=output disabled=yes src-address=127.0.0.1
+add action=accept chain=forward comment="defconf: accept in ipsec policy" \
+    disabled=yes ipsec-policy=in,ipsec
+add action=accept chain=forward comment="defconf: accept out ipsec policy" \
+    disabled=yes ipsec-policy=out,ipsec
+add action=accept chain=forward comment=\
+    "defconf: accept established,related, untracked" connection-state=\
+    established,related,untracked disabled=yes
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid in-interface=Unet-ether1 src-address=\
+    !10.30.30.0/24
+add action=drop chain=forward comment=\
+    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
+    connection-state=new in-interface=Unet-ether1 src-address-list=!VDSina
+add action=accept chain=input in-interface=Unet-ether1 protocol=icmp \
+    src-address-list=VDSina
+add action=accept chain=input connection-state=established
+add action=accept chain=input connection-state=related
+/ip firewall mangle
+add action=accept chain=prerouting comment=RFC1918 dst-address-list=RFC1918 \
+    in-interface-list=!WAN
+add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \
+    new-routing-mark=main passthrough=no src-address-list=NoWG
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for NoVdsina" disabled=yes dst-address-list=NoVdsina \
+    new-routing-mark=main passthrough=no src-address=10.30.30.0/24
+add action=mark-connection chain=prerouting comment=\
+    "Transit for address-list \"to_vpn\"" connection-mark=no-mark disabled=\
+    yes dst-address-list=to_vpn in-interface-list=!WAN new-connection-mark=\
+    to-vpn-conn routing-mark=!main
+add action=mark-routing chain=prerouting comment=\
+    "Find routing over table r_to_vpn" connection-mark=to-vpn-conn disabled=\
+    yes in-interface-list=!WAN new-routing-mark=r_to_vpn
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for VDSina" dst-address-list=VPN-Server \
+    new-routing-mark=main passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\
+    Unet new-routing-mark=main passthrough=no
+add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\
+    To-VPN src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \
+    new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment="WG for all" \
+    dst-address-list=!NoVdsina new-routing-mark=To-VPN src-address=\
+    10.30.30.0/24
+add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \
+    out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\
+    1381-65535
+add action=mark-connection chain=prerouting comment=\
+    "Mark VPN connections to exclude from FastTrack" disabled=yes \
+    new-connection-mark=VPN_No_FastTrack routing-mark=To-VPN
+add action=mark-routing chain=prerouting comment="VPN Network" disabled=yes \
+    dst-address=10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24
+add action=mark-connection chain=output comment="For this router" \
+    connection-mark=no-mark disabled=yes dst-address-list=to_vpn \
+    new-connection-mark=to-vpn-conn-local
+add action=mark-routing chain=output comment="For this router" \
+    connection-mark=to-vpn-conn-local disabled=yes new-routing-mark=r_to_vpn
+/ip firewall nat
+add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=masquerade chain=srcnat comment=\
+    "Nat Addresses for routing mark r_to_vpn" disabled=yes routing-mark=\
+    r_to_vpn
+add action=dst-nat chain=dstnat comment=\
+    "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=VPN-Server \
+    to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat comment=\
+    "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\
+    udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\
+    Unet-ether1 protocol=udp src-address=!10.30.30.0/24 to-addresses=\
+    10.30.30.33 to-ports=44333
+add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \
+    routing-mark=To-VPN
+add action=masquerade chain=srcnat comment="Default NAT" out-interface=\
+    Unet-ether1 routing-mark=!To-VPN src-address=10.30.30.0/24
+add action=dst-nat chain=dstnat dst-port=44044 in-interface=Unet-ether1 \
+    protocol=udp src-address=109.107.177.79 to-addresses=10.30.30.33 \
+    to-ports=44044
+add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \
+    fragment=no in-interface=Unet-ether1 protocol=tcp routing-mark=main \
+    to-addresses=10.30.30.33 to-ports=443
+add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \
+    dst-port=80 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=80
+add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \
+    dst-port=2904 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2904
+add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\
+    5000 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=5000
+add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\
+    2377 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=2377
+add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\
+    Unet-ether1 protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \
+    to-ports=81
+add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\
+    Unet-ether1 protocol=tcp src-address-list=TRUSTED to-addresses=\
+    10.30.30.33 to-ports=22
+add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \
+    dst-port=2377 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2377
+add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\
+    Unet-ether1 protocol=tcp routing-mark=!To-VPN to-addresses=10.30.30.33 \
+    to-ports=22
+add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \
+    dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \
+    time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\
+    Bridge-LAN protocol=tcp src-address-list=KIDS time=\
+    6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+/ip firewall raw
+add action=drop chain=prerouting comment="Drop Honeypot Hackers" \
+    in-interface=Unet-ether1 src-address-list="Honeypot Hacker"
+add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \
+    in-interface-list=WAN src-address-list=Trusted-DNS
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \
+    content=linux.duke.edu disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleapis.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googlevideo.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleusercontent.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    nhacmp3youtube.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \
+    content=rutube.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \
+    content=me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "icloud.com raw" content=icloud.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \
+    disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "api.db-ip.com raw" content=api.db-ip.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \
+    content=gosuslugi.ru disabled=yes
+/ip firewall service-port
+set ftp disabled=yes
+set tftp disabled=yes
+set irc disabled=no
+set sip disabled=yes
+set pptp disabled=yes
+set rtsp disabled=no
+/ip ipsec settings
+set accounting=no
+/ip ipsec policy
+set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0
+/ip ipsec profile
+set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
+/ip proxy
+set cache-administrator="" max-cache-size=none port=80,443 src-address=\
+    0.0.0.0
+/ip route
+add check-gateway=none comment=WG-Default disabled=no distance=1 dst-address=\
+    0.0.0.0/0 gateway=WG routing-table=To-VPN scope=30 target-scope=10
+/ip service
+set ftp disabled=yes
+set telnet disabled=yes
+set reverse-proxy disabled=yes
+set ssh address=10.30.30.0/24 port=2222
+set winbox address=10.30.30.0/24
+set api address=10.30.30.0/24
+set api-ssl address=10.30.30.0/24 disabled=yes
+set www-ssl certificate=Root-YE port=18443
+set www address=10.30.30.0/24 disabled=yes port=18880
+/ip service webserver
+set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\
+    no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \
+    webfig-secure=no
+/ip ssh
+set forwarding-enabled=both publickey-authentication-options=verify-required
+/ip upnp
+set enabled=yes
+/ip upnp interfaces
+add interface=Bridge-LAN type=internal
+add forced-ip=146.120.64.211 interface=Unet-ether1 type=external
+add forced-ip=109.107.177.79 interface=*E type=external
+add interface=lo type=internal
+add interface=wlan2 type=internal
+add interface=wlan1 type=internal
+/ipv6 dhcp-client
+add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\
+    info use-interface-duid=yes validate-server-duid=no
+/ipv6 dhcp-server option sets
+add name=domain-search-set options=domain-search-list
+add name="=\"Client ID\"" options=HostName
+/ipv6 firewall address-list
+add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
+add address=::1/128 comment="defconf: lo" list=bad_ipv6
+add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
+add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
+add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
+add address=100::/64 comment="defconf: discard only " list=bad_ipv6
+add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
+add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
+add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
+/ipv6 firewall filter
+add action=accept chain=input comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=input comment="defconf: drop invalid" connection-state=\
+    invalid
+add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=input comment="defconf: accept UDP traceroute" \
+    dst-port=33434-33534 protocol=udp
+add action=accept chain=input comment=\
+    "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
+    udp src-address=fe80::/10
+add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
+    protocol=udp
+add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=input comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=input comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+add action=accept chain=forward comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
+add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
+    hop-limit=equal:1 protocol=icmpv6
+add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=forward comment="defconf: accept HIP" protocol=139
+add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
+    500,4500 protocol=udp
+add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=forward comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=forward comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+/ipv6 nd
+set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \
+    managed-address-configuration=yes other-configuration=yes pref64=::/64
+/ipv6 nd prefix
+add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none
+/ipv6 nd prefix default
+set dhcp6-pd-preferred=yes
+/ipv6 nd proxy
+add disabled=yes interface=lo
+/ipv6 nd settings
+set router-advertisement-route-distance=100
+/routing settings
+set single-process=no
+/system clock
+set time-zone-name=Europe/Moscow
+/system clock manual
+set time-zone=+03:00
+/system identity
+set name=MikroMaster
+/system logging
+add action=email disabled=yes regex="* added|changed|removed *" topics=\
+    system,info
+/system ntp client
+set enabled=yes
+/system ntp server
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes
+/system ntp client servers
+add address=0.ru.pool.ntp.org
+add address=1.ru.pool.ntp.org
+add address=2.ru.pool.ntp.org
+add address=3.ru.pool.ntp.org
+add address=time.google.com disabled=yes
+/system package update
+set check-certificate=yes-without-crl ip-version=ipv4
+/system scheduler
+add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \
+    on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Every Day Check For Update Scripts" interval=1d name=\
+    AM-ScriptInstallUpdate on-event=\
+    ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\
+    AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+/system watchdog
+set watchdog-timer=no
+/tool e-mail
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \
+    server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com
+/tool mac-server
+set allowed-interface-list=LAN
+/tool mac-server mac-winbox
+set allowed-interface-list=LAN
+/tool netwatch
+add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\
+    -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\
+    e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \
+    interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\
+    https-get up-script=""
+add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\
+    flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\
+    oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \
+    name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \
+    up-script=""
+add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\
+    8.8.8.8 down-script="" host=dns.google http-codes="" name=\
+    "Google-DNS IPv4" test-script="" type=dns up-script=""
+add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\
+    rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\
+    -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \
+    http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\
+    "" test-script="" type=dns up-script=""
+add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \
+    dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \
+    interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \
+    test-script="" timeout=800ms type=dns up-script=""
+add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\
+    ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \
+    down-script="" host=149.112.112.112 http-codes="" interval=10s name=\
+    "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script=""
+add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \
+    down-script="" host=91.192.189.2 http-codes="" interval=10s name=\
+    ns1.unet.ws test-script="" type=simple up-script=""
+add check-certificate=yes comment=\
+    "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \
+    disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\
+    vds.vados.ru port=443 test-script="" type=https-get up-script=""
+add comment="WireGuard NAT " disabled=yes down-script="/log info \"[WG-Monitor\
+    ] WireGuard is NOT running - reverting rules\"\
+    \n/ip firewall nat remove [find comment=\"Redirect to Router\"]\
+    \n/ip dns set servers=8.8.8.8\
+    \n/ip dns cache flush\
+    \n/ip route remove [find comment=\"wg-auto-route\"]\
+    \n" host=10.8.0.1 http-codes="" interval=15s name=WG test-script="" \
+    timeout=5s type=simple up-script="/log info \"[WG-Monitor] WireGuard is RU\
+    NNING - applying rules\";\
+    \n:local routeFile \"ips.txt\";\
+    \n:local routeDefAddr \"0.0.0.0/0\";\
+    \n:local routeGateway \"10.8.0.1\";\
+    \n:local routeIF \"WG\";\
+    \n:local routeTable \"To-VPN\";\
+    \n:local routeComment \"wg-auto-route\";\
+    \n/ip dns cache flush;\
+    \n:if ([:len [/ip firewall nat find comment=\"Redirect to Router\"]] > 0) \
+    do={\
+    \n  /ip firewall nat remove [find comment=\"Redirect to Router\"];\
+    \n}\
+    \n/ip firewall nat add action=redirect chain=dstnat src-address-list=\"Red\
+    irectDNS\" dst-port=53 protocol=udp comment=\"Redirect to Router\";\
+    \n/ip dns set servers=\$routeGateway;\
+    \n:local content [/file get \$routeFile contents];\
+    \n:if ([:len \$content] > 0) do={\
+    \n    :local line \"\";\
+    \n    :for i from=0 to=([:len \$content] - 1) do={\
+    \n        :local char [:pick \$content \$i];\
+    \n        :if (\$char != \"\\r\" && \$char != \"\\n\") do={\
+    \n            :set line (\$line . \$char);\
+    \n        } else={\
+    \n            :if ([:len \$line] > 5) do={\
+    \n                :do { /ip route add disabled=no dst-address=\$routeDefAd\
+    dr gateway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$r\
+    outeTable comment=\$routeComment check-gateway=none } on-error={}\
+    \n            }\
+    \n            :set line \"\";\
+    \n        }\
+    \n    }\
+    \n    :if ([:len \$line] > 5) do={\
+    \n#         :do { /ip route add dst-address=\$line gateway=\$routeGateway \
+    distance=1 comment=\$routeComment } on-error={}\
+    \n           :do { /ip route add disabled=no dst-address=\$routeDefAddr ga\
+    teway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$routeT\
+    able comment=\$routeComment check-gateway=none } on-error={}\
+    \n    }\
+    \n}\
+    \n:local dotPos [:find \$routeGateway \".\"];\
+    \n:if (\$dotPos != \"\") do={\
+    \n    :local firstOctet [:pick \$routeGateway 0 \$dotPos];\
+    \n    :local derivedDstAddress (\$firstOctet . \".30.0.0/15\");\
+    \n    :do { /ip route add dst-address=\$derivedDstAddress gateway=\$routeG\
+    ateway distance=1 comment=\$routeComment } on-error={}\
+    \n}\
+    \n\
+    \n"
+add comment=WG-Default disabled=yes down-script=\
+    "/ip route disable [find comment=\"WG-Default\"];" host=10.8.0.1 \
+    interval=15s name=WG packet-count=20 test-script="" thr-loss-count=5 \
+    type=icmp up-script="/ip route enable [find comment=\"WG-Default\"];"
+/user aaa
+set accounting=no
diff --git a/MikroMaster/20260712/20260712030003-Config.rsc b/MikroMaster/20260712/20260712030003-Config.rsc
new file mode 100644
index 0000000..8614ad9
--- /dev/null
+++ b/MikroMaster/20260712/20260712030003-Config.rsc
@@ -0,0 +1,3842 @@
+# 2026-07-12 03:00:07 by RouterOS 7.23.1
+# software id = A8L5-07YF
+#
+# model = RB952Ui-5ac2nD
+# serial number = D3D50CEDCD38
+/interface bridge
+add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\
+    "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\
+    Bridge-LAN port-cost-mode=short
+/interface ethernet
+set [ find default-name=ether1 ] comment=Unet-cable loop-protect=off name=\
+    Unet-ether1 rx-flow-control=auto tx-flow-control=auto
+set [ find default-name=ether2 ] comment=LAN-2
+set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3
+set [ find default-name=ether4 ] comment=LAN-4
+set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \
+    loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto
+/interface wireless
+# managed by CAPsMAN
+# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding
+set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados wireless-protocol=802.11
+# managed by CAPsMAN
+# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding
+set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados5g wireless-protocol=802.11
+/interface wireguard
+add comment=WG listen-port=13231 mtu=1320 name=WG
+add comment="WG interface for Amnezia route" disabled=yes listen-port=33033 \
+    mtu=1360 name=wg-nuc
+/interface list
+add include=static name=LAN
+add name=Internet
+add include=Internet name=WAN
+/interface wireless security-profiles
+set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
+    dynamic-keys supplicant-identity=MikroTik
+/iot wiliot servers
+set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East"
+/ip dhcp-server option
+add code=12 name=HostName
+add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00"
+/ip dhcp-server option sets
+add name=HP1505n options=HostName
+add name=StartLife1 options=HostName
+add name=amsterDev options=HostName
+add name=MiTV options=HostName
+add name=miller options=HostName
+add name=amster options=HostName
+add name=garage options=HostName
+add name=domain-search-set options=domain-search-list
+add name=VADOS-LEN options=HostName
+add name=VADOS-NUC options=HostName
+add name=MikroNUC options=HostName
+add name=master options=HostName
+add name=MikroYellow options=HostName
+add name="=\"Client ID\"" options=HostName
+add name=iVados options=HostName
+/ip dns forwarders
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no
+add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \
+    verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no
+/ip ipsec proposal
+set [ find default=yes ] disabled=yes
+/ip pool
+add name=dhcp ranges=10.30.30.83-10.30.30.254
+/ip dhcp-server
+add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \
+    dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \
+    name=masterDHCP server-address=10.30.30.81
+/ip smb users
+set [ find default=yes ] disabled=yes
+add disabled=yes name=vados
+/ipv6 dhcp-client option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=DUID value=0x00030001488f5a8e1abc
+add code=61 name=clientid
+/ipv6 dhcp-server option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=CLIENT_DUID
+add code=61 name=CLIENT_MAC
+/ppp profile
+set *FFFFFFFE use-upnp=no
+/routing bgp template
+set default disabled=no output.network=bgp-networks
+/routing table
+add disabled=no fib name=To-VPN
+add disabled=no fib name=r_to_vpn
+/system logging action
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email
+/system script
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\
+    \n\r\
+    \n#:local Script AM-setup\
+    \n;\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n\
+    \n\r\
+    \n#\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\
+    \n\r\
+    \n#\r\
+    \n\
+    \n#root.mnuc.backuper\
+    \n\
+    \n\r\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\
+    .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\
+    \n\
+    \n#:local Script AM-GlobalConfig;\
+    \n\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n#:local FetchFile AM-DOHCert.rsc\
+    \n\
+    \n\r\
+    \n\r\
+    \n#\
+    \n:global MkDir;\
+    \n\r\
+    \n\
+    \n#:local FetchFile Binary.backup\
+    \n:local localDir \"\";\
+    \n\
+    \n\r\
+    \n#\$MkDir \$localDir;\r\
+    \n\
+    \n#\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\
+    \$localDir . \$FetchFile);\r\
+    \n"
+add comment="Global Config Script" dont-require-permissions=no name=\
+    AM-GlobalConfig owner=AM-GlobalConfig policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GlobalConfig\r\
+    \n# Script comment: Global Config Script\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# Warning: Dont touch this line!\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global GlobalConfReady false;\r\
+    \n#\r\
+    \n#\r\
+    \n# Global Url For Amster scripts to fetch\r\
+    \n# most be defined in AM-Init-Script or AM-setup scripts\r\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n:global ScriptsUrlSuffix (a);\r\
+    \n:global CheckSumsVerify true;\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF true;\r\
+    \n:global CommentsInScripts true;\r\
+    \n\r\
+    \n# Debug output:\r\
+    \n:global PrintDebug true; #false;\r\
+    \n\r\
+    \n# Debug output for specific script:\r\
+    \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\
+    \n\r\
+    \n# Debug logs\r\
+    \n# Other actions (disk, email, remote or support) can be used as well.\r\
+    \n# I do not recommend using echo - use debug output instead (https://rsc.\
+    eworm.de/main/DEBUG.html#debug-output).\r\
+    \n#/system/logging/add topics=script,debug action=memory;\r\
+    \n\r\
+    \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\
+    \n:global Domain \"WORKGROUP\";\r\
+    \n\r\
+    \n:global EmailGeneralTo \"vados@vados.ru\";\r\
+    \n#:global EmailGeneralCc \"\";\r\
+    \n\r\
+    \n# \$ScriptInstallUpdate mod/notification-telegram\r\
+    \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\
+    \";\r\
+    \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\
+    \n# Use this to send notifications to a specific topic in group.\r\
+    \n#:global TelegramThreadId \"30\";\r\
+    \n# Using telegram-chat you have to define trusted chat ids (not group ids\
+    !)\r\
+    \n# or user names. Groups allow to chat with devices simultaneously.\r\
+    \n:global TelegramChatIdsTrusted {\r\
+    \n  \"454403445\"\r\
+    \n  \"-1003631309063\"\r\
+    \n  \"-5124482807\"\r\
+    \n  \"1087968824\";\r\
+    \n};\r\
+    \n#  \"-5294757340\";\r\
+    \n\r\
+    \n:global TelegramChatGroups \"(all)\";\r\
+    \n#:global TelegramChatGroups \"(all|home|office)\";\r\
+    \n\r\
+    \n:global NotificationFunctions {\r\
+    \n  \"email\"\r\
+    \n  \"telegram\";\r\
+    \n};\r\
+    \n# Toggle this to disable symbols in notifications.\r\
+    \n:global NotificationsWithSymbols true;\r\
+    \n:global TerminalColorOutput true;\r\
+    \n\r\
+    \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\
+    \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\
+    \n\r\
+    \n## Update channel. Possible values: stable, long-term, testing, developm\
+    ent\r\
+    \n:global updateChannel \"stable\";\r\
+    \n\r\
+    \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\
+    \");\r\
+    \n:global CertRenewTime 2w;\r\
+    \n:global CertRenewPass (a); #{\r\
+    \n#  \"\";\r\
+    \n#  \"v3ry-s3cr3t\";\r\
+    \n#  \"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n:global CertWarnTime 1w;\r\
+    \n:global CertIssuedExportPass (a); # {\r\
+    \n#  \"\";\r\
+    \n#  \"cert1-cn\"=\"v3ry-s3cr3t\";\r\
+    \n#  \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n\r\
+    \n# Script BackupAndUpdate mode, possible values: backup,\r\
+    \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\
+    n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;).  \r\
+    \n# osupdate - Update if available and creates backups before/after update\
+    \_(ignores `forceBackup`)\r\
+    \n#               Set `forceBackup` to true to always create backups, even\
+    \_without updates\r\
+    \n# osnotify - Set `forceBackup` to always create backups on every run\r\
+    \n:global DevInfoIncludeIP true;\r\
+    \n:global BackupAndUpdateMode \"osnotify\"\r\
+    \n\r\
+    \n:global forceBackup true;\r\
+    \n:global BackupPassword \"Peskar55\";\r\
+    \n\r\
+    \n# SFTP Backup Variables\r\
+    \n:global BackupRandomDelay 0;\r\
+    \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\
+    \n:global BackupUploadUser \$Identity;\r\
+    \n:global BackupUploadPass \"root.mnuc.backuper\";\r\
+    \n\r\
+    \n:global BackupSendBinary true;\r\
+    \n:global BackupSendExport true;\r\
+    \n:global BackupSendGlobalConfig true;\r\
+    \n:global BackupSendScripts true;\r\
+    \n\r\
+    \n# Remove local file after uploading if no errors\r\
+    \n:global BackupRmLocal true;\r\
+    \n\r\
+    \n# Local Backups Root Directory \r\
+    \n:global BackupLocalRoot \"tmpfs\";\r\
+    \n\r\
+    \n# Encrypt Backup\r\
+    \n:global BackupEncrypt true;\r\
+    \n\r\
+    \n# Sensitive information in Backups\r\
+    \n:global BackupSens true;\r\
+    \n\r\
+    \n# User Export\r\
+    \n:global BackupUser true;\r\
+    \n\r\
+    \n# License Export (not for CHR, will silently skip)\r\
+    \n:global BackupLicense false;\r\
+    \n\r\
+    \n# SSH Keys\r\
+    \n:global BackupSshKeys true;\r\
+    \n\r\
+    \n# Certificate Export\r\
+    \n:global BackupCerts true;\r\
+    \n\r\
+    \n# Certificate Password\r\
+    \n:global BackupCertsPasswd \"\";\r\
+    \n\r\
+    \n# User-Manager Export\r\
+    \n:global BackupUserMan false;\r\
+    \n\r\
+    \n# The Dude Export\r\
+    \n:global BackupDude false;\r\
+    \n\r\
+    \n# User Files to export, comma-separated string or array of strings\r\
+    \n# User Files are not removed on backup\r\
+    \n# Any directory paths will be removed (/ -> _) on remote file\r\
+    \n# Nonpresent files are silently skipped\r\
+    \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\
+    \n\r\
+    \n# load functions and any custom scripts\r\
+    \n#                    [ /system/script/find where name=\"global-config-ov\
+    erlay\" ], \\\r\
+    \n#                    [ /system/script/find where name~\"^global-config-o\
+    verlay\\\\.d/.\" ]\r\
+    \n#\r\
+    \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\
+    ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\
+    \r\
+    \n#  :onerror Err {\r\
+    \n#     /system/script/run \$Script;\r\
+    \n#     } do={\r\
+    \n#       :log error (\"Loading configuration from configs and functions\"\
+    \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\
+    \n#  }\r\
+    \n#}\r\
+    \n#:log info \"\\ndevMode = \$devMode\";\r\
+    \n#:log info \"\\ndevRunning = \$devRunning\";\r\
+    \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \
+    GlobalRUN\\r\?\\n\" ] do={\r\
+    \n  :onerror Err {\r\
+    \n    /system/script/run \$Script;\r\
+    \n       } do={\r\
+    \n       :log error (\"Run script \" . [ /system/script/get \$Script name \
+    ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# signal we are ready\r\
+    \n:set GlobalConfReady true;\r\
+    \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\
+    \n"
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \
+    owner=AM-GlobalFunc policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GglobalFunc\r\
+    \n# Script comment: Global functions\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch, scheduler\r\
+    \n:local ExitOK false;\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n#:global checkRunJob \$SriptName;\r\
+    \n#:global fixCRLF;\r\
+    \n#:if (\$fixCRLF !=  false) do={\r\
+    \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\
+    ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\
+    }\r\
+    \n#:if (\$fixCRLF !=  \"LF\") do={ /system/script/set source=[ :tocrlf [ g\
+    et \$fixScript source ] ] \$fixScript};};\r\
+    \n#}\r\
+    \n:global GlobalFuncReady false;\r\
+    \n\r\
+    \n# Git commit id & info, expected configuration version\r\
+    \n:global CommitId \"main/729/f42d43ae\";\r\
+    \n:global CommitTAG \"unknown\";\r\
+    \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\
+    r: root, in 00:05:03 01.07.2026.\";\r\
+    \n\r\
+    \n# The variables are received right here.\r\
+    \n:global GlobalConfVersion 140;\r\
+    \n\r\
+    \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\
+    \n\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global IdentityShort [:pick \$Identity 0 18];\r\
+    \n\r\
+    \n:global devBoardName [/system/resource/get board-name];\r\
+    \n:global devMode [/system/device-mode/get mode];\r\
+    \n:global devCurArch [/system/resource/get architecture-name];\r\
+    \n:global devCurVersion [/system/resource/get version];\r\
+    \n\r\
+    \n# Variables defined in AM-GlobalConfig.rsc\r\
+    \n:global TerminalColorOutput;\r\
+    \n:global CommentsInScripts;\r\
+    \n:global DetectIpAddrDefault;\r\
+    \n:global DetectIpAddrFallback;\r\
+    \n:global updateChannel;\r\
+    \n:global Domain;\r\
+    \n:global EmailGeneralTo;\r\
+    \n:global BackupAndUpdateMode;\r\
+    \n\r\
+    \n# Single functions, without nested functions.\r\
+    \n:global MiniDateTimeStamp;\r\
+    \n:global MicroDateTimeStamp;\r\
+    \n\r\
+    \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\
+    \n:global LogPrint;\r\
+    \n\r\
+    \n# DeviceInfo and Updates\r\
+    \n:global IsCheckUpdates;\r\
+    \n:global WaitCheckUpdates;\r\
+    \n:global GetPubIp;\r\
+    \n\r\
+    \n:global GetArrDeviceInfo;\r\
+    \n:global WaitArrDeviceInfo;\r\
+    \n\r\
+    \n:global devModel;\r\
+    \n:global devRunningMode;\r\
+    \n\r\
+    \n:global devRbRevision;\r\
+    \n:global devRbSerialNumber;\r\
+    \n:global devRbVerAvail;\r\
+    \n\r\
+    \n:global runningChannelVersion;\r\
+    \n:global runningChannel;\r\
+    \n:global runningVersion;\r\
+    \n\r\
+    \n:global devBuildTime;\r\
+    \n:global ROsVerAvail;\r\
+    \n:global PkgUpdStatus;\r\
+    \n:global currentUpdateChannel;\r\
+    \n\r\
+    \n:global ScriptInstallUpdate;\r\
+    \n\r\
+    \n:global DeviceInfo;\r\
+    \n\r\
+    \n:global OldMode;\r\
+    \n\r\
+    \n:global ParseKeyValueStore;\r\
+    \n:global RandomDelay;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global EscapeForRegEx;\r\
+    \n:global CharacterMultiply;\r\
+    \n:global CharacterReplace;\r\
+    \n:global CleanFilePath;\r\
+    \n:global CleanName;\r\
+    \n\r\
+    \n:global CommitBrief;\r\
+    \n\r\
+    \n:global EitherOr;\r\
+    \n:global FormatLine;\r\
+    \n:global GetRandom20CharAlNum;\r\
+    \n:global GetRandom20CharHex;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global Grep;\r\
+    \n:global IfThenElse;\r\
+    \n:global MAX;\r\
+    \n:global MIN;\r\
+    \n:global HumanReadableNum;\r\
+    \n\r\
+    \n:global IsFullyConnected;\r\
+    \n:global IsDNSResolving;\r\
+    \n:global IsTimeSync;\r\
+    \n:global IsTimeSyncCached;\r\
+    \n:global IsTimeSyncResetNtp;\r\
+    \n\r\
+    \n:global MkDir;\r\
+    \n:global RmDir;\r\
+    \n:global RmFile;\r\
+    \n:global FileGet;\r\
+    \n:global Unix2Dos;\r\
+    \n:global UrlEncode;\r\
+    \n:global WaitForFile;\r\
+    \n:global ScriptLock;\r\
+    \n:global SendTelegram;\r\
+    \n:global NotificationFunctions;\r\
+    \n:global SendNotification;\r\
+    \n:global SendNotification2;\r\
+    \n:global SymbolForNotification;\r\
+    \n:global SymbolByUnicodeName;\r\
+    \n:global ValidateSyntax;\r\
+    \n:global CheckSumsVerify;\r\
+    \n:global GlobalConfChanges;\r\
+    \n:global GlobalConfMigration;\r\
+    \n:global VersionToNum;\r\
+    \n:global RequiredRouterOS;\r\
+    \n:global ExitError;\r\
+    \n:global ExitOnError;\r\
+    \n\r\
+    \n:global FetchHugeFiles;\r\
+    \n:global FetchUserAgentStr;\r\
+    \n:global FileExists;\r\
+    \n:global CertificateAvailable;\r\
+    \n:global CertificateDownload;\r\
+    \n:global CertificateNameByCN;\r\
+    \n:global CharacterMultiply;\r\
+    \n\r\
+    \n:global InspectVar;\r\
+    \n:global InspectVarRet;\r\
+    \n:global ParseCustom;\r\
+    \n\r\
+    \n:set IsCheckUpdates do={\r\
+    \n  :local isInfo [:tobool \$1];\r\
+    \n  :global updateChannel;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\
+    \n  :local CurrentChannel [ /system/package/update/get channel ];\r\
+    \n  :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\
+    el) do={\r\
+    \n    :retry command={/system/package/update set channel=\$updateChannel} \
+    \_delay=300ms max=5 on-error={};\r\
+    \n    :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\
+    \n  }\r\
+    \n  :local Update [ /system/package/update/get ];\r\
+    \n  :local Channel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set currentUpdateChannel \$Channel;\r\
+    \n  :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\
+    \n  :local StatusPkg \"undefined\";\r\
+    \n  :log info (\$0 . \" Checking for updates...\");\r\
+    \n  :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\
+    dates without-paging as-value]->\"status\")} \\\r\
+    \n   delay=300ms max=5 on-error={};\r\
+    \n  :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\
+    \n  :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\
+    s true; } else={ :set PkgUpdStatus false; }\r\
+    \n  :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \
+    ] ];\r\
+    \n  :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n  :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\
+    \n    :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n    :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n      :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n    }\r\
+    \n    :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\
+    kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\
+    \n    :return true;\r\
+    \n  } else={\r\
+    \n    :return \$PkgUpdStatus;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitCheckUpdates do={\r\
+    \n  :global IsCheckUpdates;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :local Status \"\";\r\
+    \n  :local Update;\r\
+    \n  :local WaitCount 0;\r\
+    \n  :if ([ \$IsCheckUpdates true ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n  :while ((\$Status = \"\" || \$Status = \"finding out latest version...\
+    \") && \$WaitCount < 60) do={\r\
+    \n    :delay 1s;\r\
+    \n    :set WaitCount (\$WaitCount + 1);\r\
+    \n    :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n   }\r\
+    \n  :set Update [ /system/package/update/get ];\r\
+    \n  :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n  :if ((\$Update->\"status\") = \"New version is available\") do={\r\
+    \n    :set PkgUpdStatus true;\r\
+    \n  } else={\r\
+    \n    :set PkgUpdStatus false;\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n    :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n  }\r\
+    \n  :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\
+    \n  :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \
+    do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitArrDeviceInfo do={\r\
+    \n   :global GetArrDeviceInfo;\r\
+    \n   :while ([ \$GetArrDeviceInfo ] = false) do={\r\
+    \n    :delay 1s;\r\
+    \n   }\r\
+    \n}\r\
+    \n\r\
+    \n:set GetArrDeviceInfo do={\r\
+    \n   :global LogPrint;\r\
+    \n   :global arrDeviceInfo;\r\
+    \n   :global devBoardName;\r\
+    \n   :global devModel;\r\
+    \n   :global devRunning;\r\
+    \n   :global devCurArch;\r\
+    \n   :global devRbRevision;\r\
+    \n   :global devRbSerialNumber;\r\
+    \n   :global devBuildTime;\r\
+    \n   :global runningChannelVersion;\r\
+    \n   :global runningChannel;\r\
+    \n   :global runningVersion;\r\
+    \n   :global currentUpdateChannel;\r\
+    \n   :global ROsVerAvail;\r\
+    \n\r\
+    \n   :local DeviceInfo;\r\
+    \n   :local Resource [/system/resource/get];\r\
+    \n   :local Update [ /system/package/update/get ];\r\
+    \n   :local VersionString [ :tostr (\$Resource->\"version\") ];\r\
+    \n   :local ChannelStart [ :find \$VersionString \" (\" ];\r\
+    \n   :local RouterBoard;\r\
+    \n   :local IsRouterBoard false;\r\
+    \n   :local RunningMode \"\";\r\
+    \n\r\
+    \n   :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\
+    \n   :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\
+    \n   :set runningChannelVersion \$VersionString;\r\
+    \n   :set runningVersion \$VersionString;\r\
+    \n   :set runningChannel \"\";\r\
+    \n\r\
+    \n   :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\
+    {\r\
+    \n     :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\
+    \n     :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\
+    len \$VersionString ] ];\r\
+    \n     :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\
+    \n     :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\
+    \r\
+    \n       :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\
+    \n     }\r\
+    \n   }\r\
+    \n\r\
+    \n   :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\
+    \_3] != \"x86\") do={\r\
+    \n   :do {\r\
+    \n      :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\
+    \n#     :set RouterBoard [ /system/routerboard/get ];\r\
+    \n      :if ((\$RouterBoard->\"routerboard\") = true) do={\r\
+    \n        :set IsRouterBoard true;\r\
+    \n     }\r\
+    \n   } on-error={}\r\
+    \n    }\r\
+    \n\r\
+    \n   :do {\r\
+    \n     :set RunningMode [ /system/device-mode/get mode ];\r\
+    \n   } on-error={\r\
+    \n     :do {\r\
+    \n       :set RunningMode [ /system/device-mode/get running ];\r\
+    \n     } on-error={\r\
+    \n       :set RunningMode \"\";\r\
+    \n     }\r\
+    \n   }\r\
+    \n   :set devRunning \$RunningMode;\r\
+    \n\r\
+    \n   :if (\$IsRouterBoard = true) do={\r\
+    \n     :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\
+    \n     :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\
+    \n     :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \
+    ];\r\
+    \n   } else={\r\
+    \n     :set devModel \$devBoardName;\r\
+    \n     :set devRbRevision \"\";\r\
+    \n     :set devRbSerialNumber \"\";\r\
+    \n   }\r\
+    \n\r\
+    \n   :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n   :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n\r\
+    \n   :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\
+    \n   :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\
+    \n   :set (\$DeviceInfo->\"model\") \$devModel;\r\
+    \n   :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\
+    \n   :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\
+    \n   :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\
+    \n   :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\
+    \n   :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\
+    ion;\r\
+    \n   :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\
+    \n   :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\
+    \n   :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\
+    \n   :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\
+    current-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\
+    upgrade-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\
+    \n   :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\
+    alled-version\") ];\r\
+    \n   :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\
+    \n   :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\
+    ) ];\r\
+    \n\r\
+    \n   :set arrDeviceInfo \$DeviceInfo;\r\
+    \n   :return \$DeviceInfo;\r\
+    \n}\r\
+    \n\r\
+    \n:set DeviceInfo do={\r\
+    \n  :global GetArrDeviceInfo;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global FormatLine;\r\
+    \n  :global CommitBrief;\r\
+    \n\r\
+    \n  :local License [/system/license/get];\r\
+    \n  :local Snmp [ /snmp/get ];\r\
+    \n  :local Info [ \$GetArrDeviceInfo ];\r\
+    \n\r\
+    \n  :if ([ :typeof \$Info ] != \"array\") do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :return ( \\\r\
+    \n    [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\
+    \_. \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\
+    \_\\\r\
+    \n    \"Hardware:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Board\" (\$Info->\"board-name\") ] . \"\\n\" . \
+    \\\r\
+    \n    [ \$FormatLine \"    Arch\" (\$Info->\"architecture-name\") ] . \"\\\
+    n\" . \\\r\
+    \n    [ \$FormatLine \"    Model\" (\$Info->\"model\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\
+    \n      (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Serial\" (\$Info->\"serial-number\") ] . \"\
+    \\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"nlevel\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS:\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"level\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    [ \$FormatLine \"    Channel\" (\$Info->\"package-channel\") ] . \"\
+    \\n\" . \\\r\
+    \n    [ \$FormatLine \"    Installed\" (\$Info->\"installed-version\") ] .\
+    \_\"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Running\" ((\$Info->\"running-version\") . \
+    \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\
+    \n      ([ \$FormatLine \"    Running\" (\$Info->\"running-version\") ] . \
+    \"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\
+    \n        (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\
+    \_\\\r\
+    \n      ([ \$FormatLine \"    Available\" (\$Info->\"latest-version\") ] .\
+    \_\"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\
+    \n        (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\
+    ) \\\r\
+    \n      ([ \$FormatLine \"    Firmware\" ((\$Info->\"current-firmware\") .\
+    \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS-Scripts:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Version\" \$GlobalConfVersion ]);\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\
+    tionFunctions ({})}\r\
+    \n\r\
+    \n:set GetRandom20CharAlNum do={\r\
+    \n  :global EitherOr;\r\
+    \n  :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\
+    FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\
+    \n}\r\
+    \n\r\
+    \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\
+    \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\
+    \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\
+    \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\
+    \n\r\
+    \n:global checkRunJob;\r\
+    \n:set checkRunJob do={\r\
+    \n  :local Script [ :tostr \$1 ];\r\
+    \n  :global ScriptLock; \r\
+    \n  :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\
+    \n  :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\
+    :set Job [ /system/script/job/get \$Job ];\r\
+    \n    :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\
+    stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\
+    \n     :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\
+    lse; \r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVar do={\r\
+    \n  :global InspectVarRet;\r\
+    \n  :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\
+    \n}\r\
+    \n\r\
+    \n:set CommitBrief do={\r\
+    \n  :global CommitId;\r\
+    \n  :global CommitInfo;\r\
+    \n  :if (\$CommitId = \"unknown\") do={\r\
+    \n    :return \"unknown\";\r\
+    \n    }\r\
+    \n  :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVarRet do={\r\
+    \n  :local Input \$1;\r\
+    \n  :local Level (0 + [ :tonum \$2 ]);\r\
+    \n  :global CharacterReplace;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global InspectVarRet;\r\
+    \n  :local IndentReturn do={\r\
+    \n    :local Prefix [ :tostr \$1 ];\r\
+    \n    :local Value  [ :tostr \$2 ];\r\
+    \n    :local Level  [ :tonum \$3 ];\r\
+    \n    :global CharacterMultiply;\r\
+    \n    :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\
+    fix . \"-> \" . \$Value);\r\
+    \n  }\r\
+    \n  :local TypeOf [ :typeof \$Input ];\r\
+    \n  :local Len    [ :len \$Input ];\r\
+    \n  :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\
+    \n  :if (\$TypeOf = \"array\") do={\r\
+    \n    :foreach Key,Value in=\$Input do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n        [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\
+    \n        [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    :if (\$TypeOf = \"str\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n         [ \$IndentReturn \"len\" \$Len \$Level ]);\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\
+    \n      }\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if (\$TypeOf != \"nothing\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n       [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\
+    \_\\\r\
+    \n        ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set GetPubIp do={\r\
+    \n    :global DetectIpAddrDefault;\r\
+    \n    :global DetectIpAddrFallback;\r\
+    \n\r\
+    \n    :local PubIpAddr false;\r\
+    \n    :local Url \$DetectIpAddrDefault;\r\
+    \n    :local JobName [ :jobname ];\r\
+    \n\r\
+    \n    :do {\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using default serv\
+    ice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \
+    detect public IP using default service: \" . \$Url . \".\")}\r\
+    \n     } on-error={\r\
+    \n      :log error (\$0 . \" Failed to detect public IP using default serv\
+    ice: \" . \$Url . \".\");\r\
+    \n      :set Url \$DetectIpAddrFallBack;\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using fallback ser\
+    vice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\
+    \_detect public IP using fallback service: \" . \$Url . \".\")}\r\
+    \n    };\r\
+    \n    :local IpLen ([ :len \$PubIpAddr ] -1);\r\
+    \n    :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\
+    {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\
+    \n    :return \$PubIpAddr;\r\
+    \n}\r\
+    \n\r\
+    \n:set FormatLine do={\r\
+    \n  :local Key    [ :tostr \$1 ];\r\
+    \n  :local Value  [ :tostr \$2 ];\r\
+    \n  :local Indent [ :tonum \$3 ];\r\
+    \n  :local Spaces;\r\
+    \n  :local Return \"\";\r\
+    \n  :global CharacterMultiply;\r\
+    \n  :global EitherOr;\r\
+    \n  :set Indent [ \$EitherOr \$Indent 16 ];\r\
+    \n  :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\
+    \n  :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\
+    \n  :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\
+    n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\
+    \n  } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \
+    \$Return ]) ] . \$Value)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseCustom do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Start [:find [ \$Str ] [:tostr \$2]];\r\
+    \n  :local End [ :tostr \$3 ];\r\
+    \n  :local Num [ :tonum \$4 ];\r\
+    \n  :local Return;\r\
+    \n  :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\
+    \n  :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\
+    \n  :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\
+    lse={\r\
+    \n  :set End [:find \$rest \$End];\r\
+    \n  :set Return [:pick \$rest 0 \$End];\r\
+    \n  }\r\
+    \n:return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set LogPrint do={\r\
+    \n  :local Severity [ :tostr \$1 ];\r\
+    \n  :local Name     [ :tostr \$2 ];\r\
+    \n  :local Message  [ :tostr \$3 ];\r\
+    \n  :global PrintDebug;\r\
+    \n  :global PrintDebugOverride;\r\
+    \n  :global EitherOr;\r\
+    \n  :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \
+    ];\r\
+    \n  :local PrintSeverity do={\r\
+    \n  :global TerminalColorOutput;\r\
+    \n   :if (\$TerminalColorOutput != true) do={:return \$1}\r\
+    \n   :local Color { debug=96; info=97; warning=93; error=91 };\r\
+    \n   :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\
+    \n}\r\
+    \n  :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\
+    \r\
+    \n  :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\
+    \n    :if (\$Severity = \"debug\") do={:log debug \$Log}\r\
+    \n    :if (\$Severity = \"error\") do={:log error \$Log}\r\
+    \n    :if (\$Severity = \"info\" ) do={:log info  \$Log}\r\
+    \n  } else={:log warning \$Log; :set Severity \"warning\"}\r\
+    \n  :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\
+    erity \$Severity ] . \": \" . \$Message)}\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateAvailable do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :local UseFor     [ :tostr \$2 ];\r\
+    \n\r\
+    \n  :global CertificateDownload;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n\r\
+    \n  :if ([ :len \$UseFor ] = 0) do={\r\
+    \n    :log warning (\$0 . \"The intended use is undefined!\");\r\
+    \n    :set UseFor \"undefined\";\r\
+    \n  }\r\
+    \n  :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\
+    \n       [ /certificate/settings/get crl-download ] = true && \\\r\
+    \n       [ /certificate/settings/get crl-store ] = \"system\") do={\r\
+    \n    :log warning (\$0 . \"This system has low free flash space but \" . \
+    \\\r\
+    \n      \"is configured to download certificate CRLs to system!\");\r\
+    \n  }\r\
+    \n  :if ([ :len \$CommonName ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No CommonName given!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\
+    \r\
+    \n        (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\
+    \n        (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n       [ :len [ /certificate/builtin/find where common-name=\$CommonName\
+    \_] ] > 0) do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \
+    \"' not available.\");\r\
+    \n    :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\
+    ) do={\r\
+    \n    :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\
+    \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\
+    e ] ];\r\
+    \n  :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\
+    ertVal->\"skid\")) do={\r\
+    \n    :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\
+    \_= 0) do={\r\
+    \n      :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\
+    >\"CN\");\r\
+    \n      :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \
+    is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\
+    \n      :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\
+    \") ] ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateDownload do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :global ScriptUpdatesBaseUrl;\r\
+    \n  :global ScriptUpdatesUrlSuffix;\r\
+    \n  :global CertificateNameByCN;\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :log info (\$0 . \"Downloading and importing certificate with \" . \\\
+    \r\
+    \n      \"CommonName '\" . \$CommonName . \"'.\");\r\
+    \n  :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\
+    \n  :do {\r\
+    \n    /tool/fetch check-certificate=yes-without-crl mode=https http-header\
+    -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\
+    sUrlSuffix) \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n    \$WaitForFile \$FileName;\r\
+    \n  } on-error={\r\
+    \n    :log warning (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \\\r\
+    \n      \"' from repository! Trying fallback to mkcert.org...\");\r\
+    \n    :do {\r\
+    \n      :local CertSettings [ /certificate/settings/get ];\r\
+    \n      :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\
+    \_] ] = 0 && \\\r\
+    \n           !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \
+    || \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \
+    \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\
+    \r\
+    \n             [ :len [ /certificate/builtin/find where common-name=\"ISRG\
+    \_Root X1\" ] ] > 0)) do={\r\
+    \n        :log error (\$0 . \" Required certificate is not available.\");\
+    \r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n      /tool/fetch check-certificate=yes-without-crl mode=https http-head\
+    er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\
+    n ({ \$CommonName }) ] \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n      \$WaitForFile \$FileName;\r\
+    \n      :if ([ /file/get \$FileName size ] = 0) do={\r\
+    \n        \$RmFile \$FileName;\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n    } on-error={\r\
+    \n      :log error (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \"'!\");\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\
+    \n  :delay 1s;\r\
+    \n  \$RmFile \$FileName;\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\
+    +\\\$\") ];\r\
+    \n    :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\
+    e . \"' still unavailable!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \
+    \"_[0-9]+\\\$\") ] do={\r\
+    \n    \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateNameByCN do={\r\
+    \n  :local Match [ :tostr \$1 ];\r\
+    \n  :global CleanName;\r\
+    \n  :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\
+    rint=\$Match or name=\$Match) ]->0);\r\
+    \n  :if ([ :len \$Cert ] = 0) do={\r\
+    \n    :log warning (\$0 .\" No matching certificate found.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CommonName [ /certificate/get \$Cert common-name ];\r\
+    \n  /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileExists do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :local Type     [ :tostr \$2 ];\r\
+    \n  :global FileGet;\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={ :return false; }\r\
+    \n  :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\
+    \n  :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\
+    \_true; }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set Grep do={\r\
+    \n  :local Input  ([ :tostr \$1 ] . \"\\n\");\r\
+    \n  :local Pattern [ :tostr \$2 ];\r\
+    \n  :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\
+    }\r\
+    \n  :do {\r\
+    \n    :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\
+    \n    :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \
+    \$Line}\r\
+    \n    :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\
+    Input ] ];\r\
+    \n  } while=([ :len \$Input ] > 0);\r\
+    \n  :return [];\r\
+    \n}\r\
+    \n\r\
+    \n:set HumanReadableNum do={\r\
+    \n  :local Input [ :tonum \$1 ];\r\
+    \n  :local Base  [ :tonum \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Prefix \"kMGTPE\";\r\
+    \n  :local Pow 1;\r\
+    \n  :set Base [ \$EitherOr \$Base 1024 ];\r\
+    \n  :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\
+    \n  :if (\$Input < \$Base) do={:return \$Input}\r\
+    \n  :for I from=0 to=[ :len \$Prefix ] do={\r\
+    \n    :set Pow (\$Pow * \$Base);\r\
+    \n    :if (\$Input / \$Base < \$Pow) do={\r\
+    \n      :set Prefix [ :pick \$Prefix \$I ];\r\
+    \n      :local Tmp1 (\$Input * 100 / \$Pow);\r\
+    \n      :local Tmp2 (\$Tmp1 / 100);\r\
+    \n      :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\
+    \n      :return (\$Tmp2 . \".\" . \\\r\
+    \n          [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\
+    2 ] + 1) ] . \\\r\
+    \n          \$Prefix . \$Bin);\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanFilePath do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CharacterReplace;\r\
+    \n  :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \
+    \"//\" \"/\" ]; }\r\
+    \n  :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\
+    n \$Path ] ]; }\r\
+    \n  :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \
+    :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\
+    \n  :return \$Path;\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanName do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\
+    stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\
+    \n      :do {:if ([ :len \$Return ] = 0) do={:error true};\r\
+    \n        :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\
+    ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\
+    \n    };\r\
+    \n    :set Return (\$Return . \$Char)};\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set RandomDelay do={\r\
+    \n  :local Time [ :tonum \$1 ];\r\
+    \n  :local Unit [ :tostr \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global GetRandomNumber;\r\
+    \n  :global MAX;\r\
+    \n  :if (\$Time = 0) do={:return false}\r\
+    \n  :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \
+    [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\
+    \n}\r\
+    \n\r\
+    \n:set EscapeForRegEx do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitError do={\r\
+    \n  :local ExitOK [ :tostr \$1 ];\r\
+    \n  :local Name   [ :tostr \$2 ];\r\
+    \n  :local Error  [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$ExitOK = \"false\") do={\r\
+    \n    :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \
+    \\\r\
+    \n        \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\
+    ror\" . \\\r\
+    \n        [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \
+    \$Error) \".\" ]);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitOnError do={\r\
+    \n  :local Name   [ :tostr \$1 ];\r\
+    \n  :local Error  [ :tostr \$2 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\
+    \\\$\") \\\r\
+    \n      \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\
+    r\" . \\\r\
+    \n      [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\
+    rror) \".\" ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set MiniDateTimeStamp do={\r\
+    \n    :local mikro [ :tobool \$1 ];\r\
+    \n    /system/clock;\r\
+    \n    :local vdate [get date];\r\
+    \n    :local vtime [get time];\r\
+    \n    :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\
+    \n    :local MM    [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\
+    \n    :local M     [:tonum \$MM];\r\
+    \n    :if (\$vdate ~ \".../../....\") do={\r\
+    \n        :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\
+    \n        :set M     ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\
+    PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\
+    \n        :if (\$M>12) do={:set M (\$M - 12)}\r\
+    \n        :set MM    [:pick (100 + \$M) 1 3];\r\
+    \n    }\r\
+    \n    :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\
+    \n    :local dd   [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\
+    \n    :local HH   [:pick \$vtime 0  2];\r\
+    \n    :local mm   [:pick \$vtime 3  5];\r\
+    \n    :local ss   [:pick \$vtime 6  8];\r\
+    \n    :local Return;\r\
+    \n    :if (\$mikro = true) do={\r\
+    \n      :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\
+    \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\
+    \n    } else={\r\
+    \n    :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\
+    \r\
+    \n   }\r\
+    \n   :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitForFile do={\r\
+    \n  :local FileName [ :tostr  \$1 ];\r\
+    \n  :local WaitTime [ :totime \$2 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global EitherOr;\r\
+    \n  :global MAX;\r\
+    \n  :set FileName [ \$CleanFilePath \$FileName ];\r\
+    \n  :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } delay=\$Delay max=10;\r\
+    \n  } on-error={ }\r\
+    \n  :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\
+    \n    :do {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } on-error={ }\r\
+    \n    :delay \$Delay;\r\
+    \n    :set Delay (\$Delay * 3 / 2);\r\
+    \n  }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileGet do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global WaitForFile;\r\
+    \n  :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FileVal false;\r\
+    \n  :do {\r\
+    \n    :set FileVal [ /file/get \$FileName ];\r\
+    \n   } on-error={ }\r\
+    \n  :return \$FileVal;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmDir do={\r\
+    \n  :local DirName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing directory: \". \$DirName);\r\
+    \n  :local DirVal [ \$FileGet \$DirName ];\r\
+    \n  :if (\$DirVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  };\r\
+    \n  :if (\$DirVal->\"type\" != \"directory\") do={\r\
+    \n    :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\
+    ory.\");\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$DirName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\
+    : \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmFile do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing file: \". \$FileName);\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\
+    sk\") do={\r\
+    \n    :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\
+    \r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$FileName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\
+    \_. \$Err); :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MkDir do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global FileGet;\r\
+    \n  :global RmDir;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :local MkTmpfs do={\r\
+    \n   :global WaitForFile;\r\
+    \n   :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n   :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n     :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n       :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\
+    \n       /disk/enable \$TmpFs;\r\
+    \n      }\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :log info (\$0 . \" Creating disk of type tmpfs.\");\r\
+    \n    \$RmDir \"tmpfs\";\r\
+    \n    :onerror Err {\r\
+    \n      /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\
+    /get total-memory ] / 3);\r\
+    \n      \$WaitForFile \"tmpfs\";\r\
+    \n    } do={\r\
+    \n      :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\
+    Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :set Path [ \$CleanFilePath \$Path ];\r\
+    \n  :if (\$Path = \"\") do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log debug (\$0 . \" Making directory: \" . \$Path);\r\
+    \n  :local PathVal [ \$FileGet \$Path ];\r\
+    \n  :if (\$PathVal->\"type\" = \"directory\") do={\r\
+    \n    :log debug (\$0 . \" ... which already exists.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/add type=\"directory\" name=\$Path;\r\
+    \n    \$WaitForFile \$Path;\r\
+    \n  } do={\r\
+    \n    :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \
+    \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterReplace do={\r\
+    \n  :local String [ :tostr \$1 ];\r\
+    \n  :local ReplaceFrom [ :tostr \$2 ];\r\
+    \n  :local ReplaceWith [ :tostr \$3 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :if (\$ReplaceFrom = \"\") do={:return \$String}\r\
+    \n  :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\
+    \r\
+    \n    :local Pos [ :find \$String \$ReplaceFrom ];\r\
+    \n    :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\
+    \r\
+    \n    :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\
+    \_\$String ] ];\r\
+    \n  }\r\
+    \n  :return (\$Return . \$String);\r\
+    \n}\r\
+    \n\r\
+    \n:set IfThenElse do={\r\
+    \n  :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \
+    \$2};\r\
+    \n  :return \$3;\r\
+    \n}\r\
+    \n\r\
+    \n:set EitherOr do={\r\
+    \n  :global IfThenElse;\r\
+    \n  :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \
+    \$1 \$2 ]}\r\
+    \n  :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\
+    \_\$1 \$2 ]}\r\
+    \n# this works for boolean values, literal ones with parentheses\r\
+    \n  :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseKeyValueStore do={\r\
+    \n  :local Source \$1;\r\
+    \n  :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\
+    \n    :do {\r\
+    \n      :return [ :deserialize from=json \$Source ];\r\
+    \n    } on-error={ }\r\
+    \n  }   \r\
+    \n  :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\
+    }\r\
+    \n  :local Result ({});\r\
+    \n  :foreach KeyValue in=[ :toarray \$Source ] do={\r\
+    \n    :if ([ :find \$KeyValue \"=\" ]) do={\r\
+    \n      :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\
+    \n      :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\
+    \_:len \$KeyValue ] ];\r\
+    \n      :if (\$Value=\"true\") do={:set Value true}\r\
+    \n      :if (\$Value=\"false\") do={:set Value false}\r\
+    \n      :set (\$Result->\$Key) \$Value;\r\
+    \n      } else={:set (\$Result->\$KeyValue) true}\r\
+    \n  }\r\
+    \n  :return \$Result;\r\
+    \n}\r\
+    \n:set RequiredRouterOS do={\r\
+    \n  :local Caller   [ :tostr \$1 ];\r\
+    \n  :local Required [ :tostr \$2 ];\r\
+    \n  :local Warn     [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :global VersionToNum;\r\
+    \n  :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\
+    \\\$\")) do={\r\
+    \n    :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\
+    e/update/get installed-version ] ]) do={\r\
+    \n    :if (\$Warn = \"true\") do={\r\
+    \n      :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \
+    0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\
+    \n        \" '\" . \$Caller . \"' (at least specific functionality) requir\
+    es RouterOS \" . \$Required . \". Please update!\");\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set ValidateSyntax do={\r\
+    \n  :local Code [ :tostr \$1 ];\r\
+    \n  :global LogPrint;\r\
+    \n  :onerror Err {\r\
+    \n    [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\
+    \n  } do={\r\
+    \n    \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set VersionToNum do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Multi 0x1000000;\r\
+    \n  :local Return 0;\r\
+    \n  :global CharacterReplace;\r\
+    \n  :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\
+    \n  :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\
+    \n    :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\
+    \r\
+    \n  }\r\
+    \n  :foreach Value in=([ :toarray \$Input ], 0) do={\r\
+    \n    :local Num [ :tonum \$Value ];\r\
+    \n    :if (\$Multi = 0x100) do={\r\
+    \n      :if ([ :typeof \$Num ] = \"num\") do={\r\
+    \n        :set Return (\$Return + 0xff00);\r\
+    \n        :set Multi (\$Multi / 0x100);\r\
+    \n      } else={\r\
+    \n        :if (\$Value = \"zero\") do={ }\r\
+    \n        :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \
+    }\r\
+    \n        :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\
+    \r\
+    \n        :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\
+    lue * \$Multi)); }\r\
+    \n    :set Multi (\$Multi / 0x100);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptLock do={\r\
+    \n  :local Script  [ :tostr  \$1 ];\r\
+    \n  :local WaitMax [ :totime \$2 ];\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global ScriptLockOrder;\r\
+    \n  :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\
+    \n    :set ScriptLockOrder ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :local JobCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :return [ :len [ /system/script/job/find where script=\$Script ] ];\
+    \r\
+    \n  }\r\
+    \n  :local TicketCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :local Count 0;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \
+    + 1)}\r\
+    \n    }\r\
+    \n    :return \$Count;\r\
+    \n  }\r\
+    \n  :local IsFirstTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Check  [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if (\$Ticket = \$Check) do={:return true}\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\
+    o={:return false}\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local AddTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Add    [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :while (true) do={\r\
+    \n      :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\
+    \n      :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\
+    \n      :delay 10ms;\r\
+    \n      :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\
+    e}\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local RemoveTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Remove [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\
+    \n        :set (\$ScriptLockOrder->\$Script->\$Id);\r\
+    \n        :delay 10ms;\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local CleanupTickets do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\
+    \n    }\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\
+    \n  :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\
+    \n    :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\
+    ist!\");\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$JobCount \$Script ] = 0) do={\r\
+    \n    \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\
+    );\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\
+    \n    :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\
+    t . \"', resetting!\");\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n    /system/script/job/remove [ find where script=\$Script ];\r\
+    \n  }\r\
+    \n  :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\
+    \n  \$AddTicket \$Script \$MyTicket;\r\
+    \n  :local WaitInterval (\$WaitMax / 20);\r\
+    \n  :local WaitTime \$WaitMax;\r\
+    \n  :while (\$WaitTime > 0 && \\\r\
+    \n      ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\
+    \n      [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\
+    \n    :set WaitTime (\$WaitTime - \$WaitInterval);\r\
+    \n    :delay \$WaitInterval;\r\
+    \n  }\r\
+    \n  :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\
+    \n      [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\
+    \n    \$RemoveTicket \$Script \$MyTicket;\r\
+    \n    \$CleanupTickets \$Script;\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  \$RemoveTicket \$Script \$MyTicket;\r\
+    \n  \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \
+    once\" . \\\r\
+    \n    [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\
+    \_lock\" \"\" ] . \"...\");\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification do={ :onerror Err {\r\
+    \n  :global SendNotification2;\r\
+    \n  \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\
+    \_silent=\$4 });\r\
+    \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification2 do={\r\
+    \n  :local Notification \$1;\r\
+    \n  :global NotificationFunctions;\r\
+    \n  :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\
+    \n    (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\
+    ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolByUnicodeName do={\r\
+    \n  :local Name [ :tostr \$1 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global SymbolsExtra;\r\
+    \n  :local Symbols ({\r\
+    \n    \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\
+    \n    \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\
+    \n    \"arrow-down\"=\"\\E2\\AC\\87\";\r\
+    \n    \"arrow-up\"=\"\\E2\\AC\\86\";\r\
+    \n    \"calendar\"=\"\\F0\\9F\\93\\85\";\r\
+    \n    \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\
+    \n    \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\
+    \n    \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\
+    \n    \"cloud\"=\"\\E2\\98\\81\";\r\
+    \n    \"cross-mark\"=\"\\E2\\9D\\8C\";\r\
+    \n    \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\
+    \n    \"fire\"=\"\\F0\\9F\\94\\A5\";\r\
+    \n    \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\
+    \n    \"gear\"=\"\\E2\\9A\\99\";\r\
+    \n    \"heart\"=\"\\E2\\99\\A5\";\r\
+    \n    \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\
+    \n    \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\
+    \n    \"information\"=\"\\E2\\84\\B9\";\r\
+    \n    \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\
+    \n    \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\
+    \n    \"link\"=\"\\F0\\9F\\94\\97\";\r\
+    \n    \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\
+    \n    \"memo\"=\"\\F0\\9F\\93\\9D\";\r\
+    \n    \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\
+    \n    \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\
+    \n    \"scissors\"=\"\\E2\\9C\\82\";\r\
+    \n    \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\
+    \n    \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\
+    \n    \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\
+    \n    \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\
+    \n    \"sparkles\"=\"\\E2\\9C\\A8\";\r\
+    \n    \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\
+    \n    \"star\"=\"\\E2\\AD\\90\";\r\
+    \n    \"warning-sign\"=\"\\E2\\9A\\A0\";\r\
+    \n    \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\
+    \n  }, \$SymbolsExtra);\r\
+    \n  :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\
+    \n  :local Special {\r\
+    \n    \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\
+    \n    \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\
+    \n    \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\
+    \n    \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\
+    \n  :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\
+    '!\");\r\
+    \n    :return \"\";\r\
+    \n  }\r\
+    \n  :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\
+    me) ] . \"\\EF\\B8\\8F\");\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolForNotification do={\r\
+    \n  :global NotificationsWithSymbols;\r\
+    \n  :global SymbolByUnicodeName;\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\
+    \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\
+    \n  :local Return \"\";\r\
+    \n  :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\
+    mbolByUnicodeName \$Symbol ])}\r\
+    \n  :return (\$Return . \" \");\r\
+    \n}\r\
+    \n\r\
+    \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\
+    \n:set UrlEncode do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\
+    \n  :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\
+    %24\"; \"%25\"; \"%26\"; \"%27\";\r\
+    \n         \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \
+    \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\
+    \n         \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \
+    \"%7C\"; \"%7D\"; \"%7E\" };\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :local Replace [ :find \$Chars \$Char ];\r\
+    \n    :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\
+    ce)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsDNSResolving do={\r\
+    \n  :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsFullyConnected do={\r\
+    \n  :global IsDNSResolving;\r\
+    \n  :global IsTimeSync;\r\
+    \n  :if ([ \$IsDNSResolving ] = false) do={:return false};\r\
+    \n  :if ([ \$IsTimeSync ] = false) do={:return false};\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsTimeSync do={\r\
+    \n  :global IsTimeSyncCached;\r\
+    \n  :global IsTimeSyncResetNtp;\r\
+    \n  :if (\$IsTimeSyncCached = true) do={:return true}\r\
+    \n  :if ([ /system/ntp/client/get enabled ] = true) do={\r\
+    \n    :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :local Uptime [ /system/resource/get uptime ];\r\
+    \n    :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\
+    \n      :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    }\r\
+    \n    :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\
+    \n    :log warning \"\$0 The ntp client is configured, but did not sync.\"\
+    ;\r\
+    \n    :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    /system/ntp/client/set enabled=no;\r\
+    \n    :delay 20ms;\r\
+    \n    /system/ntp/client/set enabled=yes;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\
+    \n       [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\
+    \n    :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\
+    ee license and x86.\";\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ /ip/cloud/get update-time ] = true) do={\r\
+    \n    :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :log debug \"\$0 No time source configured! Returning gracefully...\";\
+    \r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchHugeFiles do={\r\
+    \n  :local ScriptName [ :tostr \$1 ];\r\
+    \n  :local Url        [ :tostr \$2 ];\r\
+    \n  :local CheckCert  [ :tostr \$3 ];\r\
+    \n\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global MkDir;\r\
+    \n  :global RmDir;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\
+    ithout-crl\" ];\r\
+    \n\r\
+    \n  :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\
+    \n  :if ([ \$MkDir \$DirName ] = false) do={\r\
+    \n    \$LogPrint error \$0 (\"Failed creating directory!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \
+    \$GetRandom20CharAlNum ]);\r\
+    \n  :onerror Err {\r\
+    \n    /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \
+    \\\r\
+    \n      http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\
+    lue;\r\
+    \n  } do={\r\
+    \n    :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\
+    \n      \$RmFile \$FileName;\r\
+    \n    }\r\
+    \n    \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\
+    \_. \$Err);\r\
+    \n    \$RmDir \$DirName;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\
+    \n    \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\
+    \_not show up.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileSize [ /file/get \$FileName size ];\r\
+    \n  :local Return \"\";\r\
+    \n  :local VarSize 0;\r\
+    \n  :while (\$VarSize != \$FileSize) do={\r\
+    \n    :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\
+    768 file=\$FileName as-value ]->\"data\"));\r\
+    \n    :set FileSize [ /file/get \$FileName size ];\r\
+    \n    :set VarSize [ :len \$Return ];\r\
+    \n    :if (\$VarSize > \$FileSize) do={\r\
+    \n      :delay 100ms;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  \$RmDir \$DirName;\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchUserAgentStr do={\r\
+    \n  :local Caller [ :tostr \$1 ];\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global CommitBrief;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Resource [ /system/resource/get ];\r\
+    \n  :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\
+    \_\$Resource->\"architecture-name\" . \\\r\
+    \n    \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\
+    CommitBrief ] . \")\");\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptInstallUpdate do={ :onerror Err {\r\
+    \n  :local Scripts    [ :toarray \$1 ];\r\
+    \n  :local NewComment [ :tostr   \$2 ];\r\
+    \n  :global InitSetup;\r\
+    \n\r\
+    \n  :global CommitId;\r\
+    \n  :global ScriptUpdatesCRLF;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global CheckSumsVerify;\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SumsDirAndFileName;\r\
+    \n  :global GlobalScriptsUrlSuffix;\r\
+    \n  :global EitherOr;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global Grep;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n  :global RequiredRouterOS;\r\
+    \n  :global SendNotification2;\r\
+    \n  :global SymbolForNotification;\r\
+    \n  :global ValidateSyntax;\r\
+    \n  :global CommentsInScripts;\r\
+    \n\r\
+    \n  :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\
+    hout.\");\r\
+    \n  }\r\
+    \n\r\
+    \n  :foreach Script in=\$Scripts do={\r\
+    \n    :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\
+    \r\
+    \n      \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\
+    \n      /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \
+    Vados\\n\" comment=\$NewComment;\r\
+    \n    }\r\
+    \n  }\r\
+    \n\r\
+    \n  :local CommitIdBefore \$CommitId;\r\
+    \n  :local GlobalConfVersionBefore \$GlobalConfVersion;\r\
+    \n  :local ReloadGlobal false;\r\
+    \n  :local DeviceMode [ /system/device-mode/get ];\r\
+    \n\r\
+    \n  :if (\$CheckSumsVerify = true) do={\r\
+    \n    :local CheckSums ({});\r\
+    \n     :do {\r\
+    \n     :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\
+    iptsUrlSuffix);\r\
+    \n      \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\
+    \r\
+    \n      :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\
+    ficate=yes-without-crl \\\r\
+    \n        http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\
+    =user as-value ]->\"data\") ];\r\
+    \n    } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\
+    \n    }\r\
+    \n\r\
+    \n  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\
+    s\" ] do={\r\
+    \n    :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n    :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \
+    ];\r\
+    \n    :local SourceNew;\r\
+    \n\r\
+    \n    :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\
+    \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\
+    \n      :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\
+    \n      :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\
+    iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \
+    \"'!\");\r\
+    \n        }\r\
+    \n    }\r\
+    \n    :do {\r\
+    \n      :if (\$ScriptInfo->\"ignore\" = true) do={\r\
+    \n        \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\
+    e\" . \"', as requested.\");\r\
+    \n        :error true;\r\
+    \n      }\r\
+    \n      :if (\$CheckSumsVerify = true) do={\r\
+    \n        :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\
+    \n        :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\
+    ptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n             [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\
+    rce\") ] ] = \$CheckSum) do={\r\
+    \n          \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\
+    >\"name\" . \"' matches, ignoring.\");\r\
+    \n          :error true;\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\
+    \n        :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\
+    fetch\" ] = false) do={\r\
+    \n          \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\
+    ng without.\");\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :onerror Err {\r\
+    \n        :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\
+    lScriptsUrl ];\r\
+    \n        :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\
+    lobalScriptsUrlSuffix ];\r\
+    \n        :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\
+    Suffix);\r\
+    \n        \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\
+    name\") . \"' from url: \" . \$Url);\r\
+    \n        :local Result [ /tool/fetch check-certificate=yes-without-crl \\\
+    \r\
+    \n          http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\
+    ut=user as-value ];\r\
+    \n        :if (\$Result->\"status\" = \"finished\") do={\r\
+    \n          :set SourceNew [ :tolf (\$Result->\"data\") ];\r\
+    \n        } \r\
+    \n      } do={\r\
+    \n        \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\
+    al->\"name\" . \"': \" . \$Err);\r\
+    \n        :if (\$Err != \"Fetch failed with status 404\") do={\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\
+    \n          \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\
+    \?\");\r\
+    \n          /system/script/remove \$Script;\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$CheckSumsVerify = true) do={\r\
+    \n          :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\
+    riptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n               [ :len \$CheckSum ] = 0) do={\r\
+    \n            \$LogPrint warning \$0 (\"Added the script manually\? Skip u\
+    pdates with 'ignore=true' in comment.\");\r\
+    \n          }\r\
+    \n        }\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :len \$SourceNew ] = 0) do={\r\
+    \n        \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\
+    >\"name\") . \"'.\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :local SourceCRLF [ :tocrlf \$SourceNew ];\r\
+    \n      :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\
+    lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\
+    \n        :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\
+    \$ScriptVal->\"source\")) do={\r\
+    \n          \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\") \
+    . \"' source did not change. End of lines set to CRLF.\");\r\
+    \n          if (\$ScriptUpdatesCRLF = false) do={\r\
+    \n            :put [ :tolf \$SourceNew ];\r\
+    \n            \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\"\
+    ) . \"' source update end of lines to LF.\");\r\
+    \n          }\r\
+    \n        :error false;\r\
+    \n        }\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\
+    l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\
+    );\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if (\$CommentsInScripts = true) do={\r\
+    \n         :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\
+    \_\") ];\r\
+    \n         :if ([ :len \$CommentLine ] = 0) do={\r\
+    \n           \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\
+    iptVal->\"name\") . \"' for comment in script body, is not found result Ig\
+    noring!\");\r\
+    \n           :error false;\r\
+    \n         } else={\r\
+    \n           :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\
+    ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\
+    ] + 2) [ :len \$CommentLine] ]) do={\r\
+    \n             \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\
+    \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\
+    ;\r\
+    \n             :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\
+    ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\
+    \n             \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\
+    omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\
+    ded!\");\r\
+    \n           } else={\r\
+    \n             \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\
+    al->\"name\") . \"' did not change.\");\r\
+    \n             :error false;\r\
+    \n           }\r\
+    \n         }   \r\
+    \n      }\r\
+    \n\r\
+    \n      :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\
+    \"\\23 requires RouterOS, \") ] ]->version);\r\
+    \n      :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\
+    \_false ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires RouterOS \" . \\\r\
+    \n            \$RequiredROS . \", which is not met by your installation. I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\
+    \\23 requires device-mode, \") ] ];\r\
+    \n      :local MissingDM ({});\r\
+    \n      :foreach Feature,Value in=\$RequiredDM do={\r\
+    \n        :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\
+    ceMode->\$Feature) = false) do={\r\
+    \n          :set MissingDM (\$MissingDM, \$Feature);\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len \$MissingDM ] > 0) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires disabled \" . \\\r\
+    \n            \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\
+    ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      \r\
+    \n      :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\
+    ript comment: \" . (\$ScriptVal->\"comment\"));\r\
+    \n\r\
+    \n      /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\
+    Val->\"comment\") \\\r\
+    \n          source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\
+    F \$SourceNew ] \$Script;\r\
+    \n      :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\
+    \n           \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\
+    \n           \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\
+    o={\r\
+    \n        :set ReloadGlobal true;\r\
+    \n      }\r\
+    \n    } on-error={ }\r\
+    \n  }\r\
+    \n  :if (\$ReloadGlobal = true) do={\r\
+    \n    \$LogPrint info \$0 (\"Reloading global configuration and functions.\
+    \");\r\
+    \n    :onerror Err {\r\
+    \n      :global InitSetup (a);\r\
+    \n      /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\
+    \n    } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\
+    ctions failed! \" . \$Err)}\r\
+    \n  }\r\
+    \n  :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\
+    \n    \$LogPrint warning \$0 (\"The configuration version decreased from \
+    \" . \\\r\
+    \n      \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\
+    \n      \". Installed an older version\?\");\r\
+    \n  }\r\
+    \n    :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\
+    \n    :global GlobalConfChanges;\r\
+    \n    :global GlobalConfMigration;\r\
+    \n    :local ChangeLogCode;\r\
+    \n    :if ([ :len \$ChangeLogCode ] > 0) do={\r\
+    \n      :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\
+    \n        :onerror Err {\r\
+    \n          [ :parse \$ChangeLogCode ];\r\
+    \n        } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \
+    . \$Err)}\r\
+    \n      } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\
+    dation!\")}\r\
+    \n    }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\
+    \n        :do {\r\
+    \n          :if ([ :typeof \$Migration ] != \"str\") do={\r\
+    \n            \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\
+    \_\" is not available.\");\r\
+    \n            :error false;\r\
+    \n          }\r\
+    \n          :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\
+    \n            \$LogPrint warning \$0 (\"Migration code for change \" . \$I\
+    \_. \" failed syntax validation!\");\r\
+    \n            :error false}\r\
+    \n          \$LogPrint info \$0 (\"Applying migration for change \" . \$I \
+    . \": \" . \$Migration);\r\
+    \n          :onerror Err {\r\
+    \n            [ :parse \$Migration ];\r\
+    \n          } do={\$LogPrint warning \$0 (\"Migration code for change \" .\
+    \_\$I . \" failed to run: \" . \$Err)}\r\
+    \n        } on-error={ }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :local NotificationMessage (\"The configuration version on \" . \$Id\
+    entity . \" increased \" . \\\r\
+    \n       \"to \" . \$GlobalConfVersion . \", current configuration may nee\
+    d modification. \" . \\\r\
+    \n       \"Please review and update global-config-overlay, then re-run glo\
+    bal-config.\");\r\
+    \n    \$LogPrint info \$0 (\$NotificationMessage);\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\
+    \");\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\
+    \n        :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\
+    \r\
+    \n            [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\
+    \n        \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\
+    \n      }\r\
+    \n    } else={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\
+    \_changes are not available.\");\r\
+    \n\r\
+    \n      }\r\
+    \n\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \
+    } else={ :global GlobalConfChanges (a); }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\
+    on; } else={ :global GlobalConfMigration (a); }\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n\r\
+    \n# load modules\r\
+    \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\
+    ns\\\\.d|mod)/.\" ] do={\r\
+    \n  :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n  :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\
+    \n    :onerror Err {\r\
+    \n      /system/script/run \$Script;\r\
+    \n    } do={\r\
+    \n      \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\
+    ailed to run: \" . \$Err);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\
+    led syntax validation, skipping.\");\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# Add and fix global scheduler\r\
+    \n:put \"Add or/and fix Global scheduler...\";\r\
+    \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\
+    ; }\";\r\
+    \n:local Comment \"Every Day Set Global Environment Variables\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \
+    = 0) do={\r\
+    \n  /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\
+    ent=\$OnEvent start-time=startup;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\
+    \_do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\
+    ) do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\
+    \n}\r\
+    \n# Add Update Script scheduler\r\
+    \n:put \"Add or/and fix Update Script scheduler\";\r\
+    \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\
+    \r\
+    \n:set Comment \"Every Day Check For Update Scripts\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\
+    \" ] ] = 0) do={\r\
+    \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \
+    start-time=startup interval=1d on-event=\$OnEvent;\r\
+    \n}\r\
+    \n\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\
+    \_not ready.\"); }; } delay=100ms max=5;\r\
+    \n\r\
+    \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\
+    \n    [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \
+    \") ] . \\\r\
+    \n    \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\
+    \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\
+    \n    # signal we are ready\r\
+    \n:set GlobalFuncReady true;\r\
+    \n:set ExitOK true;\r\
+    \n\r\
+    \n:log info (\$0 . \"Global configs ready!\");\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n}\r\
+    \n"
+add comment=\
+    "Lookup IP addresses for RKN list and add them to firewall address-list" \
+    dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="#!rsc by Vados\r\
+    \n# RouterOS script: AM-RKN-dnsLookup\r\
+    \n# Script comment: Lookup IP addresses for RKN list and add them to firew\
+    all address-list\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n# Script description: This script is intended to be run periodically, e.\
+    g. once a day, to update the IP addresses in the firewall address-list bas\
+    ed on the RKN list.\r\
+    \n#                     It resolves the domain names in the RKN list and a\
+    dds the corresponding IP addresses to the specified firewall address-list.\
+    \r\
+    \n#                     The script also handles CNAME records by following\
+    \_them until it finds A records.\r\
+    \n# Usage:\r\
+    \n# /system/script { run AM-RKN-dnsLookup; }\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n\r\
+    \n:global dnsLookupReady false;\r\
+    \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\
+    \_true; }\r\
+    \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\
+    \n:set dnsLookupReady false;\r\
+    \n\r\
+    \n:local arrRKN {\r\
+    \n  \"telegra.ph\"\r\
+    \n  \"grani.ru\"\r\
+    \n  \"xhamster.com\"\r\
+    \n  \"lostfilm.tv\"\r\
+    \n  \"rutracker.org\"\r\
+    \n  \"lurkmore.to\"\r\
+    \n  \"dou.ua\"\r\
+    \n  \"youporn.com\"\r\
+    \n  \"pornolab.net\"\r\
+    \n  \"crimerussia.com\"\r\
+    \n  \"telegram.org\"\r\
+    \n  \"api.telegram.org\"\r\
+    \n  \"facebook.com\"\r\
+    \n  \"instagram.com\"\r\
+    \n  \"x.com\"\r\
+    \n  \"twitter.com\"\r\
+    \n  \"youtube.com\"\r\
+    \n  \"googleapis.com\"\r\
+    \n  \"youtu.be\"\r\
+    \n  \"googlevideo.com\"\r\
+    \n  \"gstatic.com\"\r\
+    \n  \"googleusercontent.com\"\r\
+    \n  \"nhacmp3youtube.com\"\r\
+    \n  \"telegram.me\"\r\
+    \n  \"t.me\";}\r\
+    \n\r\
+    \n:local ListRKN \"RKN-dnsLookup\";\r\
+    \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\
+    \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\
+    ={\r\
+    \n    /ip firewall address-list remove \$aListItem;\r\
+    \n}\r\
+    \n:foreach aItem in=\$arrRKN do={\r\
+    \n#    :do {\r\
+    \n        :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\
+    ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\
+    \n#    } on-error={\r\
+    \n#        :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\
+    \n#    }\r\
+    \n    :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \
+    do={\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\
+    \n            :local newAddress [/ip dns cache all get \$dnsRecord data];\
+    \r\
+    \n            :do {\r\
+    \n             /ip firewall address-list add list=\$ListRKN address=\$newA\
+    ddress comment=\$aItem;\r\
+    \n                :log warning \"Successfully adding ip to list A record: \
+    \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            } on-error={\r\
+    \n                :log error \"error when adding ip to list A record: \$dn\
+    sRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            }\r\
+    \n        }\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\
+    \n            :local cname;\r\
+    \n            :local nextCname;\r\
+    \n            :local cnameAddress;\r\
+    \n            :set cname [/ip dns cache all find where (name=\$aItem && ty\
+    pe=\"CNAME\")];\r\
+    \n            :set nextCname [/ip dns cache all find where (name=[/ip dns \
+    cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            :while (\$nextCname != \"\") do={\r\
+    \n                :set cname \$nextCname;\r\
+    \n                :set nextCname [/ip dns cache all find where (name=[/ip \
+    dns cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            }\r\
+    \n            :foreach aRecord in=[/ip dns cache all find where (name=[/ip\
+    \_dns cache all get \$cname data] && type=\"A\")] do={\r\
+    \n                :do {\r\
+    \n                    :set cnameAddress [/ip dns cache all get \$aRecord d\
+    ata];\r\
+    \n                    /ip firewall address-list add list=\$ListRKN address\
+    =\$cnameAddress comment=\$aItem;\r\
+    \n                    :log warning \"Succesfully adding ip to list CNAME r\
+    ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \
+    \$aItem.\";\r\
+    \n#                    /ip firewall raw add action=add-dst-to-address-list\
+    \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\
+    g comment=\$aItem content=\$aItem;\r\
+    \n                } on-error={\r\
+    \n                    :log error \"error when adding ip to list CNAME reco\
+    rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\
+    tem.\";\r\
+    \n                }\r\
+    \n            }\r\
+    \n        }\r\
+    \n    }\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\
+    ={\r\
+    \n   :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\
+    ptName . \" is NOT SET! Fix It Now!\");\r\
+    \n    /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \
+    run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\
+    olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\
+    \_start-time=startup;\r\
+    \n  }\r\
+    \n:set dnsLookupReady true;\r\
+    \ndelay 2s;  \r\
+    \n:global dnsLookupReady (a);\r\
+    \n"
+add dont-require-permissions=no name="renameLists " owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    local oldName \"Test\";\
+    \n:local newName \"Test-IP\";\
+    \n/ip firewall address-list\
+    \n:foreach i in=[find list=\$oldName] do={\
+    \nset \$i list=\$newName;\
+    \n}\
+    \n"
+add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    #############Script Settings##################\
+    \n\
+    \n:local \"IF-TUN\" \"6to4-tun\"\
+    \n:local \"IF-LOC\" \"Bridge-LAN\"\
+    \n:local \"POOL-6TO4\" \"poolV6-local\"\
+    \n:local \"force-update\" false\
+    \n############ use then static ip #######################\
+    \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \
+    address]\
+    \n#:local \"interface\" \"ext\"\
+    \n:local bound 0\
+    \n\
+    \n###############################################\
+    \n\
+    \n:local 6to4prefix do={\
+    \n    :global dec2hex\
+    \n    :local ipv4 \$1\
+    \n    :local ipv6 \"2002:\"\
+    \n    :for i from=0 to=2 step=1 do={        \
+    \n        :if ( \$i = 2) do={\
+    \n            :set ipv6 (\$ipv6.\":\")\
+    \n        }\
+    \n        :local fp [:find \$ipv4 \".\"]\
+    \n        :if ( \$fp > 0 ) do={\
+    \n            :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\
+    \n            :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\
+    \n        }\
+    \n    }\
+    \n    :return (\$ipv6.[\$dec2hex \$ipv4])\
+    \n}\
+    \n:local \"str_replace\" do={\
+    \n    :local \"str-pos\" [:find \$1 \$2]\
+    \n    :local \"str-len\" [:len \$2]\
+    \n    :local str \"\"\
+    \n    :local rest \$1\
+    \n    :while (\$\"str-pos\" >= 0) do={\
+    \n        :local t [:pick \$rest 0 \$\"str-pos\"]\
+    \n        :if ( \$4 > 0 ) do={\
+    \n            :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\
+    \n                :set str (\$str.\$5)\
+    \n            }\
+    \n        }\
+    \n        :set str (\$str.\$t.\$3)\
+    \n        :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\
+    st]]\
+    \n        :set \"str-pos\" [:find \$rest \$2]\
+    \n    }\
+    \n    :return (\$str.\$rest)\
+    \n}\
+    \n\
+    \n:if (\$bound=1) do={\
+    \n    :local t [:find \$\"lease-address\" \"/\"]\
+    \n\
+    \n    :if ( \$t >= 0 ) do={\
+    \n        :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\
+    \n    }\
+    \n\
+    \n    :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\
+    ) do={\
+    \n        /interface 6to4 add !keepalive local-address=\$\"lease-address\"\
+    \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\
+    \n        :set \"force-update\" true\
+    \n    }\
+    \n\
+    \n    :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\
+    cal-address];\
+    \n\
+    \n    :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \
+    true) do={\
+    \n        /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\
+    ease-address\"\
+    \n        /ipv6 address remove [find interface=\$\"IF-TUN\"]\
+    \n        /ipv6 address remove [find interface=\$\"IF-LOC\"]\
+    \n        /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\
+    \"::/0\"]\
+    \n        :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\
+    \n        :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\
+    \_0) do={    \
+    \n            /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\
+    \".\":1::/64\")  prefix-length=64\
+    \n        } else={\
+    \n            /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \
+    prefix=(\$\"pool-prefix\".\":1::/64\")\
+    \n        }\
+    \n        /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\
+    \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\
+    ace=\$\"IF-TUN\" advertise=no\
+    \n        /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\
+    =\$\"IF-LOC\" advertise=yes\
+    \n        /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\
+    \"IF-TUN\")\
+    \n        :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\
+    s]\
+    \n        :set t [:pick \$t 0 [:find \$t \"/\"]]\
+    \n        :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\
+    \_= 0) do={\
+    \n            /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\
+    [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        } else={\
+    \n            /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \
+    where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        }\
+    \n        :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\
+    -LOC\"] = 0) do={\
+    \n            /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\
+    on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\
+    \n        }\
+    \n        :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \
+    0) do={\
+    \n            /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\
+    onfiguration=yes\
+    \n        }\
+    \n    }\
+    \n}"
+add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global MAC2EUI64 do={\
+    \n    :local EUI64 \"\"\
+    \n    :local MAC \$1\
+    \n    :local HEX2DEC \"0123456789ABCDEF\"\
+    \n    :for i from=0 to=5 step=1 do={\
+    \n        :if ( \$i = 0 ) do={\
+    \n            :set EUI64 [:pick \$MAC 0]\
+    \n            :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\
+    \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\
+    \n        }\
+    \n        :if ( \$i = 1 || \$i = 3) do={\
+    \n            :set EUI64 (\$EUI64.\":\")\
+    \n        }\
+    \n        :if ( \$i = 2 ) do={\
+    \n            :set EUI64 (\$EUI64.\"FF:FE\")\
+    \n        }\
+    \n        :if ( [:find \$MAC \":\"] = 2 ) do={\
+    \n            :set MAC [:pick \$MAC 3  [:len \$MAC]]\
+    \n            :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\
+    \n        }\
+    \n    }\
+    \n    :return (\$EUI64)\
+    \n}\
+    \n\
+    \n:global dec2hex do={\
+    \n    :local hex \"\"\
+    \n    :local dec [:tonum \$1]\
+    \n    :for i from=0 to=4 step=4 do={\
+    \n        :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\
+    c>>\$i)&0xf)+1)].\$hex)\
+    \n    }\
+    \n    :return ([:tostr \$hex])\
+    \n}"
+add comment=Generator dont-require-permissions=no name=proxySet owner=vados \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="# 2. WireGuard interface\r\
+    \n/interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDg\
+    uMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=21641\r\
+    \n/interface/wireguard/peers/add interface=wg-VDSina public-key=\"o5IgCl1/\
+    G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcYQnD9\
+    N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=10.30.30.33 endpoint-port=518\
+    20 allowed-address=0.0.0.0/0 persistent-keepalive=11\r\
+    \n/ip/address/add address=10.9.0.3/32 interface=wg-VDSina\r\
+    \n\r\
+    \n# 3. DNS\r\
+    \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\
+    n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\
+    \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /system/script/add name=VDS\
+    ina-prev-dns comment=\"\$prevDNS\" source=\"\" }\r\
+    \n/ip/dns/set servers=8.8.4.4\r\
+    \n/ip/route/add dst-address=8.8.4.4/32 gateway=wg-VDSina distance=1 commen\
+    t=VDSina-dns\r\
+    \n\r\
+    \n# 4. Enable WireGuard\r\
+    \n/interface/wireguard/enable wg-VDSina\r\
+    \n"
+add dont-require-permissions=no name=AM-Telegram-Send owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\
+    \n# RouterOS script: AM-Telegram-Send\
+    \n# Script comment: Mini script for send messages to admin Telegram chat\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\
+    \n#\
+    \n#\
+    \n# requires RouterOS, version=7.19\
+    \n# requires device-mode, fetch\
+    \n#\
+    \n# Script description: \
+    \n#\
+    \n#\
+    \n# Usage:\
+    \n# /system/script { run AM-Telegram-Send \"Message here )))\"; }\
+    \n\
+    \n/system/script\
+    \nadd name=telegram-send dont-require-permissions=no source={\
+    \n  :global TelegramTokenId;\
+    \n  :global TelegramChatId;\
+    \n  :local message [:tostr \$1];\
+    \n  :local identity [/system/identity/get name];\
+    \n  :local sendMsg (\"[\".\$identity.\"] \".\$message)\
+    \n  /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\
+    \n    \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\
+    \n    \"&text=\".\$sendMsg.\\\
+    \n    \"&parse_mode=HTML\") \\\
+    \n    mode=https keep-result=no\
+    \n}"
+add dont-require-permissions=no name=telegram-send owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\
+    \n  :global TelegramTokenId;\
+    \n  :global TelegramChatId;\
+    \n  :local message [:tostr \$1];\
+    \n  :local identity [/system/identity/get name];\
+    \n  :local sendMsg (\"[\".\$identity.\"] \".\$message)\
+    \n  /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\
+    \n    \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\
+    \n    \"&text=\".\$sendMsg.\\\
+    \n    \"&parse_mode=HTML\") \\\
+    \n    mode=https keep-result=no\
+    \n"
+/user group
+add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\
+    t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon"
+/ip smb
+set enabled=no interfaces=lo
+/interface bridge port
+add bridge=Bridge-LAN interface=ether5
+add bridge=Bridge-LAN interface=ether2
+add bridge=Bridge-LAN interface=ether4 trusted=yes
+add bridge=Bridge-LAN interface=ether3
+add bridge=Bridge-LAN interface=wlan2
+add bridge=Bridge-LAN interface=wlan1
+/interface bridge settings
+set use-ip-firewall=yes
+/ip firewall connection tracking
+set udp-timeout=10s
+/ip neighbor discovery-settings
+set discover-interface-list=LAN lldp-med=no lldp-poe-power=no
+/ip settings
+set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\
+    8192
+/ipv6 settings
+set disable-ipv6=yes disable-link-local-address=yes forward=no \
+    max-neighbor-entries=8192 multipath-hash-policy=l4
+/interface detect-internet
+set detect-interface-list=WAN internet-interface-list=Internet \
+    lan-interface-list=LAN request-interval=1m wan-interface-list=WAN
+/interface l2tp-server server
+set authentication=mschap2 use-ipsec=yes
+/interface list member
+add interface=Unet-ether1 list=Internet
+add interface=WG list=WAN
+add interface=Bridge-LAN list=LAN
+add interface=Unet-ether1 list=WAN
+/interface wireguard peers
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\
+    109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \
+    persistent-keepalive=10s public-key=\
+    "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4="
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 disabled=yes \
+    endpoint-address=10.30.30.33 endpoint-port=55055 interface=wg-nuc name=\
+    NUC persistent-keepalive=11s public-key=\
+    "+OvzAjLC45Td52hjkQPmpGvC3RGhZ+Q2CDMJ1U/D4Rw="
+/interface wireless cap
+# 
+set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \
+    caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\
+    CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\
+    wlan2,wlan1 lock-to-caps-man=yes
+/ip address
+add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0
+add address=10.8.0.2/24 interface=WG network=10.8.0.0
+add address=192.168.33.2/24 disabled=yes interface=wg-nuc network=\
+    192.168.33.0
+/ip cloud
+set update-time=no
+/ip dhcp-client
+add add-default-route=special-classless check-gateway=arp comment=Unet-client \
+    default-route-distance=2 default-route-tables=main:2 dhcp-options=\
+    hostname,clientid_duid interface=Unet-ether1 name=UnetDHCP use-peer-dns=\
+    no use-peer-ntp=no
+/ip dhcp-server config
+set accounting=no
+/ip dhcp-server lease
+add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\
+    48:8F:5A:8E:EE:A8 server=masterDHCP
+add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\
+    F0:DE:F1:91:0D:1E server=masterDHCP
+add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\
+    00:80:77:EC:43:86 server=masterDHCP
+add address=10.30.30.70 dhcp-option=domain-search-list,HostName \
+    dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP
+add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\
+    04:7C:16:36:F5:37 server=masterDHCP
+add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\
+    10:2D:41:2C:20:C2 server=masterDHCP
+add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\
+    10:08:C1:81:59:5F server=masterDHCP
+add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\
+    10:38:1F:D2:5F:13 server=masterDHCP
+add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\
+    10:B1:DF:E9:D0:D5 server=masterDHCP
+add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\
+    FE:02:52:BE:3F:16 server=masterDHCP
+add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\
+    D4:6D:6D:FD:E5:49 server=masterDHCP
+add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\
+    CC:42:10:12:46:94 server=masterDHCP
+add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\
+    50:CC:F8:85:96:0A server=masterDHCP
+add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\
+    E4:18:6B:58:34:AB server=masterDHCP
+add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\
+    00:27:15:41:97:A9 server=masterDHCP
+add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \
+    mac-address=C4:82:E1:03:49:10 server=masterDHCP
+add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\
+    10:38:1F:82:81:F2 server=masterDHCP
+add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \
+    dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP
+add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \
+    dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP
+add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \
+    server=masterDHCP
+add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\
+    MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP
+add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \
+    mac-address=F0:75:5D:1E:5F:71 server=masterDHCP
+add address=10.30.30.100 client-id=iVados dhcp-option=HostName \
+    dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP
+add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\
+    ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \
+    dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \
+    use-src-mac=yes
+/ip dhcp-server network
+add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\
+    domain-search-list dhcp-option-set=domain-search-set dns-server=\
+    10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\
+    24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98
+/ip dns
+set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \
+    doh-max-server-connections=20 servers=8.8.8.8 verify-doh-cert=yes
+/ip dns static
+add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \
+    type=A
+add address=109.107.177.79 name=vds.vados.ru type=A
+add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \
+    regexp=*.vados.ru type=NS
+add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\
+    "\".*\\\\.vados\\\\.ru\"" type=FWD
+add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\
+    10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\
+    FWD
+add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\
+    ns.vados.ru.local type=A
+add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\
+    vados.ru ns=ns.vados.ru.local type=NS
+add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A
+add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\
+    dns.google type=A
+add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A
+add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A
+add address=10.30.30.33 name=ros.vados.ru type=A
+add address=10.30.30.95 name=vados-nuc type=A
+add address=10.30.30.33 name=amster-nuc type=A
+add address=10.30.30.33 name=amster type=A
+add address=10.30.30.33 name=amster-reg type=A
+add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A
+add address=10.30.30.33 name=mgr.vados.ru type=A
+add address=10.30.30.33 name=prt.vados.ru type=A
+add address=10.30.30.33 disabled=yes match-subdomain=yes name=\
+    mikrots.vados.ru type=A
+add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A
+add address=10.30.30.30 name=MILLER-LEN type=A
+add address=10.30.30.30 name=miller type=A
+add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\
+    dns.quad9.net type=A
+add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\
+    dns.quad9.net type=A
+add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \
+    type=A
+add address=10.30.30.81 comment=LocalNet name=MikroVados type=A
+add address=10.30.30.10 name=MikroNUC type=A
+add address=10.30.30.86 disabled=yes name=MikroYellow type=A
+add address=10.30.30.85 disabled=yes name=MikroMic type=A
+add address=10.30.30.95 name=VADOS-NUC type=A
+add address=10.30.30.98 name=VADOS-LEN type=A
+add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\
+    A
+add address=10.30.30.20 disabled=yes name=garage type=A
+/ip firewall address-list
+add address=91.215.120.206 list=TRUSTED
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=8.8.4.0/24 list=YouTube
+add address=8.8.8.0/24 list=YouTube
+add address=8.34.208.0/20 list=YouTube
+add address=8.35.192.0/20 list=YouTube
+add address=23.236.48.0/20 list=YouTube
+add address=23.251.128.0/19 list=YouTube
+add address=34.0.0.0/15 list=YouTube
+add address=34.2.0.0/16 list=YouTube
+add address=34.3.0.0/23 list=YouTube
+add address=34.3.3.0/24 list=YouTube
+add address=34.3.4.0/24 list=YouTube
+add address=34.3.8.0/21 list=YouTube
+add address=34.3.16.0/20 list=YouTube
+add address=34.3.32.0/19 list=YouTube
+add address=34.3.64.0/18 list=YouTube
+add address=34.4.0.0/14 list=YouTube
+add address=34.8.0.0/13 list=YouTube
+add address=34.16.0.0/12 list=YouTube
+add address=34.32.0.0/11 list=YouTube
+add address=34.64.0.0/10 list=YouTube
+add address=34.128.0.0/10 list=YouTube
+add address=35.184.0.0/13 list=YouTube
+add address=35.192.0.0/14 list=YouTube
+add address=35.196.0.0/15 list=YouTube
+add address=35.198.0.0/16 list=YouTube
+add address=35.199.0.0/17 list=YouTube
+add address=35.199.128.0/18 list=YouTube
+add address=35.200.0.0/13 list=YouTube
+add address=35.208.0.0/12 list=YouTube
+add address=35.224.0.0/12 list=YouTube
+add address=35.240.0.0/13 list=YouTube
+add address=57.140.192.0/18 list=YouTube
+add address=64.15.112.0/20 list=YouTube
+add address=64.233.160.0/19 list=YouTube
+add address=66.22.228.0/23 list=YouTube
+add address=66.102.0.0/20 list=YouTube
+add address=66.249.64.0/19 list=YouTube
+add address=70.32.128.0/19 list=YouTube
+add address=72.14.192.0/18 list=YouTube
+add address=74.125.0.0/16 list=YouTube
+add address=104.154.0.0/15 list=YouTube
+add address=104.196.0.0/14 list=YouTube
+add address=104.237.160.0/19 list=YouTube
+add address=107.167.160.0/19 list=YouTube
+add address=107.178.192.0/18 list=YouTube
+add address=108.59.80.0/20 list=YouTube
+add address=108.170.192.0/18 list=YouTube
+add address=108.177.0.0/17 list=YouTube
+add address=130.211.0.0/16 list=YouTube
+add address=136.22.160.0/20 list=YouTube
+add address=136.22.176.0/21 list=YouTube
+add address=136.22.184.0/23 list=YouTube
+add address=136.22.186.0/24 list=YouTube
+add address=142.250.0.0/15 list=YouTube
+add address=146.148.0.0/17 list=YouTube
+add address=152.65.208.0/22 list=YouTube
+add address=152.65.214.0/23 list=YouTube
+add address=152.65.218.0/23 list=YouTube
+add address=152.65.222.0/23 list=YouTube
+add address=152.65.224.0/19 list=YouTube
+add address=162.120.128.0/17 list=YouTube
+add address=162.216.148.0/22 list=YouTube
+add address=162.222.176.0/21 list=YouTube
+add address=172.110.32.0/21 list=YouTube
+add address=172.217.0.0/16 list=YouTube
+add address=172.253.0.0/16 list=YouTube
+add address=173.194.0.0/16 list=YouTube
+add address=173.255.112.0/20 list=YouTube
+add address=192.158.28.0/22 list=YouTube
+add address=192.178.0.0/15 list=YouTube
+add address=193.186.4.0/24 list=YouTube
+add address=199.36.154.0/23 list=YouTube
+add address=199.36.156.0/24 list=YouTube
+add address=199.192.112.0/22 list=YouTube
+add address=199.223.232.0/21 list=YouTube
+add address=207.223.160.0/20 list=YouTube
+add address=208.65.152.0/22 list=YouTube
+add address=208.68.108.0/22 list=YouTube
+add address=208.81.188.0/22 list=YouTube
+add address=208.117.224.0/19 list=YouTube
+add address=209.85.128.0/17 list=YouTube
+add address=216.58.192.0/19 list=YouTube
+add address=216.73.80.0/20 list=YouTube
+add address=216.239.32.0/19 list=YouTube
+add address=2ip.ru list=Test-IP
+add address=wg.vados.ru comment=VDSIna list=TRUSTED
+add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED
+add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina
+add address=love.ru comment=love.ru list=NoVdsina
+add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina
+add address=pochta.ru comment=pochta.ru list=NoVdsina
+add address=vdsina.com list=NoVdsina
+add address=vdsina.ru list=NoVdsina
+add address=youla.ru list=NoVdsina
+add address=kupiprodai.ru list=NoVdsina
+add address=myip.ru list=Test-IP
+add address=geoip.co list=NoVdsina
+add address=comp-lenta.ru list=NoVdsina
+add address=128.85.102.70 comment=update.microsoft.com list=\
+    windowsupdateslist
+add address=wu-b-net.trafficmanager.net. comment=\
+    ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\
+    ctldl.windowsupdate.com list=windowsupdateslist
+add address=redir.update.msft.com.trafficmanager.net. comment=\
+    update.microsoft.com list=windowsupdateslist
+add address=geo.prod.do.dsp.trafficmanager.net. comment=\
+    geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12437.d.akamaiedge.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \
+    comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \
+    list=windowsupdateslist
+add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\
+    sls.update.microsoft.com list=windowsupdateslist
+add address=fe3.delivery.mp.microsoft.com. comment=\
+    fe3cr.delivery.mp.microsoft.com list=windowsupdateslist
+add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\
+    fe3.delivery.mp.microsoft.com list=windowsupdateslist
+add address=fe2cr.update.msft.com.trafficmanager.net. comment=\
+    fe2cr.update.microsoft.com list=windowsupdateslist
+add address=download.windowsupdate.com.delivery.microsoft.com. comment=\
+    download.windowsupdate.com list=windowsupdateslist
+add address=wu-f-net.trafficmanager.net. comment=\
+    download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=tsfe.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \
+    comment=9.au.download.windowsupdate.com list=windowsupdateslist
+add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dspw65.akamai.net. comment=\
+    download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \
+    comment=licensing.mp.microsoft.com list=windowsupdateslist
+add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-nlu-net.trafficmanager.net. comment=\
+    star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-tlu-net.trafficmanager.net. comment=\
+    star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=storeedgefd.xbetservices.akadns.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \
+    comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\
+    windowsupdateslist
+add address=e16646.dscg.akamaiedge.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\
+    windowsupdateslist
+add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=bg.microsoft.map.fastly.net. comment=\
+    3.au.download.windowsupdate.com list=windowsupdateslist
+add list=windowsupdateslist
+add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\
+    star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a2033.dscd.akamai.net. comment=\
+    star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-nlu-net.trafficmanager.net. comment=\
+    dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-b-tlu-net.trafficmanager.net. comment=\
+    1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a122.dscg3.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist
+add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e10370.d.akamaiedge.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=a1683.dscd.akamai.net. comment=\
+    dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \
+    comment=collections.mp.microsoft.com list=windowsupdateslist
+add address=a1847.dscd.akamai.net. comment=\
+    wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=au.download.windowsupdate.com.edgesuite.net. comment=\
+    2.au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dscg3.akamai.net. comment=\
+    au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    4.au.download.windowsupdate.com list=windowsupdateslist
+add address=cl-glcb907925.gcdn.co. comment=\
+    4.au.download.windowsupdate.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \
+    comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=ts-frontend.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=sds.trafficmanager.net. comment=software-download.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\
+    windowsupdateslist
+add address=e12671.dscd.akamaiedge.net. comment=\
+    download.microsoft.com.edgekey.net list=windowsupdateslist
+add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12358.d.akamaiedge.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-tlu-net.trafficmanager.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a1856.dspw65.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina
+add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=purchase.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.mp.microsoft.com list=windowsupdateslist
+add address=e110219.a.akamaiedge.net. comment=\
+    purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.141 list=windowsupdateslist
+add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=storesdk.xbetservices.akadns.net. comment=\
+    storesdk.dsx.mp.microsoft.com list=windowsupdateslist
+add address=e16646.g.akamaiedge.net. comment=\
+    storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=software-download.microsoft.com.delivery.microsoft.com. comment=\
+    software-download.microsoft.com list=windowsupdateslist
+add address=download.prss.microsoft.com.akamaized.net. comment=\
+    software-download.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina
+add address=87.250.250.50 comment=YandexDisk list=NoVdsina
+add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\
+    purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\
+    cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=a1996.dscd.akamai.net. comment=\
+    wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\
+    tas02.sls.update.microsoft.com list=windowsupdateslist
+add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\
+    star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\
+    paymentinstruments.mp.microsoft.com list=windowsupdateslist
+add address=10.30.30.33 comment=amster list=NoWG
+add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG
+add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG
+add address=wg.vados.ru comment=VDSina-vpn list=VDSina
+add address=80.85.244.9 list=TRUSTED
+add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina
+add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS
+add address=dns.google comment=Google-dns list=Trusted-DNS
+add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\
+    Trusted-DNS
+add address=time.google.com comment=Google-time list=Trusted-NTP
+add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP
+add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=cp.vdsina.com comment=VDSina-vpn list=VDSina
+add address=vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns.vados.ru comment=VDSina-vpn list=VDSina
+add address=vdsina.com comment=VDSina-vpn list=VDSina
+add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=10.30.30.0/24 comment="Local Network" list=Local-Net
+add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net
+add address=146.120.64.208/29 comment="External Net" list=Unet
+add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina
+add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina
+add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina
+add address=10.30.30.30 comment=miller disabled=yes list=NoWG
+add address=10.30.30.33 comment="Direct connet to DNS servers" list=\
+    Direct-DNS
+add address=109.107.177.79 list=VPN-Server
+add address=10.0.0.0/8 list=RFC1918
+add address=172.16.0.0/12 list=RFC1918
+add address=192.168.0.0/16 list=RFC1918
+add address=8.8.4.4 disabled=yes list=to_vpn
+add address=myip.ru disabled=yes list=to_vpn
+add address=10.30.30.98 disabled=yes list=to_vpn
+/ip firewall filter
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=12h chain=input comment="block honeypot DNS" \
+    connection-state=new dst-port=53 in-interface=Unet-ether1 protocol=udp \
+    src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment=\
+    "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=!TRUSTED
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \
+    connection-state=new dst-port=5060 in-interface=Unet-ether1 protocol=udp
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot NTP" \
+    connection-state=new dst-port=123 in-interface=Unet-ether1 protocol=udp
+add action=fasttrack-connection chain=forward comment=\
+    "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \
+    connection-state=established,related,new disabled=yes
+add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \
+    protocol=tcp
+add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \
+    protocol=udp
+add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \
+    dst-port=53 protocol=tcp src-address=10.30.30.0/24
+add action=accept chain=input comment="udp Accept input DNS queries" \
+    dst-port=53 protocol=udp src-address=10.30.30.0/24
+add action=accept chain=output comment="accept WireGuard" disabled=yes \
+    dst-address-list=VPN-Server out-interface=Unet-ether1 protocol=udp \
+    src-port=13231
+add action=accept chain=output disabled=yes dst-address-list=VPN-Server \
+    dst-port=29185 out-interface=Unet-ether1 protocol=udp
+add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
+    connection-state=established,related,new disabled=yes routing-mark=\
+    !To-VPN
+add action=accept chain=output disabled=yes protocol=tcp src-port=443
+add action=accept chain=output disabled=yes src-address=127.0.0.1
+add action=accept chain=forward comment="defconf: accept in ipsec policy" \
+    disabled=yes ipsec-policy=in,ipsec
+add action=accept chain=forward comment="defconf: accept out ipsec policy" \
+    disabled=yes ipsec-policy=out,ipsec
+add action=accept chain=forward comment=\
+    "defconf: accept established,related, untracked" connection-state=\
+    established,related,untracked disabled=yes
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid in-interface=Unet-ether1 src-address=\
+    !10.30.30.0/24
+add action=drop chain=forward comment=\
+    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
+    connection-state=new in-interface=Unet-ether1 src-address-list=!VDSina
+add action=accept chain=input in-interface=Unet-ether1 protocol=icmp \
+    src-address-list=VDSina
+add action=accept chain=input connection-state=established
+add action=accept chain=input connection-state=related
+/ip firewall mangle
+add action=accept chain=prerouting comment=RFC1918 dst-address-list=RFC1918 \
+    in-interface-list=!WAN
+add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \
+    new-routing-mark=main passthrough=no src-address-list=NoWG
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for NoVdsina" disabled=yes dst-address-list=NoVdsina \
+    new-routing-mark=main passthrough=no src-address=10.30.30.0/24
+add action=mark-connection chain=prerouting comment=\
+    "Transit for address-list \"to_vpn\"" connection-mark=no-mark disabled=\
+    yes dst-address-list=to_vpn in-interface-list=!WAN new-connection-mark=\
+    to-vpn-conn routing-mark=!main
+add action=mark-routing chain=prerouting comment=\
+    "Find routing over table r_to_vpn" connection-mark=to-vpn-conn disabled=\
+    yes in-interface-list=!WAN new-routing-mark=r_to_vpn
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for VDSina" dst-address-list=VPN-Server \
+    new-routing-mark=main passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\
+    Unet new-routing-mark=main passthrough=no
+add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\
+    To-VPN src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \
+    new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment="WG for all" \
+    dst-address-list=!NoVdsina new-routing-mark=To-VPN src-address=\
+    10.30.30.0/24
+add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \
+    out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\
+    1381-65535
+add action=mark-connection chain=prerouting comment=\
+    "Mark VPN connections to exclude from FastTrack" disabled=yes \
+    new-connection-mark=VPN_No_FastTrack routing-mark=To-VPN
+add action=mark-routing chain=prerouting comment="VPN Network" disabled=yes \
+    dst-address=10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24
+add action=mark-connection chain=output comment="For this router" \
+    connection-mark=no-mark disabled=yes dst-address-list=to_vpn \
+    new-connection-mark=to-vpn-conn-local
+add action=mark-routing chain=output comment="For this router" \
+    connection-mark=to-vpn-conn-local disabled=yes new-routing-mark=r_to_vpn
+/ip firewall nat
+add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=masquerade chain=srcnat comment=\
+    "Nat Addresses for routing mark r_to_vpn" disabled=yes routing-mark=\
+    r_to_vpn
+add action=dst-nat chain=dstnat comment=\
+    "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=VPN-Server \
+    to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat comment=\
+    "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\
+    udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\
+    Unet-ether1 protocol=udp src-address=!10.30.30.0/24 to-addresses=\
+    10.30.30.33 to-ports=44333
+add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \
+    routing-mark=To-VPN
+add action=masquerade chain=srcnat comment="Default NAT" out-interface=\
+    Unet-ether1 routing-mark=!To-VPN src-address=10.30.30.0/24
+add action=dst-nat chain=dstnat dst-port=44044 in-interface=Unet-ether1 \
+    protocol=udp src-address=109.107.177.79 to-addresses=10.30.30.33 \
+    to-ports=44044
+add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \
+    fragment=no in-interface=Unet-ether1 protocol=tcp routing-mark=main \
+    to-addresses=10.30.30.33 to-ports=443
+add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \
+    dst-port=80 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=80
+add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \
+    dst-port=2904 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2904
+add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\
+    5000 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=5000
+add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\
+    2377 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=2377
+add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\
+    Unet-ether1 protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \
+    to-ports=81
+add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\
+    Unet-ether1 protocol=tcp src-address-list=TRUSTED to-addresses=\
+    10.30.30.33 to-ports=22
+add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \
+    dst-port=2377 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2377
+add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\
+    Unet-ether1 protocol=tcp routing-mark=!To-VPN to-addresses=10.30.30.33 \
+    to-ports=22
+add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \
+    dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \
+    time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\
+    Bridge-LAN protocol=tcp src-address-list=KIDS time=\
+    6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+/ip firewall raw
+add action=drop chain=prerouting comment="Drop Honeypot Hackers" \
+    in-interface=Unet-ether1 src-address-list="Honeypot Hacker"
+add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \
+    in-interface-list=WAN src-address-list=Trusted-DNS
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \
+    content=linux.duke.edu disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleapis.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googlevideo.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleusercontent.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    nhacmp3youtube.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \
+    content=rutube.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \
+    content=me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "icloud.com raw" content=icloud.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \
+    disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "api.db-ip.com raw" content=api.db-ip.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \
+    content=gosuslugi.ru disabled=yes
+/ip firewall service-port
+set ftp disabled=yes
+set tftp disabled=yes
+set irc disabled=no
+set sip disabled=yes
+set pptp disabled=yes
+set rtsp disabled=no
+#error exporting "/ip/ipsec/key/psk" (timeout)
+/ip ipsec settings
+set accounting=no
+/ip ipsec policy
+set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0
+/ip ipsec profile
+set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
+/ip proxy
+set cache-administrator="" max-cache-size=none port=80,443 src-address=\
+    0.0.0.0
+/ip route
+add check-gateway=none comment=WG-Default disabled=no distance=1 dst-address=\
+    0.0.0.0/0 gateway=WG routing-table=To-VPN scope=30 target-scope=10
+/ip service
+set ftp disabled=yes
+set telnet disabled=yes
+set reverse-proxy disabled=yes
+set ssh address=10.30.30.0/24 port=2222
+set winbox address=10.30.30.0/24
+set api address=10.30.30.0/24
+set api-ssl address=10.30.30.0/24 disabled=yes
+set www-ssl certificate=Root-YE port=18443
+set www address=10.30.30.0/24 disabled=yes port=18880
+/ip service webserver
+set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\
+    no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \
+    webfig-secure=no
+/ip ssh
+set forwarding-enabled=both publickey-authentication-options=verify-required
+/ip upnp
+set enabled=yes
+/ip upnp interfaces
+add interface=Bridge-LAN type=internal
+add forced-ip=146.120.64.211 interface=Unet-ether1 type=external
+add forced-ip=109.107.177.79 interface=*E type=external
+add interface=lo type=internal
+add interface=wlan2 type=internal
+add interface=wlan1 type=internal
+/ipv6 dhcp-client
+add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\
+    info use-interface-duid=yes validate-server-duid=no
+/ipv6 dhcp-server option sets
+add name=domain-search-set options=domain-search-list
+add name="=\"Client ID\"" options=HostName
+/ipv6 firewall address-list
+add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
+add address=::1/128 comment="defconf: lo" list=bad_ipv6
+add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
+add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
+add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
+add address=100::/64 comment="defconf: discard only " list=bad_ipv6
+add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
+add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
+add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
+/ipv6 firewall filter
+add action=accept chain=input comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=input comment="defconf: drop invalid" connection-state=\
+    invalid
+add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=input comment="defconf: accept UDP traceroute" \
+    dst-port=33434-33534 protocol=udp
+add action=accept chain=input comment=\
+    "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
+    udp src-address=fe80::/10
+add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
+    protocol=udp
+add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=input comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=input comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+add action=accept chain=forward comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
+add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
+    hop-limit=equal:1 protocol=icmpv6
+add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=forward comment="defconf: accept HIP" protocol=139
+add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
+    500,4500 protocol=udp
+add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=forward comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=forward comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+/ipv6 nd
+set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \
+    managed-address-configuration=yes other-configuration=yes pref64=::/64
+/ipv6 nd prefix
+add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none
+/ipv6 nd prefix default
+set dhcp6-pd-preferred=yes
+/ipv6 nd proxy
+add disabled=yes interface=lo
+/ipv6 nd settings
+set router-advertisement-route-distance=100
+/routing settings
+set single-process=no
+/system clock
+set time-zone-name=Europe/Moscow
+/system clock manual
+set time-zone=+03:00
+/system identity
+set name=MikroMaster
+/system logging
+add action=email disabled=yes regex="* added|changed|removed *" topics=\
+    system,info
+/system ntp client
+set enabled=yes
+/system ntp server
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes
+/system ntp client servers
+add address=0.ru.pool.ntp.org
+add address=1.ru.pool.ntp.org
+add address=2.ru.pool.ntp.org
+add address=3.ru.pool.ntp.org
+add address=time.google.com disabled=yes
+/system package update
+set check-certificate=yes-without-crl ip-version=ipv4
+/system scheduler
+add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \
+    on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Every Day Check For Update Scripts" interval=1d name=\
+    AM-ScriptInstallUpdate on-event=\
+    ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\
+    AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+/system watchdog
+set watchdog-timer=no
+/tool e-mail
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \
+    server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com
+/tool mac-server
+set allowed-interface-list=LAN
+/tool mac-server mac-winbox
+set allowed-interface-list=LAN
+/tool netwatch
+add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\
+    -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\
+    e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \
+    interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\
+    https-get up-script=""
+add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\
+    flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\
+    oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \
+    name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \
+    up-script=""
+add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\
+    8.8.8.8 down-script="" host=dns.google http-codes="" name=\
+    "Google-DNS IPv4" test-script="" type=dns up-script=""
+add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\
+    rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\
+    -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \
+    http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\
+    "" test-script="" type=dns up-script=""
+add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \
+    dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \
+    interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \
+    test-script="" timeout=800ms type=dns up-script=""
+add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\
+    ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \
+    down-script="" host=149.112.112.112 http-codes="" interval=10s name=\
+    "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script=""
+add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \
+    down-script="" host=91.192.189.2 http-codes="" interval=10s name=\
+    ns1.unet.ws test-script="" type=simple up-script=""
+add check-certificate=yes comment=\
+    "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \
+    disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\
+    vds.vados.ru port=443 test-script="" type=https-get up-script=""
+add comment="WireGuard NAT " disabled=yes down-script="/log info \"[WG-Monitor\
+    ] WireGuard is NOT running - reverting rules\"\
+    \n/ip firewall nat remove [find comment=\"Redirect to Router\"]\
+    \n/ip dns set servers=8.8.8.8\
+    \n/ip dns cache flush\
+    \n/ip route remove [find comment=\"wg-auto-route\"]\
+    \n" host=10.8.0.1 http-codes="" interval=15s name=WG test-script="" \
+    timeout=5s type=simple up-script="/log info \"[WG-Monitor] WireGuard is RU\
+    NNING - applying rules\";\
+    \n:local routeFile \"ips.txt\";\
+    \n:local routeDefAddr \"0.0.0.0/0\";\
+    \n:local routeGateway \"10.8.0.1\";\
+    \n:local routeIF \"WG\";\
+    \n:local routeTable \"To-VPN\";\
+    \n:local routeComment \"wg-auto-route\";\
+    \n/ip dns cache flush;\
+    \n:if ([:len [/ip firewall nat find comment=\"Redirect to Router\"]] > 0) \
+    do={\
+    \n  /ip firewall nat remove [find comment=\"Redirect to Router\"];\
+    \n}\
+    \n/ip firewall nat add action=redirect chain=dstnat src-address-list=\"Red\
+    irectDNS\" dst-port=53 protocol=udp comment=\"Redirect to Router\";\
+    \n/ip dns set servers=\$routeGateway;\
+    \n:local content [/file get \$routeFile contents];\
+    \n:if ([:len \$content] > 0) do={\
+    \n    :local line \"\";\
+    \n    :for i from=0 to=([:len \$content] - 1) do={\
+    \n        :local char [:pick \$content \$i];\
+    \n        :if (\$char != \"\\r\" && \$char != \"\\n\") do={\
+    \n            :set line (\$line . \$char);\
+    \n        } else={\
+    \n            :if ([:len \$line] > 5) do={\
+    \n                :do { /ip route add disabled=no dst-address=\$routeDefAd\
+    dr gateway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$r\
+    outeTable comment=\$routeComment check-gateway=none } on-error={}\
+    \n            }\
+    \n            :set line \"\";\
+    \n        }\
+    \n    }\
+    \n    :if ([:len \$line] > 5) do={\
+    \n#         :do { /ip route add dst-address=\$line gateway=\$routeGateway \
+    distance=1 comment=\$routeComment } on-error={}\
+    \n           :do { /ip route add disabled=no dst-address=\$routeDefAddr ga\
+    teway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$routeT\
+    able comment=\$routeComment check-gateway=none } on-error={}\
+    \n    }\
+    \n}\
+    \n:local dotPos [:find \$routeGateway \".\"];\
+    \n:if (\$dotPos != \"\") do={\
+    \n    :local firstOctet [:pick \$routeGateway 0 \$dotPos];\
+    \n    :local derivedDstAddress (\$firstOctet . \".30.0.0/15\");\
+    \n    :do { /ip route add dst-address=\$derivedDstAddress gateway=\$routeG\
+    ateway distance=1 comment=\$routeComment } on-error={}\
+    \n}\
+    \n\
+    \n"
+add comment=WG-Default disabled=yes down-script=\
+    "/ip route disable [find comment=\"WG-Default\"];" host=10.8.0.1 \
+    interval=15s name=WG packet-count=20 test-script="" thr-loss-count=5 \
+    type=icmp up-script="/ip route enable [find comment=\"WG-Default\"];"
+/user aaa
+set accounting=no
diff --git a/MikroMaster/20260712/20260712040002-Config.rsc b/MikroMaster/20260712/20260712040002-Config.rsc
new file mode 100644
index 0000000..2ddc517
--- /dev/null
+++ b/MikroMaster/20260712/20260712040002-Config.rsc
@@ -0,0 +1,3841 @@
+# 2026-07-12 04:00:06 by RouterOS 7.23.1
+# software id = A8L5-07YF
+#
+# model = RB952Ui-5ac2nD
+# serial number = D3D50CEDCD38
+/interface bridge
+add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\
+    "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\
+    Bridge-LAN port-cost-mode=short
+/interface ethernet
+set [ find default-name=ether1 ] comment=Unet-cable loop-protect=off name=\
+    Unet-ether1 rx-flow-control=auto tx-flow-control=auto
+set [ find default-name=ether2 ] comment=LAN-2
+set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3
+set [ find default-name=ether4 ] comment=LAN-4
+set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \
+    loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto
+/interface wireless
+# managed by CAPsMAN
+# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding
+set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados wireless-protocol=802.11
+# managed by CAPsMAN
+# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding
+set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados5g wireless-protocol=802.11
+/interface wireguard
+add comment=WG listen-port=13231 mtu=1320 name=WG
+add comment="WG interface for Amnezia route" disabled=yes listen-port=33033 \
+    mtu=1360 name=wg-nuc
+/interface list
+add include=static name=LAN
+add name=Internet
+add include=Internet name=WAN
+/interface wireless security-profiles
+set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
+    dynamic-keys supplicant-identity=MikroTik
+/iot wiliot servers
+set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East"
+/ip dhcp-server option
+add code=12 name=HostName
+add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00"
+/ip dhcp-server option sets
+add name=HP1505n options=HostName
+add name=StartLife1 options=HostName
+add name=amsterDev options=HostName
+add name=MiTV options=HostName
+add name=miller options=HostName
+add name=amster options=HostName
+add name=garage options=HostName
+add name=domain-search-set options=domain-search-list
+add name=VADOS-LEN options=HostName
+add name=VADOS-NUC options=HostName
+add name=MikroNUC options=HostName
+add name=master options=HostName
+add name=MikroYellow options=HostName
+add name="=\"Client ID\"" options=HostName
+add name=iVados options=HostName
+/ip dns forwarders
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no
+add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \
+    verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no
+/ip ipsec proposal
+set [ find default=yes ] disabled=yes
+/ip pool
+add name=dhcp ranges=10.30.30.83-10.30.30.254
+/ip dhcp-server
+add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \
+    dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \
+    name=masterDHCP server-address=10.30.30.81
+/ip smb users
+set [ find default=yes ] disabled=yes
+add disabled=yes name=vados
+/ipv6 dhcp-client option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=DUID value=0x00030001488f5a8e1abc
+add code=61 name=clientid
+/ipv6 dhcp-server option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=CLIENT_DUID
+add code=61 name=CLIENT_MAC
+/ppp profile
+set *FFFFFFFE use-upnp=no
+/routing bgp template
+set default disabled=no output.network=bgp-networks
+/routing table
+add disabled=no fib name=To-VPN
+add disabled=no fib name=r_to_vpn
+/system logging action
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email
+/system script
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\
+    \n\r\
+    \n#:local Script AM-setup\
+    \n;\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n\
+    \n\r\
+    \n#\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\
+    \n\r\
+    \n#\r\
+    \n\
+    \n#root.mnuc.backuper\
+    \n\
+    \n\r\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\
+    .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\
+    \n\
+    \n#:local Script AM-GlobalConfig;\
+    \n\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n#:local FetchFile AM-DOHCert.rsc\
+    \n\
+    \n\r\
+    \n\r\
+    \n#\
+    \n:global MkDir;\
+    \n\r\
+    \n\
+    \n#:local FetchFile Binary.backup\
+    \n:local localDir \"\";\
+    \n\
+    \n\r\
+    \n#\$MkDir \$localDir;\r\
+    \n\
+    \n#\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\
+    \$localDir . \$FetchFile);\r\
+    \n"
+add comment="Global Config Script" dont-require-permissions=no name=\
+    AM-GlobalConfig owner=AM-GlobalConfig policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GlobalConfig\r\
+    \n# Script comment: Global Config Script\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# Warning: Dont touch this line!\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global GlobalConfReady false;\r\
+    \n#\r\
+    \n#\r\
+    \n# Global Url For Amster scripts to fetch\r\
+    \n# most be defined in AM-Init-Script or AM-setup scripts\r\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n:global ScriptsUrlSuffix (a);\r\
+    \n:global CheckSumsVerify true;\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF true;\r\
+    \n:global CommentsInScripts true;\r\
+    \n\r\
+    \n# Debug output:\r\
+    \n:global PrintDebug true; #false;\r\
+    \n\r\
+    \n# Debug output for specific script:\r\
+    \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\
+    \n\r\
+    \n# Debug logs\r\
+    \n# Other actions (disk, email, remote or support) can be used as well.\r\
+    \n# I do not recommend using echo - use debug output instead (https://rsc.\
+    eworm.de/main/DEBUG.html#debug-output).\r\
+    \n#/system/logging/add topics=script,debug action=memory;\r\
+    \n\r\
+    \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\
+    \n:global Domain \"WORKGROUP\";\r\
+    \n\r\
+    \n:global EmailGeneralTo \"vados@vados.ru\";\r\
+    \n#:global EmailGeneralCc \"\";\r\
+    \n\r\
+    \n# \$ScriptInstallUpdate mod/notification-telegram\r\
+    \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\
+    \";\r\
+    \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\
+    \n# Use this to send notifications to a specific topic in group.\r\
+    \n#:global TelegramThreadId \"30\";\r\
+    \n# Using telegram-chat you have to define trusted chat ids (not group ids\
+    !)\r\
+    \n# or user names. Groups allow to chat with devices simultaneously.\r\
+    \n:global TelegramChatIdsTrusted {\r\
+    \n  \"454403445\"\r\
+    \n  \"-1003631309063\"\r\
+    \n  \"-5124482807\"\r\
+    \n  \"1087968824\";\r\
+    \n};\r\
+    \n#  \"-5294757340\";\r\
+    \n\r\
+    \n:global TelegramChatGroups \"(all)\";\r\
+    \n#:global TelegramChatGroups \"(all|home|office)\";\r\
+    \n\r\
+    \n:global NotificationFunctions {\r\
+    \n  \"email\"\r\
+    \n  \"telegram\";\r\
+    \n};\r\
+    \n# Toggle this to disable symbols in notifications.\r\
+    \n:global NotificationsWithSymbols true;\r\
+    \n:global TerminalColorOutput true;\r\
+    \n\r\
+    \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\
+    \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\
+    \n\r\
+    \n## Update channel. Possible values: stable, long-term, testing, developm\
+    ent\r\
+    \n:global updateChannel \"stable\";\r\
+    \n\r\
+    \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\
+    \");\r\
+    \n:global CertRenewTime 2w;\r\
+    \n:global CertRenewPass (a); #{\r\
+    \n#  \"\";\r\
+    \n#  \"v3ry-s3cr3t\";\r\
+    \n#  \"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n:global CertWarnTime 1w;\r\
+    \n:global CertIssuedExportPass (a); # {\r\
+    \n#  \"\";\r\
+    \n#  \"cert1-cn\"=\"v3ry-s3cr3t\";\r\
+    \n#  \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n\r\
+    \n# Script BackupAndUpdate mode, possible values: backup,\r\
+    \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\
+    n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;).  \r\
+    \n# osupdate - Update if available and creates backups before/after update\
+    \_(ignores `forceBackup`)\r\
+    \n#               Set `forceBackup` to true to always create backups, even\
+    \_without updates\r\
+    \n# osnotify - Set `forceBackup` to always create backups on every run\r\
+    \n:global DevInfoIncludeIP true;\r\
+    \n:global BackupAndUpdateMode \"osnotify\"\r\
+    \n\r\
+    \n:global forceBackup true;\r\
+    \n:global BackupPassword \"Peskar55\";\r\
+    \n\r\
+    \n# SFTP Backup Variables\r\
+    \n:global BackupRandomDelay 0;\r\
+    \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\
+    \n:global BackupUploadUser \$Identity;\r\
+    \n:global BackupUploadPass \"root.mnuc.backuper\";\r\
+    \n\r\
+    \n:global BackupSendBinary true;\r\
+    \n:global BackupSendExport true;\r\
+    \n:global BackupSendGlobalConfig true;\r\
+    \n:global BackupSendScripts true;\r\
+    \n\r\
+    \n# Remove local file after uploading if no errors\r\
+    \n:global BackupRmLocal true;\r\
+    \n\r\
+    \n# Local Backups Root Directory \r\
+    \n:global BackupLocalRoot \"tmpfs\";\r\
+    \n\r\
+    \n# Encrypt Backup\r\
+    \n:global BackupEncrypt true;\r\
+    \n\r\
+    \n# Sensitive information in Backups\r\
+    \n:global BackupSens true;\r\
+    \n\r\
+    \n# User Export\r\
+    \n:global BackupUser true;\r\
+    \n\r\
+    \n# License Export (not for CHR, will silently skip)\r\
+    \n:global BackupLicense false;\r\
+    \n\r\
+    \n# SSH Keys\r\
+    \n:global BackupSshKeys true;\r\
+    \n\r\
+    \n# Certificate Export\r\
+    \n:global BackupCerts true;\r\
+    \n\r\
+    \n# Certificate Password\r\
+    \n:global BackupCertsPasswd \"\";\r\
+    \n\r\
+    \n# User-Manager Export\r\
+    \n:global BackupUserMan false;\r\
+    \n\r\
+    \n# The Dude Export\r\
+    \n:global BackupDude false;\r\
+    \n\r\
+    \n# User Files to export, comma-separated string or array of strings\r\
+    \n# User Files are not removed on backup\r\
+    \n# Any directory paths will be removed (/ -> _) on remote file\r\
+    \n# Nonpresent files are silently skipped\r\
+    \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\
+    \n\r\
+    \n# load functions and any custom scripts\r\
+    \n#                    [ /system/script/find where name=\"global-config-ov\
+    erlay\" ], \\\r\
+    \n#                    [ /system/script/find where name~\"^global-config-o\
+    verlay\\\\.d/.\" ]\r\
+    \n#\r\
+    \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\
+    ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\
+    \r\
+    \n#  :onerror Err {\r\
+    \n#     /system/script/run \$Script;\r\
+    \n#     } do={\r\
+    \n#       :log error (\"Loading configuration from configs and functions\"\
+    \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\
+    \n#  }\r\
+    \n#}\r\
+    \n#:log info \"\\ndevMode = \$devMode\";\r\
+    \n#:log info \"\\ndevRunning = \$devRunning\";\r\
+    \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \
+    GlobalRUN\\r\?\\n\" ] do={\r\
+    \n  :onerror Err {\r\
+    \n    /system/script/run \$Script;\r\
+    \n       } do={\r\
+    \n       :log error (\"Run script \" . [ /system/script/get \$Script name \
+    ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# signal we are ready\r\
+    \n:set GlobalConfReady true;\r\
+    \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\
+    \n"
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \
+    owner=AM-GlobalFunc policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GglobalFunc\r\
+    \n# Script comment: Global functions\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch, scheduler\r\
+    \n:local ExitOK false;\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n#:global checkRunJob \$SriptName;\r\
+    \n#:global fixCRLF;\r\
+    \n#:if (\$fixCRLF !=  false) do={\r\
+    \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\
+    ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\
+    }\r\
+    \n#:if (\$fixCRLF !=  \"LF\") do={ /system/script/set source=[ :tocrlf [ g\
+    et \$fixScript source ] ] \$fixScript};};\r\
+    \n#}\r\
+    \n:global GlobalFuncReady false;\r\
+    \n\r\
+    \n# Git commit id & info, expected configuration version\r\
+    \n:global CommitId \"main/729/f42d43ae\";\r\
+    \n:global CommitTAG \"unknown\";\r\
+    \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\
+    r: root, in 00:05:03 01.07.2026.\";\r\
+    \n\r\
+    \n# The variables are received right here.\r\
+    \n:global GlobalConfVersion 140;\r\
+    \n\r\
+    \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\
+    \n\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global IdentityShort [:pick \$Identity 0 18];\r\
+    \n\r\
+    \n:global devBoardName [/system/resource/get board-name];\r\
+    \n:global devMode [/system/device-mode/get mode];\r\
+    \n:global devCurArch [/system/resource/get architecture-name];\r\
+    \n:global devCurVersion [/system/resource/get version];\r\
+    \n\r\
+    \n# Variables defined in AM-GlobalConfig.rsc\r\
+    \n:global TerminalColorOutput;\r\
+    \n:global CommentsInScripts;\r\
+    \n:global DetectIpAddrDefault;\r\
+    \n:global DetectIpAddrFallback;\r\
+    \n:global updateChannel;\r\
+    \n:global Domain;\r\
+    \n:global EmailGeneralTo;\r\
+    \n:global BackupAndUpdateMode;\r\
+    \n\r\
+    \n# Single functions, without nested functions.\r\
+    \n:global MiniDateTimeStamp;\r\
+    \n:global MicroDateTimeStamp;\r\
+    \n\r\
+    \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\
+    \n:global LogPrint;\r\
+    \n\r\
+    \n# DeviceInfo and Updates\r\
+    \n:global IsCheckUpdates;\r\
+    \n:global WaitCheckUpdates;\r\
+    \n:global GetPubIp;\r\
+    \n\r\
+    \n:global GetArrDeviceInfo;\r\
+    \n:global WaitArrDeviceInfo;\r\
+    \n\r\
+    \n:global devModel;\r\
+    \n:global devRunningMode;\r\
+    \n\r\
+    \n:global devRbRevision;\r\
+    \n:global devRbSerialNumber;\r\
+    \n:global devRbVerAvail;\r\
+    \n\r\
+    \n:global runningChannelVersion;\r\
+    \n:global runningChannel;\r\
+    \n:global runningVersion;\r\
+    \n\r\
+    \n:global devBuildTime;\r\
+    \n:global ROsVerAvail;\r\
+    \n:global PkgUpdStatus;\r\
+    \n:global currentUpdateChannel;\r\
+    \n\r\
+    \n:global ScriptInstallUpdate;\r\
+    \n\r\
+    \n:global DeviceInfo;\r\
+    \n\r\
+    \n:global OldMode;\r\
+    \n\r\
+    \n:global ParseKeyValueStore;\r\
+    \n:global RandomDelay;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global EscapeForRegEx;\r\
+    \n:global CharacterMultiply;\r\
+    \n:global CharacterReplace;\r\
+    \n:global CleanFilePath;\r\
+    \n:global CleanName;\r\
+    \n\r\
+    \n:global CommitBrief;\r\
+    \n\r\
+    \n:global EitherOr;\r\
+    \n:global FormatLine;\r\
+    \n:global GetRandom20CharAlNum;\r\
+    \n:global GetRandom20CharHex;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global Grep;\r\
+    \n:global IfThenElse;\r\
+    \n:global MAX;\r\
+    \n:global MIN;\r\
+    \n:global HumanReadableNum;\r\
+    \n\r\
+    \n:global IsFullyConnected;\r\
+    \n:global IsDNSResolving;\r\
+    \n:global IsTimeSync;\r\
+    \n:global IsTimeSyncCached;\r\
+    \n:global IsTimeSyncResetNtp;\r\
+    \n\r\
+    \n:global MkDir;\r\
+    \n:global RmDir;\r\
+    \n:global RmFile;\r\
+    \n:global FileGet;\r\
+    \n:global Unix2Dos;\r\
+    \n:global UrlEncode;\r\
+    \n:global WaitForFile;\r\
+    \n:global ScriptLock;\r\
+    \n:global SendTelegram;\r\
+    \n:global NotificationFunctions;\r\
+    \n:global SendNotification;\r\
+    \n:global SendNotification2;\r\
+    \n:global SymbolForNotification;\r\
+    \n:global SymbolByUnicodeName;\r\
+    \n:global ValidateSyntax;\r\
+    \n:global CheckSumsVerify;\r\
+    \n:global GlobalConfChanges;\r\
+    \n:global GlobalConfMigration;\r\
+    \n:global VersionToNum;\r\
+    \n:global RequiredRouterOS;\r\
+    \n:global ExitError;\r\
+    \n:global ExitOnError;\r\
+    \n\r\
+    \n:global FetchHugeFiles;\r\
+    \n:global FetchUserAgentStr;\r\
+    \n:global FileExists;\r\
+    \n:global CertificateAvailable;\r\
+    \n:global CertificateDownload;\r\
+    \n:global CertificateNameByCN;\r\
+    \n:global CharacterMultiply;\r\
+    \n\r\
+    \n:global InspectVar;\r\
+    \n:global InspectVarRet;\r\
+    \n:global ParseCustom;\r\
+    \n\r\
+    \n:set IsCheckUpdates do={\r\
+    \n  :local isInfo [:tobool \$1];\r\
+    \n  :global updateChannel;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\
+    \n  :local CurrentChannel [ /system/package/update/get channel ];\r\
+    \n  :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\
+    el) do={\r\
+    \n    :retry command={/system/package/update set channel=\$updateChannel} \
+    \_delay=300ms max=5 on-error={};\r\
+    \n    :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\
+    \n  }\r\
+    \n  :local Update [ /system/package/update/get ];\r\
+    \n  :local Channel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set currentUpdateChannel \$Channel;\r\
+    \n  :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\
+    \n  :local StatusPkg \"undefined\";\r\
+    \n  :log info (\$0 . \" Checking for updates...\");\r\
+    \n  :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\
+    dates without-paging as-value]->\"status\")} \\\r\
+    \n   delay=300ms max=5 on-error={};\r\
+    \n  :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\
+    \n  :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\
+    s true; } else={ :set PkgUpdStatus false; }\r\
+    \n  :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \
+    ] ];\r\
+    \n  :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n  :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\
+    \n    :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n    :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n      :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n    }\r\
+    \n    :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\
+    kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\
+    \n    :return true;\r\
+    \n  } else={\r\
+    \n    :return \$PkgUpdStatus;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitCheckUpdates do={\r\
+    \n  :global IsCheckUpdates;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :local Status \"\";\r\
+    \n  :local Update;\r\
+    \n  :local WaitCount 0;\r\
+    \n  :if ([ \$IsCheckUpdates true ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n  :while ((\$Status = \"\" || \$Status = \"finding out latest version...\
+    \") && \$WaitCount < 60) do={\r\
+    \n    :delay 1s;\r\
+    \n    :set WaitCount (\$WaitCount + 1);\r\
+    \n    :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n   }\r\
+    \n  :set Update [ /system/package/update/get ];\r\
+    \n  :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n  :if ((\$Update->\"status\") = \"New version is available\") do={\r\
+    \n    :set PkgUpdStatus true;\r\
+    \n  } else={\r\
+    \n    :set PkgUpdStatus false;\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n    :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n  }\r\
+    \n  :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\
+    \n  :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \
+    do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitArrDeviceInfo do={\r\
+    \n   :global GetArrDeviceInfo;\r\
+    \n   :while ([ \$GetArrDeviceInfo ] = false) do={\r\
+    \n    :delay 1s;\r\
+    \n   }\r\
+    \n}\r\
+    \n\r\
+    \n:set GetArrDeviceInfo do={\r\
+    \n   :global LogPrint;\r\
+    \n   :global arrDeviceInfo;\r\
+    \n   :global devBoardName;\r\
+    \n   :global devModel;\r\
+    \n   :global devRunning;\r\
+    \n   :global devCurArch;\r\
+    \n   :global devRbRevision;\r\
+    \n   :global devRbSerialNumber;\r\
+    \n   :global devBuildTime;\r\
+    \n   :global runningChannelVersion;\r\
+    \n   :global runningChannel;\r\
+    \n   :global runningVersion;\r\
+    \n   :global currentUpdateChannel;\r\
+    \n   :global ROsVerAvail;\r\
+    \n\r\
+    \n   :local DeviceInfo;\r\
+    \n   :local Resource [/system/resource/get];\r\
+    \n   :local Update [ /system/package/update/get ];\r\
+    \n   :local VersionString [ :tostr (\$Resource->\"version\") ];\r\
+    \n   :local ChannelStart [ :find \$VersionString \" (\" ];\r\
+    \n   :local RouterBoard;\r\
+    \n   :local IsRouterBoard false;\r\
+    \n   :local RunningMode \"\";\r\
+    \n\r\
+    \n   :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\
+    \n   :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\
+    \n   :set runningChannelVersion \$VersionString;\r\
+    \n   :set runningVersion \$VersionString;\r\
+    \n   :set runningChannel \"\";\r\
+    \n\r\
+    \n   :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\
+    {\r\
+    \n     :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\
+    \n     :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\
+    len \$VersionString ] ];\r\
+    \n     :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\
+    \n     :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\
+    \r\
+    \n       :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\
+    \n     }\r\
+    \n   }\r\
+    \n\r\
+    \n   :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\
+    \_3] != \"x86\") do={\r\
+    \n   :do {\r\
+    \n      :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\
+    \n#     :set RouterBoard [ /system/routerboard/get ];\r\
+    \n      :if ((\$RouterBoard->\"routerboard\") = true) do={\r\
+    \n        :set IsRouterBoard true;\r\
+    \n     }\r\
+    \n   } on-error={}\r\
+    \n    }\r\
+    \n\r\
+    \n   :do {\r\
+    \n     :set RunningMode [ /system/device-mode/get mode ];\r\
+    \n   } on-error={\r\
+    \n     :do {\r\
+    \n       :set RunningMode [ /system/device-mode/get running ];\r\
+    \n     } on-error={\r\
+    \n       :set RunningMode \"\";\r\
+    \n     }\r\
+    \n   }\r\
+    \n   :set devRunning \$RunningMode;\r\
+    \n\r\
+    \n   :if (\$IsRouterBoard = true) do={\r\
+    \n     :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\
+    \n     :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\
+    \n     :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \
+    ];\r\
+    \n   } else={\r\
+    \n     :set devModel \$devBoardName;\r\
+    \n     :set devRbRevision \"\";\r\
+    \n     :set devRbSerialNumber \"\";\r\
+    \n   }\r\
+    \n\r\
+    \n   :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n   :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n\r\
+    \n   :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\
+    \n   :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\
+    \n   :set (\$DeviceInfo->\"model\") \$devModel;\r\
+    \n   :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\
+    \n   :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\
+    \n   :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\
+    \n   :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\
+    \n   :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\
+    ion;\r\
+    \n   :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\
+    \n   :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\
+    \n   :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\
+    \n   :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\
+    current-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\
+    upgrade-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\
+    \n   :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\
+    alled-version\") ];\r\
+    \n   :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\
+    \n   :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\
+    ) ];\r\
+    \n\r\
+    \n   :set arrDeviceInfo \$DeviceInfo;\r\
+    \n   :return \$DeviceInfo;\r\
+    \n}\r\
+    \n\r\
+    \n:set DeviceInfo do={\r\
+    \n  :global GetArrDeviceInfo;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global FormatLine;\r\
+    \n  :global CommitBrief;\r\
+    \n\r\
+    \n  :local License [/system/license/get];\r\
+    \n  :local Snmp [ /snmp/get ];\r\
+    \n  :local Info [ \$GetArrDeviceInfo ];\r\
+    \n\r\
+    \n  :if ([ :typeof \$Info ] != \"array\") do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :return ( \\\r\
+    \n    [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\
+    \_. \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\
+    \_\\\r\
+    \n    \"Hardware:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Board\" (\$Info->\"board-name\") ] . \"\\n\" . \
+    \\\r\
+    \n    [ \$FormatLine \"    Arch\" (\$Info->\"architecture-name\") ] . \"\\\
+    n\" . \\\r\
+    \n    [ \$FormatLine \"    Model\" (\$Info->\"model\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\
+    \n      (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Serial\" (\$Info->\"serial-number\") ] . \"\
+    \\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"nlevel\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS:\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"level\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    [ \$FormatLine \"    Channel\" (\$Info->\"package-channel\") ] . \"\
+    \\n\" . \\\r\
+    \n    [ \$FormatLine \"    Installed\" (\$Info->\"installed-version\") ] .\
+    \_\"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Running\" ((\$Info->\"running-version\") . \
+    \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\
+    \n      ([ \$FormatLine \"    Running\" (\$Info->\"running-version\") ] . \
+    \"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\
+    \n        (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\
+    \_\\\r\
+    \n      ([ \$FormatLine \"    Available\" (\$Info->\"latest-version\") ] .\
+    \_\"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\
+    \n        (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\
+    ) \\\r\
+    \n      ([ \$FormatLine \"    Firmware\" ((\$Info->\"current-firmware\") .\
+    \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS-Scripts:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Version\" \$GlobalConfVersion ]);\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\
+    tionFunctions ({})}\r\
+    \n\r\
+    \n:set GetRandom20CharAlNum do={\r\
+    \n  :global EitherOr;\r\
+    \n  :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\
+    FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\
+    \n}\r\
+    \n\r\
+    \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\
+    \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\
+    \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\
+    \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\
+    \n\r\
+    \n:global checkRunJob;\r\
+    \n:set checkRunJob do={\r\
+    \n  :local Script [ :tostr \$1 ];\r\
+    \n  :global ScriptLock; \r\
+    \n  :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\
+    \n  :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\
+    :set Job [ /system/script/job/get \$Job ];\r\
+    \n    :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\
+    stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\
+    \n     :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\
+    lse; \r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVar do={\r\
+    \n  :global InspectVarRet;\r\
+    \n  :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\
+    \n}\r\
+    \n\r\
+    \n:set CommitBrief do={\r\
+    \n  :global CommitId;\r\
+    \n  :global CommitInfo;\r\
+    \n  :if (\$CommitId = \"unknown\") do={\r\
+    \n    :return \"unknown\";\r\
+    \n    }\r\
+    \n  :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVarRet do={\r\
+    \n  :local Input \$1;\r\
+    \n  :local Level (0 + [ :tonum \$2 ]);\r\
+    \n  :global CharacterReplace;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global InspectVarRet;\r\
+    \n  :local IndentReturn do={\r\
+    \n    :local Prefix [ :tostr \$1 ];\r\
+    \n    :local Value  [ :tostr \$2 ];\r\
+    \n    :local Level  [ :tonum \$3 ];\r\
+    \n    :global CharacterMultiply;\r\
+    \n    :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\
+    fix . \"-> \" . \$Value);\r\
+    \n  }\r\
+    \n  :local TypeOf [ :typeof \$Input ];\r\
+    \n  :local Len    [ :len \$Input ];\r\
+    \n  :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\
+    \n  :if (\$TypeOf = \"array\") do={\r\
+    \n    :foreach Key,Value in=\$Input do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n        [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\
+    \n        [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    :if (\$TypeOf = \"str\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n         [ \$IndentReturn \"len\" \$Len \$Level ]);\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\
+    \n      }\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if (\$TypeOf != \"nothing\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n       [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\
+    \_\\\r\
+    \n        ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set GetPubIp do={\r\
+    \n    :global DetectIpAddrDefault;\r\
+    \n    :global DetectIpAddrFallback;\r\
+    \n\r\
+    \n    :local PubIpAddr false;\r\
+    \n    :local Url \$DetectIpAddrDefault;\r\
+    \n    :local JobName [ :jobname ];\r\
+    \n\r\
+    \n    :do {\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using default serv\
+    ice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \
+    detect public IP using default service: \" . \$Url . \".\")}\r\
+    \n     } on-error={\r\
+    \n      :log error (\$0 . \" Failed to detect public IP using default serv\
+    ice: \" . \$Url . \".\");\r\
+    \n      :set Url \$DetectIpAddrFallBack;\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using fallback ser\
+    vice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\
+    \_detect public IP using fallback service: \" . \$Url . \".\")}\r\
+    \n    };\r\
+    \n    :local IpLen ([ :len \$PubIpAddr ] -1);\r\
+    \n    :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\
+    {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\
+    \n    :return \$PubIpAddr;\r\
+    \n}\r\
+    \n\r\
+    \n:set FormatLine do={\r\
+    \n  :local Key    [ :tostr \$1 ];\r\
+    \n  :local Value  [ :tostr \$2 ];\r\
+    \n  :local Indent [ :tonum \$3 ];\r\
+    \n  :local Spaces;\r\
+    \n  :local Return \"\";\r\
+    \n  :global CharacterMultiply;\r\
+    \n  :global EitherOr;\r\
+    \n  :set Indent [ \$EitherOr \$Indent 16 ];\r\
+    \n  :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\
+    \n  :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\
+    \n  :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\
+    n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\
+    \n  } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \
+    \$Return ]) ] . \$Value)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseCustom do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Start [:find [ \$Str ] [:tostr \$2]];\r\
+    \n  :local End [ :tostr \$3 ];\r\
+    \n  :local Num [ :tonum \$4 ];\r\
+    \n  :local Return;\r\
+    \n  :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\
+    \n  :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\
+    \n  :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\
+    lse={\r\
+    \n  :set End [:find \$rest \$End];\r\
+    \n  :set Return [:pick \$rest 0 \$End];\r\
+    \n  }\r\
+    \n:return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set LogPrint do={\r\
+    \n  :local Severity [ :tostr \$1 ];\r\
+    \n  :local Name     [ :tostr \$2 ];\r\
+    \n  :local Message  [ :tostr \$3 ];\r\
+    \n  :global PrintDebug;\r\
+    \n  :global PrintDebugOverride;\r\
+    \n  :global EitherOr;\r\
+    \n  :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \
+    ];\r\
+    \n  :local PrintSeverity do={\r\
+    \n  :global TerminalColorOutput;\r\
+    \n   :if (\$TerminalColorOutput != true) do={:return \$1}\r\
+    \n   :local Color { debug=96; info=97; warning=93; error=91 };\r\
+    \n   :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\
+    \n}\r\
+    \n  :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\
+    \r\
+    \n  :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\
+    \n    :if (\$Severity = \"debug\") do={:log debug \$Log}\r\
+    \n    :if (\$Severity = \"error\") do={:log error \$Log}\r\
+    \n    :if (\$Severity = \"info\" ) do={:log info  \$Log}\r\
+    \n  } else={:log warning \$Log; :set Severity \"warning\"}\r\
+    \n  :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\
+    erity \$Severity ] . \": \" . \$Message)}\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateAvailable do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :local UseFor     [ :tostr \$2 ];\r\
+    \n\r\
+    \n  :global CertificateDownload;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n\r\
+    \n  :if ([ :len \$UseFor ] = 0) do={\r\
+    \n    :log warning (\$0 . \"The intended use is undefined!\");\r\
+    \n    :set UseFor \"undefined\";\r\
+    \n  }\r\
+    \n  :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\
+    \n       [ /certificate/settings/get crl-download ] = true && \\\r\
+    \n       [ /certificate/settings/get crl-store ] = \"system\") do={\r\
+    \n    :log warning (\$0 . \"This system has low free flash space but \" . \
+    \\\r\
+    \n      \"is configured to download certificate CRLs to system!\");\r\
+    \n  }\r\
+    \n  :if ([ :len \$CommonName ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No CommonName given!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\
+    \r\
+    \n        (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\
+    \n        (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n       [ :len [ /certificate/builtin/find where common-name=\$CommonName\
+    \_] ] > 0) do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \
+    \"' not available.\");\r\
+    \n    :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\
+    ) do={\r\
+    \n    :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\
+    \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\
+    e ] ];\r\
+    \n  :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\
+    ertVal->\"skid\")) do={\r\
+    \n    :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\
+    \_= 0) do={\r\
+    \n      :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\
+    >\"CN\");\r\
+    \n      :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \
+    is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\
+    \n      :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\
+    \") ] ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateDownload do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :global ScriptUpdatesBaseUrl;\r\
+    \n  :global ScriptUpdatesUrlSuffix;\r\
+    \n  :global CertificateNameByCN;\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :log info (\$0 . \"Downloading and importing certificate with \" . \\\
+    \r\
+    \n      \"CommonName '\" . \$CommonName . \"'.\");\r\
+    \n  :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\
+    \n  :do {\r\
+    \n    /tool/fetch check-certificate=yes-without-crl mode=https http-header\
+    -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\
+    sUrlSuffix) \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n    \$WaitForFile \$FileName;\r\
+    \n  } on-error={\r\
+    \n    :log warning (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \\\r\
+    \n      \"' from repository! Trying fallback to mkcert.org...\");\r\
+    \n    :do {\r\
+    \n      :local CertSettings [ /certificate/settings/get ];\r\
+    \n      :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\
+    \_] ] = 0 && \\\r\
+    \n           !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \
+    || \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \
+    \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\
+    \r\
+    \n             [ :len [ /certificate/builtin/find where common-name=\"ISRG\
+    \_Root X1\" ] ] > 0)) do={\r\
+    \n        :log error (\$0 . \" Required certificate is not available.\");\
+    \r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n      /tool/fetch check-certificate=yes-without-crl mode=https http-head\
+    er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\
+    n ({ \$CommonName }) ] \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n      \$WaitForFile \$FileName;\r\
+    \n      :if ([ /file/get \$FileName size ] = 0) do={\r\
+    \n        \$RmFile \$FileName;\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n    } on-error={\r\
+    \n      :log error (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \"'!\");\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\
+    \n  :delay 1s;\r\
+    \n  \$RmFile \$FileName;\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\
+    +\\\$\") ];\r\
+    \n    :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\
+    e . \"' still unavailable!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \
+    \"_[0-9]+\\\$\") ] do={\r\
+    \n    \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateNameByCN do={\r\
+    \n  :local Match [ :tostr \$1 ];\r\
+    \n  :global CleanName;\r\
+    \n  :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\
+    rint=\$Match or name=\$Match) ]->0);\r\
+    \n  :if ([ :len \$Cert ] = 0) do={\r\
+    \n    :log warning (\$0 .\" No matching certificate found.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CommonName [ /certificate/get \$Cert common-name ];\r\
+    \n  /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileExists do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :local Type     [ :tostr \$2 ];\r\
+    \n  :global FileGet;\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={ :return false; }\r\
+    \n  :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\
+    \n  :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\
+    \_true; }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set Grep do={\r\
+    \n  :local Input  ([ :tostr \$1 ] . \"\\n\");\r\
+    \n  :local Pattern [ :tostr \$2 ];\r\
+    \n  :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\
+    }\r\
+    \n  :do {\r\
+    \n    :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\
+    \n    :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \
+    \$Line}\r\
+    \n    :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\
+    Input ] ];\r\
+    \n  } while=([ :len \$Input ] > 0);\r\
+    \n  :return [];\r\
+    \n}\r\
+    \n\r\
+    \n:set HumanReadableNum do={\r\
+    \n  :local Input [ :tonum \$1 ];\r\
+    \n  :local Base  [ :tonum \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Prefix \"kMGTPE\";\r\
+    \n  :local Pow 1;\r\
+    \n  :set Base [ \$EitherOr \$Base 1024 ];\r\
+    \n  :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\
+    \n  :if (\$Input < \$Base) do={:return \$Input}\r\
+    \n  :for I from=0 to=[ :len \$Prefix ] do={\r\
+    \n    :set Pow (\$Pow * \$Base);\r\
+    \n    :if (\$Input / \$Base < \$Pow) do={\r\
+    \n      :set Prefix [ :pick \$Prefix \$I ];\r\
+    \n      :local Tmp1 (\$Input * 100 / \$Pow);\r\
+    \n      :local Tmp2 (\$Tmp1 / 100);\r\
+    \n      :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\
+    \n      :return (\$Tmp2 . \".\" . \\\r\
+    \n          [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\
+    2 ] + 1) ] . \\\r\
+    \n          \$Prefix . \$Bin);\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanFilePath do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CharacterReplace;\r\
+    \n  :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \
+    \"//\" \"/\" ]; }\r\
+    \n  :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\
+    n \$Path ] ]; }\r\
+    \n  :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \
+    :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\
+    \n  :return \$Path;\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanName do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\
+    stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\
+    \n      :do {:if ([ :len \$Return ] = 0) do={:error true};\r\
+    \n        :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\
+    ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\
+    \n    };\r\
+    \n    :set Return (\$Return . \$Char)};\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set RandomDelay do={\r\
+    \n  :local Time [ :tonum \$1 ];\r\
+    \n  :local Unit [ :tostr \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global GetRandomNumber;\r\
+    \n  :global MAX;\r\
+    \n  :if (\$Time = 0) do={:return false}\r\
+    \n  :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \
+    [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\
+    \n}\r\
+    \n\r\
+    \n:set EscapeForRegEx do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitError do={\r\
+    \n  :local ExitOK [ :tostr \$1 ];\r\
+    \n  :local Name   [ :tostr \$2 ];\r\
+    \n  :local Error  [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$ExitOK = \"false\") do={\r\
+    \n    :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \
+    \\\r\
+    \n        \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\
+    ror\" . \\\r\
+    \n        [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \
+    \$Error) \".\" ]);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitOnError do={\r\
+    \n  :local Name   [ :tostr \$1 ];\r\
+    \n  :local Error  [ :tostr \$2 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\
+    \\\$\") \\\r\
+    \n      \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\
+    r\" . \\\r\
+    \n      [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\
+    rror) \".\" ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set MiniDateTimeStamp do={\r\
+    \n    :local mikro [ :tobool \$1 ];\r\
+    \n    /system/clock;\r\
+    \n    :local vdate [get date];\r\
+    \n    :local vtime [get time];\r\
+    \n    :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\
+    \n    :local MM    [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\
+    \n    :local M     [:tonum \$MM];\r\
+    \n    :if (\$vdate ~ \".../../....\") do={\r\
+    \n        :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\
+    \n        :set M     ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\
+    PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\
+    \n        :if (\$M>12) do={:set M (\$M - 12)}\r\
+    \n        :set MM    [:pick (100 + \$M) 1 3];\r\
+    \n    }\r\
+    \n    :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\
+    \n    :local dd   [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\
+    \n    :local HH   [:pick \$vtime 0  2];\r\
+    \n    :local mm   [:pick \$vtime 3  5];\r\
+    \n    :local ss   [:pick \$vtime 6  8];\r\
+    \n    :local Return;\r\
+    \n    :if (\$mikro = true) do={\r\
+    \n      :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\
+    \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\
+    \n    } else={\r\
+    \n    :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\
+    \r\
+    \n   }\r\
+    \n   :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitForFile do={\r\
+    \n  :local FileName [ :tostr  \$1 ];\r\
+    \n  :local WaitTime [ :totime \$2 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global EitherOr;\r\
+    \n  :global MAX;\r\
+    \n  :set FileName [ \$CleanFilePath \$FileName ];\r\
+    \n  :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } delay=\$Delay max=10;\r\
+    \n  } on-error={ }\r\
+    \n  :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\
+    \n    :do {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } on-error={ }\r\
+    \n    :delay \$Delay;\r\
+    \n    :set Delay (\$Delay * 3 / 2);\r\
+    \n  }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileGet do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global WaitForFile;\r\
+    \n  :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FileVal false;\r\
+    \n  :do {\r\
+    \n    :set FileVal [ /file/get \$FileName ];\r\
+    \n   } on-error={ }\r\
+    \n  :return \$FileVal;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmDir do={\r\
+    \n  :local DirName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing directory: \". \$DirName);\r\
+    \n  :local DirVal [ \$FileGet \$DirName ];\r\
+    \n  :if (\$DirVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  };\r\
+    \n  :if (\$DirVal->\"type\" != \"directory\") do={\r\
+    \n    :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\
+    ory.\");\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$DirName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\
+    : \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmFile do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing file: \". \$FileName);\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\
+    sk\") do={\r\
+    \n    :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\
+    \r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$FileName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\
+    \_. \$Err); :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MkDir do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global FileGet;\r\
+    \n  :global RmDir;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :local MkTmpfs do={\r\
+    \n   :global WaitForFile;\r\
+    \n   :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n   :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n     :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n       :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\
+    \n       /disk/enable \$TmpFs;\r\
+    \n      }\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :log info (\$0 . \" Creating disk of type tmpfs.\");\r\
+    \n    \$RmDir \"tmpfs\";\r\
+    \n    :onerror Err {\r\
+    \n      /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\
+    /get total-memory ] / 3);\r\
+    \n      \$WaitForFile \"tmpfs\";\r\
+    \n    } do={\r\
+    \n      :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\
+    Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :set Path [ \$CleanFilePath \$Path ];\r\
+    \n  :if (\$Path = \"\") do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log debug (\$0 . \" Making directory: \" . \$Path);\r\
+    \n  :local PathVal [ \$FileGet \$Path ];\r\
+    \n  :if (\$PathVal->\"type\" = \"directory\") do={\r\
+    \n    :log debug (\$0 . \" ... which already exists.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/add type=\"directory\" name=\$Path;\r\
+    \n    \$WaitForFile \$Path;\r\
+    \n  } do={\r\
+    \n    :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \
+    \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterReplace do={\r\
+    \n  :local String [ :tostr \$1 ];\r\
+    \n  :local ReplaceFrom [ :tostr \$2 ];\r\
+    \n  :local ReplaceWith [ :tostr \$3 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :if (\$ReplaceFrom = \"\") do={:return \$String}\r\
+    \n  :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\
+    \r\
+    \n    :local Pos [ :find \$String \$ReplaceFrom ];\r\
+    \n    :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\
+    \r\
+    \n    :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\
+    \_\$String ] ];\r\
+    \n  }\r\
+    \n  :return (\$Return . \$String);\r\
+    \n}\r\
+    \n\r\
+    \n:set IfThenElse do={\r\
+    \n  :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \
+    \$2};\r\
+    \n  :return \$3;\r\
+    \n}\r\
+    \n\r\
+    \n:set EitherOr do={\r\
+    \n  :global IfThenElse;\r\
+    \n  :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \
+    \$1 \$2 ]}\r\
+    \n  :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\
+    \_\$1 \$2 ]}\r\
+    \n# this works for boolean values, literal ones with parentheses\r\
+    \n  :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseKeyValueStore do={\r\
+    \n  :local Source \$1;\r\
+    \n  :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\
+    \n    :do {\r\
+    \n      :return [ :deserialize from=json \$Source ];\r\
+    \n    } on-error={ }\r\
+    \n  }   \r\
+    \n  :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\
+    }\r\
+    \n  :local Result ({});\r\
+    \n  :foreach KeyValue in=[ :toarray \$Source ] do={\r\
+    \n    :if ([ :find \$KeyValue \"=\" ]) do={\r\
+    \n      :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\
+    \n      :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\
+    \_:len \$KeyValue ] ];\r\
+    \n      :if (\$Value=\"true\") do={:set Value true}\r\
+    \n      :if (\$Value=\"false\") do={:set Value false}\r\
+    \n      :set (\$Result->\$Key) \$Value;\r\
+    \n      } else={:set (\$Result->\$KeyValue) true}\r\
+    \n  }\r\
+    \n  :return \$Result;\r\
+    \n}\r\
+    \n:set RequiredRouterOS do={\r\
+    \n  :local Caller   [ :tostr \$1 ];\r\
+    \n  :local Required [ :tostr \$2 ];\r\
+    \n  :local Warn     [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :global VersionToNum;\r\
+    \n  :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\
+    \\\$\")) do={\r\
+    \n    :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\
+    e/update/get installed-version ] ]) do={\r\
+    \n    :if (\$Warn = \"true\") do={\r\
+    \n      :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \
+    0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\
+    \n        \" '\" . \$Caller . \"' (at least specific functionality) requir\
+    es RouterOS \" . \$Required . \". Please update!\");\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set ValidateSyntax do={\r\
+    \n  :local Code [ :tostr \$1 ];\r\
+    \n  :global LogPrint;\r\
+    \n  :onerror Err {\r\
+    \n    [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\
+    \n  } do={\r\
+    \n    \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set VersionToNum do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Multi 0x1000000;\r\
+    \n  :local Return 0;\r\
+    \n  :global CharacterReplace;\r\
+    \n  :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\
+    \n  :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\
+    \n    :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\
+    \r\
+    \n  }\r\
+    \n  :foreach Value in=([ :toarray \$Input ], 0) do={\r\
+    \n    :local Num [ :tonum \$Value ];\r\
+    \n    :if (\$Multi = 0x100) do={\r\
+    \n      :if ([ :typeof \$Num ] = \"num\") do={\r\
+    \n        :set Return (\$Return + 0xff00);\r\
+    \n        :set Multi (\$Multi / 0x100);\r\
+    \n      } else={\r\
+    \n        :if (\$Value = \"zero\") do={ }\r\
+    \n        :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \
+    }\r\
+    \n        :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\
+    \r\
+    \n        :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\
+    lue * \$Multi)); }\r\
+    \n    :set Multi (\$Multi / 0x100);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptLock do={\r\
+    \n  :local Script  [ :tostr  \$1 ];\r\
+    \n  :local WaitMax [ :totime \$2 ];\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global ScriptLockOrder;\r\
+    \n  :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\
+    \n    :set ScriptLockOrder ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :local JobCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :return [ :len [ /system/script/job/find where script=\$Script ] ];\
+    \r\
+    \n  }\r\
+    \n  :local TicketCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :local Count 0;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \
+    + 1)}\r\
+    \n    }\r\
+    \n    :return \$Count;\r\
+    \n  }\r\
+    \n  :local IsFirstTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Check  [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if (\$Ticket = \$Check) do={:return true}\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\
+    o={:return false}\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local AddTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Add    [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :while (true) do={\r\
+    \n      :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\
+    \n      :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\
+    \n      :delay 10ms;\r\
+    \n      :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\
+    e}\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local RemoveTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Remove [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\
+    \n        :set (\$ScriptLockOrder->\$Script->\$Id);\r\
+    \n        :delay 10ms;\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local CleanupTickets do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\
+    \n    }\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\
+    \n  :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\
+    \n    :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\
+    ist!\");\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$JobCount \$Script ] = 0) do={\r\
+    \n    \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\
+    );\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\
+    \n    :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\
+    t . \"', resetting!\");\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n    /system/script/job/remove [ find where script=\$Script ];\r\
+    \n  }\r\
+    \n  :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\
+    \n  \$AddTicket \$Script \$MyTicket;\r\
+    \n  :local WaitInterval (\$WaitMax / 20);\r\
+    \n  :local WaitTime \$WaitMax;\r\
+    \n  :while (\$WaitTime > 0 && \\\r\
+    \n      ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\
+    \n      [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\
+    \n    :set WaitTime (\$WaitTime - \$WaitInterval);\r\
+    \n    :delay \$WaitInterval;\r\
+    \n  }\r\
+    \n  :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\
+    \n      [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\
+    \n    \$RemoveTicket \$Script \$MyTicket;\r\
+    \n    \$CleanupTickets \$Script;\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  \$RemoveTicket \$Script \$MyTicket;\r\
+    \n  \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \
+    once\" . \\\r\
+    \n    [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\
+    \_lock\" \"\" ] . \"...\");\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification do={ :onerror Err {\r\
+    \n  :global SendNotification2;\r\
+    \n  \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\
+    \_silent=\$4 });\r\
+    \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification2 do={\r\
+    \n  :local Notification \$1;\r\
+    \n  :global NotificationFunctions;\r\
+    \n  :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\
+    \n    (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\
+    ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolByUnicodeName do={\r\
+    \n  :local Name [ :tostr \$1 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global SymbolsExtra;\r\
+    \n  :local Symbols ({\r\
+    \n    \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\
+    \n    \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\
+    \n    \"arrow-down\"=\"\\E2\\AC\\87\";\r\
+    \n    \"arrow-up\"=\"\\E2\\AC\\86\";\r\
+    \n    \"calendar\"=\"\\F0\\9F\\93\\85\";\r\
+    \n    \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\
+    \n    \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\
+    \n    \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\
+    \n    \"cloud\"=\"\\E2\\98\\81\";\r\
+    \n    \"cross-mark\"=\"\\E2\\9D\\8C\";\r\
+    \n    \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\
+    \n    \"fire\"=\"\\F0\\9F\\94\\A5\";\r\
+    \n    \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\
+    \n    \"gear\"=\"\\E2\\9A\\99\";\r\
+    \n    \"heart\"=\"\\E2\\99\\A5\";\r\
+    \n    \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\
+    \n    \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\
+    \n    \"information\"=\"\\E2\\84\\B9\";\r\
+    \n    \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\
+    \n    \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\
+    \n    \"link\"=\"\\F0\\9F\\94\\97\";\r\
+    \n    \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\
+    \n    \"memo\"=\"\\F0\\9F\\93\\9D\";\r\
+    \n    \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\
+    \n    \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\
+    \n    \"scissors\"=\"\\E2\\9C\\82\";\r\
+    \n    \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\
+    \n    \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\
+    \n    \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\
+    \n    \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\
+    \n    \"sparkles\"=\"\\E2\\9C\\A8\";\r\
+    \n    \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\
+    \n    \"star\"=\"\\E2\\AD\\90\";\r\
+    \n    \"warning-sign\"=\"\\E2\\9A\\A0\";\r\
+    \n    \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\
+    \n  }, \$SymbolsExtra);\r\
+    \n  :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\
+    \n  :local Special {\r\
+    \n    \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\
+    \n    \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\
+    \n    \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\
+    \n    \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\
+    \n  :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\
+    '!\");\r\
+    \n    :return \"\";\r\
+    \n  }\r\
+    \n  :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\
+    me) ] . \"\\EF\\B8\\8F\");\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolForNotification do={\r\
+    \n  :global NotificationsWithSymbols;\r\
+    \n  :global SymbolByUnicodeName;\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\
+    \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\
+    \n  :local Return \"\";\r\
+    \n  :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\
+    mbolByUnicodeName \$Symbol ])}\r\
+    \n  :return (\$Return . \" \");\r\
+    \n}\r\
+    \n\r\
+    \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\
+    \n:set UrlEncode do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\
+    \n  :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\
+    %24\"; \"%25\"; \"%26\"; \"%27\";\r\
+    \n         \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \
+    \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\
+    \n         \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \
+    \"%7C\"; \"%7D\"; \"%7E\" };\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :local Replace [ :find \$Chars \$Char ];\r\
+    \n    :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\
+    ce)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsDNSResolving do={\r\
+    \n  :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsFullyConnected do={\r\
+    \n  :global IsDNSResolving;\r\
+    \n  :global IsTimeSync;\r\
+    \n  :if ([ \$IsDNSResolving ] = false) do={:return false};\r\
+    \n  :if ([ \$IsTimeSync ] = false) do={:return false};\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsTimeSync do={\r\
+    \n  :global IsTimeSyncCached;\r\
+    \n  :global IsTimeSyncResetNtp;\r\
+    \n  :if (\$IsTimeSyncCached = true) do={:return true}\r\
+    \n  :if ([ /system/ntp/client/get enabled ] = true) do={\r\
+    \n    :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :local Uptime [ /system/resource/get uptime ];\r\
+    \n    :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\
+    \n      :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    }\r\
+    \n    :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\
+    \n    :log warning \"\$0 The ntp client is configured, but did not sync.\"\
+    ;\r\
+    \n    :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    /system/ntp/client/set enabled=no;\r\
+    \n    :delay 20ms;\r\
+    \n    /system/ntp/client/set enabled=yes;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\
+    \n       [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\
+    \n    :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\
+    ee license and x86.\";\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ /ip/cloud/get update-time ] = true) do={\r\
+    \n    :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :log debug \"\$0 No time source configured! Returning gracefully...\";\
+    \r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchHugeFiles do={\r\
+    \n  :local ScriptName [ :tostr \$1 ];\r\
+    \n  :local Url        [ :tostr \$2 ];\r\
+    \n  :local CheckCert  [ :tostr \$3 ];\r\
+    \n\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global MkDir;\r\
+    \n  :global RmDir;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\
+    ithout-crl\" ];\r\
+    \n\r\
+    \n  :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\
+    \n  :if ([ \$MkDir \$DirName ] = false) do={\r\
+    \n    \$LogPrint error \$0 (\"Failed creating directory!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \
+    \$GetRandom20CharAlNum ]);\r\
+    \n  :onerror Err {\r\
+    \n    /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \
+    \\\r\
+    \n      http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\
+    lue;\r\
+    \n  } do={\r\
+    \n    :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\
+    \n      \$RmFile \$FileName;\r\
+    \n    }\r\
+    \n    \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\
+    \_. \$Err);\r\
+    \n    \$RmDir \$DirName;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\
+    \n    \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\
+    \_not show up.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileSize [ /file/get \$FileName size ];\r\
+    \n  :local Return \"\";\r\
+    \n  :local VarSize 0;\r\
+    \n  :while (\$VarSize != \$FileSize) do={\r\
+    \n    :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\
+    768 file=\$FileName as-value ]->\"data\"));\r\
+    \n    :set FileSize [ /file/get \$FileName size ];\r\
+    \n    :set VarSize [ :len \$Return ];\r\
+    \n    :if (\$VarSize > \$FileSize) do={\r\
+    \n      :delay 100ms;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  \$RmDir \$DirName;\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchUserAgentStr do={\r\
+    \n  :local Caller [ :tostr \$1 ];\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global CommitBrief;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Resource [ /system/resource/get ];\r\
+    \n  :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\
+    \_\$Resource->\"architecture-name\" . \\\r\
+    \n    \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\
+    CommitBrief ] . \")\");\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptInstallUpdate do={ :onerror Err {\r\
+    \n  :local Scripts    [ :toarray \$1 ];\r\
+    \n  :local NewComment [ :tostr   \$2 ];\r\
+    \n  :global InitSetup;\r\
+    \n\r\
+    \n  :global CommitId;\r\
+    \n  :global ScriptUpdatesCRLF;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global CheckSumsVerify;\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SumsDirAndFileName;\r\
+    \n  :global GlobalScriptsUrlSuffix;\r\
+    \n  :global EitherOr;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global Grep;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n  :global RequiredRouterOS;\r\
+    \n  :global SendNotification2;\r\
+    \n  :global SymbolForNotification;\r\
+    \n  :global ValidateSyntax;\r\
+    \n  :global CommentsInScripts;\r\
+    \n\r\
+    \n  :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\
+    hout.\");\r\
+    \n  }\r\
+    \n\r\
+    \n  :foreach Script in=\$Scripts do={\r\
+    \n    :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\
+    \r\
+    \n      \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\
+    \n      /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \
+    Vados\\n\" comment=\$NewComment;\r\
+    \n    }\r\
+    \n  }\r\
+    \n\r\
+    \n  :local CommitIdBefore \$CommitId;\r\
+    \n  :local GlobalConfVersionBefore \$GlobalConfVersion;\r\
+    \n  :local ReloadGlobal false;\r\
+    \n  :local DeviceMode [ /system/device-mode/get ];\r\
+    \n\r\
+    \n  :if (\$CheckSumsVerify = true) do={\r\
+    \n    :local CheckSums ({});\r\
+    \n     :do {\r\
+    \n     :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\
+    iptsUrlSuffix);\r\
+    \n      \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\
+    \r\
+    \n      :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\
+    ficate=yes-without-crl \\\r\
+    \n        http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\
+    =user as-value ]->\"data\") ];\r\
+    \n    } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\
+    \n    }\r\
+    \n\r\
+    \n  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\
+    s\" ] do={\r\
+    \n    :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n    :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \
+    ];\r\
+    \n    :local SourceNew;\r\
+    \n\r\
+    \n    :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\
+    \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\
+    \n      :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\
+    \n      :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\
+    iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \
+    \"'!\");\r\
+    \n        }\r\
+    \n    }\r\
+    \n    :do {\r\
+    \n      :if (\$ScriptInfo->\"ignore\" = true) do={\r\
+    \n        \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\
+    e\" . \"', as requested.\");\r\
+    \n        :error true;\r\
+    \n      }\r\
+    \n      :if (\$CheckSumsVerify = true) do={\r\
+    \n        :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\
+    \n        :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\
+    ptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n             [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\
+    rce\") ] ] = \$CheckSum) do={\r\
+    \n          \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\
+    >\"name\" . \"' matches, ignoring.\");\r\
+    \n          :error true;\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\
+    \n        :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\
+    fetch\" ] = false) do={\r\
+    \n          \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\
+    ng without.\");\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :onerror Err {\r\
+    \n        :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\
+    lScriptsUrl ];\r\
+    \n        :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\
+    lobalScriptsUrlSuffix ];\r\
+    \n        :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\
+    Suffix);\r\
+    \n        \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\
+    name\") . \"' from url: \" . \$Url);\r\
+    \n        :local Result [ /tool/fetch check-certificate=yes-without-crl \\\
+    \r\
+    \n          http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\
+    ut=user as-value ];\r\
+    \n        :if (\$Result->\"status\" = \"finished\") do={\r\
+    \n          :set SourceNew [ :tolf (\$Result->\"data\") ];\r\
+    \n        } \r\
+    \n      } do={\r\
+    \n        \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\
+    al->\"name\" . \"': \" . \$Err);\r\
+    \n        :if (\$Err != \"Fetch failed with status 404\") do={\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\
+    \n          \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\
+    \?\");\r\
+    \n          /system/script/remove \$Script;\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$CheckSumsVerify = true) do={\r\
+    \n          :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\
+    riptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n               [ :len \$CheckSum ] = 0) do={\r\
+    \n            \$LogPrint warning \$0 (\"Added the script manually\? Skip u\
+    pdates with 'ignore=true' in comment.\");\r\
+    \n          }\r\
+    \n        }\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :len \$SourceNew ] = 0) do={\r\
+    \n        \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\
+    >\"name\") . \"'.\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :local SourceCRLF [ :tocrlf \$SourceNew ];\r\
+    \n      :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\
+    lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\
+    \n        :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\
+    \$ScriptVal->\"source\")) do={\r\
+    \n          \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\") \
+    . \"' source did not change. End of lines set to CRLF.\");\r\
+    \n          if (\$ScriptUpdatesCRLF = false) do={\r\
+    \n            :put [ :tolf \$SourceNew ];\r\
+    \n            \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\"\
+    ) . \"' source update end of lines to LF.\");\r\
+    \n          }\r\
+    \n        :error false;\r\
+    \n        }\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\
+    l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\
+    );\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if (\$CommentsInScripts = true) do={\r\
+    \n         :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\
+    \_\") ];\r\
+    \n         :if ([ :len \$CommentLine ] = 0) do={\r\
+    \n           \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\
+    iptVal->\"name\") . \"' for comment in script body, is not found result Ig\
+    noring!\");\r\
+    \n           :error false;\r\
+    \n         } else={\r\
+    \n           :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\
+    ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\
+    ] + 2) [ :len \$CommentLine] ]) do={\r\
+    \n             \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\
+    \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\
+    ;\r\
+    \n             :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\
+    ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\
+    \n             \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\
+    omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\
+    ded!\");\r\
+    \n           } else={\r\
+    \n             \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\
+    al->\"name\") . \"' did not change.\");\r\
+    \n             :error false;\r\
+    \n           }\r\
+    \n         }   \r\
+    \n      }\r\
+    \n\r\
+    \n      :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\
+    \"\\23 requires RouterOS, \") ] ]->version);\r\
+    \n      :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\
+    \_false ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires RouterOS \" . \\\r\
+    \n            \$RequiredROS . \", which is not met by your installation. I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\
+    \\23 requires device-mode, \") ] ];\r\
+    \n      :local MissingDM ({});\r\
+    \n      :foreach Feature,Value in=\$RequiredDM do={\r\
+    \n        :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\
+    ceMode->\$Feature) = false) do={\r\
+    \n          :set MissingDM (\$MissingDM, \$Feature);\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len \$MissingDM ] > 0) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires disabled \" . \\\r\
+    \n            \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\
+    ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      \r\
+    \n      :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\
+    ript comment: \" . (\$ScriptVal->\"comment\"));\r\
+    \n\r\
+    \n      /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\
+    Val->\"comment\") \\\r\
+    \n          source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\
+    F \$SourceNew ] \$Script;\r\
+    \n      :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\
+    \n           \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\
+    \n           \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\
+    o={\r\
+    \n        :set ReloadGlobal true;\r\
+    \n      }\r\
+    \n    } on-error={ }\r\
+    \n  }\r\
+    \n  :if (\$ReloadGlobal = true) do={\r\
+    \n    \$LogPrint info \$0 (\"Reloading global configuration and functions.\
+    \");\r\
+    \n    :onerror Err {\r\
+    \n      :global InitSetup (a);\r\
+    \n      /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\
+    \n    } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\
+    ctions failed! \" . \$Err)}\r\
+    \n  }\r\
+    \n  :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\
+    \n    \$LogPrint warning \$0 (\"The configuration version decreased from \
+    \" . \\\r\
+    \n      \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\
+    \n      \". Installed an older version\?\");\r\
+    \n  }\r\
+    \n    :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\
+    \n    :global GlobalConfChanges;\r\
+    \n    :global GlobalConfMigration;\r\
+    \n    :local ChangeLogCode;\r\
+    \n    :if ([ :len \$ChangeLogCode ] > 0) do={\r\
+    \n      :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\
+    \n        :onerror Err {\r\
+    \n          [ :parse \$ChangeLogCode ];\r\
+    \n        } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \
+    . \$Err)}\r\
+    \n      } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\
+    dation!\")}\r\
+    \n    }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\
+    \n        :do {\r\
+    \n          :if ([ :typeof \$Migration ] != \"str\") do={\r\
+    \n            \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\
+    \_\" is not available.\");\r\
+    \n            :error false;\r\
+    \n          }\r\
+    \n          :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\
+    \n            \$LogPrint warning \$0 (\"Migration code for change \" . \$I\
+    \_. \" failed syntax validation!\");\r\
+    \n            :error false}\r\
+    \n          \$LogPrint info \$0 (\"Applying migration for change \" . \$I \
+    . \": \" . \$Migration);\r\
+    \n          :onerror Err {\r\
+    \n            [ :parse \$Migration ];\r\
+    \n          } do={\$LogPrint warning \$0 (\"Migration code for change \" .\
+    \_\$I . \" failed to run: \" . \$Err)}\r\
+    \n        } on-error={ }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :local NotificationMessage (\"The configuration version on \" . \$Id\
+    entity . \" increased \" . \\\r\
+    \n       \"to \" . \$GlobalConfVersion . \", current configuration may nee\
+    d modification. \" . \\\r\
+    \n       \"Please review and update global-config-overlay, then re-run glo\
+    bal-config.\");\r\
+    \n    \$LogPrint info \$0 (\$NotificationMessage);\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\
+    \");\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\
+    \n        :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\
+    \r\
+    \n            [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\
+    \n        \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\
+    \n      }\r\
+    \n    } else={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\
+    \_changes are not available.\");\r\
+    \n\r\
+    \n      }\r\
+    \n\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \
+    } else={ :global GlobalConfChanges (a); }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\
+    on; } else={ :global GlobalConfMigration (a); }\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n\r\
+    \n# load modules\r\
+    \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\
+    ns\\\\.d|mod)/.\" ] do={\r\
+    \n  :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n  :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\
+    \n    :onerror Err {\r\
+    \n      /system/script/run \$Script;\r\
+    \n    } do={\r\
+    \n      \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\
+    ailed to run: \" . \$Err);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\
+    led syntax validation, skipping.\");\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# Add and fix global scheduler\r\
+    \n:put \"Add or/and fix Global scheduler...\";\r\
+    \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\
+    ; }\";\r\
+    \n:local Comment \"Every Day Set Global Environment Variables\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \
+    = 0) do={\r\
+    \n  /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\
+    ent=\$OnEvent start-time=startup;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\
+    \_do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\
+    ) do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\
+    \n}\r\
+    \n# Add Update Script scheduler\r\
+    \n:put \"Add or/and fix Update Script scheduler\";\r\
+    \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\
+    \r\
+    \n:set Comment \"Every Day Check For Update Scripts\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\
+    \" ] ] = 0) do={\r\
+    \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \
+    start-time=startup interval=1d on-event=\$OnEvent;\r\
+    \n}\r\
+    \n\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\
+    \_not ready.\"); }; } delay=100ms max=5;\r\
+    \n\r\
+    \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\
+    \n    [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \
+    \") ] . \\\r\
+    \n    \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\
+    \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\
+    \n    # signal we are ready\r\
+    \n:set GlobalFuncReady true;\r\
+    \n:set ExitOK true;\r\
+    \n\r\
+    \n:log info (\$0 . \"Global configs ready!\");\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n}\r\
+    \n"
+add comment=\
+    "Lookup IP addresses for RKN list and add them to firewall address-list" \
+    dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="#!rsc by Vados\r\
+    \n# RouterOS script: AM-RKN-dnsLookup\r\
+    \n# Script comment: Lookup IP addresses for RKN list and add them to firew\
+    all address-list\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n# Script description: This script is intended to be run periodically, e.\
+    g. once a day, to update the IP addresses in the firewall address-list bas\
+    ed on the RKN list.\r\
+    \n#                     It resolves the domain names in the RKN list and a\
+    dds the corresponding IP addresses to the specified firewall address-list.\
+    \r\
+    \n#                     The script also handles CNAME records by following\
+    \_them until it finds A records.\r\
+    \n# Usage:\r\
+    \n# /system/script { run AM-RKN-dnsLookup; }\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n\r\
+    \n:global dnsLookupReady false;\r\
+    \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\
+    \_true; }\r\
+    \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\
+    \n:set dnsLookupReady false;\r\
+    \n\r\
+    \n:local arrRKN {\r\
+    \n  \"telegra.ph\"\r\
+    \n  \"grani.ru\"\r\
+    \n  \"xhamster.com\"\r\
+    \n  \"lostfilm.tv\"\r\
+    \n  \"rutracker.org\"\r\
+    \n  \"lurkmore.to\"\r\
+    \n  \"dou.ua\"\r\
+    \n  \"youporn.com\"\r\
+    \n  \"pornolab.net\"\r\
+    \n  \"crimerussia.com\"\r\
+    \n  \"telegram.org\"\r\
+    \n  \"api.telegram.org\"\r\
+    \n  \"facebook.com\"\r\
+    \n  \"instagram.com\"\r\
+    \n  \"x.com\"\r\
+    \n  \"twitter.com\"\r\
+    \n  \"youtube.com\"\r\
+    \n  \"googleapis.com\"\r\
+    \n  \"youtu.be\"\r\
+    \n  \"googlevideo.com\"\r\
+    \n  \"gstatic.com\"\r\
+    \n  \"googleusercontent.com\"\r\
+    \n  \"nhacmp3youtube.com\"\r\
+    \n  \"telegram.me\"\r\
+    \n  \"t.me\";}\r\
+    \n\r\
+    \n:local ListRKN \"RKN-dnsLookup\";\r\
+    \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\
+    \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\
+    ={\r\
+    \n    /ip firewall address-list remove \$aListItem;\r\
+    \n}\r\
+    \n:foreach aItem in=\$arrRKN do={\r\
+    \n#    :do {\r\
+    \n        :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\
+    ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\
+    \n#    } on-error={\r\
+    \n#        :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\
+    \n#    }\r\
+    \n    :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \
+    do={\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\
+    \n            :local newAddress [/ip dns cache all get \$dnsRecord data];\
+    \r\
+    \n            :do {\r\
+    \n             /ip firewall address-list add list=\$ListRKN address=\$newA\
+    ddress comment=\$aItem;\r\
+    \n                :log warning \"Successfully adding ip to list A record: \
+    \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            } on-error={\r\
+    \n                :log error \"error when adding ip to list A record: \$dn\
+    sRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            }\r\
+    \n        }\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\
+    \n            :local cname;\r\
+    \n            :local nextCname;\r\
+    \n            :local cnameAddress;\r\
+    \n            :set cname [/ip dns cache all find where (name=\$aItem && ty\
+    pe=\"CNAME\")];\r\
+    \n            :set nextCname [/ip dns cache all find where (name=[/ip dns \
+    cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            :while (\$nextCname != \"\") do={\r\
+    \n                :set cname \$nextCname;\r\
+    \n                :set nextCname [/ip dns cache all find where (name=[/ip \
+    dns cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            }\r\
+    \n            :foreach aRecord in=[/ip dns cache all find where (name=[/ip\
+    \_dns cache all get \$cname data] && type=\"A\")] do={\r\
+    \n                :do {\r\
+    \n                    :set cnameAddress [/ip dns cache all get \$aRecord d\
+    ata];\r\
+    \n                    /ip firewall address-list add list=\$ListRKN address\
+    =\$cnameAddress comment=\$aItem;\r\
+    \n                    :log warning \"Succesfully adding ip to list CNAME r\
+    ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \
+    \$aItem.\";\r\
+    \n#                    /ip firewall raw add action=add-dst-to-address-list\
+    \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\
+    g comment=\$aItem content=\$aItem;\r\
+    \n                } on-error={\r\
+    \n                    :log error \"error when adding ip to list CNAME reco\
+    rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\
+    tem.\";\r\
+    \n                }\r\
+    \n            }\r\
+    \n        }\r\
+    \n    }\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\
+    ={\r\
+    \n   :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\
+    ptName . \" is NOT SET! Fix It Now!\");\r\
+    \n    /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \
+    run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\
+    olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\
+    \_start-time=startup;\r\
+    \n  }\r\
+    \n:set dnsLookupReady true;\r\
+    \ndelay 2s;  \r\
+    \n:global dnsLookupReady (a);\r\
+    \n"
+add dont-require-permissions=no name="renameLists " owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    local oldName \"Test\";\
+    \n:local newName \"Test-IP\";\
+    \n/ip firewall address-list\
+    \n:foreach i in=[find list=\$oldName] do={\
+    \nset \$i list=\$newName;\
+    \n}\
+    \n"
+add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    #############Script Settings##################\
+    \n\
+    \n:local \"IF-TUN\" \"6to4-tun\"\
+    \n:local \"IF-LOC\" \"Bridge-LAN\"\
+    \n:local \"POOL-6TO4\" \"poolV6-local\"\
+    \n:local \"force-update\" false\
+    \n############ use then static ip #######################\
+    \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \
+    address]\
+    \n#:local \"interface\" \"ext\"\
+    \n:local bound 0\
+    \n\
+    \n###############################################\
+    \n\
+    \n:local 6to4prefix do={\
+    \n    :global dec2hex\
+    \n    :local ipv4 \$1\
+    \n    :local ipv6 \"2002:\"\
+    \n    :for i from=0 to=2 step=1 do={        \
+    \n        :if ( \$i = 2) do={\
+    \n            :set ipv6 (\$ipv6.\":\")\
+    \n        }\
+    \n        :local fp [:find \$ipv4 \".\"]\
+    \n        :if ( \$fp > 0 ) do={\
+    \n            :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\
+    \n            :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\
+    \n        }\
+    \n    }\
+    \n    :return (\$ipv6.[\$dec2hex \$ipv4])\
+    \n}\
+    \n:local \"str_replace\" do={\
+    \n    :local \"str-pos\" [:find \$1 \$2]\
+    \n    :local \"str-len\" [:len \$2]\
+    \n    :local str \"\"\
+    \n    :local rest \$1\
+    \n    :while (\$\"str-pos\" >= 0) do={\
+    \n        :local t [:pick \$rest 0 \$\"str-pos\"]\
+    \n        :if ( \$4 > 0 ) do={\
+    \n            :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\
+    \n                :set str (\$str.\$5)\
+    \n            }\
+    \n        }\
+    \n        :set str (\$str.\$t.\$3)\
+    \n        :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\
+    st]]\
+    \n        :set \"str-pos\" [:find \$rest \$2]\
+    \n    }\
+    \n    :return (\$str.\$rest)\
+    \n}\
+    \n\
+    \n:if (\$bound=1) do={\
+    \n    :local t [:find \$\"lease-address\" \"/\"]\
+    \n\
+    \n    :if ( \$t >= 0 ) do={\
+    \n        :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\
+    \n    }\
+    \n\
+    \n    :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\
+    ) do={\
+    \n        /interface 6to4 add !keepalive local-address=\$\"lease-address\"\
+    \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\
+    \n        :set \"force-update\" true\
+    \n    }\
+    \n\
+    \n    :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\
+    cal-address];\
+    \n\
+    \n    :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \
+    true) do={\
+    \n        /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\
+    ease-address\"\
+    \n        /ipv6 address remove [find interface=\$\"IF-TUN\"]\
+    \n        /ipv6 address remove [find interface=\$\"IF-LOC\"]\
+    \n        /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\
+    \"::/0\"]\
+    \n        :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\
+    \n        :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\
+    \_0) do={    \
+    \n            /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\
+    \".\":1::/64\")  prefix-length=64\
+    \n        } else={\
+    \n            /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \
+    prefix=(\$\"pool-prefix\".\":1::/64\")\
+    \n        }\
+    \n        /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\
+    \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\
+    ace=\$\"IF-TUN\" advertise=no\
+    \n        /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\
+    =\$\"IF-LOC\" advertise=yes\
+    \n        /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\
+    \"IF-TUN\")\
+    \n        :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\
+    s]\
+    \n        :set t [:pick \$t 0 [:find \$t \"/\"]]\
+    \n        :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\
+    \_= 0) do={\
+    \n            /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\
+    [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        } else={\
+    \n            /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \
+    where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        }\
+    \n        :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\
+    -LOC\"] = 0) do={\
+    \n            /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\
+    on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\
+    \n        }\
+    \n        :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \
+    0) do={\
+    \n            /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\
+    onfiguration=yes\
+    \n        }\
+    \n    }\
+    \n}"
+add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global MAC2EUI64 do={\
+    \n    :local EUI64 \"\"\
+    \n    :local MAC \$1\
+    \n    :local HEX2DEC \"0123456789ABCDEF\"\
+    \n    :for i from=0 to=5 step=1 do={\
+    \n        :if ( \$i = 0 ) do={\
+    \n            :set EUI64 [:pick \$MAC 0]\
+    \n            :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\
+    \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\
+    \n        }\
+    \n        :if ( \$i = 1 || \$i = 3) do={\
+    \n            :set EUI64 (\$EUI64.\":\")\
+    \n        }\
+    \n        :if ( \$i = 2 ) do={\
+    \n            :set EUI64 (\$EUI64.\"FF:FE\")\
+    \n        }\
+    \n        :if ( [:find \$MAC \":\"] = 2 ) do={\
+    \n            :set MAC [:pick \$MAC 3  [:len \$MAC]]\
+    \n            :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\
+    \n        }\
+    \n    }\
+    \n    :return (\$EUI64)\
+    \n}\
+    \n\
+    \n:global dec2hex do={\
+    \n    :local hex \"\"\
+    \n    :local dec [:tonum \$1]\
+    \n    :for i from=0 to=4 step=4 do={\
+    \n        :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\
+    c>>\$i)&0xf)+1)].\$hex)\
+    \n    }\
+    \n    :return ([:tostr \$hex])\
+    \n}"
+add comment=Generator dont-require-permissions=no name=proxySet owner=vados \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="# 2. WireGuard interface\r\
+    \n/interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDg\
+    uMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=21641\r\
+    \n/interface/wireguard/peers/add interface=wg-VDSina public-key=\"o5IgCl1/\
+    G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcYQnD9\
+    N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=10.30.30.33 endpoint-port=518\
+    20 allowed-address=0.0.0.0/0 persistent-keepalive=11\r\
+    \n/ip/address/add address=10.9.0.3/32 interface=wg-VDSina\r\
+    \n\r\
+    \n# 3. DNS\r\
+    \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\
+    n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\
+    \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /system/script/add name=VDS\
+    ina-prev-dns comment=\"\$prevDNS\" source=\"\" }\r\
+    \n/ip/dns/set servers=8.8.4.4\r\
+    \n/ip/route/add dst-address=8.8.4.4/32 gateway=wg-VDSina distance=1 commen\
+    t=VDSina-dns\r\
+    \n\r\
+    \n# 4. Enable WireGuard\r\
+    \n/interface/wireguard/enable wg-VDSina\r\
+    \n"
+add dont-require-permissions=no name=AM-Telegram-Send owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\
+    \n# RouterOS script: AM-Telegram-Send\
+    \n# Script comment: Mini script for send messages to admin Telegram chat\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\
+    \n#\
+    \n#\
+    \n# requires RouterOS, version=7.19\
+    \n# requires device-mode, fetch\
+    \n#\
+    \n# Script description: \
+    \n#\
+    \n#\
+    \n# Usage:\
+    \n# /system/script { run AM-Telegram-Send \"Message here )))\"; }\
+    \n\
+    \n/system/script\
+    \nadd name=telegram-send dont-require-permissions=no source={\
+    \n  :global TelegramTokenId;\
+    \n  :global TelegramChatId;\
+    \n  :local message [:tostr \$1];\
+    \n  :local identity [/system/identity/get name];\
+    \n  :local sendMsg (\"[\".\$identity.\"] \".\$message)\
+    \n  /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\
+    \n    \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\
+    \n    \"&text=\".\$sendMsg.\\\
+    \n    \"&parse_mode=HTML\") \\\
+    \n    mode=https keep-result=no\
+    \n}"
+add dont-require-permissions=no name=telegram-send owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\
+    \n  :global TelegramTokenId;\
+    \n  :global TelegramChatId;\
+    \n  :local message [:tostr \$1];\
+    \n  :local identity [/system/identity/get name];\
+    \n  :local sendMsg (\"[\".\$identity.\"] \".\$message)\
+    \n  /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\
+    \n    \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\
+    \n    \"&text=\".\$sendMsg.\\\
+    \n    \"&parse_mode=HTML\") \\\
+    \n    mode=https keep-result=no\
+    \n"
+/user group
+add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\
+    t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon"
+/ip smb
+set enabled=no interfaces=lo
+/interface bridge port
+add bridge=Bridge-LAN interface=ether5
+add bridge=Bridge-LAN interface=ether2
+add bridge=Bridge-LAN interface=ether4 trusted=yes
+add bridge=Bridge-LAN interface=ether3
+add bridge=Bridge-LAN interface=wlan2
+add bridge=Bridge-LAN interface=wlan1
+/interface bridge settings
+set use-ip-firewall=yes
+/ip firewall connection tracking
+set udp-timeout=10s
+/ip neighbor discovery-settings
+set discover-interface-list=LAN lldp-med=no lldp-poe-power=no
+/ip settings
+set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\
+    8192
+/ipv6 settings
+set disable-ipv6=yes disable-link-local-address=yes forward=no \
+    max-neighbor-entries=8192 multipath-hash-policy=l4
+/interface detect-internet
+set detect-interface-list=WAN internet-interface-list=Internet \
+    lan-interface-list=LAN request-interval=1m wan-interface-list=WAN
+/interface l2tp-server server
+set authentication=mschap2 use-ipsec=yes
+/interface list member
+add interface=Unet-ether1 list=Internet
+add interface=WG list=WAN
+add interface=Bridge-LAN list=LAN
+add interface=Unet-ether1 list=WAN
+/interface wireguard peers
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\
+    109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \
+    persistent-keepalive=10s public-key=\
+    "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4="
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 disabled=yes \
+    endpoint-address=10.30.30.33 endpoint-port=55055 interface=wg-nuc name=\
+    NUC persistent-keepalive=11s public-key=\
+    "+OvzAjLC45Td52hjkQPmpGvC3RGhZ+Q2CDMJ1U/D4Rw="
+/interface wireless cap
+# 
+set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \
+    caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\
+    CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\
+    wlan2,wlan1 lock-to-caps-man=yes
+/ip address
+add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0
+add address=10.8.0.2/24 interface=WG network=10.8.0.0
+add address=192.168.33.2/24 disabled=yes interface=wg-nuc network=\
+    192.168.33.0
+/ip cloud
+set update-time=no
+/ip dhcp-client
+add add-default-route=special-classless check-gateway=arp comment=Unet-client \
+    default-route-distance=2 default-route-tables=main:2 dhcp-options=\
+    hostname,clientid_duid interface=Unet-ether1 name=UnetDHCP use-peer-dns=\
+    no use-peer-ntp=no
+/ip dhcp-server config
+set accounting=no
+/ip dhcp-server lease
+add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\
+    48:8F:5A:8E:EE:A8 server=masterDHCP
+add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\
+    F0:DE:F1:91:0D:1E server=masterDHCP
+add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\
+    00:80:77:EC:43:86 server=masterDHCP
+add address=10.30.30.70 dhcp-option=domain-search-list,HostName \
+    dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP
+add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\
+    04:7C:16:36:F5:37 server=masterDHCP
+add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\
+    10:2D:41:2C:20:C2 server=masterDHCP
+add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\
+    10:08:C1:81:59:5F server=masterDHCP
+add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\
+    10:38:1F:D2:5F:13 server=masterDHCP
+add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\
+    10:B1:DF:E9:D0:D5 server=masterDHCP
+add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\
+    FE:02:52:BE:3F:16 server=masterDHCP
+add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\
+    D4:6D:6D:FD:E5:49 server=masterDHCP
+add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\
+    CC:42:10:12:46:94 server=masterDHCP
+add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\
+    50:CC:F8:85:96:0A server=masterDHCP
+add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\
+    E4:18:6B:58:34:AB server=masterDHCP
+add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\
+    00:27:15:41:97:A9 server=masterDHCP
+add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \
+    mac-address=C4:82:E1:03:49:10 server=masterDHCP
+add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\
+    10:38:1F:82:81:F2 server=masterDHCP
+add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \
+    dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP
+add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \
+    dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP
+add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \
+    server=masterDHCP
+add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\
+    MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP
+add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \
+    mac-address=F0:75:5D:1E:5F:71 server=masterDHCP
+add address=10.30.30.100 client-id=iVados dhcp-option=HostName \
+    dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP
+add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\
+    ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \
+    dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \
+    use-src-mac=yes
+/ip dhcp-server network
+add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\
+    domain-search-list dhcp-option-set=domain-search-set dns-server=\
+    10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\
+    24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98
+/ip dns
+set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \
+    doh-max-server-connections=20 servers=8.8.8.8 verify-doh-cert=yes
+/ip dns static
+add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \
+    type=A
+add address=109.107.177.79 name=vds.vados.ru type=A
+add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \
+    regexp=*.vados.ru type=NS
+add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\
+    "\".*\\\\.vados\\\\.ru\"" type=FWD
+add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\
+    10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\
+    FWD
+add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\
+    ns.vados.ru.local type=A
+add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\
+    vados.ru ns=ns.vados.ru.local type=NS
+add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A
+add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\
+    dns.google type=A
+add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A
+add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A
+add address=10.30.30.33 name=ros.vados.ru type=A
+add address=10.30.30.95 name=vados-nuc type=A
+add address=10.30.30.33 name=amster-nuc type=A
+add address=10.30.30.33 name=amster type=A
+add address=10.30.30.33 name=amster-reg type=A
+add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A
+add address=10.30.30.33 name=mgr.vados.ru type=A
+add address=10.30.30.33 name=prt.vados.ru type=A
+add address=10.30.30.33 disabled=yes match-subdomain=yes name=\
+    mikrots.vados.ru type=A
+add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A
+add address=10.30.30.30 name=MILLER-LEN type=A
+add address=10.30.30.30 name=miller type=A
+add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\
+    dns.quad9.net type=A
+add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\
+    dns.quad9.net type=A
+add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \
+    type=A
+add address=10.30.30.81 comment=LocalNet name=MikroVados type=A
+add address=10.30.30.10 name=MikroNUC type=A
+add address=10.30.30.86 disabled=yes name=MikroYellow type=A
+add address=10.30.30.85 disabled=yes name=MikroMic type=A
+add address=10.30.30.95 name=VADOS-NUC type=A
+add address=10.30.30.98 name=VADOS-LEN type=A
+add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\
+    A
+add address=10.30.30.20 disabled=yes name=garage type=A
+/ip firewall address-list
+add address=91.215.120.206 list=TRUSTED
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=8.8.4.0/24 list=YouTube
+add address=8.8.8.0/24 list=YouTube
+add address=8.34.208.0/20 list=YouTube
+add address=8.35.192.0/20 list=YouTube
+add address=23.236.48.0/20 list=YouTube
+add address=23.251.128.0/19 list=YouTube
+add address=34.0.0.0/15 list=YouTube
+add address=34.2.0.0/16 list=YouTube
+add address=34.3.0.0/23 list=YouTube
+add address=34.3.3.0/24 list=YouTube
+add address=34.3.4.0/24 list=YouTube
+add address=34.3.8.0/21 list=YouTube
+add address=34.3.16.0/20 list=YouTube
+add address=34.3.32.0/19 list=YouTube
+add address=34.3.64.0/18 list=YouTube
+add address=34.4.0.0/14 list=YouTube
+add address=34.8.0.0/13 list=YouTube
+add address=34.16.0.0/12 list=YouTube
+add address=34.32.0.0/11 list=YouTube
+add address=34.64.0.0/10 list=YouTube
+add address=34.128.0.0/10 list=YouTube
+add address=35.184.0.0/13 list=YouTube
+add address=35.192.0.0/14 list=YouTube
+add address=35.196.0.0/15 list=YouTube
+add address=35.198.0.0/16 list=YouTube
+add address=35.199.0.0/17 list=YouTube
+add address=35.199.128.0/18 list=YouTube
+add address=35.200.0.0/13 list=YouTube
+add address=35.208.0.0/12 list=YouTube
+add address=35.224.0.0/12 list=YouTube
+add address=35.240.0.0/13 list=YouTube
+add address=57.140.192.0/18 list=YouTube
+add address=64.15.112.0/20 list=YouTube
+add address=64.233.160.0/19 list=YouTube
+add address=66.22.228.0/23 list=YouTube
+add address=66.102.0.0/20 list=YouTube
+add address=66.249.64.0/19 list=YouTube
+add address=70.32.128.0/19 list=YouTube
+add address=72.14.192.0/18 list=YouTube
+add address=74.125.0.0/16 list=YouTube
+add address=104.154.0.0/15 list=YouTube
+add address=104.196.0.0/14 list=YouTube
+add address=104.237.160.0/19 list=YouTube
+add address=107.167.160.0/19 list=YouTube
+add address=107.178.192.0/18 list=YouTube
+add address=108.59.80.0/20 list=YouTube
+add address=108.170.192.0/18 list=YouTube
+add address=108.177.0.0/17 list=YouTube
+add address=130.211.0.0/16 list=YouTube
+add address=136.22.160.0/20 list=YouTube
+add address=136.22.176.0/21 list=YouTube
+add address=136.22.184.0/23 list=YouTube
+add address=136.22.186.0/24 list=YouTube
+add address=142.250.0.0/15 list=YouTube
+add address=146.148.0.0/17 list=YouTube
+add address=152.65.208.0/22 list=YouTube
+add address=152.65.214.0/23 list=YouTube
+add address=152.65.218.0/23 list=YouTube
+add address=152.65.222.0/23 list=YouTube
+add address=152.65.224.0/19 list=YouTube
+add address=162.120.128.0/17 list=YouTube
+add address=162.216.148.0/22 list=YouTube
+add address=162.222.176.0/21 list=YouTube
+add address=172.110.32.0/21 list=YouTube
+add address=172.217.0.0/16 list=YouTube
+add address=172.253.0.0/16 list=YouTube
+add address=173.194.0.0/16 list=YouTube
+add address=173.255.112.0/20 list=YouTube
+add address=192.158.28.0/22 list=YouTube
+add address=192.178.0.0/15 list=YouTube
+add address=193.186.4.0/24 list=YouTube
+add address=199.36.154.0/23 list=YouTube
+add address=199.36.156.0/24 list=YouTube
+add address=199.192.112.0/22 list=YouTube
+add address=199.223.232.0/21 list=YouTube
+add address=207.223.160.0/20 list=YouTube
+add address=208.65.152.0/22 list=YouTube
+add address=208.68.108.0/22 list=YouTube
+add address=208.81.188.0/22 list=YouTube
+add address=208.117.224.0/19 list=YouTube
+add address=209.85.128.0/17 list=YouTube
+add address=216.58.192.0/19 list=YouTube
+add address=216.73.80.0/20 list=YouTube
+add address=216.239.32.0/19 list=YouTube
+add address=2ip.ru list=Test-IP
+add address=wg.vados.ru comment=VDSIna list=TRUSTED
+add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED
+add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina
+add address=love.ru comment=love.ru list=NoVdsina
+add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina
+add address=pochta.ru comment=pochta.ru list=NoVdsina
+add address=vdsina.com list=NoVdsina
+add address=vdsina.ru list=NoVdsina
+add address=youla.ru list=NoVdsina
+add address=kupiprodai.ru list=NoVdsina
+add address=myip.ru list=Test-IP
+add address=geoip.co list=NoVdsina
+add address=comp-lenta.ru list=NoVdsina
+add address=128.85.102.70 comment=update.microsoft.com list=\
+    windowsupdateslist
+add address=wu-b-net.trafficmanager.net. comment=\
+    ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\
+    ctldl.windowsupdate.com list=windowsupdateslist
+add address=redir.update.msft.com.trafficmanager.net. comment=\
+    update.microsoft.com list=windowsupdateslist
+add address=geo.prod.do.dsp.trafficmanager.net. comment=\
+    geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12437.d.akamaiedge.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \
+    comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \
+    list=windowsupdateslist
+add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\
+    sls.update.microsoft.com list=windowsupdateslist
+add address=fe3.delivery.mp.microsoft.com. comment=\
+    fe3cr.delivery.mp.microsoft.com list=windowsupdateslist
+add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\
+    fe3.delivery.mp.microsoft.com list=windowsupdateslist
+add address=fe2cr.update.msft.com.trafficmanager.net. comment=\
+    fe2cr.update.microsoft.com list=windowsupdateslist
+add address=download.windowsupdate.com.delivery.microsoft.com. comment=\
+    download.windowsupdate.com list=windowsupdateslist
+add address=wu-f-net.trafficmanager.net. comment=\
+    download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=tsfe.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \
+    comment=9.au.download.windowsupdate.com list=windowsupdateslist
+add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dspw65.akamai.net. comment=\
+    download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \
+    comment=licensing.mp.microsoft.com list=windowsupdateslist
+add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-nlu-net.trafficmanager.net. comment=\
+    star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-tlu-net.trafficmanager.net. comment=\
+    star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=storeedgefd.xbetservices.akadns.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \
+    comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\
+    windowsupdateslist
+add address=e16646.dscg.akamaiedge.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\
+    windowsupdateslist
+add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=bg.microsoft.map.fastly.net. comment=\
+    3.au.download.windowsupdate.com list=windowsupdateslist
+add list=windowsupdateslist
+add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\
+    star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a2033.dscd.akamai.net. comment=\
+    star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-nlu-net.trafficmanager.net. comment=\
+    dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-b-tlu-net.trafficmanager.net. comment=\
+    1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a122.dscg3.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist
+add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e10370.d.akamaiedge.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=a1683.dscd.akamai.net. comment=\
+    dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \
+    comment=collections.mp.microsoft.com list=windowsupdateslist
+add address=a1847.dscd.akamai.net. comment=\
+    wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=au.download.windowsupdate.com.edgesuite.net. comment=\
+    2.au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dscg3.akamai.net. comment=\
+    au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    4.au.download.windowsupdate.com list=windowsupdateslist
+add address=cl-glcb907925.gcdn.co. comment=\
+    4.au.download.windowsupdate.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \
+    comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=ts-frontend.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=sds.trafficmanager.net. comment=software-download.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\
+    windowsupdateslist
+add address=e12671.dscd.akamaiedge.net. comment=\
+    download.microsoft.com.edgekey.net list=windowsupdateslist
+add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12358.d.akamaiedge.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-tlu-net.trafficmanager.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a1856.dspw65.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina
+add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=purchase.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.mp.microsoft.com list=windowsupdateslist
+add address=e110219.a.akamaiedge.net. comment=\
+    purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.141 list=windowsupdateslist
+add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=storesdk.xbetservices.akadns.net. comment=\
+    storesdk.dsx.mp.microsoft.com list=windowsupdateslist
+add address=e16646.g.akamaiedge.net. comment=\
+    storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=software-download.microsoft.com.delivery.microsoft.com. comment=\
+    software-download.microsoft.com list=windowsupdateslist
+add address=download.prss.microsoft.com.akamaized.net. comment=\
+    software-download.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina
+add address=87.250.250.50 comment=YandexDisk list=NoVdsina
+add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\
+    purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\
+    cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=a1996.dscd.akamai.net. comment=\
+    wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\
+    tas02.sls.update.microsoft.com list=windowsupdateslist
+add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\
+    star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\
+    paymentinstruments.mp.microsoft.com list=windowsupdateslist
+add address=10.30.30.33 comment=amster list=NoWG
+add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG
+add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG
+add address=wg.vados.ru comment=VDSina-vpn list=VDSina
+add address=80.85.244.9 list=TRUSTED
+add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina
+add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS
+add address=dns.google comment=Google-dns list=Trusted-DNS
+add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\
+    Trusted-DNS
+add address=time.google.com comment=Google-time list=Trusted-NTP
+add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP
+add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=cp.vdsina.com comment=VDSina-vpn list=VDSina
+add address=vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns.vados.ru comment=VDSina-vpn list=VDSina
+add address=vdsina.com comment=VDSina-vpn list=VDSina
+add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=10.30.30.0/24 comment="Local Network" list=Local-Net
+add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net
+add address=146.120.64.208/29 comment="External Net" list=Unet
+add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina
+add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina
+add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina
+add address=10.30.30.30 comment=miller disabled=yes list=NoWG
+add address=10.30.30.33 comment="Direct connet to DNS servers" list=\
+    Direct-DNS
+add address=109.107.177.79 list=VPN-Server
+add address=10.0.0.0/8 list=RFC1918
+add address=172.16.0.0/12 list=RFC1918
+add address=192.168.0.0/16 list=RFC1918
+add address=8.8.4.4 disabled=yes list=to_vpn
+add address=myip.ru disabled=yes list=to_vpn
+add address=10.30.30.98 disabled=yes list=to_vpn
+/ip firewall filter
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=12h chain=input comment="block honeypot DNS" \
+    connection-state=new dst-port=53 in-interface=Unet-ether1 protocol=udp \
+    src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment=\
+    "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=!TRUSTED
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \
+    connection-state=new dst-port=5060 in-interface=Unet-ether1 protocol=udp
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot NTP" \
+    connection-state=new dst-port=123 in-interface=Unet-ether1 protocol=udp
+add action=fasttrack-connection chain=forward comment=\
+    "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \
+    connection-state=established,related,new disabled=yes
+add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \
+    protocol=tcp
+add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \
+    protocol=udp
+add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \
+    dst-port=53 protocol=tcp src-address=10.30.30.0/24
+add action=accept chain=input comment="udp Accept input DNS queries" \
+    dst-port=53 protocol=udp src-address=10.30.30.0/24
+add action=accept chain=output comment="accept WireGuard" disabled=yes \
+    dst-address-list=VPN-Server out-interface=Unet-ether1 protocol=udp \
+    src-port=13231
+add action=accept chain=output disabled=yes dst-address-list=VPN-Server \
+    dst-port=29185 out-interface=Unet-ether1 protocol=udp
+add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
+    connection-state=established,related,new disabled=yes routing-mark=\
+    !To-VPN
+add action=accept chain=output disabled=yes protocol=tcp src-port=443
+add action=accept chain=output disabled=yes src-address=127.0.0.1
+add action=accept chain=forward comment="defconf: accept in ipsec policy" \
+    disabled=yes ipsec-policy=in,ipsec
+add action=accept chain=forward comment="defconf: accept out ipsec policy" \
+    disabled=yes ipsec-policy=out,ipsec
+add action=accept chain=forward comment=\
+    "defconf: accept established,related, untracked" connection-state=\
+    established,related,untracked disabled=yes
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid in-interface=Unet-ether1 src-address=\
+    !10.30.30.0/24
+add action=drop chain=forward comment=\
+    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
+    connection-state=new in-interface=Unet-ether1 src-address-list=!VDSina
+add action=accept chain=input in-interface=Unet-ether1 protocol=icmp \
+    src-address-list=VDSina
+add action=accept chain=input connection-state=established
+add action=accept chain=input connection-state=related
+/ip firewall mangle
+add action=accept chain=prerouting comment=RFC1918 dst-address-list=RFC1918 \
+    in-interface-list=!WAN
+add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \
+    new-routing-mark=main passthrough=no src-address-list=NoWG
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for NoVdsina" disabled=yes dst-address-list=NoVdsina \
+    new-routing-mark=main passthrough=no src-address=10.30.30.0/24
+add action=mark-connection chain=prerouting comment=\
+    "Transit for address-list \"to_vpn\"" connection-mark=no-mark disabled=\
+    yes dst-address-list=to_vpn in-interface-list=!WAN new-connection-mark=\
+    to-vpn-conn routing-mark=!main
+add action=mark-routing chain=prerouting comment=\
+    "Find routing over table r_to_vpn" connection-mark=to-vpn-conn disabled=\
+    yes in-interface-list=!WAN new-routing-mark=r_to_vpn
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for VDSina" dst-address-list=VPN-Server \
+    new-routing-mark=main passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\
+    Unet new-routing-mark=main passthrough=no
+add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\
+    To-VPN src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \
+    new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment="WG for all" \
+    dst-address-list=!NoVdsina new-routing-mark=To-VPN src-address=\
+    10.30.30.0/24
+add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \
+    out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\
+    1381-65535
+add action=mark-connection chain=prerouting comment=\
+    "Mark VPN connections to exclude from FastTrack" disabled=yes \
+    new-connection-mark=VPN_No_FastTrack routing-mark=To-VPN
+add action=mark-routing chain=prerouting comment="VPN Network" disabled=yes \
+    dst-address=10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24
+add action=mark-connection chain=output comment="For this router" \
+    connection-mark=no-mark disabled=yes dst-address-list=to_vpn \
+    new-connection-mark=to-vpn-conn-local
+add action=mark-routing chain=output comment="For this router" \
+    connection-mark=to-vpn-conn-local disabled=yes new-routing-mark=r_to_vpn
+/ip firewall nat
+add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=masquerade chain=srcnat comment=\
+    "Nat Addresses for routing mark r_to_vpn" disabled=yes routing-mark=\
+    r_to_vpn
+add action=dst-nat chain=dstnat comment=\
+    "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=VPN-Server \
+    to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat comment=\
+    "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\
+    udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\
+    Unet-ether1 protocol=udp src-address=!10.30.30.0/24 to-addresses=\
+    10.30.30.33 to-ports=44333
+add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \
+    routing-mark=To-VPN
+add action=masquerade chain=srcnat comment="Default NAT" out-interface=\
+    Unet-ether1 routing-mark=!To-VPN src-address=10.30.30.0/24
+add action=dst-nat chain=dstnat dst-port=44044 in-interface=Unet-ether1 \
+    protocol=udp src-address=109.107.177.79 to-addresses=10.30.30.33 \
+    to-ports=44044
+add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \
+    fragment=no in-interface=Unet-ether1 protocol=tcp routing-mark=main \
+    to-addresses=10.30.30.33 to-ports=443
+add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \
+    dst-port=80 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=80
+add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \
+    dst-port=2904 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2904
+add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\
+    5000 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=5000
+add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\
+    2377 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=2377
+add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\
+    Unet-ether1 protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \
+    to-ports=81
+add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\
+    Unet-ether1 protocol=tcp src-address-list=TRUSTED to-addresses=\
+    10.30.30.33 to-ports=22
+add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \
+    dst-port=2377 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2377
+add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\
+    Unet-ether1 protocol=tcp routing-mark=!To-VPN to-addresses=10.30.30.33 \
+    to-ports=22
+add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \
+    dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \
+    time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\
+    Bridge-LAN protocol=tcp src-address-list=KIDS time=\
+    6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+/ip firewall raw
+add action=drop chain=prerouting comment="Drop Honeypot Hackers" \
+    in-interface=Unet-ether1 src-address-list="Honeypot Hacker"
+add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \
+    in-interface-list=WAN src-address-list=Trusted-DNS
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \
+    content=linux.duke.edu disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleapis.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googlevideo.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleusercontent.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    nhacmp3youtube.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \
+    content=rutube.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \
+    content=me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "icloud.com raw" content=icloud.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \
+    disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "api.db-ip.com raw" content=api.db-ip.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \
+    content=gosuslugi.ru disabled=yes
+/ip firewall service-port
+set ftp disabled=yes
+set tftp disabled=yes
+set irc disabled=no
+set sip disabled=yes
+set pptp disabled=yes
+set rtsp disabled=no
+/ip ipsec settings
+set accounting=no
+/ip ipsec policy
+set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0
+/ip ipsec profile
+set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
+/ip proxy
+set cache-administrator="" max-cache-size=none port=80,443 src-address=\
+    0.0.0.0
+/ip route
+add check-gateway=none comment=WG-Default disabled=no distance=1 dst-address=\
+    0.0.0.0/0 gateway=WG routing-table=To-VPN scope=30 target-scope=10
+/ip service
+set ftp disabled=yes
+set telnet disabled=yes
+set reverse-proxy disabled=yes
+set ssh address=10.30.30.0/24 port=2222
+set winbox address=10.30.30.0/24
+set api address=10.30.30.0/24
+set api-ssl address=10.30.30.0/24 disabled=yes
+set www-ssl certificate=Root-YE port=18443
+set www address=10.30.30.0/24 disabled=yes port=18880
+/ip service webserver
+set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\
+    no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \
+    webfig-secure=no
+/ip ssh
+set forwarding-enabled=both publickey-authentication-options=verify-required
+/ip upnp
+set enabled=yes
+/ip upnp interfaces
+add interface=Bridge-LAN type=internal
+add forced-ip=146.120.64.211 interface=Unet-ether1 type=external
+add forced-ip=109.107.177.79 interface=*E type=external
+add interface=lo type=internal
+add interface=wlan2 type=internal
+add interface=wlan1 type=internal
+/ipv6 dhcp-client
+add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\
+    info use-interface-duid=yes validate-server-duid=no
+/ipv6 dhcp-server option sets
+add name=domain-search-set options=domain-search-list
+add name="=\"Client ID\"" options=HostName
+/ipv6 firewall address-list
+add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
+add address=::1/128 comment="defconf: lo" list=bad_ipv6
+add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
+add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
+add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
+add address=100::/64 comment="defconf: discard only " list=bad_ipv6
+add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
+add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
+add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
+/ipv6 firewall filter
+add action=accept chain=input comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=input comment="defconf: drop invalid" connection-state=\
+    invalid
+add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=input comment="defconf: accept UDP traceroute" \
+    dst-port=33434-33534 protocol=udp
+add action=accept chain=input comment=\
+    "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
+    udp src-address=fe80::/10
+add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
+    protocol=udp
+add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=input comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=input comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+add action=accept chain=forward comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
+add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
+    hop-limit=equal:1 protocol=icmpv6
+add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=forward comment="defconf: accept HIP" protocol=139
+add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
+    500,4500 protocol=udp
+add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=forward comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=forward comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+/ipv6 nd
+set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \
+    managed-address-configuration=yes other-configuration=yes pref64=::/64
+/ipv6 nd prefix
+add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none
+/ipv6 nd prefix default
+set dhcp6-pd-preferred=yes
+/ipv6 nd proxy
+add disabled=yes interface=lo
+/ipv6 nd settings
+set router-advertisement-route-distance=100
+/routing settings
+set single-process=no
+/system clock
+set time-zone-name=Europe/Moscow
+/system clock manual
+set time-zone=+03:00
+/system identity
+set name=MikroMaster
+/system logging
+add action=email disabled=yes regex="* added|changed|removed *" topics=\
+    system,info
+/system ntp client
+set enabled=yes
+/system ntp server
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes
+/system ntp client servers
+add address=0.ru.pool.ntp.org
+add address=1.ru.pool.ntp.org
+add address=2.ru.pool.ntp.org
+add address=3.ru.pool.ntp.org
+add address=time.google.com disabled=yes
+/system package update
+set check-certificate=yes-without-crl ip-version=ipv4
+/system scheduler
+add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \
+    on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Every Day Check For Update Scripts" interval=1d name=\
+    AM-ScriptInstallUpdate on-event=\
+    ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\
+    AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+/system watchdog
+set watchdog-timer=no
+/tool e-mail
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \
+    server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com
+/tool mac-server
+set allowed-interface-list=LAN
+/tool mac-server mac-winbox
+set allowed-interface-list=LAN
+/tool netwatch
+add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\
+    -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\
+    e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \
+    interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\
+    https-get up-script=""
+add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\
+    flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\
+    oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \
+    name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \
+    up-script=""
+add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\
+    8.8.8.8 down-script="" host=dns.google http-codes="" name=\
+    "Google-DNS IPv4" test-script="" type=dns up-script=""
+add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\
+    rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\
+    -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \
+    http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\
+    "" test-script="" type=dns up-script=""
+add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \
+    dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \
+    interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \
+    test-script="" timeout=800ms type=dns up-script=""
+add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\
+    ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \
+    down-script="" host=149.112.112.112 http-codes="" interval=10s name=\
+    "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script=""
+add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \
+    down-script="" host=91.192.189.2 http-codes="" interval=10s name=\
+    ns1.unet.ws test-script="" type=simple up-script=""
+add check-certificate=yes comment=\
+    "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \
+    disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\
+    vds.vados.ru port=443 test-script="" type=https-get up-script=""
+add comment="WireGuard NAT " disabled=yes down-script="/log info \"[WG-Monitor\
+    ] WireGuard is NOT running - reverting rules\"\
+    \n/ip firewall nat remove [find comment=\"Redirect to Router\"]\
+    \n/ip dns set servers=8.8.8.8\
+    \n/ip dns cache flush\
+    \n/ip route remove [find comment=\"wg-auto-route\"]\
+    \n" host=10.8.0.1 http-codes="" interval=15s name=WG test-script="" \
+    timeout=5s type=simple up-script="/log info \"[WG-Monitor] WireGuard is RU\
+    NNING - applying rules\";\
+    \n:local routeFile \"ips.txt\";\
+    \n:local routeDefAddr \"0.0.0.0/0\";\
+    \n:local routeGateway \"10.8.0.1\";\
+    \n:local routeIF \"WG\";\
+    \n:local routeTable \"To-VPN\";\
+    \n:local routeComment \"wg-auto-route\";\
+    \n/ip dns cache flush;\
+    \n:if ([:len [/ip firewall nat find comment=\"Redirect to Router\"]] > 0) \
+    do={\
+    \n  /ip firewall nat remove [find comment=\"Redirect to Router\"];\
+    \n}\
+    \n/ip firewall nat add action=redirect chain=dstnat src-address-list=\"Red\
+    irectDNS\" dst-port=53 protocol=udp comment=\"Redirect to Router\";\
+    \n/ip dns set servers=\$routeGateway;\
+    \n:local content [/file get \$routeFile contents];\
+    \n:if ([:len \$content] > 0) do={\
+    \n    :local line \"\";\
+    \n    :for i from=0 to=([:len \$content] - 1) do={\
+    \n        :local char [:pick \$content \$i];\
+    \n        :if (\$char != \"\\r\" && \$char != \"\\n\") do={\
+    \n            :set line (\$line . \$char);\
+    \n        } else={\
+    \n            :if ([:len \$line] > 5) do={\
+    \n                :do { /ip route add disabled=no dst-address=\$routeDefAd\
+    dr gateway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$r\
+    outeTable comment=\$routeComment check-gateway=none } on-error={}\
+    \n            }\
+    \n            :set line \"\";\
+    \n        }\
+    \n    }\
+    \n    :if ([:len \$line] > 5) do={\
+    \n#         :do { /ip route add dst-address=\$line gateway=\$routeGateway \
+    distance=1 comment=\$routeComment } on-error={}\
+    \n           :do { /ip route add disabled=no dst-address=\$routeDefAddr ga\
+    teway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$routeT\
+    able comment=\$routeComment check-gateway=none } on-error={}\
+    \n    }\
+    \n}\
+    \n:local dotPos [:find \$routeGateway \".\"];\
+    \n:if (\$dotPos != \"\") do={\
+    \n    :local firstOctet [:pick \$routeGateway 0 \$dotPos];\
+    \n    :local derivedDstAddress (\$firstOctet . \".30.0.0/15\");\
+    \n    :do { /ip route add dst-address=\$derivedDstAddress gateway=\$routeG\
+    ateway distance=1 comment=\$routeComment } on-error={}\
+    \n}\
+    \n\
+    \n"
+add comment=WG-Default disabled=yes down-script=\
+    "/ip route disable [find comment=\"WG-Default\"];" host=10.8.0.1 \
+    interval=15s name=WG packet-count=20 test-script="" thr-loss-count=5 \
+    type=icmp up-script="/ip route enable [find comment=\"WG-Default\"];"
+/user aaa
+set accounting=no
diff --git a/MikroMaster/20260712/20260712044001-Config.rsc b/MikroMaster/20260712/20260712044001-Config.rsc
new file mode 100644
index 0000000..77c0603
--- /dev/null
+++ b/MikroMaster/20260712/20260712044001-Config.rsc
@@ -0,0 +1,3841 @@
+# 2026-07-12 04:40:06 by RouterOS 7.23.1
+# software id = A8L5-07YF
+#
+# model = RB952Ui-5ac2nD
+# serial number = D3D50CEDCD38
+/interface bridge
+add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\
+    "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\
+    Bridge-LAN port-cost-mode=short
+/interface ethernet
+set [ find default-name=ether1 ] comment=Unet-cable loop-protect=off name=\
+    Unet-ether1 rx-flow-control=auto tx-flow-control=auto
+set [ find default-name=ether2 ] comment=LAN-2
+set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3
+set [ find default-name=ether4 ] comment=LAN-4
+set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \
+    loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto
+/interface wireless
+# managed by CAPsMAN
+# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding
+set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados wireless-protocol=802.11
+# managed by CAPsMAN
+# channel: 5260/20-Ceee/ac/DP(18dBm), SSID: vados5g, local forwarding
+set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados5g wireless-protocol=802.11
+/interface wireguard
+add comment=WG listen-port=13231 mtu=1320 name=WG
+add comment="WG interface for Amnezia route" disabled=yes listen-port=33033 \
+    mtu=1360 name=wg-nuc
+/interface list
+add include=static name=LAN
+add name=Internet
+add include=Internet name=WAN
+/interface wireless security-profiles
+set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
+    dynamic-keys supplicant-identity=MikroTik
+/iot wiliot servers
+set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East"
+/ip dhcp-server option
+add code=12 name=HostName
+add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00"
+/ip dhcp-server option sets
+add name=HP1505n options=HostName
+add name=StartLife1 options=HostName
+add name=amsterDev options=HostName
+add name=MiTV options=HostName
+add name=miller options=HostName
+add name=amster options=HostName
+add name=garage options=HostName
+add name=domain-search-set options=domain-search-list
+add name=VADOS-LEN options=HostName
+add name=VADOS-NUC options=HostName
+add name=MikroNUC options=HostName
+add name=master options=HostName
+add name=MikroYellow options=HostName
+add name="=\"Client ID\"" options=HostName
+add name=iVados options=HostName
+/ip dns forwarders
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no
+add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \
+    verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no
+/ip ipsec proposal
+set [ find default=yes ] disabled=yes
+/ip pool
+add name=dhcp ranges=10.30.30.83-10.30.30.254
+/ip dhcp-server
+add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \
+    dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \
+    name=masterDHCP server-address=10.30.30.81
+/ip smb users
+set [ find default=yes ] disabled=yes
+add disabled=yes name=vados
+/ipv6 dhcp-client option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=DUID value=0x00030001488f5a8e1abc
+add code=61 name=clientid
+/ipv6 dhcp-server option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=CLIENT_DUID
+add code=61 name=CLIENT_MAC
+/ppp profile
+set *FFFFFFFE use-upnp=no
+/routing bgp template
+set default disabled=no output.network=bgp-networks
+/routing table
+add disabled=no fib name=To-VPN
+add disabled=no fib name=r_to_vpn
+/system logging action
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email
+/system script
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\
+    \n\r\
+    \n#:local Script AM-setup\
+    \n;\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n\
+    \n\r\
+    \n#\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\
+    \n\r\
+    \n#\r\
+    \n\
+    \n#root.mnuc.backuper\
+    \n\
+    \n\r\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\
+    .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\
+    \n\
+    \n#:local Script AM-GlobalConfig;\
+    \n\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n#:local FetchFile AM-DOHCert.rsc\
+    \n\
+    \n\r\
+    \n\r\
+    \n#\
+    \n:global MkDir;\
+    \n\r\
+    \n\
+    \n#:local FetchFile Binary.backup\
+    \n:local localDir \"\";\
+    \n\
+    \n\r\
+    \n#\$MkDir \$localDir;\r\
+    \n\
+    \n#\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\
+    \$localDir . \$FetchFile);\r\
+    \n"
+add comment="Global Config Script" dont-require-permissions=no name=\
+    AM-GlobalConfig owner=AM-GlobalConfig policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GlobalConfig\r\
+    \n# Script comment: Global Config Script\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# Warning: Dont touch this line!\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global GlobalConfReady false;\r\
+    \n#\r\
+    \n#\r\
+    \n# Global Url For Amster scripts to fetch\r\
+    \n# most be defined in AM-Init-Script or AM-setup scripts\r\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n:global ScriptsUrlSuffix (a);\r\
+    \n:global CheckSumsVerify true;\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF true;\r\
+    \n:global CommentsInScripts true;\r\
+    \n\r\
+    \n# Debug output:\r\
+    \n:global PrintDebug true; #false;\r\
+    \n\r\
+    \n# Debug output for specific script:\r\
+    \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\
+    \n\r\
+    \n# Debug logs\r\
+    \n# Other actions (disk, email, remote or support) can be used as well.\r\
+    \n# I do not recommend using echo - use debug output instead (https://rsc.\
+    eworm.de/main/DEBUG.html#debug-output).\r\
+    \n#/system/logging/add topics=script,debug action=memory;\r\
+    \n\r\
+    \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\
+    \n:global Domain \"WORKGROUP\";\r\
+    \n\r\
+    \n:global EmailGeneralTo \"vados@vados.ru\";\r\
+    \n#:global EmailGeneralCc \"\";\r\
+    \n\r\
+    \n# \$ScriptInstallUpdate mod/notification-telegram\r\
+    \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\
+    \";\r\
+    \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\
+    \n# Use this to send notifications to a specific topic in group.\r\
+    \n#:global TelegramThreadId \"30\";\r\
+    \n# Using telegram-chat you have to define trusted chat ids (not group ids\
+    !)\r\
+    \n# or user names. Groups allow to chat with devices simultaneously.\r\
+    \n:global TelegramChatIdsTrusted {\r\
+    \n  \"454403445\"\r\
+    \n  \"-1003631309063\"\r\
+    \n  \"-5124482807\"\r\
+    \n  \"1087968824\";\r\
+    \n};\r\
+    \n#  \"-5294757340\";\r\
+    \n\r\
+    \n:global TelegramChatGroups \"(all)\";\r\
+    \n#:global TelegramChatGroups \"(all|home|office)\";\r\
+    \n\r\
+    \n:global NotificationFunctions {\r\
+    \n  \"email\"\r\
+    \n  \"telegram\";\r\
+    \n};\r\
+    \n# Toggle this to disable symbols in notifications.\r\
+    \n:global NotificationsWithSymbols true;\r\
+    \n:global TerminalColorOutput true;\r\
+    \n\r\
+    \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\
+    \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\
+    \n\r\
+    \n## Update channel. Possible values: stable, long-term, testing, developm\
+    ent\r\
+    \n:global updateChannel \"stable\";\r\
+    \n\r\
+    \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\
+    \");\r\
+    \n:global CertRenewTime 2w;\r\
+    \n:global CertRenewPass (a); #{\r\
+    \n#  \"\";\r\
+    \n#  \"v3ry-s3cr3t\";\r\
+    \n#  \"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n:global CertWarnTime 1w;\r\
+    \n:global CertIssuedExportPass (a); # {\r\
+    \n#  \"\";\r\
+    \n#  \"cert1-cn\"=\"v3ry-s3cr3t\";\r\
+    \n#  \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n\r\
+    \n# Script BackupAndUpdate mode, possible values: backup,\r\
+    \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\
+    n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;).  \r\
+    \n# osupdate - Update if available and creates backups before/after update\
+    \_(ignores `forceBackup`)\r\
+    \n#               Set `forceBackup` to true to always create backups, even\
+    \_without updates\r\
+    \n# osnotify - Set `forceBackup` to always create backups on every run\r\
+    \n:global DevInfoIncludeIP true;\r\
+    \n:global BackupAndUpdateMode \"osnotify\"\r\
+    \n\r\
+    \n:global forceBackup true;\r\
+    \n:global BackupPassword \"Peskar55\";\r\
+    \n\r\
+    \n# SFTP Backup Variables\r\
+    \n:global BackupRandomDelay 0;\r\
+    \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\
+    \n:global BackupUploadUser \$Identity;\r\
+    \n:global BackupUploadPass \"root.mnuc.backuper\";\r\
+    \n\r\
+    \n:global BackupSendBinary true;\r\
+    \n:global BackupSendExport true;\r\
+    \n:global BackupSendGlobalConfig true;\r\
+    \n:global BackupSendScripts true;\r\
+    \n\r\
+    \n# Remove local file after uploading if no errors\r\
+    \n:global BackupRmLocal true;\r\
+    \n\r\
+    \n# Local Backups Root Directory \r\
+    \n:global BackupLocalRoot \"tmpfs\";\r\
+    \n\r\
+    \n# Encrypt Backup\r\
+    \n:global BackupEncrypt true;\r\
+    \n\r\
+    \n# Sensitive information in Backups\r\
+    \n:global BackupSens true;\r\
+    \n\r\
+    \n# User Export\r\
+    \n:global BackupUser true;\r\
+    \n\r\
+    \n# License Export (not for CHR, will silently skip)\r\
+    \n:global BackupLicense false;\r\
+    \n\r\
+    \n# SSH Keys\r\
+    \n:global BackupSshKeys true;\r\
+    \n\r\
+    \n# Certificate Export\r\
+    \n:global BackupCerts true;\r\
+    \n\r\
+    \n# Certificate Password\r\
+    \n:global BackupCertsPasswd \"\";\r\
+    \n\r\
+    \n# User-Manager Export\r\
+    \n:global BackupUserMan false;\r\
+    \n\r\
+    \n# The Dude Export\r\
+    \n:global BackupDude false;\r\
+    \n\r\
+    \n# User Files to export, comma-separated string or array of strings\r\
+    \n# User Files are not removed on backup\r\
+    \n# Any directory paths will be removed (/ -> _) on remote file\r\
+    \n# Nonpresent files are silently skipped\r\
+    \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\
+    \n\r\
+    \n# load functions and any custom scripts\r\
+    \n#                    [ /system/script/find where name=\"global-config-ov\
+    erlay\" ], \\\r\
+    \n#                    [ /system/script/find where name~\"^global-config-o\
+    verlay\\\\.d/.\" ]\r\
+    \n#\r\
+    \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\
+    ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\
+    \r\
+    \n#  :onerror Err {\r\
+    \n#     /system/script/run \$Script;\r\
+    \n#     } do={\r\
+    \n#       :log error (\"Loading configuration from configs and functions\"\
+    \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\
+    \n#  }\r\
+    \n#}\r\
+    \n#:log info \"\\ndevMode = \$devMode\";\r\
+    \n#:log info \"\\ndevRunning = \$devRunning\";\r\
+    \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \
+    GlobalRUN\\r\?\\n\" ] do={\r\
+    \n  :onerror Err {\r\
+    \n    /system/script/run \$Script;\r\
+    \n       } do={\r\
+    \n       :log error (\"Run script \" . [ /system/script/get \$Script name \
+    ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# signal we are ready\r\
+    \n:set GlobalConfReady true;\r\
+    \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\
+    \n"
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \
+    owner=AM-GlobalFunc policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GglobalFunc\r\
+    \n# Script comment: Global functions\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch, scheduler\r\
+    \n:local ExitOK false;\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n#:global checkRunJob \$SriptName;\r\
+    \n#:global fixCRLF;\r\
+    \n#:if (\$fixCRLF !=  false) do={\r\
+    \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\
+    ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\
+    }\r\
+    \n#:if (\$fixCRLF !=  \"LF\") do={ /system/script/set source=[ :tocrlf [ g\
+    et \$fixScript source ] ] \$fixScript};};\r\
+    \n#}\r\
+    \n:global GlobalFuncReady false;\r\
+    \n\r\
+    \n# Git commit id & info, expected configuration version\r\
+    \n:global CommitId \"main/729/f42d43ae\";\r\
+    \n:global CommitTAG \"unknown\";\r\
+    \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\
+    r: root, in 00:05:03 01.07.2026.\";\r\
+    \n\r\
+    \n# The variables are received right here.\r\
+    \n:global GlobalConfVersion 140;\r\
+    \n\r\
+    \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\
+    \n\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global IdentityShort [:pick \$Identity 0 18];\r\
+    \n\r\
+    \n:global devBoardName [/system/resource/get board-name];\r\
+    \n:global devMode [/system/device-mode/get mode];\r\
+    \n:global devCurArch [/system/resource/get architecture-name];\r\
+    \n:global devCurVersion [/system/resource/get version];\r\
+    \n\r\
+    \n# Variables defined in AM-GlobalConfig.rsc\r\
+    \n:global TerminalColorOutput;\r\
+    \n:global CommentsInScripts;\r\
+    \n:global DetectIpAddrDefault;\r\
+    \n:global DetectIpAddrFallback;\r\
+    \n:global updateChannel;\r\
+    \n:global Domain;\r\
+    \n:global EmailGeneralTo;\r\
+    \n:global BackupAndUpdateMode;\r\
+    \n\r\
+    \n# Single functions, without nested functions.\r\
+    \n:global MiniDateTimeStamp;\r\
+    \n:global MicroDateTimeStamp;\r\
+    \n\r\
+    \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\
+    \n:global LogPrint;\r\
+    \n\r\
+    \n# DeviceInfo and Updates\r\
+    \n:global IsCheckUpdates;\r\
+    \n:global WaitCheckUpdates;\r\
+    \n:global GetPubIp;\r\
+    \n\r\
+    \n:global GetArrDeviceInfo;\r\
+    \n:global WaitArrDeviceInfo;\r\
+    \n\r\
+    \n:global devModel;\r\
+    \n:global devRunningMode;\r\
+    \n\r\
+    \n:global devRbRevision;\r\
+    \n:global devRbSerialNumber;\r\
+    \n:global devRbVerAvail;\r\
+    \n\r\
+    \n:global runningChannelVersion;\r\
+    \n:global runningChannel;\r\
+    \n:global runningVersion;\r\
+    \n\r\
+    \n:global devBuildTime;\r\
+    \n:global ROsVerAvail;\r\
+    \n:global PkgUpdStatus;\r\
+    \n:global currentUpdateChannel;\r\
+    \n\r\
+    \n:global ScriptInstallUpdate;\r\
+    \n\r\
+    \n:global DeviceInfo;\r\
+    \n\r\
+    \n:global OldMode;\r\
+    \n\r\
+    \n:global ParseKeyValueStore;\r\
+    \n:global RandomDelay;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global EscapeForRegEx;\r\
+    \n:global CharacterMultiply;\r\
+    \n:global CharacterReplace;\r\
+    \n:global CleanFilePath;\r\
+    \n:global CleanName;\r\
+    \n\r\
+    \n:global CommitBrief;\r\
+    \n\r\
+    \n:global EitherOr;\r\
+    \n:global FormatLine;\r\
+    \n:global GetRandom20CharAlNum;\r\
+    \n:global GetRandom20CharHex;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global Grep;\r\
+    \n:global IfThenElse;\r\
+    \n:global MAX;\r\
+    \n:global MIN;\r\
+    \n:global HumanReadableNum;\r\
+    \n\r\
+    \n:global IsFullyConnected;\r\
+    \n:global IsDNSResolving;\r\
+    \n:global IsTimeSync;\r\
+    \n:global IsTimeSyncCached;\r\
+    \n:global IsTimeSyncResetNtp;\r\
+    \n\r\
+    \n:global MkDir;\r\
+    \n:global RmDir;\r\
+    \n:global RmFile;\r\
+    \n:global FileGet;\r\
+    \n:global Unix2Dos;\r\
+    \n:global UrlEncode;\r\
+    \n:global WaitForFile;\r\
+    \n:global ScriptLock;\r\
+    \n:global SendTelegram;\r\
+    \n:global NotificationFunctions;\r\
+    \n:global SendNotification;\r\
+    \n:global SendNotification2;\r\
+    \n:global SymbolForNotification;\r\
+    \n:global SymbolByUnicodeName;\r\
+    \n:global ValidateSyntax;\r\
+    \n:global CheckSumsVerify;\r\
+    \n:global GlobalConfChanges;\r\
+    \n:global GlobalConfMigration;\r\
+    \n:global VersionToNum;\r\
+    \n:global RequiredRouterOS;\r\
+    \n:global ExitError;\r\
+    \n:global ExitOnError;\r\
+    \n\r\
+    \n:global FetchHugeFiles;\r\
+    \n:global FetchUserAgentStr;\r\
+    \n:global FileExists;\r\
+    \n:global CertificateAvailable;\r\
+    \n:global CertificateDownload;\r\
+    \n:global CertificateNameByCN;\r\
+    \n:global CharacterMultiply;\r\
+    \n\r\
+    \n:global InspectVar;\r\
+    \n:global InspectVarRet;\r\
+    \n:global ParseCustom;\r\
+    \n\r\
+    \n:set IsCheckUpdates do={\r\
+    \n  :local isInfo [:tobool \$1];\r\
+    \n  :global updateChannel;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\
+    \n  :local CurrentChannel [ /system/package/update/get channel ];\r\
+    \n  :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\
+    el) do={\r\
+    \n    :retry command={/system/package/update set channel=\$updateChannel} \
+    \_delay=300ms max=5 on-error={};\r\
+    \n    :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\
+    \n  }\r\
+    \n  :local Update [ /system/package/update/get ];\r\
+    \n  :local Channel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set currentUpdateChannel \$Channel;\r\
+    \n  :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\
+    \n  :local StatusPkg \"undefined\";\r\
+    \n  :log info (\$0 . \" Checking for updates...\");\r\
+    \n  :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\
+    dates without-paging as-value]->\"status\")} \\\r\
+    \n   delay=300ms max=5 on-error={};\r\
+    \n  :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\
+    \n  :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\
+    s true; } else={ :set PkgUpdStatus false; }\r\
+    \n  :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \
+    ] ];\r\
+    \n  :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n  :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\
+    \n    :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n    :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n      :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n    }\r\
+    \n    :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\
+    kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\
+    \n    :return true;\r\
+    \n  } else={\r\
+    \n    :return \$PkgUpdStatus;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitCheckUpdates do={\r\
+    \n  :global IsCheckUpdates;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :local Status \"\";\r\
+    \n  :local Update;\r\
+    \n  :local WaitCount 0;\r\
+    \n  :if ([ \$IsCheckUpdates true ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n  :while ((\$Status = \"\" || \$Status = \"finding out latest version...\
+    \") && \$WaitCount < 60) do={\r\
+    \n    :delay 1s;\r\
+    \n    :set WaitCount (\$WaitCount + 1);\r\
+    \n    :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n   }\r\
+    \n  :set Update [ /system/package/update/get ];\r\
+    \n  :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n  :if ((\$Update->\"status\") = \"New version is available\") do={\r\
+    \n    :set PkgUpdStatus true;\r\
+    \n  } else={\r\
+    \n    :set PkgUpdStatus false;\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n    :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n  }\r\
+    \n  :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\
+    \n  :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \
+    do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitArrDeviceInfo do={\r\
+    \n   :global GetArrDeviceInfo;\r\
+    \n   :while ([ \$GetArrDeviceInfo ] = false) do={\r\
+    \n    :delay 1s;\r\
+    \n   }\r\
+    \n}\r\
+    \n\r\
+    \n:set GetArrDeviceInfo do={\r\
+    \n   :global LogPrint;\r\
+    \n   :global arrDeviceInfo;\r\
+    \n   :global devBoardName;\r\
+    \n   :global devModel;\r\
+    \n   :global devRunning;\r\
+    \n   :global devCurArch;\r\
+    \n   :global devRbRevision;\r\
+    \n   :global devRbSerialNumber;\r\
+    \n   :global devBuildTime;\r\
+    \n   :global runningChannelVersion;\r\
+    \n   :global runningChannel;\r\
+    \n   :global runningVersion;\r\
+    \n   :global currentUpdateChannel;\r\
+    \n   :global ROsVerAvail;\r\
+    \n\r\
+    \n   :local DeviceInfo;\r\
+    \n   :local Resource [/system/resource/get];\r\
+    \n   :local Update [ /system/package/update/get ];\r\
+    \n   :local VersionString [ :tostr (\$Resource->\"version\") ];\r\
+    \n   :local ChannelStart [ :find \$VersionString \" (\" ];\r\
+    \n   :local RouterBoard;\r\
+    \n   :local IsRouterBoard false;\r\
+    \n   :local RunningMode \"\";\r\
+    \n\r\
+    \n   :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\
+    \n   :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\
+    \n   :set runningChannelVersion \$VersionString;\r\
+    \n   :set runningVersion \$VersionString;\r\
+    \n   :set runningChannel \"\";\r\
+    \n\r\
+    \n   :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\
+    {\r\
+    \n     :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\
+    \n     :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\
+    len \$VersionString ] ];\r\
+    \n     :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\
+    \n     :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\
+    \r\
+    \n       :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\
+    \n     }\r\
+    \n   }\r\
+    \n\r\
+    \n   :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\
+    \_3] != \"x86\") do={\r\
+    \n   :do {\r\
+    \n      :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\
+    \n#     :set RouterBoard [ /system/routerboard/get ];\r\
+    \n      :if ((\$RouterBoard->\"routerboard\") = true) do={\r\
+    \n        :set IsRouterBoard true;\r\
+    \n     }\r\
+    \n   } on-error={}\r\
+    \n    }\r\
+    \n\r\
+    \n   :do {\r\
+    \n     :set RunningMode [ /system/device-mode/get mode ];\r\
+    \n   } on-error={\r\
+    \n     :do {\r\
+    \n       :set RunningMode [ /system/device-mode/get running ];\r\
+    \n     } on-error={\r\
+    \n       :set RunningMode \"\";\r\
+    \n     }\r\
+    \n   }\r\
+    \n   :set devRunning \$RunningMode;\r\
+    \n\r\
+    \n   :if (\$IsRouterBoard = true) do={\r\
+    \n     :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\
+    \n     :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\
+    \n     :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \
+    ];\r\
+    \n   } else={\r\
+    \n     :set devModel \$devBoardName;\r\
+    \n     :set devRbRevision \"\";\r\
+    \n     :set devRbSerialNumber \"\";\r\
+    \n   }\r\
+    \n\r\
+    \n   :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n   :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n\r\
+    \n   :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\
+    \n   :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\
+    \n   :set (\$DeviceInfo->\"model\") \$devModel;\r\
+    \n   :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\
+    \n   :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\
+    \n   :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\
+    \n   :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\
+    \n   :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\
+    ion;\r\
+    \n   :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\
+    \n   :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\
+    \n   :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\
+    \n   :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\
+    current-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\
+    upgrade-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\
+    \n   :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\
+    alled-version\") ];\r\
+    \n   :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\
+    \n   :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\
+    ) ];\r\
+    \n\r\
+    \n   :set arrDeviceInfo \$DeviceInfo;\r\
+    \n   :return \$DeviceInfo;\r\
+    \n}\r\
+    \n\r\
+    \n:set DeviceInfo do={\r\
+    \n  :global GetArrDeviceInfo;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global FormatLine;\r\
+    \n  :global CommitBrief;\r\
+    \n\r\
+    \n  :local License [/system/license/get];\r\
+    \n  :local Snmp [ /snmp/get ];\r\
+    \n  :local Info [ \$GetArrDeviceInfo ];\r\
+    \n\r\
+    \n  :if ([ :typeof \$Info ] != \"array\") do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :return ( \\\r\
+    \n    [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\
+    \_. \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\
+    \_\\\r\
+    \n    \"Hardware:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Board\" (\$Info->\"board-name\") ] . \"\\n\" . \
+    \\\r\
+    \n    [ \$FormatLine \"    Arch\" (\$Info->\"architecture-name\") ] . \"\\\
+    n\" . \\\r\
+    \n    [ \$FormatLine \"    Model\" (\$Info->\"model\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\
+    \n      (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Serial\" (\$Info->\"serial-number\") ] . \"\
+    \\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"nlevel\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS:\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"level\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    [ \$FormatLine \"    Channel\" (\$Info->\"package-channel\") ] . \"\
+    \\n\" . \\\r\
+    \n    [ \$FormatLine \"    Installed\" (\$Info->\"installed-version\") ] .\
+    \_\"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Running\" ((\$Info->\"running-version\") . \
+    \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\
+    \n      ([ \$FormatLine \"    Running\" (\$Info->\"running-version\") ] . \
+    \"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\
+    \n        (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\
+    \_\\\r\
+    \n      ([ \$FormatLine \"    Available\" (\$Info->\"latest-version\") ] .\
+    \_\"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\
+    \n        (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\
+    ) \\\r\
+    \n      ([ \$FormatLine \"    Firmware\" ((\$Info->\"current-firmware\") .\
+    \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS-Scripts:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Version\" \$GlobalConfVersion ]);\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\
+    tionFunctions ({})}\r\
+    \n\r\
+    \n:set GetRandom20CharAlNum do={\r\
+    \n  :global EitherOr;\r\
+    \n  :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\
+    FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\
+    \n}\r\
+    \n\r\
+    \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\
+    \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\
+    \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\
+    \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\
+    \n\r\
+    \n:global checkRunJob;\r\
+    \n:set checkRunJob do={\r\
+    \n  :local Script [ :tostr \$1 ];\r\
+    \n  :global ScriptLock; \r\
+    \n  :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\
+    \n  :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\
+    :set Job [ /system/script/job/get \$Job ];\r\
+    \n    :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\
+    stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\
+    \n     :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\
+    lse; \r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVar do={\r\
+    \n  :global InspectVarRet;\r\
+    \n  :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\
+    \n}\r\
+    \n\r\
+    \n:set CommitBrief do={\r\
+    \n  :global CommitId;\r\
+    \n  :global CommitInfo;\r\
+    \n  :if (\$CommitId = \"unknown\") do={\r\
+    \n    :return \"unknown\";\r\
+    \n    }\r\
+    \n  :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVarRet do={\r\
+    \n  :local Input \$1;\r\
+    \n  :local Level (0 + [ :tonum \$2 ]);\r\
+    \n  :global CharacterReplace;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global InspectVarRet;\r\
+    \n  :local IndentReturn do={\r\
+    \n    :local Prefix [ :tostr \$1 ];\r\
+    \n    :local Value  [ :tostr \$2 ];\r\
+    \n    :local Level  [ :tonum \$3 ];\r\
+    \n    :global CharacterMultiply;\r\
+    \n    :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\
+    fix . \"-> \" . \$Value);\r\
+    \n  }\r\
+    \n  :local TypeOf [ :typeof \$Input ];\r\
+    \n  :local Len    [ :len \$Input ];\r\
+    \n  :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\
+    \n  :if (\$TypeOf = \"array\") do={\r\
+    \n    :foreach Key,Value in=\$Input do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n        [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\
+    \n        [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    :if (\$TypeOf = \"str\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n         [ \$IndentReturn \"len\" \$Len \$Level ]);\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\
+    \n      }\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if (\$TypeOf != \"nothing\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n       [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\
+    \_\\\r\
+    \n        ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set GetPubIp do={\r\
+    \n    :global DetectIpAddrDefault;\r\
+    \n    :global DetectIpAddrFallback;\r\
+    \n\r\
+    \n    :local PubIpAddr false;\r\
+    \n    :local Url \$DetectIpAddrDefault;\r\
+    \n    :local JobName [ :jobname ];\r\
+    \n\r\
+    \n    :do {\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using default serv\
+    ice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \
+    detect public IP using default service: \" . \$Url . \".\")}\r\
+    \n     } on-error={\r\
+    \n      :log error (\$0 . \" Failed to detect public IP using default serv\
+    ice: \" . \$Url . \".\");\r\
+    \n      :set Url \$DetectIpAddrFallBack;\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using fallback ser\
+    vice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\
+    \_detect public IP using fallback service: \" . \$Url . \".\")}\r\
+    \n    };\r\
+    \n    :local IpLen ([ :len \$PubIpAddr ] -1);\r\
+    \n    :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\
+    {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\
+    \n    :return \$PubIpAddr;\r\
+    \n}\r\
+    \n\r\
+    \n:set FormatLine do={\r\
+    \n  :local Key    [ :tostr \$1 ];\r\
+    \n  :local Value  [ :tostr \$2 ];\r\
+    \n  :local Indent [ :tonum \$3 ];\r\
+    \n  :local Spaces;\r\
+    \n  :local Return \"\";\r\
+    \n  :global CharacterMultiply;\r\
+    \n  :global EitherOr;\r\
+    \n  :set Indent [ \$EitherOr \$Indent 16 ];\r\
+    \n  :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\
+    \n  :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\
+    \n  :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\
+    n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\
+    \n  } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \
+    \$Return ]) ] . \$Value)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseCustom do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Start [:find [ \$Str ] [:tostr \$2]];\r\
+    \n  :local End [ :tostr \$3 ];\r\
+    \n  :local Num [ :tonum \$4 ];\r\
+    \n  :local Return;\r\
+    \n  :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\
+    \n  :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\
+    \n  :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\
+    lse={\r\
+    \n  :set End [:find \$rest \$End];\r\
+    \n  :set Return [:pick \$rest 0 \$End];\r\
+    \n  }\r\
+    \n:return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set LogPrint do={\r\
+    \n  :local Severity [ :tostr \$1 ];\r\
+    \n  :local Name     [ :tostr \$2 ];\r\
+    \n  :local Message  [ :tostr \$3 ];\r\
+    \n  :global PrintDebug;\r\
+    \n  :global PrintDebugOverride;\r\
+    \n  :global EitherOr;\r\
+    \n  :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \
+    ];\r\
+    \n  :local PrintSeverity do={\r\
+    \n  :global TerminalColorOutput;\r\
+    \n   :if (\$TerminalColorOutput != true) do={:return \$1}\r\
+    \n   :local Color { debug=96; info=97; warning=93; error=91 };\r\
+    \n   :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\
+    \n}\r\
+    \n  :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\
+    \r\
+    \n  :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\
+    \n    :if (\$Severity = \"debug\") do={:log debug \$Log}\r\
+    \n    :if (\$Severity = \"error\") do={:log error \$Log}\r\
+    \n    :if (\$Severity = \"info\" ) do={:log info  \$Log}\r\
+    \n  } else={:log warning \$Log; :set Severity \"warning\"}\r\
+    \n  :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\
+    erity \$Severity ] . \": \" . \$Message)}\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateAvailable do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :local UseFor     [ :tostr \$2 ];\r\
+    \n\r\
+    \n  :global CertificateDownload;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n\r\
+    \n  :if ([ :len \$UseFor ] = 0) do={\r\
+    \n    :log warning (\$0 . \"The intended use is undefined!\");\r\
+    \n    :set UseFor \"undefined\";\r\
+    \n  }\r\
+    \n  :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\
+    \n       [ /certificate/settings/get crl-download ] = true && \\\r\
+    \n       [ /certificate/settings/get crl-store ] = \"system\") do={\r\
+    \n    :log warning (\$0 . \"This system has low free flash space but \" . \
+    \\\r\
+    \n      \"is configured to download certificate CRLs to system!\");\r\
+    \n  }\r\
+    \n  :if ([ :len \$CommonName ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No CommonName given!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\
+    \r\
+    \n        (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\
+    \n        (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n       [ :len [ /certificate/builtin/find where common-name=\$CommonName\
+    \_] ] > 0) do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \
+    \"' not available.\");\r\
+    \n    :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\
+    ) do={\r\
+    \n    :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\
+    \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\
+    e ] ];\r\
+    \n  :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\
+    ertVal->\"skid\")) do={\r\
+    \n    :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\
+    \_= 0) do={\r\
+    \n      :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\
+    >\"CN\");\r\
+    \n      :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \
+    is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\
+    \n      :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\
+    \") ] ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateDownload do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :global ScriptUpdatesBaseUrl;\r\
+    \n  :global ScriptUpdatesUrlSuffix;\r\
+    \n  :global CertificateNameByCN;\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :log info (\$0 . \"Downloading and importing certificate with \" . \\\
+    \r\
+    \n      \"CommonName '\" . \$CommonName . \"'.\");\r\
+    \n  :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\
+    \n  :do {\r\
+    \n    /tool/fetch check-certificate=yes-without-crl mode=https http-header\
+    -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\
+    sUrlSuffix) \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n    \$WaitForFile \$FileName;\r\
+    \n  } on-error={\r\
+    \n    :log warning (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \\\r\
+    \n      \"' from repository! Trying fallback to mkcert.org...\");\r\
+    \n    :do {\r\
+    \n      :local CertSettings [ /certificate/settings/get ];\r\
+    \n      :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\
+    \_] ] = 0 && \\\r\
+    \n           !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \
+    || \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \
+    \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\
+    \r\
+    \n             [ :len [ /certificate/builtin/find where common-name=\"ISRG\
+    \_Root X1\" ] ] > 0)) do={\r\
+    \n        :log error (\$0 . \" Required certificate is not available.\");\
+    \r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n      /tool/fetch check-certificate=yes-without-crl mode=https http-head\
+    er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\
+    n ({ \$CommonName }) ] \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n      \$WaitForFile \$FileName;\r\
+    \n      :if ([ /file/get \$FileName size ] = 0) do={\r\
+    \n        \$RmFile \$FileName;\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n    } on-error={\r\
+    \n      :log error (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \"'!\");\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\
+    \n  :delay 1s;\r\
+    \n  \$RmFile \$FileName;\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\
+    +\\\$\") ];\r\
+    \n    :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\
+    e . \"' still unavailable!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \
+    \"_[0-9]+\\\$\") ] do={\r\
+    \n    \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateNameByCN do={\r\
+    \n  :local Match [ :tostr \$1 ];\r\
+    \n  :global CleanName;\r\
+    \n  :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\
+    rint=\$Match or name=\$Match) ]->0);\r\
+    \n  :if ([ :len \$Cert ] = 0) do={\r\
+    \n    :log warning (\$0 .\" No matching certificate found.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CommonName [ /certificate/get \$Cert common-name ];\r\
+    \n  /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileExists do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :local Type     [ :tostr \$2 ];\r\
+    \n  :global FileGet;\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={ :return false; }\r\
+    \n  :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\
+    \n  :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\
+    \_true; }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set Grep do={\r\
+    \n  :local Input  ([ :tostr \$1 ] . \"\\n\");\r\
+    \n  :local Pattern [ :tostr \$2 ];\r\
+    \n  :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\
+    }\r\
+    \n  :do {\r\
+    \n    :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\
+    \n    :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \
+    \$Line}\r\
+    \n    :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\
+    Input ] ];\r\
+    \n  } while=([ :len \$Input ] > 0);\r\
+    \n  :return [];\r\
+    \n}\r\
+    \n\r\
+    \n:set HumanReadableNum do={\r\
+    \n  :local Input [ :tonum \$1 ];\r\
+    \n  :local Base  [ :tonum \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Prefix \"kMGTPE\";\r\
+    \n  :local Pow 1;\r\
+    \n  :set Base [ \$EitherOr \$Base 1024 ];\r\
+    \n  :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\
+    \n  :if (\$Input < \$Base) do={:return \$Input}\r\
+    \n  :for I from=0 to=[ :len \$Prefix ] do={\r\
+    \n    :set Pow (\$Pow * \$Base);\r\
+    \n    :if (\$Input / \$Base < \$Pow) do={\r\
+    \n      :set Prefix [ :pick \$Prefix \$I ];\r\
+    \n      :local Tmp1 (\$Input * 100 / \$Pow);\r\
+    \n      :local Tmp2 (\$Tmp1 / 100);\r\
+    \n      :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\
+    \n      :return (\$Tmp2 . \".\" . \\\r\
+    \n          [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\
+    2 ] + 1) ] . \\\r\
+    \n          \$Prefix . \$Bin);\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanFilePath do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CharacterReplace;\r\
+    \n  :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \
+    \"//\" \"/\" ]; }\r\
+    \n  :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\
+    n \$Path ] ]; }\r\
+    \n  :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \
+    :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\
+    \n  :return \$Path;\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanName do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\
+    stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\
+    \n      :do {:if ([ :len \$Return ] = 0) do={:error true};\r\
+    \n        :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\
+    ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\
+    \n    };\r\
+    \n    :set Return (\$Return . \$Char)};\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set RandomDelay do={\r\
+    \n  :local Time [ :tonum \$1 ];\r\
+    \n  :local Unit [ :tostr \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global GetRandomNumber;\r\
+    \n  :global MAX;\r\
+    \n  :if (\$Time = 0) do={:return false}\r\
+    \n  :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \
+    [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\
+    \n}\r\
+    \n\r\
+    \n:set EscapeForRegEx do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitError do={\r\
+    \n  :local ExitOK [ :tostr \$1 ];\r\
+    \n  :local Name   [ :tostr \$2 ];\r\
+    \n  :local Error  [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$ExitOK = \"false\") do={\r\
+    \n    :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \
+    \\\r\
+    \n        \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\
+    ror\" . \\\r\
+    \n        [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \
+    \$Error) \".\" ]);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitOnError do={\r\
+    \n  :local Name   [ :tostr \$1 ];\r\
+    \n  :local Error  [ :tostr \$2 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\
+    \\\$\") \\\r\
+    \n      \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\
+    r\" . \\\r\
+    \n      [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\
+    rror) \".\" ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set MiniDateTimeStamp do={\r\
+    \n    :local mikro [ :tobool \$1 ];\r\
+    \n    /system/clock;\r\
+    \n    :local vdate [get date];\r\
+    \n    :local vtime [get time];\r\
+    \n    :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\
+    \n    :local MM    [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\
+    \n    :local M     [:tonum \$MM];\r\
+    \n    :if (\$vdate ~ \".../../....\") do={\r\
+    \n        :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\
+    \n        :set M     ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\
+    PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\
+    \n        :if (\$M>12) do={:set M (\$M - 12)}\r\
+    \n        :set MM    [:pick (100 + \$M) 1 3];\r\
+    \n    }\r\
+    \n    :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\
+    \n    :local dd   [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\
+    \n    :local HH   [:pick \$vtime 0  2];\r\
+    \n    :local mm   [:pick \$vtime 3  5];\r\
+    \n    :local ss   [:pick \$vtime 6  8];\r\
+    \n    :local Return;\r\
+    \n    :if (\$mikro = true) do={\r\
+    \n      :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\
+    \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\
+    \n    } else={\r\
+    \n    :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\
+    \r\
+    \n   }\r\
+    \n   :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitForFile do={\r\
+    \n  :local FileName [ :tostr  \$1 ];\r\
+    \n  :local WaitTime [ :totime \$2 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global EitherOr;\r\
+    \n  :global MAX;\r\
+    \n  :set FileName [ \$CleanFilePath \$FileName ];\r\
+    \n  :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } delay=\$Delay max=10;\r\
+    \n  } on-error={ }\r\
+    \n  :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\
+    \n    :do {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } on-error={ }\r\
+    \n    :delay \$Delay;\r\
+    \n    :set Delay (\$Delay * 3 / 2);\r\
+    \n  }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileGet do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global WaitForFile;\r\
+    \n  :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FileVal false;\r\
+    \n  :do {\r\
+    \n    :set FileVal [ /file/get \$FileName ];\r\
+    \n   } on-error={ }\r\
+    \n  :return \$FileVal;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmDir do={\r\
+    \n  :local DirName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing directory: \". \$DirName);\r\
+    \n  :local DirVal [ \$FileGet \$DirName ];\r\
+    \n  :if (\$DirVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  };\r\
+    \n  :if (\$DirVal->\"type\" != \"directory\") do={\r\
+    \n    :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\
+    ory.\");\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$DirName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\
+    : \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmFile do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing file: \". \$FileName);\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\
+    sk\") do={\r\
+    \n    :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\
+    \r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$FileName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\
+    \_. \$Err); :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MkDir do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global FileGet;\r\
+    \n  :global RmDir;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :local MkTmpfs do={\r\
+    \n   :global WaitForFile;\r\
+    \n   :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n   :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n     :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n       :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\
+    \n       /disk/enable \$TmpFs;\r\
+    \n      }\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :log info (\$0 . \" Creating disk of type tmpfs.\");\r\
+    \n    \$RmDir \"tmpfs\";\r\
+    \n    :onerror Err {\r\
+    \n      /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\
+    /get total-memory ] / 3);\r\
+    \n      \$WaitForFile \"tmpfs\";\r\
+    \n    } do={\r\
+    \n      :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\
+    Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :set Path [ \$CleanFilePath \$Path ];\r\
+    \n  :if (\$Path = \"\") do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log debug (\$0 . \" Making directory: \" . \$Path);\r\
+    \n  :local PathVal [ \$FileGet \$Path ];\r\
+    \n  :if (\$PathVal->\"type\" = \"directory\") do={\r\
+    \n    :log debug (\$0 . \" ... which already exists.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/add type=\"directory\" name=\$Path;\r\
+    \n    \$WaitForFile \$Path;\r\
+    \n  } do={\r\
+    \n    :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \
+    \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterReplace do={\r\
+    \n  :local String [ :tostr \$1 ];\r\
+    \n  :local ReplaceFrom [ :tostr \$2 ];\r\
+    \n  :local ReplaceWith [ :tostr \$3 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :if (\$ReplaceFrom = \"\") do={:return \$String}\r\
+    \n  :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\
+    \r\
+    \n    :local Pos [ :find \$String \$ReplaceFrom ];\r\
+    \n    :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\
+    \r\
+    \n    :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\
+    \_\$String ] ];\r\
+    \n  }\r\
+    \n  :return (\$Return . \$String);\r\
+    \n}\r\
+    \n\r\
+    \n:set IfThenElse do={\r\
+    \n  :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \
+    \$2};\r\
+    \n  :return \$3;\r\
+    \n}\r\
+    \n\r\
+    \n:set EitherOr do={\r\
+    \n  :global IfThenElse;\r\
+    \n  :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \
+    \$1 \$2 ]}\r\
+    \n  :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\
+    \_\$1 \$2 ]}\r\
+    \n# this works for boolean values, literal ones with parentheses\r\
+    \n  :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseKeyValueStore do={\r\
+    \n  :local Source \$1;\r\
+    \n  :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\
+    \n    :do {\r\
+    \n      :return [ :deserialize from=json \$Source ];\r\
+    \n    } on-error={ }\r\
+    \n  }   \r\
+    \n  :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\
+    }\r\
+    \n  :local Result ({});\r\
+    \n  :foreach KeyValue in=[ :toarray \$Source ] do={\r\
+    \n    :if ([ :find \$KeyValue \"=\" ]) do={\r\
+    \n      :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\
+    \n      :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\
+    \_:len \$KeyValue ] ];\r\
+    \n      :if (\$Value=\"true\") do={:set Value true}\r\
+    \n      :if (\$Value=\"false\") do={:set Value false}\r\
+    \n      :set (\$Result->\$Key) \$Value;\r\
+    \n      } else={:set (\$Result->\$KeyValue) true}\r\
+    \n  }\r\
+    \n  :return \$Result;\r\
+    \n}\r\
+    \n:set RequiredRouterOS do={\r\
+    \n  :local Caller   [ :tostr \$1 ];\r\
+    \n  :local Required [ :tostr \$2 ];\r\
+    \n  :local Warn     [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :global VersionToNum;\r\
+    \n  :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\
+    \\\$\")) do={\r\
+    \n    :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\
+    e/update/get installed-version ] ]) do={\r\
+    \n    :if (\$Warn = \"true\") do={\r\
+    \n      :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \
+    0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\
+    \n        \" '\" . \$Caller . \"' (at least specific functionality) requir\
+    es RouterOS \" . \$Required . \". Please update!\");\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set ValidateSyntax do={\r\
+    \n  :local Code [ :tostr \$1 ];\r\
+    \n  :global LogPrint;\r\
+    \n  :onerror Err {\r\
+    \n    [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\
+    \n  } do={\r\
+    \n    \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set VersionToNum do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Multi 0x1000000;\r\
+    \n  :local Return 0;\r\
+    \n  :global CharacterReplace;\r\
+    \n  :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\
+    \n  :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\
+    \n    :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\
+    \r\
+    \n  }\r\
+    \n  :foreach Value in=([ :toarray \$Input ], 0) do={\r\
+    \n    :local Num [ :tonum \$Value ];\r\
+    \n    :if (\$Multi = 0x100) do={\r\
+    \n      :if ([ :typeof \$Num ] = \"num\") do={\r\
+    \n        :set Return (\$Return + 0xff00);\r\
+    \n        :set Multi (\$Multi / 0x100);\r\
+    \n      } else={\r\
+    \n        :if (\$Value = \"zero\") do={ }\r\
+    \n        :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \
+    }\r\
+    \n        :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\
+    \r\
+    \n        :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\
+    lue * \$Multi)); }\r\
+    \n    :set Multi (\$Multi / 0x100);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptLock do={\r\
+    \n  :local Script  [ :tostr  \$1 ];\r\
+    \n  :local WaitMax [ :totime \$2 ];\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global ScriptLockOrder;\r\
+    \n  :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\
+    \n    :set ScriptLockOrder ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :local JobCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :return [ :len [ /system/script/job/find where script=\$Script ] ];\
+    \r\
+    \n  }\r\
+    \n  :local TicketCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :local Count 0;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \
+    + 1)}\r\
+    \n    }\r\
+    \n    :return \$Count;\r\
+    \n  }\r\
+    \n  :local IsFirstTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Check  [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if (\$Ticket = \$Check) do={:return true}\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\
+    o={:return false}\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local AddTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Add    [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :while (true) do={\r\
+    \n      :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\
+    \n      :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\
+    \n      :delay 10ms;\r\
+    \n      :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\
+    e}\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local RemoveTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Remove [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\
+    \n        :set (\$ScriptLockOrder->\$Script->\$Id);\r\
+    \n        :delay 10ms;\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local CleanupTickets do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\
+    \n    }\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\
+    \n  :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\
+    \n    :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\
+    ist!\");\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$JobCount \$Script ] = 0) do={\r\
+    \n    \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\
+    );\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\
+    \n    :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\
+    t . \"', resetting!\");\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n    /system/script/job/remove [ find where script=\$Script ];\r\
+    \n  }\r\
+    \n  :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\
+    \n  \$AddTicket \$Script \$MyTicket;\r\
+    \n  :local WaitInterval (\$WaitMax / 20);\r\
+    \n  :local WaitTime \$WaitMax;\r\
+    \n  :while (\$WaitTime > 0 && \\\r\
+    \n      ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\
+    \n      [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\
+    \n    :set WaitTime (\$WaitTime - \$WaitInterval);\r\
+    \n    :delay \$WaitInterval;\r\
+    \n  }\r\
+    \n  :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\
+    \n      [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\
+    \n    \$RemoveTicket \$Script \$MyTicket;\r\
+    \n    \$CleanupTickets \$Script;\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  \$RemoveTicket \$Script \$MyTicket;\r\
+    \n  \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \
+    once\" . \\\r\
+    \n    [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\
+    \_lock\" \"\" ] . \"...\");\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification do={ :onerror Err {\r\
+    \n  :global SendNotification2;\r\
+    \n  \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\
+    \_silent=\$4 });\r\
+    \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification2 do={\r\
+    \n  :local Notification \$1;\r\
+    \n  :global NotificationFunctions;\r\
+    \n  :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\
+    \n    (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\
+    ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolByUnicodeName do={\r\
+    \n  :local Name [ :tostr \$1 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global SymbolsExtra;\r\
+    \n  :local Symbols ({\r\
+    \n    \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\
+    \n    \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\
+    \n    \"arrow-down\"=\"\\E2\\AC\\87\";\r\
+    \n    \"arrow-up\"=\"\\E2\\AC\\86\";\r\
+    \n    \"calendar\"=\"\\F0\\9F\\93\\85\";\r\
+    \n    \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\
+    \n    \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\
+    \n    \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\
+    \n    \"cloud\"=\"\\E2\\98\\81\";\r\
+    \n    \"cross-mark\"=\"\\E2\\9D\\8C\";\r\
+    \n    \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\
+    \n    \"fire\"=\"\\F0\\9F\\94\\A5\";\r\
+    \n    \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\
+    \n    \"gear\"=\"\\E2\\9A\\99\";\r\
+    \n    \"heart\"=\"\\E2\\99\\A5\";\r\
+    \n    \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\
+    \n    \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\
+    \n    \"information\"=\"\\E2\\84\\B9\";\r\
+    \n    \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\
+    \n    \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\
+    \n    \"link\"=\"\\F0\\9F\\94\\97\";\r\
+    \n    \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\
+    \n    \"memo\"=\"\\F0\\9F\\93\\9D\";\r\
+    \n    \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\
+    \n    \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\
+    \n    \"scissors\"=\"\\E2\\9C\\82\";\r\
+    \n    \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\
+    \n    \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\
+    \n    \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\
+    \n    \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\
+    \n    \"sparkles\"=\"\\E2\\9C\\A8\";\r\
+    \n    \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\
+    \n    \"star\"=\"\\E2\\AD\\90\";\r\
+    \n    \"warning-sign\"=\"\\E2\\9A\\A0\";\r\
+    \n    \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\
+    \n  }, \$SymbolsExtra);\r\
+    \n  :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\
+    \n  :local Special {\r\
+    \n    \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\
+    \n    \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\
+    \n    \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\
+    \n    \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\
+    \n  :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\
+    '!\");\r\
+    \n    :return \"\";\r\
+    \n  }\r\
+    \n  :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\
+    me) ] . \"\\EF\\B8\\8F\");\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolForNotification do={\r\
+    \n  :global NotificationsWithSymbols;\r\
+    \n  :global SymbolByUnicodeName;\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\
+    \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\
+    \n  :local Return \"\";\r\
+    \n  :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\
+    mbolByUnicodeName \$Symbol ])}\r\
+    \n  :return (\$Return . \" \");\r\
+    \n}\r\
+    \n\r\
+    \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\
+    \n:set UrlEncode do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\
+    \n  :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\
+    %24\"; \"%25\"; \"%26\"; \"%27\";\r\
+    \n         \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \
+    \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\
+    \n         \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \
+    \"%7C\"; \"%7D\"; \"%7E\" };\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :local Replace [ :find \$Chars \$Char ];\r\
+    \n    :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\
+    ce)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsDNSResolving do={\r\
+    \n  :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsFullyConnected do={\r\
+    \n  :global IsDNSResolving;\r\
+    \n  :global IsTimeSync;\r\
+    \n  :if ([ \$IsDNSResolving ] = false) do={:return false};\r\
+    \n  :if ([ \$IsTimeSync ] = false) do={:return false};\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsTimeSync do={\r\
+    \n  :global IsTimeSyncCached;\r\
+    \n  :global IsTimeSyncResetNtp;\r\
+    \n  :if (\$IsTimeSyncCached = true) do={:return true}\r\
+    \n  :if ([ /system/ntp/client/get enabled ] = true) do={\r\
+    \n    :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :local Uptime [ /system/resource/get uptime ];\r\
+    \n    :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\
+    \n      :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    }\r\
+    \n    :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\
+    \n    :log warning \"\$0 The ntp client is configured, but did not sync.\"\
+    ;\r\
+    \n    :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    /system/ntp/client/set enabled=no;\r\
+    \n    :delay 20ms;\r\
+    \n    /system/ntp/client/set enabled=yes;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\
+    \n       [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\
+    \n    :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\
+    ee license and x86.\";\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ /ip/cloud/get update-time ] = true) do={\r\
+    \n    :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :log debug \"\$0 No time source configured! Returning gracefully...\";\
+    \r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchHugeFiles do={\r\
+    \n  :local ScriptName [ :tostr \$1 ];\r\
+    \n  :local Url        [ :tostr \$2 ];\r\
+    \n  :local CheckCert  [ :tostr \$3 ];\r\
+    \n\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global MkDir;\r\
+    \n  :global RmDir;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\
+    ithout-crl\" ];\r\
+    \n\r\
+    \n  :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\
+    \n  :if ([ \$MkDir \$DirName ] = false) do={\r\
+    \n    \$LogPrint error \$0 (\"Failed creating directory!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \
+    \$GetRandom20CharAlNum ]);\r\
+    \n  :onerror Err {\r\
+    \n    /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \
+    \\\r\
+    \n      http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\
+    lue;\r\
+    \n  } do={\r\
+    \n    :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\
+    \n      \$RmFile \$FileName;\r\
+    \n    }\r\
+    \n    \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\
+    \_. \$Err);\r\
+    \n    \$RmDir \$DirName;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\
+    \n    \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\
+    \_not show up.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileSize [ /file/get \$FileName size ];\r\
+    \n  :local Return \"\";\r\
+    \n  :local VarSize 0;\r\
+    \n  :while (\$VarSize != \$FileSize) do={\r\
+    \n    :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\
+    768 file=\$FileName as-value ]->\"data\"));\r\
+    \n    :set FileSize [ /file/get \$FileName size ];\r\
+    \n    :set VarSize [ :len \$Return ];\r\
+    \n    :if (\$VarSize > \$FileSize) do={\r\
+    \n      :delay 100ms;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  \$RmDir \$DirName;\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchUserAgentStr do={\r\
+    \n  :local Caller [ :tostr \$1 ];\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global CommitBrief;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Resource [ /system/resource/get ];\r\
+    \n  :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\
+    \_\$Resource->\"architecture-name\" . \\\r\
+    \n    \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\
+    CommitBrief ] . \")\");\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptInstallUpdate do={ :onerror Err {\r\
+    \n  :local Scripts    [ :toarray \$1 ];\r\
+    \n  :local NewComment [ :tostr   \$2 ];\r\
+    \n  :global InitSetup;\r\
+    \n\r\
+    \n  :global CommitId;\r\
+    \n  :global ScriptUpdatesCRLF;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global CheckSumsVerify;\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SumsDirAndFileName;\r\
+    \n  :global GlobalScriptsUrlSuffix;\r\
+    \n  :global EitherOr;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global Grep;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n  :global RequiredRouterOS;\r\
+    \n  :global SendNotification2;\r\
+    \n  :global SymbolForNotification;\r\
+    \n  :global ValidateSyntax;\r\
+    \n  :global CommentsInScripts;\r\
+    \n\r\
+    \n  :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\
+    hout.\");\r\
+    \n  }\r\
+    \n\r\
+    \n  :foreach Script in=\$Scripts do={\r\
+    \n    :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\
+    \r\
+    \n      \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\
+    \n      /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \
+    Vados\\n\" comment=\$NewComment;\r\
+    \n    }\r\
+    \n  }\r\
+    \n\r\
+    \n  :local CommitIdBefore \$CommitId;\r\
+    \n  :local GlobalConfVersionBefore \$GlobalConfVersion;\r\
+    \n  :local ReloadGlobal false;\r\
+    \n  :local DeviceMode [ /system/device-mode/get ];\r\
+    \n\r\
+    \n  :if (\$CheckSumsVerify = true) do={\r\
+    \n    :local CheckSums ({});\r\
+    \n     :do {\r\
+    \n     :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\
+    iptsUrlSuffix);\r\
+    \n      \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\
+    \r\
+    \n      :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\
+    ficate=yes-without-crl \\\r\
+    \n        http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\
+    =user as-value ]->\"data\") ];\r\
+    \n    } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\
+    \n    }\r\
+    \n\r\
+    \n  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\
+    s\" ] do={\r\
+    \n    :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n    :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \
+    ];\r\
+    \n    :local SourceNew;\r\
+    \n\r\
+    \n    :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\
+    \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\
+    \n      :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\
+    \n      :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\
+    iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \
+    \"'!\");\r\
+    \n        }\r\
+    \n    }\r\
+    \n    :do {\r\
+    \n      :if (\$ScriptInfo->\"ignore\" = true) do={\r\
+    \n        \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\
+    e\" . \"', as requested.\");\r\
+    \n        :error true;\r\
+    \n      }\r\
+    \n      :if (\$CheckSumsVerify = true) do={\r\
+    \n        :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\
+    \n        :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\
+    ptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n             [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\
+    rce\") ] ] = \$CheckSum) do={\r\
+    \n          \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\
+    >\"name\" . \"' matches, ignoring.\");\r\
+    \n          :error true;\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\
+    \n        :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\
+    fetch\" ] = false) do={\r\
+    \n          \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\
+    ng without.\");\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :onerror Err {\r\
+    \n        :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\
+    lScriptsUrl ];\r\
+    \n        :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\
+    lobalScriptsUrlSuffix ];\r\
+    \n        :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\
+    Suffix);\r\
+    \n        \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\
+    name\") . \"' from url: \" . \$Url);\r\
+    \n        :local Result [ /tool/fetch check-certificate=yes-without-crl \\\
+    \r\
+    \n          http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\
+    ut=user as-value ];\r\
+    \n        :if (\$Result->\"status\" = \"finished\") do={\r\
+    \n          :set SourceNew [ :tolf (\$Result->\"data\") ];\r\
+    \n        } \r\
+    \n      } do={\r\
+    \n        \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\
+    al->\"name\" . \"': \" . \$Err);\r\
+    \n        :if (\$Err != \"Fetch failed with status 404\") do={\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\
+    \n          \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\
+    \?\");\r\
+    \n          /system/script/remove \$Script;\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$CheckSumsVerify = true) do={\r\
+    \n          :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\
+    riptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n               [ :len \$CheckSum ] = 0) do={\r\
+    \n            \$LogPrint warning \$0 (\"Added the script manually\? Skip u\
+    pdates with 'ignore=true' in comment.\");\r\
+    \n          }\r\
+    \n        }\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :len \$SourceNew ] = 0) do={\r\
+    \n        \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\
+    >\"name\") . \"'.\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :local SourceCRLF [ :tocrlf \$SourceNew ];\r\
+    \n      :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\
+    lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\
+    \n        :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\
+    \$ScriptVal->\"source\")) do={\r\
+    \n          \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\") \
+    . \"' source did not change. End of lines set to CRLF.\");\r\
+    \n          if (\$ScriptUpdatesCRLF = false) do={\r\
+    \n            :put [ :tolf \$SourceNew ];\r\
+    \n            \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\"\
+    ) . \"' source update end of lines to LF.\");\r\
+    \n          }\r\
+    \n        :error false;\r\
+    \n        }\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\
+    l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\
+    );\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if (\$CommentsInScripts = true) do={\r\
+    \n         :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\
+    \_\") ];\r\
+    \n         :if ([ :len \$CommentLine ] = 0) do={\r\
+    \n           \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\
+    iptVal->\"name\") . \"' for comment in script body, is not found result Ig\
+    noring!\");\r\
+    \n           :error false;\r\
+    \n         } else={\r\
+    \n           :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\
+    ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\
+    ] + 2) [ :len \$CommentLine] ]) do={\r\
+    \n             \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\
+    \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\
+    ;\r\
+    \n             :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\
+    ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\
+    \n             \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\
+    omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\
+    ded!\");\r\
+    \n           } else={\r\
+    \n             \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\
+    al->\"name\") . \"' did not change.\");\r\
+    \n             :error false;\r\
+    \n           }\r\
+    \n         }   \r\
+    \n      }\r\
+    \n\r\
+    \n      :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\
+    \"\\23 requires RouterOS, \") ] ]->version);\r\
+    \n      :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\
+    \_false ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires RouterOS \" . \\\r\
+    \n            \$RequiredROS . \", which is not met by your installation. I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\
+    \\23 requires device-mode, \") ] ];\r\
+    \n      :local MissingDM ({});\r\
+    \n      :foreach Feature,Value in=\$RequiredDM do={\r\
+    \n        :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\
+    ceMode->\$Feature) = false) do={\r\
+    \n          :set MissingDM (\$MissingDM, \$Feature);\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len \$MissingDM ] > 0) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires disabled \" . \\\r\
+    \n            \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\
+    ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      \r\
+    \n      :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\
+    ript comment: \" . (\$ScriptVal->\"comment\"));\r\
+    \n\r\
+    \n      /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\
+    Val->\"comment\") \\\r\
+    \n          source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\
+    F \$SourceNew ] \$Script;\r\
+    \n      :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\
+    \n           \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\
+    \n           \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\
+    o={\r\
+    \n        :set ReloadGlobal true;\r\
+    \n      }\r\
+    \n    } on-error={ }\r\
+    \n  }\r\
+    \n  :if (\$ReloadGlobal = true) do={\r\
+    \n    \$LogPrint info \$0 (\"Reloading global configuration and functions.\
+    \");\r\
+    \n    :onerror Err {\r\
+    \n      :global InitSetup (a);\r\
+    \n      /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\
+    \n    } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\
+    ctions failed! \" . \$Err)}\r\
+    \n  }\r\
+    \n  :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\
+    \n    \$LogPrint warning \$0 (\"The configuration version decreased from \
+    \" . \\\r\
+    \n      \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\
+    \n      \". Installed an older version\?\");\r\
+    \n  }\r\
+    \n    :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\
+    \n    :global GlobalConfChanges;\r\
+    \n    :global GlobalConfMigration;\r\
+    \n    :local ChangeLogCode;\r\
+    \n    :if ([ :len \$ChangeLogCode ] > 0) do={\r\
+    \n      :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\
+    \n        :onerror Err {\r\
+    \n          [ :parse \$ChangeLogCode ];\r\
+    \n        } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \
+    . \$Err)}\r\
+    \n      } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\
+    dation!\")}\r\
+    \n    }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\
+    \n        :do {\r\
+    \n          :if ([ :typeof \$Migration ] != \"str\") do={\r\
+    \n            \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\
+    \_\" is not available.\");\r\
+    \n            :error false;\r\
+    \n          }\r\
+    \n          :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\
+    \n            \$LogPrint warning \$0 (\"Migration code for change \" . \$I\
+    \_. \" failed syntax validation!\");\r\
+    \n            :error false}\r\
+    \n          \$LogPrint info \$0 (\"Applying migration for change \" . \$I \
+    . \": \" . \$Migration);\r\
+    \n          :onerror Err {\r\
+    \n            [ :parse \$Migration ];\r\
+    \n          } do={\$LogPrint warning \$0 (\"Migration code for change \" .\
+    \_\$I . \" failed to run: \" . \$Err)}\r\
+    \n        } on-error={ }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :local NotificationMessage (\"The configuration version on \" . \$Id\
+    entity . \" increased \" . \\\r\
+    \n       \"to \" . \$GlobalConfVersion . \", current configuration may nee\
+    d modification. \" . \\\r\
+    \n       \"Please review and update global-config-overlay, then re-run glo\
+    bal-config.\");\r\
+    \n    \$LogPrint info \$0 (\$NotificationMessage);\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\
+    \");\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\
+    \n        :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\
+    \r\
+    \n            [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\
+    \n        \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\
+    \n      }\r\
+    \n    } else={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\
+    \_changes are not available.\");\r\
+    \n\r\
+    \n      }\r\
+    \n\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \
+    } else={ :global GlobalConfChanges (a); }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\
+    on; } else={ :global GlobalConfMigration (a); }\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n\r\
+    \n# load modules\r\
+    \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\
+    ns\\\\.d|mod)/.\" ] do={\r\
+    \n  :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n  :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\
+    \n    :onerror Err {\r\
+    \n      /system/script/run \$Script;\r\
+    \n    } do={\r\
+    \n      \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\
+    ailed to run: \" . \$Err);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\
+    led syntax validation, skipping.\");\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# Add and fix global scheduler\r\
+    \n:put \"Add or/and fix Global scheduler...\";\r\
+    \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\
+    ; }\";\r\
+    \n:local Comment \"Every Day Set Global Environment Variables\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \
+    = 0) do={\r\
+    \n  /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\
+    ent=\$OnEvent start-time=startup;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\
+    \_do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\
+    ) do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\
+    \n}\r\
+    \n# Add Update Script scheduler\r\
+    \n:put \"Add or/and fix Update Script scheduler\";\r\
+    \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\
+    \r\
+    \n:set Comment \"Every Day Check For Update Scripts\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\
+    \" ] ] = 0) do={\r\
+    \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \
+    start-time=startup interval=1d on-event=\$OnEvent;\r\
+    \n}\r\
+    \n\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\
+    \_not ready.\"); }; } delay=100ms max=5;\r\
+    \n\r\
+    \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\
+    \n    [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \
+    \") ] . \\\r\
+    \n    \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\
+    \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\
+    \n    # signal we are ready\r\
+    \n:set GlobalFuncReady true;\r\
+    \n:set ExitOK true;\r\
+    \n\r\
+    \n:log info (\$0 . \"Global configs ready!\");\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n}\r\
+    \n"
+add comment=\
+    "Lookup IP addresses for RKN list and add them to firewall address-list" \
+    dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="#!rsc by Vados\r\
+    \n# RouterOS script: AM-RKN-dnsLookup\r\
+    \n# Script comment: Lookup IP addresses for RKN list and add them to firew\
+    all address-list\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n# Script description: This script is intended to be run periodically, e.\
+    g. once a day, to update the IP addresses in the firewall address-list bas\
+    ed on the RKN list.\r\
+    \n#                     It resolves the domain names in the RKN list and a\
+    dds the corresponding IP addresses to the specified firewall address-list.\
+    \r\
+    \n#                     The script also handles CNAME records by following\
+    \_them until it finds A records.\r\
+    \n# Usage:\r\
+    \n# /system/script { run AM-RKN-dnsLookup; }\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n\r\
+    \n:global dnsLookupReady false;\r\
+    \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\
+    \_true; }\r\
+    \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\
+    \n:set dnsLookupReady false;\r\
+    \n\r\
+    \n:local arrRKN {\r\
+    \n  \"telegra.ph\"\r\
+    \n  \"grani.ru\"\r\
+    \n  \"xhamster.com\"\r\
+    \n  \"lostfilm.tv\"\r\
+    \n  \"rutracker.org\"\r\
+    \n  \"lurkmore.to\"\r\
+    \n  \"dou.ua\"\r\
+    \n  \"youporn.com\"\r\
+    \n  \"pornolab.net\"\r\
+    \n  \"crimerussia.com\"\r\
+    \n  \"telegram.org\"\r\
+    \n  \"api.telegram.org\"\r\
+    \n  \"facebook.com\"\r\
+    \n  \"instagram.com\"\r\
+    \n  \"x.com\"\r\
+    \n  \"twitter.com\"\r\
+    \n  \"youtube.com\"\r\
+    \n  \"googleapis.com\"\r\
+    \n  \"youtu.be\"\r\
+    \n  \"googlevideo.com\"\r\
+    \n  \"gstatic.com\"\r\
+    \n  \"googleusercontent.com\"\r\
+    \n  \"nhacmp3youtube.com\"\r\
+    \n  \"telegram.me\"\r\
+    \n  \"t.me\";}\r\
+    \n\r\
+    \n:local ListRKN \"RKN-dnsLookup\";\r\
+    \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\
+    \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\
+    ={\r\
+    \n    /ip firewall address-list remove \$aListItem;\r\
+    \n}\r\
+    \n:foreach aItem in=\$arrRKN do={\r\
+    \n#    :do {\r\
+    \n        :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\
+    ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\
+    \n#    } on-error={\r\
+    \n#        :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\
+    \n#    }\r\
+    \n    :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \
+    do={\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\
+    \n            :local newAddress [/ip dns cache all get \$dnsRecord data];\
+    \r\
+    \n            :do {\r\
+    \n             /ip firewall address-list add list=\$ListRKN address=\$newA\
+    ddress comment=\$aItem;\r\
+    \n                :log warning \"Successfully adding ip to list A record: \
+    \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            } on-error={\r\
+    \n                :log error \"error when adding ip to list A record: \$dn\
+    sRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            }\r\
+    \n        }\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\
+    \n            :local cname;\r\
+    \n            :local nextCname;\r\
+    \n            :local cnameAddress;\r\
+    \n            :set cname [/ip dns cache all find where (name=\$aItem && ty\
+    pe=\"CNAME\")];\r\
+    \n            :set nextCname [/ip dns cache all find where (name=[/ip dns \
+    cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            :while (\$nextCname != \"\") do={\r\
+    \n                :set cname \$nextCname;\r\
+    \n                :set nextCname [/ip dns cache all find where (name=[/ip \
+    dns cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            }\r\
+    \n            :foreach aRecord in=[/ip dns cache all find where (name=[/ip\
+    \_dns cache all get \$cname data] && type=\"A\")] do={\r\
+    \n                :do {\r\
+    \n                    :set cnameAddress [/ip dns cache all get \$aRecord d\
+    ata];\r\
+    \n                    /ip firewall address-list add list=\$ListRKN address\
+    =\$cnameAddress comment=\$aItem;\r\
+    \n                    :log warning \"Succesfully adding ip to list CNAME r\
+    ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \
+    \$aItem.\";\r\
+    \n#                    /ip firewall raw add action=add-dst-to-address-list\
+    \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\
+    g comment=\$aItem content=\$aItem;\r\
+    \n                } on-error={\r\
+    \n                    :log error \"error when adding ip to list CNAME reco\
+    rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\
+    tem.\";\r\
+    \n                }\r\
+    \n            }\r\
+    \n        }\r\
+    \n    }\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\
+    ={\r\
+    \n   :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\
+    ptName . \" is NOT SET! Fix It Now!\");\r\
+    \n    /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \
+    run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\
+    olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\
+    \_start-time=startup;\r\
+    \n  }\r\
+    \n:set dnsLookupReady true;\r\
+    \ndelay 2s;  \r\
+    \n:global dnsLookupReady (a);\r\
+    \n"
+add dont-require-permissions=no name="renameLists " owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    local oldName \"Test\";\
+    \n:local newName \"Test-IP\";\
+    \n/ip firewall address-list\
+    \n:foreach i in=[find list=\$oldName] do={\
+    \nset \$i list=\$newName;\
+    \n}\
+    \n"
+add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    #############Script Settings##################\
+    \n\
+    \n:local \"IF-TUN\" \"6to4-tun\"\
+    \n:local \"IF-LOC\" \"Bridge-LAN\"\
+    \n:local \"POOL-6TO4\" \"poolV6-local\"\
+    \n:local \"force-update\" false\
+    \n############ use then static ip #######################\
+    \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \
+    address]\
+    \n#:local \"interface\" \"ext\"\
+    \n:local bound 0\
+    \n\
+    \n###############################################\
+    \n\
+    \n:local 6to4prefix do={\
+    \n    :global dec2hex\
+    \n    :local ipv4 \$1\
+    \n    :local ipv6 \"2002:\"\
+    \n    :for i from=0 to=2 step=1 do={        \
+    \n        :if ( \$i = 2) do={\
+    \n            :set ipv6 (\$ipv6.\":\")\
+    \n        }\
+    \n        :local fp [:find \$ipv4 \".\"]\
+    \n        :if ( \$fp > 0 ) do={\
+    \n            :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\
+    \n            :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\
+    \n        }\
+    \n    }\
+    \n    :return (\$ipv6.[\$dec2hex \$ipv4])\
+    \n}\
+    \n:local \"str_replace\" do={\
+    \n    :local \"str-pos\" [:find \$1 \$2]\
+    \n    :local \"str-len\" [:len \$2]\
+    \n    :local str \"\"\
+    \n    :local rest \$1\
+    \n    :while (\$\"str-pos\" >= 0) do={\
+    \n        :local t [:pick \$rest 0 \$\"str-pos\"]\
+    \n        :if ( \$4 > 0 ) do={\
+    \n            :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\
+    \n                :set str (\$str.\$5)\
+    \n            }\
+    \n        }\
+    \n        :set str (\$str.\$t.\$3)\
+    \n        :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\
+    st]]\
+    \n        :set \"str-pos\" [:find \$rest \$2]\
+    \n    }\
+    \n    :return (\$str.\$rest)\
+    \n}\
+    \n\
+    \n:if (\$bound=1) do={\
+    \n    :local t [:find \$\"lease-address\" \"/\"]\
+    \n\
+    \n    :if ( \$t >= 0 ) do={\
+    \n        :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\
+    \n    }\
+    \n\
+    \n    :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\
+    ) do={\
+    \n        /interface 6to4 add !keepalive local-address=\$\"lease-address\"\
+    \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\
+    \n        :set \"force-update\" true\
+    \n    }\
+    \n\
+    \n    :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\
+    cal-address];\
+    \n\
+    \n    :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \
+    true) do={\
+    \n        /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\
+    ease-address\"\
+    \n        /ipv6 address remove [find interface=\$\"IF-TUN\"]\
+    \n        /ipv6 address remove [find interface=\$\"IF-LOC\"]\
+    \n        /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\
+    \"::/0\"]\
+    \n        :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\
+    \n        :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\
+    \_0) do={    \
+    \n            /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\
+    \".\":1::/64\")  prefix-length=64\
+    \n        } else={\
+    \n            /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \
+    prefix=(\$\"pool-prefix\".\":1::/64\")\
+    \n        }\
+    \n        /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\
+    \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\
+    ace=\$\"IF-TUN\" advertise=no\
+    \n        /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\
+    =\$\"IF-LOC\" advertise=yes\
+    \n        /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\
+    \"IF-TUN\")\
+    \n        :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\
+    s]\
+    \n        :set t [:pick \$t 0 [:find \$t \"/\"]]\
+    \n        :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\
+    \_= 0) do={\
+    \n            /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\
+    [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        } else={\
+    \n            /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \
+    where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        }\
+    \n        :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\
+    -LOC\"] = 0) do={\
+    \n            /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\
+    on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\
+    \n        }\
+    \n        :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \
+    0) do={\
+    \n            /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\
+    onfiguration=yes\
+    \n        }\
+    \n    }\
+    \n}"
+add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global MAC2EUI64 do={\
+    \n    :local EUI64 \"\"\
+    \n    :local MAC \$1\
+    \n    :local HEX2DEC \"0123456789ABCDEF\"\
+    \n    :for i from=0 to=5 step=1 do={\
+    \n        :if ( \$i = 0 ) do={\
+    \n            :set EUI64 [:pick \$MAC 0]\
+    \n            :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\
+    \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\
+    \n        }\
+    \n        :if ( \$i = 1 || \$i = 3) do={\
+    \n            :set EUI64 (\$EUI64.\":\")\
+    \n        }\
+    \n        :if ( \$i = 2 ) do={\
+    \n            :set EUI64 (\$EUI64.\"FF:FE\")\
+    \n        }\
+    \n        :if ( [:find \$MAC \":\"] = 2 ) do={\
+    \n            :set MAC [:pick \$MAC 3  [:len \$MAC]]\
+    \n            :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\
+    \n        }\
+    \n    }\
+    \n    :return (\$EUI64)\
+    \n}\
+    \n\
+    \n:global dec2hex do={\
+    \n    :local hex \"\"\
+    \n    :local dec [:tonum \$1]\
+    \n    :for i from=0 to=4 step=4 do={\
+    \n        :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\
+    c>>\$i)&0xf)+1)].\$hex)\
+    \n    }\
+    \n    :return ([:tostr \$hex])\
+    \n}"
+add comment=Generator dont-require-permissions=no name=proxySet owner=vados \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="# 2. WireGuard interface\r\
+    \n/interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDg\
+    uMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=21641\r\
+    \n/interface/wireguard/peers/add interface=wg-VDSina public-key=\"o5IgCl1/\
+    G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcYQnD9\
+    N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=10.30.30.33 endpoint-port=518\
+    20 allowed-address=0.0.0.0/0 persistent-keepalive=11\r\
+    \n/ip/address/add address=10.9.0.3/32 interface=wg-VDSina\r\
+    \n\r\
+    \n# 3. DNS\r\
+    \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\
+    n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\
+    \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /system/script/add name=VDS\
+    ina-prev-dns comment=\"\$prevDNS\" source=\"\" }\r\
+    \n/ip/dns/set servers=8.8.4.4\r\
+    \n/ip/route/add dst-address=8.8.4.4/32 gateway=wg-VDSina distance=1 commen\
+    t=VDSina-dns\r\
+    \n\r\
+    \n# 4. Enable WireGuard\r\
+    \n/interface/wireguard/enable wg-VDSina\r\
+    \n"
+add dont-require-permissions=no name=AM-Telegram-Send owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\
+    \n# RouterOS script: AM-Telegram-Send\
+    \n# Script comment: Mini script for send messages to admin Telegram chat\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\
+    \n#\
+    \n#\
+    \n# requires RouterOS, version=7.19\
+    \n# requires device-mode, fetch\
+    \n#\
+    \n# Script description: \
+    \n#\
+    \n#\
+    \n# Usage:\
+    \n# /system/script { run AM-Telegram-Send \"Message here )))\"; }\
+    \n\
+    \n/system/script\
+    \nadd name=telegram-send dont-require-permissions=no source={\
+    \n  :global TelegramTokenId;\
+    \n  :global TelegramChatId;\
+    \n  :local message [:tostr \$1];\
+    \n  :local identity [/system/identity/get name];\
+    \n  :local sendMsg (\"[\".\$identity.\"] \".\$message)\
+    \n  /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\
+    \n    \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\
+    \n    \"&text=\".\$sendMsg.\\\
+    \n    \"&parse_mode=HTML\") \\\
+    \n    mode=https keep-result=no\
+    \n}"
+add dont-require-permissions=no name=telegram-send owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\
+    \n  :global TelegramTokenId;\
+    \n  :global TelegramChatId;\
+    \n  :local message [:tostr \$1];\
+    \n  :local identity [/system/identity/get name];\
+    \n  :local sendMsg (\"[\".\$identity.\"] \".\$message)\
+    \n  /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\
+    \n    \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\
+    \n    \"&text=\".\$sendMsg.\\\
+    \n    \"&parse_mode=HTML\") \\\
+    \n    mode=https keep-result=no\
+    \n"
+/user group
+add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\
+    t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon"
+/ip smb
+set enabled=no interfaces=lo
+/interface bridge port
+add bridge=Bridge-LAN interface=ether5
+add bridge=Bridge-LAN interface=ether2
+add bridge=Bridge-LAN interface=ether4 trusted=yes
+add bridge=Bridge-LAN interface=ether3
+add bridge=Bridge-LAN interface=wlan2
+add bridge=Bridge-LAN interface=wlan1
+/interface bridge settings
+set use-ip-firewall=yes
+/ip firewall connection tracking
+set udp-timeout=10s
+/ip neighbor discovery-settings
+set discover-interface-list=LAN lldp-med=no lldp-poe-power=no
+/ip settings
+set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\
+    8192
+/ipv6 settings
+set disable-ipv6=yes disable-link-local-address=yes forward=no \
+    max-neighbor-entries=8192 multipath-hash-policy=l4
+/interface detect-internet
+set detect-interface-list=WAN internet-interface-list=Internet \
+    lan-interface-list=LAN request-interval=1m wan-interface-list=WAN
+/interface l2tp-server server
+set authentication=mschap2 use-ipsec=yes
+/interface list member
+add interface=Unet-ether1 list=Internet
+add interface=WG list=WAN
+add interface=Bridge-LAN list=LAN
+add interface=Unet-ether1 list=WAN
+/interface wireguard peers
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\
+    109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \
+    persistent-keepalive=10s public-key=\
+    "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4="
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 disabled=yes \
+    endpoint-address=10.30.30.33 endpoint-port=55055 interface=wg-nuc name=\
+    NUC persistent-keepalive=11s public-key=\
+    "+OvzAjLC45Td52hjkQPmpGvC3RGhZ+Q2CDMJ1U/D4Rw="
+/interface wireless cap
+# 
+set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \
+    caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\
+    CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\
+    wlan2,wlan1 lock-to-caps-man=yes
+/ip address
+add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0
+add address=10.8.0.2/24 interface=WG network=10.8.0.0
+add address=192.168.33.2/24 disabled=yes interface=wg-nuc network=\
+    192.168.33.0
+/ip cloud
+set update-time=no
+/ip dhcp-client
+add add-default-route=special-classless check-gateway=arp comment=Unet-client \
+    default-route-distance=2 default-route-tables=main:2 dhcp-options=\
+    hostname,clientid_duid interface=Unet-ether1 name=UnetDHCP use-peer-dns=\
+    no use-peer-ntp=no
+/ip dhcp-server config
+set accounting=no
+/ip dhcp-server lease
+add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\
+    48:8F:5A:8E:EE:A8 server=masterDHCP
+add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\
+    F0:DE:F1:91:0D:1E server=masterDHCP
+add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\
+    00:80:77:EC:43:86 server=masterDHCP
+add address=10.30.30.70 dhcp-option=domain-search-list,HostName \
+    dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP
+add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\
+    04:7C:16:36:F5:37 server=masterDHCP
+add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\
+    10:2D:41:2C:20:C2 server=masterDHCP
+add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\
+    10:08:C1:81:59:5F server=masterDHCP
+add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\
+    10:38:1F:D2:5F:13 server=masterDHCP
+add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\
+    10:B1:DF:E9:D0:D5 server=masterDHCP
+add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\
+    FE:02:52:BE:3F:16 server=masterDHCP
+add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\
+    D4:6D:6D:FD:E5:49 server=masterDHCP
+add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\
+    CC:42:10:12:46:94 server=masterDHCP
+add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\
+    50:CC:F8:85:96:0A server=masterDHCP
+add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\
+    E4:18:6B:58:34:AB server=masterDHCP
+add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\
+    00:27:15:41:97:A9 server=masterDHCP
+add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \
+    mac-address=C4:82:E1:03:49:10 server=masterDHCP
+add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\
+    10:38:1F:82:81:F2 server=masterDHCP
+add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \
+    dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP
+add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \
+    dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP
+add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \
+    server=masterDHCP
+add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\
+    MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP
+add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \
+    mac-address=F0:75:5D:1E:5F:71 server=masterDHCP
+add address=10.30.30.100 client-id=iVados dhcp-option=HostName \
+    dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP
+add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\
+    ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \
+    dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \
+    use-src-mac=yes
+/ip dhcp-server network
+add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\
+    domain-search-list dhcp-option-set=domain-search-set dns-server=\
+    10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\
+    24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98
+/ip dns
+set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \
+    doh-max-server-connections=20 servers=8.8.8.8 verify-doh-cert=yes
+/ip dns static
+add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \
+    type=A
+add address=109.107.177.79 name=vds.vados.ru type=A
+add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \
+    regexp=*.vados.ru type=NS
+add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\
+    "\".*\\\\.vados\\\\.ru\"" type=FWD
+add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\
+    10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\
+    FWD
+add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\
+    ns.vados.ru.local type=A
+add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\
+    vados.ru ns=ns.vados.ru.local type=NS
+add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A
+add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\
+    dns.google type=A
+add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A
+add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A
+add address=10.30.30.33 name=ros.vados.ru type=A
+add address=10.30.30.95 name=vados-nuc type=A
+add address=10.30.30.33 name=amster-nuc type=A
+add address=10.30.30.33 name=amster type=A
+add address=10.30.30.33 name=amster-reg type=A
+add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A
+add address=10.30.30.33 name=mgr.vados.ru type=A
+add address=10.30.30.33 name=prt.vados.ru type=A
+add address=10.30.30.33 disabled=yes match-subdomain=yes name=\
+    mikrots.vados.ru type=A
+add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A
+add address=10.30.30.30 name=MILLER-LEN type=A
+add address=10.30.30.30 name=miller type=A
+add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\
+    dns.quad9.net type=A
+add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\
+    dns.quad9.net type=A
+add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \
+    type=A
+add address=10.30.30.81 comment=LocalNet name=MikroVados type=A
+add address=10.30.30.10 name=MikroNUC type=A
+add address=10.30.30.86 disabled=yes name=MikroYellow type=A
+add address=10.30.30.85 disabled=yes name=MikroMic type=A
+add address=10.30.30.95 name=VADOS-NUC type=A
+add address=10.30.30.98 name=VADOS-LEN type=A
+add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\
+    A
+add address=10.30.30.20 disabled=yes name=garage type=A
+/ip firewall address-list
+add address=91.215.120.206 list=TRUSTED
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=8.8.4.0/24 list=YouTube
+add address=8.8.8.0/24 list=YouTube
+add address=8.34.208.0/20 list=YouTube
+add address=8.35.192.0/20 list=YouTube
+add address=23.236.48.0/20 list=YouTube
+add address=23.251.128.0/19 list=YouTube
+add address=34.0.0.0/15 list=YouTube
+add address=34.2.0.0/16 list=YouTube
+add address=34.3.0.0/23 list=YouTube
+add address=34.3.3.0/24 list=YouTube
+add address=34.3.4.0/24 list=YouTube
+add address=34.3.8.0/21 list=YouTube
+add address=34.3.16.0/20 list=YouTube
+add address=34.3.32.0/19 list=YouTube
+add address=34.3.64.0/18 list=YouTube
+add address=34.4.0.0/14 list=YouTube
+add address=34.8.0.0/13 list=YouTube
+add address=34.16.0.0/12 list=YouTube
+add address=34.32.0.0/11 list=YouTube
+add address=34.64.0.0/10 list=YouTube
+add address=34.128.0.0/10 list=YouTube
+add address=35.184.0.0/13 list=YouTube
+add address=35.192.0.0/14 list=YouTube
+add address=35.196.0.0/15 list=YouTube
+add address=35.198.0.0/16 list=YouTube
+add address=35.199.0.0/17 list=YouTube
+add address=35.199.128.0/18 list=YouTube
+add address=35.200.0.0/13 list=YouTube
+add address=35.208.0.0/12 list=YouTube
+add address=35.224.0.0/12 list=YouTube
+add address=35.240.0.0/13 list=YouTube
+add address=57.140.192.0/18 list=YouTube
+add address=64.15.112.0/20 list=YouTube
+add address=64.233.160.0/19 list=YouTube
+add address=66.22.228.0/23 list=YouTube
+add address=66.102.0.0/20 list=YouTube
+add address=66.249.64.0/19 list=YouTube
+add address=70.32.128.0/19 list=YouTube
+add address=72.14.192.0/18 list=YouTube
+add address=74.125.0.0/16 list=YouTube
+add address=104.154.0.0/15 list=YouTube
+add address=104.196.0.0/14 list=YouTube
+add address=104.237.160.0/19 list=YouTube
+add address=107.167.160.0/19 list=YouTube
+add address=107.178.192.0/18 list=YouTube
+add address=108.59.80.0/20 list=YouTube
+add address=108.170.192.0/18 list=YouTube
+add address=108.177.0.0/17 list=YouTube
+add address=130.211.0.0/16 list=YouTube
+add address=136.22.160.0/20 list=YouTube
+add address=136.22.176.0/21 list=YouTube
+add address=136.22.184.0/23 list=YouTube
+add address=136.22.186.0/24 list=YouTube
+add address=142.250.0.0/15 list=YouTube
+add address=146.148.0.0/17 list=YouTube
+add address=152.65.208.0/22 list=YouTube
+add address=152.65.214.0/23 list=YouTube
+add address=152.65.218.0/23 list=YouTube
+add address=152.65.222.0/23 list=YouTube
+add address=152.65.224.0/19 list=YouTube
+add address=162.120.128.0/17 list=YouTube
+add address=162.216.148.0/22 list=YouTube
+add address=162.222.176.0/21 list=YouTube
+add address=172.110.32.0/21 list=YouTube
+add address=172.217.0.0/16 list=YouTube
+add address=172.253.0.0/16 list=YouTube
+add address=173.194.0.0/16 list=YouTube
+add address=173.255.112.0/20 list=YouTube
+add address=192.158.28.0/22 list=YouTube
+add address=192.178.0.0/15 list=YouTube
+add address=193.186.4.0/24 list=YouTube
+add address=199.36.154.0/23 list=YouTube
+add address=199.36.156.0/24 list=YouTube
+add address=199.192.112.0/22 list=YouTube
+add address=199.223.232.0/21 list=YouTube
+add address=207.223.160.0/20 list=YouTube
+add address=208.65.152.0/22 list=YouTube
+add address=208.68.108.0/22 list=YouTube
+add address=208.81.188.0/22 list=YouTube
+add address=208.117.224.0/19 list=YouTube
+add address=209.85.128.0/17 list=YouTube
+add address=216.58.192.0/19 list=YouTube
+add address=216.73.80.0/20 list=YouTube
+add address=216.239.32.0/19 list=YouTube
+add address=2ip.ru list=Test-IP
+add address=wg.vados.ru comment=VDSIna list=TRUSTED
+add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED
+add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina
+add address=love.ru comment=love.ru list=NoVdsina
+add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina
+add address=pochta.ru comment=pochta.ru list=NoVdsina
+add address=vdsina.com list=NoVdsina
+add address=vdsina.ru list=NoVdsina
+add address=youla.ru list=NoVdsina
+add address=kupiprodai.ru list=NoVdsina
+add address=myip.ru list=Test-IP
+add address=geoip.co list=NoVdsina
+add address=comp-lenta.ru list=NoVdsina
+add address=128.85.102.70 comment=update.microsoft.com list=\
+    windowsupdateslist
+add address=wu-b-net.trafficmanager.net. comment=\
+    ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\
+    ctldl.windowsupdate.com list=windowsupdateslist
+add address=redir.update.msft.com.trafficmanager.net. comment=\
+    update.microsoft.com list=windowsupdateslist
+add address=geo.prod.do.dsp.trafficmanager.net. comment=\
+    geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12437.d.akamaiedge.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \
+    comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \
+    list=windowsupdateslist
+add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\
+    sls.update.microsoft.com list=windowsupdateslist
+add address=fe3.delivery.mp.microsoft.com. comment=\
+    fe3cr.delivery.mp.microsoft.com list=windowsupdateslist
+add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\
+    fe3.delivery.mp.microsoft.com list=windowsupdateslist
+add address=fe2cr.update.msft.com.trafficmanager.net. comment=\
+    fe2cr.update.microsoft.com list=windowsupdateslist
+add address=download.windowsupdate.com.delivery.microsoft.com. comment=\
+    download.windowsupdate.com list=windowsupdateslist
+add address=wu-f-net.trafficmanager.net. comment=\
+    download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=tsfe.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \
+    comment=9.au.download.windowsupdate.com list=windowsupdateslist
+add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dspw65.akamai.net. comment=\
+    download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \
+    comment=licensing.mp.microsoft.com list=windowsupdateslist
+add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-nlu-net.trafficmanager.net. comment=\
+    star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-tlu-net.trafficmanager.net. comment=\
+    star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=storeedgefd.xbetservices.akadns.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \
+    comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\
+    windowsupdateslist
+add address=e16646.dscg.akamaiedge.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\
+    windowsupdateslist
+add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=bg.microsoft.map.fastly.net. comment=\
+    3.au.download.windowsupdate.com list=windowsupdateslist
+add list=windowsupdateslist
+add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\
+    star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a2033.dscd.akamai.net. comment=\
+    star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-nlu-net.trafficmanager.net. comment=\
+    dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-b-tlu-net.trafficmanager.net. comment=\
+    1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a122.dscg3.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist
+add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e10370.d.akamaiedge.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=a1683.dscd.akamai.net. comment=\
+    dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \
+    comment=collections.mp.microsoft.com list=windowsupdateslist
+add address=a1847.dscd.akamai.net. comment=\
+    wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=au.download.windowsupdate.com.edgesuite.net. comment=\
+    2.au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dscg3.akamai.net. comment=\
+    au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    4.au.download.windowsupdate.com list=windowsupdateslist
+add address=cl-glcb907925.gcdn.co. comment=\
+    4.au.download.windowsupdate.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \
+    comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=ts-frontend.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=sds.trafficmanager.net. comment=software-download.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\
+    windowsupdateslist
+add address=e12671.dscd.akamaiedge.net. comment=\
+    download.microsoft.com.edgekey.net list=windowsupdateslist
+add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12358.d.akamaiedge.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-tlu-net.trafficmanager.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a1856.dspw65.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina
+add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=purchase.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.mp.microsoft.com list=windowsupdateslist
+add address=e110219.a.akamaiedge.net. comment=\
+    purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.141 list=windowsupdateslist
+add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=storesdk.xbetservices.akadns.net. comment=\
+    storesdk.dsx.mp.microsoft.com list=windowsupdateslist
+add address=e16646.g.akamaiedge.net. comment=\
+    storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=software-download.microsoft.com.delivery.microsoft.com. comment=\
+    software-download.microsoft.com list=windowsupdateslist
+add address=download.prss.microsoft.com.akamaized.net. comment=\
+    software-download.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina
+add address=87.250.250.50 comment=YandexDisk list=NoVdsina
+add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\
+    purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\
+    cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=a1996.dscd.akamai.net. comment=\
+    wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\
+    tas02.sls.update.microsoft.com list=windowsupdateslist
+add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\
+    star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\
+    paymentinstruments.mp.microsoft.com list=windowsupdateslist
+add address=10.30.30.33 comment=amster list=NoWG
+add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG
+add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG
+add address=wg.vados.ru comment=VDSina-vpn list=VDSina
+add address=80.85.244.9 list=TRUSTED
+add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina
+add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS
+add address=dns.google comment=Google-dns list=Trusted-DNS
+add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\
+    Trusted-DNS
+add address=time.google.com comment=Google-time list=Trusted-NTP
+add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP
+add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=cp.vdsina.com comment=VDSina-vpn list=VDSina
+add address=vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns.vados.ru comment=VDSina-vpn list=VDSina
+add address=vdsina.com comment=VDSina-vpn list=VDSina
+add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=10.30.30.0/24 comment="Local Network" list=Local-Net
+add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net
+add address=146.120.64.208/29 comment="External Net" list=Unet
+add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina
+add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina
+add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina
+add address=10.30.30.30 comment=miller disabled=yes list=NoWG
+add address=10.30.30.33 comment="Direct connet to DNS servers" list=\
+    Direct-DNS
+add address=109.107.177.79 list=VPN-Server
+add address=10.0.0.0/8 list=RFC1918
+add address=172.16.0.0/12 list=RFC1918
+add address=192.168.0.0/16 list=RFC1918
+add address=8.8.4.4 disabled=yes list=to_vpn
+add address=myip.ru disabled=yes list=to_vpn
+add address=10.30.30.98 disabled=yes list=to_vpn
+/ip firewall filter
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=12h chain=input comment="block honeypot DNS" \
+    connection-state=new dst-port=53 in-interface=Unet-ether1 protocol=udp \
+    src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment=\
+    "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=!TRUSTED
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \
+    connection-state=new dst-port=5060 in-interface=Unet-ether1 protocol=udp
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot NTP" \
+    connection-state=new dst-port=123 in-interface=Unet-ether1 protocol=udp
+add action=fasttrack-connection chain=forward comment=\
+    "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \
+    connection-state=established,related,new disabled=yes
+add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \
+    protocol=tcp
+add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \
+    protocol=udp
+add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \
+    dst-port=53 protocol=tcp src-address=10.30.30.0/24
+add action=accept chain=input comment="udp Accept input DNS queries" \
+    dst-port=53 protocol=udp src-address=10.30.30.0/24
+add action=accept chain=output comment="accept WireGuard" disabled=yes \
+    dst-address-list=VPN-Server out-interface=Unet-ether1 protocol=udp \
+    src-port=13231
+add action=accept chain=output disabled=yes dst-address-list=VPN-Server \
+    dst-port=29185 out-interface=Unet-ether1 protocol=udp
+add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
+    connection-state=established,related,new disabled=yes routing-mark=\
+    !To-VPN
+add action=accept chain=output disabled=yes protocol=tcp src-port=443
+add action=accept chain=output disabled=yes src-address=127.0.0.1
+add action=accept chain=forward comment="defconf: accept in ipsec policy" \
+    disabled=yes ipsec-policy=in,ipsec
+add action=accept chain=forward comment="defconf: accept out ipsec policy" \
+    disabled=yes ipsec-policy=out,ipsec
+add action=accept chain=forward comment=\
+    "defconf: accept established,related, untracked" connection-state=\
+    established,related,untracked disabled=yes
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid in-interface=Unet-ether1 src-address=\
+    !10.30.30.0/24
+add action=drop chain=forward comment=\
+    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
+    connection-state=new in-interface=Unet-ether1 src-address-list=!VDSina
+add action=accept chain=input in-interface=Unet-ether1 protocol=icmp \
+    src-address-list=VDSina
+add action=accept chain=input connection-state=established
+add action=accept chain=input connection-state=related
+/ip firewall mangle
+add action=accept chain=prerouting comment=RFC1918 dst-address-list=RFC1918 \
+    in-interface-list=!WAN
+add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \
+    new-routing-mark=main passthrough=no src-address-list=NoWG
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for NoVdsina" disabled=yes dst-address-list=NoVdsina \
+    new-routing-mark=main passthrough=no src-address=10.30.30.0/24
+add action=mark-connection chain=prerouting comment=\
+    "Transit for address-list \"to_vpn\"" connection-mark=no-mark disabled=\
+    yes dst-address-list=to_vpn in-interface-list=!WAN new-connection-mark=\
+    to-vpn-conn routing-mark=!main
+add action=mark-routing chain=prerouting comment=\
+    "Find routing over table r_to_vpn" connection-mark=to-vpn-conn disabled=\
+    yes in-interface-list=!WAN new-routing-mark=r_to_vpn
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for VDSina" dst-address-list=VPN-Server \
+    new-routing-mark=main passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\
+    Unet new-routing-mark=main passthrough=no
+add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\
+    To-VPN src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \
+    new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment="WG for all" \
+    dst-address-list=!NoVdsina new-routing-mark=To-VPN src-address=\
+    10.30.30.0/24
+add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \
+    out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\
+    1381-65535
+add action=mark-connection chain=prerouting comment=\
+    "Mark VPN connections to exclude from FastTrack" disabled=yes \
+    new-connection-mark=VPN_No_FastTrack routing-mark=To-VPN
+add action=mark-routing chain=prerouting comment="VPN Network" disabled=yes \
+    dst-address=10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24
+add action=mark-connection chain=output comment="For this router" \
+    connection-mark=no-mark disabled=yes dst-address-list=to_vpn \
+    new-connection-mark=to-vpn-conn-local
+add action=mark-routing chain=output comment="For this router" \
+    connection-mark=to-vpn-conn-local disabled=yes new-routing-mark=r_to_vpn
+/ip firewall nat
+add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=masquerade chain=srcnat comment=\
+    "Nat Addresses for routing mark r_to_vpn" disabled=yes routing-mark=\
+    r_to_vpn
+add action=dst-nat chain=dstnat comment=\
+    "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=VPN-Server \
+    to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat comment=\
+    "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\
+    udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\
+    Unet-ether1 protocol=udp src-address=!10.30.30.0/24 to-addresses=\
+    10.30.30.33 to-ports=44333
+add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \
+    routing-mark=To-VPN
+add action=masquerade chain=srcnat comment="Default NAT" out-interface=\
+    Unet-ether1 routing-mark=!To-VPN src-address=10.30.30.0/24
+add action=dst-nat chain=dstnat dst-port=44044 in-interface=Unet-ether1 \
+    protocol=udp src-address=109.107.177.79 to-addresses=10.30.30.33 \
+    to-ports=44044
+add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \
+    fragment=no in-interface=Unet-ether1 protocol=tcp routing-mark=main \
+    to-addresses=10.30.30.33 to-ports=443
+add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \
+    dst-port=80 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=80
+add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \
+    dst-port=2904 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2904
+add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\
+    5000 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=5000
+add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\
+    2377 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=2377
+add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\
+    Unet-ether1 protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \
+    to-ports=81
+add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\
+    Unet-ether1 protocol=tcp src-address-list=TRUSTED to-addresses=\
+    10.30.30.33 to-ports=22
+add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \
+    dst-port=2377 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2377
+add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\
+    Unet-ether1 protocol=tcp routing-mark=!To-VPN to-addresses=10.30.30.33 \
+    to-ports=22
+add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \
+    dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \
+    time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\
+    Bridge-LAN protocol=tcp src-address-list=KIDS time=\
+    6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+/ip firewall raw
+add action=drop chain=prerouting comment="Drop Honeypot Hackers" \
+    in-interface=Unet-ether1 src-address-list="Honeypot Hacker"
+add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \
+    in-interface-list=WAN src-address-list=Trusted-DNS
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \
+    content=linux.duke.edu disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleapis.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googlevideo.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleusercontent.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    nhacmp3youtube.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \
+    content=rutube.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \
+    content=me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "icloud.com raw" content=icloud.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \
+    disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "api.db-ip.com raw" content=api.db-ip.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \
+    content=gosuslugi.ru disabled=yes
+/ip firewall service-port
+set ftp disabled=yes
+set tftp disabled=yes
+set irc disabled=no
+set sip disabled=yes
+set pptp disabled=yes
+set rtsp disabled=no
+/ip ipsec settings
+set accounting=no
+/ip ipsec policy
+set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0
+/ip ipsec profile
+set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
+/ip proxy
+set cache-administrator="" max-cache-size=none port=80,443 src-address=\
+    0.0.0.0
+/ip route
+add check-gateway=none comment=WG-Default disabled=no distance=1 dst-address=\
+    0.0.0.0/0 gateway=WG routing-table=To-VPN scope=30 target-scope=10
+/ip service
+set ftp disabled=yes
+set telnet disabled=yes
+set reverse-proxy disabled=yes
+set ssh address=10.30.30.0/24 port=2222
+set winbox address=10.30.30.0/24
+set api address=10.30.30.0/24
+set api-ssl address=10.30.30.0/24 disabled=yes
+set www-ssl certificate=Root-YE port=18443
+set www address=10.30.30.0/24 disabled=yes port=18880
+/ip service webserver
+set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\
+    no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \
+    webfig-secure=no
+/ip ssh
+set forwarding-enabled=both publickey-authentication-options=verify-required
+/ip upnp
+set enabled=yes
+/ip upnp interfaces
+add interface=Bridge-LAN type=internal
+add forced-ip=146.120.64.211 interface=Unet-ether1 type=external
+add forced-ip=109.107.177.79 interface=*E type=external
+add interface=lo type=internal
+add interface=wlan2 type=internal
+add interface=wlan1 type=internal
+/ipv6 dhcp-client
+add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\
+    info use-interface-duid=yes validate-server-duid=no
+/ipv6 dhcp-server option sets
+add name=domain-search-set options=domain-search-list
+add name="=\"Client ID\"" options=HostName
+/ipv6 firewall address-list
+add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
+add address=::1/128 comment="defconf: lo" list=bad_ipv6
+add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
+add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
+add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
+add address=100::/64 comment="defconf: discard only " list=bad_ipv6
+add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
+add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
+add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
+/ipv6 firewall filter
+add action=accept chain=input comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=input comment="defconf: drop invalid" connection-state=\
+    invalid
+add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=input comment="defconf: accept UDP traceroute" \
+    dst-port=33434-33534 protocol=udp
+add action=accept chain=input comment=\
+    "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
+    udp src-address=fe80::/10
+add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
+    protocol=udp
+add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=input comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=input comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+add action=accept chain=forward comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
+add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
+    hop-limit=equal:1 protocol=icmpv6
+add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=forward comment="defconf: accept HIP" protocol=139
+add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
+    500,4500 protocol=udp
+add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=forward comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=forward comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+/ipv6 nd
+set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \
+    managed-address-configuration=yes other-configuration=yes pref64=::/64
+/ipv6 nd prefix
+add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none
+/ipv6 nd prefix default
+set dhcp6-pd-preferred=yes
+/ipv6 nd proxy
+add disabled=yes interface=lo
+/ipv6 nd settings
+set router-advertisement-route-distance=100
+/routing settings
+set single-process=no
+/system clock
+set time-zone-name=Europe/Moscow
+/system clock manual
+set time-zone=+03:00
+/system identity
+set name=MikroMaster
+/system logging
+add action=email disabled=yes regex="* added|changed|removed *" topics=\
+    system,info
+/system ntp client
+set enabled=yes
+/system ntp server
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes
+/system ntp client servers
+add address=0.ru.pool.ntp.org
+add address=1.ru.pool.ntp.org
+add address=2.ru.pool.ntp.org
+add address=3.ru.pool.ntp.org
+add address=time.google.com disabled=yes
+/system package update
+set check-certificate=yes-without-crl ip-version=ipv4
+/system scheduler
+add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \
+    on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Every Day Check For Update Scripts" interval=1d name=\
+    AM-ScriptInstallUpdate on-event=\
+    ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\
+    AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+/system watchdog
+set watchdog-timer=no
+/tool e-mail
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \
+    server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com
+/tool mac-server
+set allowed-interface-list=LAN
+/tool mac-server mac-winbox
+set allowed-interface-list=LAN
+/tool netwatch
+add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\
+    -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\
+    e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \
+    interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\
+    https-get up-script=""
+add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\
+    flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\
+    oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \
+    name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \
+    up-script=""
+add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\
+    8.8.8.8 down-script="" host=dns.google http-codes="" name=\
+    "Google-DNS IPv4" test-script="" type=dns up-script=""
+add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\
+    rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\
+    -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \
+    http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\
+    "" test-script="" type=dns up-script=""
+add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \
+    dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \
+    interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \
+    test-script="" timeout=800ms type=dns up-script=""
+add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\
+    ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \
+    down-script="" host=149.112.112.112 http-codes="" interval=10s name=\
+    "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script=""
+add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \
+    down-script="" host=91.192.189.2 http-codes="" interval=10s name=\
+    ns1.unet.ws test-script="" type=simple up-script=""
+add check-certificate=yes comment=\
+    "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \
+    disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\
+    vds.vados.ru port=443 test-script="" type=https-get up-script=""
+add comment="WireGuard NAT " disabled=yes down-script="/log info \"[WG-Monitor\
+    ] WireGuard is NOT running - reverting rules\"\
+    \n/ip firewall nat remove [find comment=\"Redirect to Router\"]\
+    \n/ip dns set servers=8.8.8.8\
+    \n/ip dns cache flush\
+    \n/ip route remove [find comment=\"wg-auto-route\"]\
+    \n" host=10.8.0.1 http-codes="" interval=15s name=WG test-script="" \
+    timeout=5s type=simple up-script="/log info \"[WG-Monitor] WireGuard is RU\
+    NNING - applying rules\";\
+    \n:local routeFile \"ips.txt\";\
+    \n:local routeDefAddr \"0.0.0.0/0\";\
+    \n:local routeGateway \"10.8.0.1\";\
+    \n:local routeIF \"WG\";\
+    \n:local routeTable \"To-VPN\";\
+    \n:local routeComment \"wg-auto-route\";\
+    \n/ip dns cache flush;\
+    \n:if ([:len [/ip firewall nat find comment=\"Redirect to Router\"]] > 0) \
+    do={\
+    \n  /ip firewall nat remove [find comment=\"Redirect to Router\"];\
+    \n}\
+    \n/ip firewall nat add action=redirect chain=dstnat src-address-list=\"Red\
+    irectDNS\" dst-port=53 protocol=udp comment=\"Redirect to Router\";\
+    \n/ip dns set servers=\$routeGateway;\
+    \n:local content [/file get \$routeFile contents];\
+    \n:if ([:len \$content] > 0) do={\
+    \n    :local line \"\";\
+    \n    :for i from=0 to=([:len \$content] - 1) do={\
+    \n        :local char [:pick \$content \$i];\
+    \n        :if (\$char != \"\\r\" && \$char != \"\\n\") do={\
+    \n            :set line (\$line . \$char);\
+    \n        } else={\
+    \n            :if ([:len \$line] > 5) do={\
+    \n                :do { /ip route add disabled=no dst-address=\$routeDefAd\
+    dr gateway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$r\
+    outeTable comment=\$routeComment check-gateway=none } on-error={}\
+    \n            }\
+    \n            :set line \"\";\
+    \n        }\
+    \n    }\
+    \n    :if ([:len \$line] > 5) do={\
+    \n#         :do { /ip route add dst-address=\$line gateway=\$routeGateway \
+    distance=1 comment=\$routeComment } on-error={}\
+    \n           :do { /ip route add disabled=no dst-address=\$routeDefAddr ga\
+    teway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$routeT\
+    able comment=\$routeComment check-gateway=none } on-error={}\
+    \n    }\
+    \n}\
+    \n:local dotPos [:find \$routeGateway \".\"];\
+    \n:if (\$dotPos != \"\") do={\
+    \n    :local firstOctet [:pick \$routeGateway 0 \$dotPos];\
+    \n    :local derivedDstAddress (\$firstOctet . \".30.0.0/15\");\
+    \n    :do { /ip route add dst-address=\$derivedDstAddress gateway=\$routeG\
+    ateway distance=1 comment=\$routeComment } on-error={}\
+    \n}\
+    \n\
+    \n"
+add comment=WG-Default disabled=yes down-script=\
+    "/ip route disable [find comment=\"WG-Default\"];" host=10.8.0.1 \
+    interval=15s name=WG packet-count=20 test-script="" thr-loss-count=5 \
+    type=icmp up-script="/ip route enable [find comment=\"WG-Default\"];"
+/user aaa
+set accounting=no
diff --git a/MikroMaster/20260712/20260712052001-Config.rsc b/MikroMaster/20260712/20260712052001-Config.rsc
new file mode 100644
index 0000000..592cae2
--- /dev/null
+++ b/MikroMaster/20260712/20260712052001-Config.rsc
@@ -0,0 +1,3842 @@
+# 2026-07-12 05:20:06 by RouterOS 7.23.1
+# software id = A8L5-07YF
+#
+# model = RB952Ui-5ac2nD
+# serial number = D3D50CEDCD38
+/interface bridge
+add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\
+    "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\
+    Bridge-LAN port-cost-mode=short
+/interface ethernet
+set [ find default-name=ether1 ] comment=Unet-cable loop-protect=off name=\
+    Unet-ether1 rx-flow-control=auto tx-flow-control=auto
+set [ find default-name=ether2 ] comment=LAN-2
+set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3
+set [ find default-name=ether4 ] comment=LAN-4
+set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \
+    loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto
+/interface wireless
+# managed by CAPsMAN
+# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding
+set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados wireless-protocol=802.11
+# managed by CAPsMAN
+# channel: 5260/20-Ceee/ac/DP(18dBm), SSID: vados5g, local forwarding
+set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados5g wireless-protocol=802.11
+/interface wireguard
+add comment=WG listen-port=13231 mtu=1320 name=WG
+add comment="WG interface for Amnezia route" disabled=yes listen-port=33033 \
+    mtu=1360 name=wg-nuc
+/interface list
+add include=static name=LAN
+add name=Internet
+add include=Internet name=WAN
+/interface wireless security-profiles
+set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
+    dynamic-keys supplicant-identity=MikroTik
+/iot wiliot servers
+set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East"
+/ip dhcp-server option
+add code=12 name=HostName
+add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00"
+/ip dhcp-server option sets
+add name=HP1505n options=HostName
+add name=StartLife1 options=HostName
+add name=amsterDev options=HostName
+add name=MiTV options=HostName
+add name=miller options=HostName
+add name=amster options=HostName
+add name=garage options=HostName
+add name=domain-search-set options=domain-search-list
+add name=VADOS-LEN options=HostName
+add name=VADOS-NUC options=HostName
+add name=MikroNUC options=HostName
+add name=master options=HostName
+add name=MikroYellow options=HostName
+add name="=\"Client ID\"" options=HostName
+add name=iVados options=HostName
+/ip dns forwarders
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no
+add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \
+    verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no
+#error exporting "/ip/ipsec/policy/group" (timeout)
+/ip ipsec proposal
+set [ find default=yes ] disabled=yes
+/ip pool
+add name=dhcp ranges=10.30.30.83-10.30.30.254
+/ip dhcp-server
+add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \
+    dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \
+    name=masterDHCP server-address=10.30.30.81
+/ip smb users
+set [ find default=yes ] disabled=yes
+add disabled=yes name=vados
+/ipv6 dhcp-client option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=DUID value=0x00030001488f5a8e1abc
+add code=61 name=clientid
+/ipv6 dhcp-server option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=CLIENT_DUID
+add code=61 name=CLIENT_MAC
+/ppp profile
+set *FFFFFFFE use-upnp=no
+/routing bgp template
+set default disabled=no output.network=bgp-networks
+/routing table
+add disabled=no fib name=To-VPN
+add disabled=no fib name=r_to_vpn
+/system logging action
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email
+/system script
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\
+    \n\r\
+    \n#:local Script AM-setup\
+    \n;\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n\
+    \n\r\
+    \n#\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\
+    \n\r\
+    \n#\r\
+    \n\
+    \n#root.mnuc.backuper\
+    \n\
+    \n\r\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\
+    .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\
+    \n\
+    \n#:local Script AM-GlobalConfig;\
+    \n\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n#:local FetchFile AM-DOHCert.rsc\
+    \n\
+    \n\r\
+    \n\r\
+    \n#\
+    \n:global MkDir;\
+    \n\r\
+    \n\
+    \n#:local FetchFile Binary.backup\
+    \n:local localDir \"\";\
+    \n\
+    \n\r\
+    \n#\$MkDir \$localDir;\r\
+    \n\
+    \n#\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\
+    \$localDir . \$FetchFile);\r\
+    \n"
+add comment="Global Config Script" dont-require-permissions=no name=\
+    AM-GlobalConfig owner=AM-GlobalConfig policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GlobalConfig\r\
+    \n# Script comment: Global Config Script\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# Warning: Dont touch this line!\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global GlobalConfReady false;\r\
+    \n#\r\
+    \n#\r\
+    \n# Global Url For Amster scripts to fetch\r\
+    \n# most be defined in AM-Init-Script or AM-setup scripts\r\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n:global ScriptsUrlSuffix (a);\r\
+    \n:global CheckSumsVerify true;\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF true;\r\
+    \n:global CommentsInScripts true;\r\
+    \n\r\
+    \n# Debug output:\r\
+    \n:global PrintDebug true; #false;\r\
+    \n\r\
+    \n# Debug output for specific script:\r\
+    \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\
+    \n\r\
+    \n# Debug logs\r\
+    \n# Other actions (disk, email, remote or support) can be used as well.\r\
+    \n# I do not recommend using echo - use debug output instead (https://rsc.\
+    eworm.de/main/DEBUG.html#debug-output).\r\
+    \n#/system/logging/add topics=script,debug action=memory;\r\
+    \n\r\
+    \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\
+    \n:global Domain \"WORKGROUP\";\r\
+    \n\r\
+    \n:global EmailGeneralTo \"vados@vados.ru\";\r\
+    \n#:global EmailGeneralCc \"\";\r\
+    \n\r\
+    \n# \$ScriptInstallUpdate mod/notification-telegram\r\
+    \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\
+    \";\r\
+    \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\
+    \n# Use this to send notifications to a specific topic in group.\r\
+    \n#:global TelegramThreadId \"30\";\r\
+    \n# Using telegram-chat you have to define trusted chat ids (not group ids\
+    !)\r\
+    \n# or user names. Groups allow to chat with devices simultaneously.\r\
+    \n:global TelegramChatIdsTrusted {\r\
+    \n  \"454403445\"\r\
+    \n  \"-1003631309063\"\r\
+    \n  \"-5124482807\"\r\
+    \n  \"1087968824\";\r\
+    \n};\r\
+    \n#  \"-5294757340\";\r\
+    \n\r\
+    \n:global TelegramChatGroups \"(all)\";\r\
+    \n#:global TelegramChatGroups \"(all|home|office)\";\r\
+    \n\r\
+    \n:global NotificationFunctions {\r\
+    \n  \"email\"\r\
+    \n  \"telegram\";\r\
+    \n};\r\
+    \n# Toggle this to disable symbols in notifications.\r\
+    \n:global NotificationsWithSymbols true;\r\
+    \n:global TerminalColorOutput true;\r\
+    \n\r\
+    \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\
+    \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\
+    \n\r\
+    \n## Update channel. Possible values: stable, long-term, testing, developm\
+    ent\r\
+    \n:global updateChannel \"stable\";\r\
+    \n\r\
+    \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\
+    \");\r\
+    \n:global CertRenewTime 2w;\r\
+    \n:global CertRenewPass (a); #{\r\
+    \n#  \"\";\r\
+    \n#  \"v3ry-s3cr3t\";\r\
+    \n#  \"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n:global CertWarnTime 1w;\r\
+    \n:global CertIssuedExportPass (a); # {\r\
+    \n#  \"\";\r\
+    \n#  \"cert1-cn\"=\"v3ry-s3cr3t\";\r\
+    \n#  \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n\r\
+    \n# Script BackupAndUpdate mode, possible values: backup,\r\
+    \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\
+    n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;).  \r\
+    \n# osupdate - Update if available and creates backups before/after update\
+    \_(ignores `forceBackup`)\r\
+    \n#               Set `forceBackup` to true to always create backups, even\
+    \_without updates\r\
+    \n# osnotify - Set `forceBackup` to always create backups on every run\r\
+    \n:global DevInfoIncludeIP true;\r\
+    \n:global BackupAndUpdateMode \"osnotify\"\r\
+    \n\r\
+    \n:global forceBackup true;\r\
+    \n:global BackupPassword \"Peskar55\";\r\
+    \n\r\
+    \n# SFTP Backup Variables\r\
+    \n:global BackupRandomDelay 0;\r\
+    \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\
+    \n:global BackupUploadUser \$Identity;\r\
+    \n:global BackupUploadPass \"root.mnuc.backuper\";\r\
+    \n\r\
+    \n:global BackupSendBinary true;\r\
+    \n:global BackupSendExport true;\r\
+    \n:global BackupSendGlobalConfig true;\r\
+    \n:global BackupSendScripts true;\r\
+    \n\r\
+    \n# Remove local file after uploading if no errors\r\
+    \n:global BackupRmLocal true;\r\
+    \n\r\
+    \n# Local Backups Root Directory \r\
+    \n:global BackupLocalRoot \"tmpfs\";\r\
+    \n\r\
+    \n# Encrypt Backup\r\
+    \n:global BackupEncrypt true;\r\
+    \n\r\
+    \n# Sensitive information in Backups\r\
+    \n:global BackupSens true;\r\
+    \n\r\
+    \n# User Export\r\
+    \n:global BackupUser true;\r\
+    \n\r\
+    \n# License Export (not for CHR, will silently skip)\r\
+    \n:global BackupLicense false;\r\
+    \n\r\
+    \n# SSH Keys\r\
+    \n:global BackupSshKeys true;\r\
+    \n\r\
+    \n# Certificate Export\r\
+    \n:global BackupCerts true;\r\
+    \n\r\
+    \n# Certificate Password\r\
+    \n:global BackupCertsPasswd \"\";\r\
+    \n\r\
+    \n# User-Manager Export\r\
+    \n:global BackupUserMan false;\r\
+    \n\r\
+    \n# The Dude Export\r\
+    \n:global BackupDude false;\r\
+    \n\r\
+    \n# User Files to export, comma-separated string or array of strings\r\
+    \n# User Files are not removed on backup\r\
+    \n# Any directory paths will be removed (/ -> _) on remote file\r\
+    \n# Nonpresent files are silently skipped\r\
+    \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\
+    \n\r\
+    \n# load functions and any custom scripts\r\
+    \n#                    [ /system/script/find where name=\"global-config-ov\
+    erlay\" ], \\\r\
+    \n#                    [ /system/script/find where name~\"^global-config-o\
+    verlay\\\\.d/.\" ]\r\
+    \n#\r\
+    \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\
+    ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\
+    \r\
+    \n#  :onerror Err {\r\
+    \n#     /system/script/run \$Script;\r\
+    \n#     } do={\r\
+    \n#       :log error (\"Loading configuration from configs and functions\"\
+    \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\
+    \n#  }\r\
+    \n#}\r\
+    \n#:log info \"\\ndevMode = \$devMode\";\r\
+    \n#:log info \"\\ndevRunning = \$devRunning\";\r\
+    \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \
+    GlobalRUN\\r\?\\n\" ] do={\r\
+    \n  :onerror Err {\r\
+    \n    /system/script/run \$Script;\r\
+    \n       } do={\r\
+    \n       :log error (\"Run script \" . [ /system/script/get \$Script name \
+    ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# signal we are ready\r\
+    \n:set GlobalConfReady true;\r\
+    \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\
+    \n"
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \
+    owner=AM-GlobalFunc policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GglobalFunc\r\
+    \n# Script comment: Global functions\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch, scheduler\r\
+    \n:local ExitOK false;\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n#:global checkRunJob \$SriptName;\r\
+    \n#:global fixCRLF;\r\
+    \n#:if (\$fixCRLF !=  false) do={\r\
+    \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\
+    ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\
+    }\r\
+    \n#:if (\$fixCRLF !=  \"LF\") do={ /system/script/set source=[ :tocrlf [ g\
+    et \$fixScript source ] ] \$fixScript};};\r\
+    \n#}\r\
+    \n:global GlobalFuncReady false;\r\
+    \n\r\
+    \n# Git commit id & info, expected configuration version\r\
+    \n:global CommitId \"main/729/f42d43ae\";\r\
+    \n:global CommitTAG \"unknown\";\r\
+    \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\
+    r: root, in 00:05:03 01.07.2026.\";\r\
+    \n\r\
+    \n# The variables are received right here.\r\
+    \n:global GlobalConfVersion 140;\r\
+    \n\r\
+    \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\
+    \n\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global IdentityShort [:pick \$Identity 0 18];\r\
+    \n\r\
+    \n:global devBoardName [/system/resource/get board-name];\r\
+    \n:global devMode [/system/device-mode/get mode];\r\
+    \n:global devCurArch [/system/resource/get architecture-name];\r\
+    \n:global devCurVersion [/system/resource/get version];\r\
+    \n\r\
+    \n# Variables defined in AM-GlobalConfig.rsc\r\
+    \n:global TerminalColorOutput;\r\
+    \n:global CommentsInScripts;\r\
+    \n:global DetectIpAddrDefault;\r\
+    \n:global DetectIpAddrFallback;\r\
+    \n:global updateChannel;\r\
+    \n:global Domain;\r\
+    \n:global EmailGeneralTo;\r\
+    \n:global BackupAndUpdateMode;\r\
+    \n\r\
+    \n# Single functions, without nested functions.\r\
+    \n:global MiniDateTimeStamp;\r\
+    \n:global MicroDateTimeStamp;\r\
+    \n\r\
+    \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\
+    \n:global LogPrint;\r\
+    \n\r\
+    \n# DeviceInfo and Updates\r\
+    \n:global IsCheckUpdates;\r\
+    \n:global WaitCheckUpdates;\r\
+    \n:global GetPubIp;\r\
+    \n\r\
+    \n:global GetArrDeviceInfo;\r\
+    \n:global WaitArrDeviceInfo;\r\
+    \n\r\
+    \n:global devModel;\r\
+    \n:global devRunningMode;\r\
+    \n\r\
+    \n:global devRbRevision;\r\
+    \n:global devRbSerialNumber;\r\
+    \n:global devRbVerAvail;\r\
+    \n\r\
+    \n:global runningChannelVersion;\r\
+    \n:global runningChannel;\r\
+    \n:global runningVersion;\r\
+    \n\r\
+    \n:global devBuildTime;\r\
+    \n:global ROsVerAvail;\r\
+    \n:global PkgUpdStatus;\r\
+    \n:global currentUpdateChannel;\r\
+    \n\r\
+    \n:global ScriptInstallUpdate;\r\
+    \n\r\
+    \n:global DeviceInfo;\r\
+    \n\r\
+    \n:global OldMode;\r\
+    \n\r\
+    \n:global ParseKeyValueStore;\r\
+    \n:global RandomDelay;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global EscapeForRegEx;\r\
+    \n:global CharacterMultiply;\r\
+    \n:global CharacterReplace;\r\
+    \n:global CleanFilePath;\r\
+    \n:global CleanName;\r\
+    \n\r\
+    \n:global CommitBrief;\r\
+    \n\r\
+    \n:global EitherOr;\r\
+    \n:global FormatLine;\r\
+    \n:global GetRandom20CharAlNum;\r\
+    \n:global GetRandom20CharHex;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global Grep;\r\
+    \n:global IfThenElse;\r\
+    \n:global MAX;\r\
+    \n:global MIN;\r\
+    \n:global HumanReadableNum;\r\
+    \n\r\
+    \n:global IsFullyConnected;\r\
+    \n:global IsDNSResolving;\r\
+    \n:global IsTimeSync;\r\
+    \n:global IsTimeSyncCached;\r\
+    \n:global IsTimeSyncResetNtp;\r\
+    \n\r\
+    \n:global MkDir;\r\
+    \n:global RmDir;\r\
+    \n:global RmFile;\r\
+    \n:global FileGet;\r\
+    \n:global Unix2Dos;\r\
+    \n:global UrlEncode;\r\
+    \n:global WaitForFile;\r\
+    \n:global ScriptLock;\r\
+    \n:global SendTelegram;\r\
+    \n:global NotificationFunctions;\r\
+    \n:global SendNotification;\r\
+    \n:global SendNotification2;\r\
+    \n:global SymbolForNotification;\r\
+    \n:global SymbolByUnicodeName;\r\
+    \n:global ValidateSyntax;\r\
+    \n:global CheckSumsVerify;\r\
+    \n:global GlobalConfChanges;\r\
+    \n:global GlobalConfMigration;\r\
+    \n:global VersionToNum;\r\
+    \n:global RequiredRouterOS;\r\
+    \n:global ExitError;\r\
+    \n:global ExitOnError;\r\
+    \n\r\
+    \n:global FetchHugeFiles;\r\
+    \n:global FetchUserAgentStr;\r\
+    \n:global FileExists;\r\
+    \n:global CertificateAvailable;\r\
+    \n:global CertificateDownload;\r\
+    \n:global CertificateNameByCN;\r\
+    \n:global CharacterMultiply;\r\
+    \n\r\
+    \n:global InspectVar;\r\
+    \n:global InspectVarRet;\r\
+    \n:global ParseCustom;\r\
+    \n\r\
+    \n:set IsCheckUpdates do={\r\
+    \n  :local isInfo [:tobool \$1];\r\
+    \n  :global updateChannel;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\
+    \n  :local CurrentChannel [ /system/package/update/get channel ];\r\
+    \n  :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\
+    el) do={\r\
+    \n    :retry command={/system/package/update set channel=\$updateChannel} \
+    \_delay=300ms max=5 on-error={};\r\
+    \n    :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\
+    \n  }\r\
+    \n  :local Update [ /system/package/update/get ];\r\
+    \n  :local Channel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set currentUpdateChannel \$Channel;\r\
+    \n  :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\
+    \n  :local StatusPkg \"undefined\";\r\
+    \n  :log info (\$0 . \" Checking for updates...\");\r\
+    \n  :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\
+    dates without-paging as-value]->\"status\")} \\\r\
+    \n   delay=300ms max=5 on-error={};\r\
+    \n  :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\
+    \n  :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\
+    s true; } else={ :set PkgUpdStatus false; }\r\
+    \n  :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \
+    ] ];\r\
+    \n  :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n  :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\
+    \n    :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n    :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n      :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n    }\r\
+    \n    :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\
+    kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\
+    \n    :return true;\r\
+    \n  } else={\r\
+    \n    :return \$PkgUpdStatus;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitCheckUpdates do={\r\
+    \n  :global IsCheckUpdates;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :local Status \"\";\r\
+    \n  :local Update;\r\
+    \n  :local WaitCount 0;\r\
+    \n  :if ([ \$IsCheckUpdates true ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n  :while ((\$Status = \"\" || \$Status = \"finding out latest version...\
+    \") && \$WaitCount < 60) do={\r\
+    \n    :delay 1s;\r\
+    \n    :set WaitCount (\$WaitCount + 1);\r\
+    \n    :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n   }\r\
+    \n  :set Update [ /system/package/update/get ];\r\
+    \n  :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n  :if ((\$Update->\"status\") = \"New version is available\") do={\r\
+    \n    :set PkgUpdStatus true;\r\
+    \n  } else={\r\
+    \n    :set PkgUpdStatus false;\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n    :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n  }\r\
+    \n  :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\
+    \n  :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \
+    do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitArrDeviceInfo do={\r\
+    \n   :global GetArrDeviceInfo;\r\
+    \n   :while ([ \$GetArrDeviceInfo ] = false) do={\r\
+    \n    :delay 1s;\r\
+    \n   }\r\
+    \n}\r\
+    \n\r\
+    \n:set GetArrDeviceInfo do={\r\
+    \n   :global LogPrint;\r\
+    \n   :global arrDeviceInfo;\r\
+    \n   :global devBoardName;\r\
+    \n   :global devModel;\r\
+    \n   :global devRunning;\r\
+    \n   :global devCurArch;\r\
+    \n   :global devRbRevision;\r\
+    \n   :global devRbSerialNumber;\r\
+    \n   :global devBuildTime;\r\
+    \n   :global runningChannelVersion;\r\
+    \n   :global runningChannel;\r\
+    \n   :global runningVersion;\r\
+    \n   :global currentUpdateChannel;\r\
+    \n   :global ROsVerAvail;\r\
+    \n\r\
+    \n   :local DeviceInfo;\r\
+    \n   :local Resource [/system/resource/get];\r\
+    \n   :local Update [ /system/package/update/get ];\r\
+    \n   :local VersionString [ :tostr (\$Resource->\"version\") ];\r\
+    \n   :local ChannelStart [ :find \$VersionString \" (\" ];\r\
+    \n   :local RouterBoard;\r\
+    \n   :local IsRouterBoard false;\r\
+    \n   :local RunningMode \"\";\r\
+    \n\r\
+    \n   :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\
+    \n   :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\
+    \n   :set runningChannelVersion \$VersionString;\r\
+    \n   :set runningVersion \$VersionString;\r\
+    \n   :set runningChannel \"\";\r\
+    \n\r\
+    \n   :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\
+    {\r\
+    \n     :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\
+    \n     :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\
+    len \$VersionString ] ];\r\
+    \n     :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\
+    \n     :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\
+    \r\
+    \n       :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\
+    \n     }\r\
+    \n   }\r\
+    \n\r\
+    \n   :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\
+    \_3] != \"x86\") do={\r\
+    \n   :do {\r\
+    \n      :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\
+    \n#     :set RouterBoard [ /system/routerboard/get ];\r\
+    \n      :if ((\$RouterBoard->\"routerboard\") = true) do={\r\
+    \n        :set IsRouterBoard true;\r\
+    \n     }\r\
+    \n   } on-error={}\r\
+    \n    }\r\
+    \n\r\
+    \n   :do {\r\
+    \n     :set RunningMode [ /system/device-mode/get mode ];\r\
+    \n   } on-error={\r\
+    \n     :do {\r\
+    \n       :set RunningMode [ /system/device-mode/get running ];\r\
+    \n     } on-error={\r\
+    \n       :set RunningMode \"\";\r\
+    \n     }\r\
+    \n   }\r\
+    \n   :set devRunning \$RunningMode;\r\
+    \n\r\
+    \n   :if (\$IsRouterBoard = true) do={\r\
+    \n     :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\
+    \n     :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\
+    \n     :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \
+    ];\r\
+    \n   } else={\r\
+    \n     :set devModel \$devBoardName;\r\
+    \n     :set devRbRevision \"\";\r\
+    \n     :set devRbSerialNumber \"\";\r\
+    \n   }\r\
+    \n\r\
+    \n   :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n   :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n\r\
+    \n   :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\
+    \n   :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\
+    \n   :set (\$DeviceInfo->\"model\") \$devModel;\r\
+    \n   :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\
+    \n   :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\
+    \n   :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\
+    \n   :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\
+    \n   :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\
+    ion;\r\
+    \n   :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\
+    \n   :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\
+    \n   :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\
+    \n   :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\
+    current-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\
+    upgrade-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\
+    \n   :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\
+    alled-version\") ];\r\
+    \n   :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\
+    \n   :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\
+    ) ];\r\
+    \n\r\
+    \n   :set arrDeviceInfo \$DeviceInfo;\r\
+    \n   :return \$DeviceInfo;\r\
+    \n}\r\
+    \n\r\
+    \n:set DeviceInfo do={\r\
+    \n  :global GetArrDeviceInfo;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global FormatLine;\r\
+    \n  :global CommitBrief;\r\
+    \n\r\
+    \n  :local License [/system/license/get];\r\
+    \n  :local Snmp [ /snmp/get ];\r\
+    \n  :local Info [ \$GetArrDeviceInfo ];\r\
+    \n\r\
+    \n  :if ([ :typeof \$Info ] != \"array\") do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :return ( \\\r\
+    \n    [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\
+    \_. \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\
+    \_\\\r\
+    \n    \"Hardware:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Board\" (\$Info->\"board-name\") ] . \"\\n\" . \
+    \\\r\
+    \n    [ \$FormatLine \"    Arch\" (\$Info->\"architecture-name\") ] . \"\\\
+    n\" . \\\r\
+    \n    [ \$FormatLine \"    Model\" (\$Info->\"model\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\
+    \n      (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Serial\" (\$Info->\"serial-number\") ] . \"\
+    \\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"nlevel\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS:\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"level\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    [ \$FormatLine \"    Channel\" (\$Info->\"package-channel\") ] . \"\
+    \\n\" . \\\r\
+    \n    [ \$FormatLine \"    Installed\" (\$Info->\"installed-version\") ] .\
+    \_\"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Running\" ((\$Info->\"running-version\") . \
+    \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\
+    \n      ([ \$FormatLine \"    Running\" (\$Info->\"running-version\") ] . \
+    \"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\
+    \n        (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\
+    \_\\\r\
+    \n      ([ \$FormatLine \"    Available\" (\$Info->\"latest-version\") ] .\
+    \_\"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\
+    \n        (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\
+    ) \\\r\
+    \n      ([ \$FormatLine \"    Firmware\" ((\$Info->\"current-firmware\") .\
+    \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS-Scripts:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Version\" \$GlobalConfVersion ]);\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\
+    tionFunctions ({})}\r\
+    \n\r\
+    \n:set GetRandom20CharAlNum do={\r\
+    \n  :global EitherOr;\r\
+    \n  :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\
+    FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\
+    \n}\r\
+    \n\r\
+    \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\
+    \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\
+    \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\
+    \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\
+    \n\r\
+    \n:global checkRunJob;\r\
+    \n:set checkRunJob do={\r\
+    \n  :local Script [ :tostr \$1 ];\r\
+    \n  :global ScriptLock; \r\
+    \n  :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\
+    \n  :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\
+    :set Job [ /system/script/job/get \$Job ];\r\
+    \n    :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\
+    stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\
+    \n     :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\
+    lse; \r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVar do={\r\
+    \n  :global InspectVarRet;\r\
+    \n  :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\
+    \n}\r\
+    \n\r\
+    \n:set CommitBrief do={\r\
+    \n  :global CommitId;\r\
+    \n  :global CommitInfo;\r\
+    \n  :if (\$CommitId = \"unknown\") do={\r\
+    \n    :return \"unknown\";\r\
+    \n    }\r\
+    \n  :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVarRet do={\r\
+    \n  :local Input \$1;\r\
+    \n  :local Level (0 + [ :tonum \$2 ]);\r\
+    \n  :global CharacterReplace;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global InspectVarRet;\r\
+    \n  :local IndentReturn do={\r\
+    \n    :local Prefix [ :tostr \$1 ];\r\
+    \n    :local Value  [ :tostr \$2 ];\r\
+    \n    :local Level  [ :tonum \$3 ];\r\
+    \n    :global CharacterMultiply;\r\
+    \n    :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\
+    fix . \"-> \" . \$Value);\r\
+    \n  }\r\
+    \n  :local TypeOf [ :typeof \$Input ];\r\
+    \n  :local Len    [ :len \$Input ];\r\
+    \n  :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\
+    \n  :if (\$TypeOf = \"array\") do={\r\
+    \n    :foreach Key,Value in=\$Input do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n        [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\
+    \n        [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    :if (\$TypeOf = \"str\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n         [ \$IndentReturn \"len\" \$Len \$Level ]);\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\
+    \n      }\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if (\$TypeOf != \"nothing\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n       [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\
+    \_\\\r\
+    \n        ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set GetPubIp do={\r\
+    \n    :global DetectIpAddrDefault;\r\
+    \n    :global DetectIpAddrFallback;\r\
+    \n\r\
+    \n    :local PubIpAddr false;\r\
+    \n    :local Url \$DetectIpAddrDefault;\r\
+    \n    :local JobName [ :jobname ];\r\
+    \n\r\
+    \n    :do {\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using default serv\
+    ice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \
+    detect public IP using default service: \" . \$Url . \".\")}\r\
+    \n     } on-error={\r\
+    \n      :log error (\$0 . \" Failed to detect public IP using default serv\
+    ice: \" . \$Url . \".\");\r\
+    \n      :set Url \$DetectIpAddrFallBack;\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using fallback ser\
+    vice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\
+    \_detect public IP using fallback service: \" . \$Url . \".\")}\r\
+    \n    };\r\
+    \n    :local IpLen ([ :len \$PubIpAddr ] -1);\r\
+    \n    :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\
+    {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\
+    \n    :return \$PubIpAddr;\r\
+    \n}\r\
+    \n\r\
+    \n:set FormatLine do={\r\
+    \n  :local Key    [ :tostr \$1 ];\r\
+    \n  :local Value  [ :tostr \$2 ];\r\
+    \n  :local Indent [ :tonum \$3 ];\r\
+    \n  :local Spaces;\r\
+    \n  :local Return \"\";\r\
+    \n  :global CharacterMultiply;\r\
+    \n  :global EitherOr;\r\
+    \n  :set Indent [ \$EitherOr \$Indent 16 ];\r\
+    \n  :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\
+    \n  :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\
+    \n  :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\
+    n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\
+    \n  } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \
+    \$Return ]) ] . \$Value)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseCustom do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Start [:find [ \$Str ] [:tostr \$2]];\r\
+    \n  :local End [ :tostr \$3 ];\r\
+    \n  :local Num [ :tonum \$4 ];\r\
+    \n  :local Return;\r\
+    \n  :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\
+    \n  :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\
+    \n  :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\
+    lse={\r\
+    \n  :set End [:find \$rest \$End];\r\
+    \n  :set Return [:pick \$rest 0 \$End];\r\
+    \n  }\r\
+    \n:return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set LogPrint do={\r\
+    \n  :local Severity [ :tostr \$1 ];\r\
+    \n  :local Name     [ :tostr \$2 ];\r\
+    \n  :local Message  [ :tostr \$3 ];\r\
+    \n  :global PrintDebug;\r\
+    \n  :global PrintDebugOverride;\r\
+    \n  :global EitherOr;\r\
+    \n  :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \
+    ];\r\
+    \n  :local PrintSeverity do={\r\
+    \n  :global TerminalColorOutput;\r\
+    \n   :if (\$TerminalColorOutput != true) do={:return \$1}\r\
+    \n   :local Color { debug=96; info=97; warning=93; error=91 };\r\
+    \n   :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\
+    \n}\r\
+    \n  :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\
+    \r\
+    \n  :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\
+    \n    :if (\$Severity = \"debug\") do={:log debug \$Log}\r\
+    \n    :if (\$Severity = \"error\") do={:log error \$Log}\r\
+    \n    :if (\$Severity = \"info\" ) do={:log info  \$Log}\r\
+    \n  } else={:log warning \$Log; :set Severity \"warning\"}\r\
+    \n  :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\
+    erity \$Severity ] . \": \" . \$Message)}\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateAvailable do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :local UseFor     [ :tostr \$2 ];\r\
+    \n\r\
+    \n  :global CertificateDownload;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n\r\
+    \n  :if ([ :len \$UseFor ] = 0) do={\r\
+    \n    :log warning (\$0 . \"The intended use is undefined!\");\r\
+    \n    :set UseFor \"undefined\";\r\
+    \n  }\r\
+    \n  :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\
+    \n       [ /certificate/settings/get crl-download ] = true && \\\r\
+    \n       [ /certificate/settings/get crl-store ] = \"system\") do={\r\
+    \n    :log warning (\$0 . \"This system has low free flash space but \" . \
+    \\\r\
+    \n      \"is configured to download certificate CRLs to system!\");\r\
+    \n  }\r\
+    \n  :if ([ :len \$CommonName ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No CommonName given!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\
+    \r\
+    \n        (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\
+    \n        (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n       [ :len [ /certificate/builtin/find where common-name=\$CommonName\
+    \_] ] > 0) do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \
+    \"' not available.\");\r\
+    \n    :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\
+    ) do={\r\
+    \n    :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\
+    \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\
+    e ] ];\r\
+    \n  :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\
+    ertVal->\"skid\")) do={\r\
+    \n    :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\
+    \_= 0) do={\r\
+    \n      :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\
+    >\"CN\");\r\
+    \n      :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \
+    is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\
+    \n      :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\
+    \") ] ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateDownload do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :global ScriptUpdatesBaseUrl;\r\
+    \n  :global ScriptUpdatesUrlSuffix;\r\
+    \n  :global CertificateNameByCN;\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :log info (\$0 . \"Downloading and importing certificate with \" . \\\
+    \r\
+    \n      \"CommonName '\" . \$CommonName . \"'.\");\r\
+    \n  :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\
+    \n  :do {\r\
+    \n    /tool/fetch check-certificate=yes-without-crl mode=https http-header\
+    -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\
+    sUrlSuffix) \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n    \$WaitForFile \$FileName;\r\
+    \n  } on-error={\r\
+    \n    :log warning (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \\\r\
+    \n      \"' from repository! Trying fallback to mkcert.org...\");\r\
+    \n    :do {\r\
+    \n      :local CertSettings [ /certificate/settings/get ];\r\
+    \n      :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\
+    \_] ] = 0 && \\\r\
+    \n           !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \
+    || \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \
+    \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\
+    \r\
+    \n             [ :len [ /certificate/builtin/find where common-name=\"ISRG\
+    \_Root X1\" ] ] > 0)) do={\r\
+    \n        :log error (\$0 . \" Required certificate is not available.\");\
+    \r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n      /tool/fetch check-certificate=yes-without-crl mode=https http-head\
+    er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\
+    n ({ \$CommonName }) ] \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n      \$WaitForFile \$FileName;\r\
+    \n      :if ([ /file/get \$FileName size ] = 0) do={\r\
+    \n        \$RmFile \$FileName;\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n    } on-error={\r\
+    \n      :log error (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \"'!\");\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\
+    \n  :delay 1s;\r\
+    \n  \$RmFile \$FileName;\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\
+    +\\\$\") ];\r\
+    \n    :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\
+    e . \"' still unavailable!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \
+    \"_[0-9]+\\\$\") ] do={\r\
+    \n    \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateNameByCN do={\r\
+    \n  :local Match [ :tostr \$1 ];\r\
+    \n  :global CleanName;\r\
+    \n  :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\
+    rint=\$Match or name=\$Match) ]->0);\r\
+    \n  :if ([ :len \$Cert ] = 0) do={\r\
+    \n    :log warning (\$0 .\" No matching certificate found.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CommonName [ /certificate/get \$Cert common-name ];\r\
+    \n  /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileExists do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :local Type     [ :tostr \$2 ];\r\
+    \n  :global FileGet;\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={ :return false; }\r\
+    \n  :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\
+    \n  :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\
+    \_true; }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set Grep do={\r\
+    \n  :local Input  ([ :tostr \$1 ] . \"\\n\");\r\
+    \n  :local Pattern [ :tostr \$2 ];\r\
+    \n  :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\
+    }\r\
+    \n  :do {\r\
+    \n    :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\
+    \n    :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \
+    \$Line}\r\
+    \n    :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\
+    Input ] ];\r\
+    \n  } while=([ :len \$Input ] > 0);\r\
+    \n  :return [];\r\
+    \n}\r\
+    \n\r\
+    \n:set HumanReadableNum do={\r\
+    \n  :local Input [ :tonum \$1 ];\r\
+    \n  :local Base  [ :tonum \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Prefix \"kMGTPE\";\r\
+    \n  :local Pow 1;\r\
+    \n  :set Base [ \$EitherOr \$Base 1024 ];\r\
+    \n  :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\
+    \n  :if (\$Input < \$Base) do={:return \$Input}\r\
+    \n  :for I from=0 to=[ :len \$Prefix ] do={\r\
+    \n    :set Pow (\$Pow * \$Base);\r\
+    \n    :if (\$Input / \$Base < \$Pow) do={\r\
+    \n      :set Prefix [ :pick \$Prefix \$I ];\r\
+    \n      :local Tmp1 (\$Input * 100 / \$Pow);\r\
+    \n      :local Tmp2 (\$Tmp1 / 100);\r\
+    \n      :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\
+    \n      :return (\$Tmp2 . \".\" . \\\r\
+    \n          [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\
+    2 ] + 1) ] . \\\r\
+    \n          \$Prefix . \$Bin);\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanFilePath do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CharacterReplace;\r\
+    \n  :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \
+    \"//\" \"/\" ]; }\r\
+    \n  :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\
+    n \$Path ] ]; }\r\
+    \n  :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \
+    :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\
+    \n  :return \$Path;\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanName do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\
+    stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\
+    \n      :do {:if ([ :len \$Return ] = 0) do={:error true};\r\
+    \n        :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\
+    ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\
+    \n    };\r\
+    \n    :set Return (\$Return . \$Char)};\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set RandomDelay do={\r\
+    \n  :local Time [ :tonum \$1 ];\r\
+    \n  :local Unit [ :tostr \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global GetRandomNumber;\r\
+    \n  :global MAX;\r\
+    \n  :if (\$Time = 0) do={:return false}\r\
+    \n  :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \
+    [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\
+    \n}\r\
+    \n\r\
+    \n:set EscapeForRegEx do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitError do={\r\
+    \n  :local ExitOK [ :tostr \$1 ];\r\
+    \n  :local Name   [ :tostr \$2 ];\r\
+    \n  :local Error  [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$ExitOK = \"false\") do={\r\
+    \n    :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \
+    \\\r\
+    \n        \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\
+    ror\" . \\\r\
+    \n        [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \
+    \$Error) \".\" ]);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitOnError do={\r\
+    \n  :local Name   [ :tostr \$1 ];\r\
+    \n  :local Error  [ :tostr \$2 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\
+    \\\$\") \\\r\
+    \n      \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\
+    r\" . \\\r\
+    \n      [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\
+    rror) \".\" ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set MiniDateTimeStamp do={\r\
+    \n    :local mikro [ :tobool \$1 ];\r\
+    \n    /system/clock;\r\
+    \n    :local vdate [get date];\r\
+    \n    :local vtime [get time];\r\
+    \n    :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\
+    \n    :local MM    [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\
+    \n    :local M     [:tonum \$MM];\r\
+    \n    :if (\$vdate ~ \".../../....\") do={\r\
+    \n        :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\
+    \n        :set M     ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\
+    PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\
+    \n        :if (\$M>12) do={:set M (\$M - 12)}\r\
+    \n        :set MM    [:pick (100 + \$M) 1 3];\r\
+    \n    }\r\
+    \n    :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\
+    \n    :local dd   [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\
+    \n    :local HH   [:pick \$vtime 0  2];\r\
+    \n    :local mm   [:pick \$vtime 3  5];\r\
+    \n    :local ss   [:pick \$vtime 6  8];\r\
+    \n    :local Return;\r\
+    \n    :if (\$mikro = true) do={\r\
+    \n      :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\
+    \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\
+    \n    } else={\r\
+    \n    :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\
+    \r\
+    \n   }\r\
+    \n   :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitForFile do={\r\
+    \n  :local FileName [ :tostr  \$1 ];\r\
+    \n  :local WaitTime [ :totime \$2 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global EitherOr;\r\
+    \n  :global MAX;\r\
+    \n  :set FileName [ \$CleanFilePath \$FileName ];\r\
+    \n  :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } delay=\$Delay max=10;\r\
+    \n  } on-error={ }\r\
+    \n  :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\
+    \n    :do {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } on-error={ }\r\
+    \n    :delay \$Delay;\r\
+    \n    :set Delay (\$Delay * 3 / 2);\r\
+    \n  }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileGet do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global WaitForFile;\r\
+    \n  :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FileVal false;\r\
+    \n  :do {\r\
+    \n    :set FileVal [ /file/get \$FileName ];\r\
+    \n   } on-error={ }\r\
+    \n  :return \$FileVal;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmDir do={\r\
+    \n  :local DirName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing directory: \". \$DirName);\r\
+    \n  :local DirVal [ \$FileGet \$DirName ];\r\
+    \n  :if (\$DirVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  };\r\
+    \n  :if (\$DirVal->\"type\" != \"directory\") do={\r\
+    \n    :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\
+    ory.\");\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$DirName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\
+    : \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmFile do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing file: \". \$FileName);\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\
+    sk\") do={\r\
+    \n    :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\
+    \r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$FileName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\
+    \_. \$Err); :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MkDir do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global FileGet;\r\
+    \n  :global RmDir;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :local MkTmpfs do={\r\
+    \n   :global WaitForFile;\r\
+    \n   :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n   :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n     :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n       :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\
+    \n       /disk/enable \$TmpFs;\r\
+    \n      }\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :log info (\$0 . \" Creating disk of type tmpfs.\");\r\
+    \n    \$RmDir \"tmpfs\";\r\
+    \n    :onerror Err {\r\
+    \n      /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\
+    /get total-memory ] / 3);\r\
+    \n      \$WaitForFile \"tmpfs\";\r\
+    \n    } do={\r\
+    \n      :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\
+    Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :set Path [ \$CleanFilePath \$Path ];\r\
+    \n  :if (\$Path = \"\") do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log debug (\$0 . \" Making directory: \" . \$Path);\r\
+    \n  :local PathVal [ \$FileGet \$Path ];\r\
+    \n  :if (\$PathVal->\"type\" = \"directory\") do={\r\
+    \n    :log debug (\$0 . \" ... which already exists.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/add type=\"directory\" name=\$Path;\r\
+    \n    \$WaitForFile \$Path;\r\
+    \n  } do={\r\
+    \n    :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \
+    \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterReplace do={\r\
+    \n  :local String [ :tostr \$1 ];\r\
+    \n  :local ReplaceFrom [ :tostr \$2 ];\r\
+    \n  :local ReplaceWith [ :tostr \$3 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :if (\$ReplaceFrom = \"\") do={:return \$String}\r\
+    \n  :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\
+    \r\
+    \n    :local Pos [ :find \$String \$ReplaceFrom ];\r\
+    \n    :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\
+    \r\
+    \n    :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\
+    \_\$String ] ];\r\
+    \n  }\r\
+    \n  :return (\$Return . \$String);\r\
+    \n}\r\
+    \n\r\
+    \n:set IfThenElse do={\r\
+    \n  :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \
+    \$2};\r\
+    \n  :return \$3;\r\
+    \n}\r\
+    \n\r\
+    \n:set EitherOr do={\r\
+    \n  :global IfThenElse;\r\
+    \n  :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \
+    \$1 \$2 ]}\r\
+    \n  :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\
+    \_\$1 \$2 ]}\r\
+    \n# this works for boolean values, literal ones with parentheses\r\
+    \n  :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseKeyValueStore do={\r\
+    \n  :local Source \$1;\r\
+    \n  :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\
+    \n    :do {\r\
+    \n      :return [ :deserialize from=json \$Source ];\r\
+    \n    } on-error={ }\r\
+    \n  }   \r\
+    \n  :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\
+    }\r\
+    \n  :local Result ({});\r\
+    \n  :foreach KeyValue in=[ :toarray \$Source ] do={\r\
+    \n    :if ([ :find \$KeyValue \"=\" ]) do={\r\
+    \n      :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\
+    \n      :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\
+    \_:len \$KeyValue ] ];\r\
+    \n      :if (\$Value=\"true\") do={:set Value true}\r\
+    \n      :if (\$Value=\"false\") do={:set Value false}\r\
+    \n      :set (\$Result->\$Key) \$Value;\r\
+    \n      } else={:set (\$Result->\$KeyValue) true}\r\
+    \n  }\r\
+    \n  :return \$Result;\r\
+    \n}\r\
+    \n:set RequiredRouterOS do={\r\
+    \n  :local Caller   [ :tostr \$1 ];\r\
+    \n  :local Required [ :tostr \$2 ];\r\
+    \n  :local Warn     [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :global VersionToNum;\r\
+    \n  :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\
+    \\\$\")) do={\r\
+    \n    :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\
+    e/update/get installed-version ] ]) do={\r\
+    \n    :if (\$Warn = \"true\") do={\r\
+    \n      :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \
+    0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\
+    \n        \" '\" . \$Caller . \"' (at least specific functionality) requir\
+    es RouterOS \" . \$Required . \". Please update!\");\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set ValidateSyntax do={\r\
+    \n  :local Code [ :tostr \$1 ];\r\
+    \n  :global LogPrint;\r\
+    \n  :onerror Err {\r\
+    \n    [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\
+    \n  } do={\r\
+    \n    \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set VersionToNum do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Multi 0x1000000;\r\
+    \n  :local Return 0;\r\
+    \n  :global CharacterReplace;\r\
+    \n  :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\
+    \n  :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\
+    \n    :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\
+    \r\
+    \n  }\r\
+    \n  :foreach Value in=([ :toarray \$Input ], 0) do={\r\
+    \n    :local Num [ :tonum \$Value ];\r\
+    \n    :if (\$Multi = 0x100) do={\r\
+    \n      :if ([ :typeof \$Num ] = \"num\") do={\r\
+    \n        :set Return (\$Return + 0xff00);\r\
+    \n        :set Multi (\$Multi / 0x100);\r\
+    \n      } else={\r\
+    \n        :if (\$Value = \"zero\") do={ }\r\
+    \n        :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \
+    }\r\
+    \n        :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\
+    \r\
+    \n        :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\
+    lue * \$Multi)); }\r\
+    \n    :set Multi (\$Multi / 0x100);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptLock do={\r\
+    \n  :local Script  [ :tostr  \$1 ];\r\
+    \n  :local WaitMax [ :totime \$2 ];\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global ScriptLockOrder;\r\
+    \n  :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\
+    \n    :set ScriptLockOrder ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :local JobCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :return [ :len [ /system/script/job/find where script=\$Script ] ];\
+    \r\
+    \n  }\r\
+    \n  :local TicketCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :local Count 0;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \
+    + 1)}\r\
+    \n    }\r\
+    \n    :return \$Count;\r\
+    \n  }\r\
+    \n  :local IsFirstTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Check  [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if (\$Ticket = \$Check) do={:return true}\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\
+    o={:return false}\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local AddTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Add    [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :while (true) do={\r\
+    \n      :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\
+    \n      :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\
+    \n      :delay 10ms;\r\
+    \n      :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\
+    e}\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local RemoveTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Remove [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\
+    \n        :set (\$ScriptLockOrder->\$Script->\$Id);\r\
+    \n        :delay 10ms;\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local CleanupTickets do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\
+    \n    }\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\
+    \n  :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\
+    \n    :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\
+    ist!\");\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$JobCount \$Script ] = 0) do={\r\
+    \n    \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\
+    );\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\
+    \n    :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\
+    t . \"', resetting!\");\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n    /system/script/job/remove [ find where script=\$Script ];\r\
+    \n  }\r\
+    \n  :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\
+    \n  \$AddTicket \$Script \$MyTicket;\r\
+    \n  :local WaitInterval (\$WaitMax / 20);\r\
+    \n  :local WaitTime \$WaitMax;\r\
+    \n  :while (\$WaitTime > 0 && \\\r\
+    \n      ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\
+    \n      [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\
+    \n    :set WaitTime (\$WaitTime - \$WaitInterval);\r\
+    \n    :delay \$WaitInterval;\r\
+    \n  }\r\
+    \n  :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\
+    \n      [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\
+    \n    \$RemoveTicket \$Script \$MyTicket;\r\
+    \n    \$CleanupTickets \$Script;\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  \$RemoveTicket \$Script \$MyTicket;\r\
+    \n  \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \
+    once\" . \\\r\
+    \n    [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\
+    \_lock\" \"\" ] . \"...\");\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification do={ :onerror Err {\r\
+    \n  :global SendNotification2;\r\
+    \n  \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\
+    \_silent=\$4 });\r\
+    \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification2 do={\r\
+    \n  :local Notification \$1;\r\
+    \n  :global NotificationFunctions;\r\
+    \n  :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\
+    \n    (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\
+    ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolByUnicodeName do={\r\
+    \n  :local Name [ :tostr \$1 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global SymbolsExtra;\r\
+    \n  :local Symbols ({\r\
+    \n    \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\
+    \n    \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\
+    \n    \"arrow-down\"=\"\\E2\\AC\\87\";\r\
+    \n    \"arrow-up\"=\"\\E2\\AC\\86\";\r\
+    \n    \"calendar\"=\"\\F0\\9F\\93\\85\";\r\
+    \n    \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\
+    \n    \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\
+    \n    \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\
+    \n    \"cloud\"=\"\\E2\\98\\81\";\r\
+    \n    \"cross-mark\"=\"\\E2\\9D\\8C\";\r\
+    \n    \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\
+    \n    \"fire\"=\"\\F0\\9F\\94\\A5\";\r\
+    \n    \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\
+    \n    \"gear\"=\"\\E2\\9A\\99\";\r\
+    \n    \"heart\"=\"\\E2\\99\\A5\";\r\
+    \n    \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\
+    \n    \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\
+    \n    \"information\"=\"\\E2\\84\\B9\";\r\
+    \n    \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\
+    \n    \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\
+    \n    \"link\"=\"\\F0\\9F\\94\\97\";\r\
+    \n    \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\
+    \n    \"memo\"=\"\\F0\\9F\\93\\9D\";\r\
+    \n    \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\
+    \n    \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\
+    \n    \"scissors\"=\"\\E2\\9C\\82\";\r\
+    \n    \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\
+    \n    \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\
+    \n    \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\
+    \n    \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\
+    \n    \"sparkles\"=\"\\E2\\9C\\A8\";\r\
+    \n    \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\
+    \n    \"star\"=\"\\E2\\AD\\90\";\r\
+    \n    \"warning-sign\"=\"\\E2\\9A\\A0\";\r\
+    \n    \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\
+    \n  }, \$SymbolsExtra);\r\
+    \n  :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\
+    \n  :local Special {\r\
+    \n    \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\
+    \n    \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\
+    \n    \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\
+    \n    \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\
+    \n  :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\
+    '!\");\r\
+    \n    :return \"\";\r\
+    \n  }\r\
+    \n  :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\
+    me) ] . \"\\EF\\B8\\8F\");\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolForNotification do={\r\
+    \n  :global NotificationsWithSymbols;\r\
+    \n  :global SymbolByUnicodeName;\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\
+    \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\
+    \n  :local Return \"\";\r\
+    \n  :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\
+    mbolByUnicodeName \$Symbol ])}\r\
+    \n  :return (\$Return . \" \");\r\
+    \n}\r\
+    \n\r\
+    \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\
+    \n:set UrlEncode do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\
+    \n  :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\
+    %24\"; \"%25\"; \"%26\"; \"%27\";\r\
+    \n         \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \
+    \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\
+    \n         \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \
+    \"%7C\"; \"%7D\"; \"%7E\" };\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :local Replace [ :find \$Chars \$Char ];\r\
+    \n    :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\
+    ce)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsDNSResolving do={\r\
+    \n  :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsFullyConnected do={\r\
+    \n  :global IsDNSResolving;\r\
+    \n  :global IsTimeSync;\r\
+    \n  :if ([ \$IsDNSResolving ] = false) do={:return false};\r\
+    \n  :if ([ \$IsTimeSync ] = false) do={:return false};\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsTimeSync do={\r\
+    \n  :global IsTimeSyncCached;\r\
+    \n  :global IsTimeSyncResetNtp;\r\
+    \n  :if (\$IsTimeSyncCached = true) do={:return true}\r\
+    \n  :if ([ /system/ntp/client/get enabled ] = true) do={\r\
+    \n    :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :local Uptime [ /system/resource/get uptime ];\r\
+    \n    :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\
+    \n      :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    }\r\
+    \n    :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\
+    \n    :log warning \"\$0 The ntp client is configured, but did not sync.\"\
+    ;\r\
+    \n    :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    /system/ntp/client/set enabled=no;\r\
+    \n    :delay 20ms;\r\
+    \n    /system/ntp/client/set enabled=yes;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\
+    \n       [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\
+    \n    :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\
+    ee license and x86.\";\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ /ip/cloud/get update-time ] = true) do={\r\
+    \n    :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :log debug \"\$0 No time source configured! Returning gracefully...\";\
+    \r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchHugeFiles do={\r\
+    \n  :local ScriptName [ :tostr \$1 ];\r\
+    \n  :local Url        [ :tostr \$2 ];\r\
+    \n  :local CheckCert  [ :tostr \$3 ];\r\
+    \n\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global MkDir;\r\
+    \n  :global RmDir;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\
+    ithout-crl\" ];\r\
+    \n\r\
+    \n  :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\
+    \n  :if ([ \$MkDir \$DirName ] = false) do={\r\
+    \n    \$LogPrint error \$0 (\"Failed creating directory!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \
+    \$GetRandom20CharAlNum ]);\r\
+    \n  :onerror Err {\r\
+    \n    /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \
+    \\\r\
+    \n      http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\
+    lue;\r\
+    \n  } do={\r\
+    \n    :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\
+    \n      \$RmFile \$FileName;\r\
+    \n    }\r\
+    \n    \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\
+    \_. \$Err);\r\
+    \n    \$RmDir \$DirName;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\
+    \n    \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\
+    \_not show up.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileSize [ /file/get \$FileName size ];\r\
+    \n  :local Return \"\";\r\
+    \n  :local VarSize 0;\r\
+    \n  :while (\$VarSize != \$FileSize) do={\r\
+    \n    :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\
+    768 file=\$FileName as-value ]->\"data\"));\r\
+    \n    :set FileSize [ /file/get \$FileName size ];\r\
+    \n    :set VarSize [ :len \$Return ];\r\
+    \n    :if (\$VarSize > \$FileSize) do={\r\
+    \n      :delay 100ms;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  \$RmDir \$DirName;\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchUserAgentStr do={\r\
+    \n  :local Caller [ :tostr \$1 ];\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global CommitBrief;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Resource [ /system/resource/get ];\r\
+    \n  :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\
+    \_\$Resource->\"architecture-name\" . \\\r\
+    \n    \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\
+    CommitBrief ] . \")\");\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptInstallUpdate do={ :onerror Err {\r\
+    \n  :local Scripts    [ :toarray \$1 ];\r\
+    \n  :local NewComment [ :tostr   \$2 ];\r\
+    \n  :global InitSetup;\r\
+    \n\r\
+    \n  :global CommitId;\r\
+    \n  :global ScriptUpdatesCRLF;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global CheckSumsVerify;\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SumsDirAndFileName;\r\
+    \n  :global GlobalScriptsUrlSuffix;\r\
+    \n  :global EitherOr;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global Grep;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n  :global RequiredRouterOS;\r\
+    \n  :global SendNotification2;\r\
+    \n  :global SymbolForNotification;\r\
+    \n  :global ValidateSyntax;\r\
+    \n  :global CommentsInScripts;\r\
+    \n\r\
+    \n  :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\
+    hout.\");\r\
+    \n  }\r\
+    \n\r\
+    \n  :foreach Script in=\$Scripts do={\r\
+    \n    :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\
+    \r\
+    \n      \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\
+    \n      /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \
+    Vados\\n\" comment=\$NewComment;\r\
+    \n    }\r\
+    \n  }\r\
+    \n\r\
+    \n  :local CommitIdBefore \$CommitId;\r\
+    \n  :local GlobalConfVersionBefore \$GlobalConfVersion;\r\
+    \n  :local ReloadGlobal false;\r\
+    \n  :local DeviceMode [ /system/device-mode/get ];\r\
+    \n\r\
+    \n  :if (\$CheckSumsVerify = true) do={\r\
+    \n    :local CheckSums ({});\r\
+    \n     :do {\r\
+    \n     :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\
+    iptsUrlSuffix);\r\
+    \n      \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\
+    \r\
+    \n      :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\
+    ficate=yes-without-crl \\\r\
+    \n        http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\
+    =user as-value ]->\"data\") ];\r\
+    \n    } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\
+    \n    }\r\
+    \n\r\
+    \n  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\
+    s\" ] do={\r\
+    \n    :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n    :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \
+    ];\r\
+    \n    :local SourceNew;\r\
+    \n\r\
+    \n    :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\
+    \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\
+    \n      :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\
+    \n      :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\
+    iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \
+    \"'!\");\r\
+    \n        }\r\
+    \n    }\r\
+    \n    :do {\r\
+    \n      :if (\$ScriptInfo->\"ignore\" = true) do={\r\
+    \n        \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\
+    e\" . \"', as requested.\");\r\
+    \n        :error true;\r\
+    \n      }\r\
+    \n      :if (\$CheckSumsVerify = true) do={\r\
+    \n        :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\
+    \n        :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\
+    ptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n             [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\
+    rce\") ] ] = \$CheckSum) do={\r\
+    \n          \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\
+    >\"name\" . \"' matches, ignoring.\");\r\
+    \n          :error true;\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\
+    \n        :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\
+    fetch\" ] = false) do={\r\
+    \n          \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\
+    ng without.\");\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :onerror Err {\r\
+    \n        :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\
+    lScriptsUrl ];\r\
+    \n        :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\
+    lobalScriptsUrlSuffix ];\r\
+    \n        :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\
+    Suffix);\r\
+    \n        \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\
+    name\") . \"' from url: \" . \$Url);\r\
+    \n        :local Result [ /tool/fetch check-certificate=yes-without-crl \\\
+    \r\
+    \n          http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\
+    ut=user as-value ];\r\
+    \n        :if (\$Result->\"status\" = \"finished\") do={\r\
+    \n          :set SourceNew [ :tolf (\$Result->\"data\") ];\r\
+    \n        } \r\
+    \n      } do={\r\
+    \n        \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\
+    al->\"name\" . \"': \" . \$Err);\r\
+    \n        :if (\$Err != \"Fetch failed with status 404\") do={\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\
+    \n          \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\
+    \?\");\r\
+    \n          /system/script/remove \$Script;\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$CheckSumsVerify = true) do={\r\
+    \n          :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\
+    riptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n               [ :len \$CheckSum ] = 0) do={\r\
+    \n            \$LogPrint warning \$0 (\"Added the script manually\? Skip u\
+    pdates with 'ignore=true' in comment.\");\r\
+    \n          }\r\
+    \n        }\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :len \$SourceNew ] = 0) do={\r\
+    \n        \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\
+    >\"name\") . \"'.\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :local SourceCRLF [ :tocrlf \$SourceNew ];\r\
+    \n      :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\
+    lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\
+    \n        :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\
+    \$ScriptVal->\"source\")) do={\r\
+    \n          \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\") \
+    . \"' source did not change. End of lines set to CRLF.\");\r\
+    \n          if (\$ScriptUpdatesCRLF = false) do={\r\
+    \n            :put [ :tolf \$SourceNew ];\r\
+    \n            \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\"\
+    ) . \"' source update end of lines to LF.\");\r\
+    \n          }\r\
+    \n        :error false;\r\
+    \n        }\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\
+    l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\
+    );\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if (\$CommentsInScripts = true) do={\r\
+    \n         :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\
+    \_\") ];\r\
+    \n         :if ([ :len \$CommentLine ] = 0) do={\r\
+    \n           \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\
+    iptVal->\"name\") . \"' for comment in script body, is not found result Ig\
+    noring!\");\r\
+    \n           :error false;\r\
+    \n         } else={\r\
+    \n           :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\
+    ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\
+    ] + 2) [ :len \$CommentLine] ]) do={\r\
+    \n             \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\
+    \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\
+    ;\r\
+    \n             :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\
+    ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\
+    \n             \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\
+    omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\
+    ded!\");\r\
+    \n           } else={\r\
+    \n             \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\
+    al->\"name\") . \"' did not change.\");\r\
+    \n             :error false;\r\
+    \n           }\r\
+    \n         }   \r\
+    \n      }\r\
+    \n\r\
+    \n      :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\
+    \"\\23 requires RouterOS, \") ] ]->version);\r\
+    \n      :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\
+    \_false ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires RouterOS \" . \\\r\
+    \n            \$RequiredROS . \", which is not met by your installation. I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\
+    \\23 requires device-mode, \") ] ];\r\
+    \n      :local MissingDM ({});\r\
+    \n      :foreach Feature,Value in=\$RequiredDM do={\r\
+    \n        :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\
+    ceMode->\$Feature) = false) do={\r\
+    \n          :set MissingDM (\$MissingDM, \$Feature);\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len \$MissingDM ] > 0) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires disabled \" . \\\r\
+    \n            \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\
+    ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      \r\
+    \n      :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\
+    ript comment: \" . (\$ScriptVal->\"comment\"));\r\
+    \n\r\
+    \n      /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\
+    Val->\"comment\") \\\r\
+    \n          source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\
+    F \$SourceNew ] \$Script;\r\
+    \n      :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\
+    \n           \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\
+    \n           \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\
+    o={\r\
+    \n        :set ReloadGlobal true;\r\
+    \n      }\r\
+    \n    } on-error={ }\r\
+    \n  }\r\
+    \n  :if (\$ReloadGlobal = true) do={\r\
+    \n    \$LogPrint info \$0 (\"Reloading global configuration and functions.\
+    \");\r\
+    \n    :onerror Err {\r\
+    \n      :global InitSetup (a);\r\
+    \n      /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\
+    \n    } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\
+    ctions failed! \" . \$Err)}\r\
+    \n  }\r\
+    \n  :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\
+    \n    \$LogPrint warning \$0 (\"The configuration version decreased from \
+    \" . \\\r\
+    \n      \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\
+    \n      \". Installed an older version\?\");\r\
+    \n  }\r\
+    \n    :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\
+    \n    :global GlobalConfChanges;\r\
+    \n    :global GlobalConfMigration;\r\
+    \n    :local ChangeLogCode;\r\
+    \n    :if ([ :len \$ChangeLogCode ] > 0) do={\r\
+    \n      :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\
+    \n        :onerror Err {\r\
+    \n          [ :parse \$ChangeLogCode ];\r\
+    \n        } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \
+    . \$Err)}\r\
+    \n      } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\
+    dation!\")}\r\
+    \n    }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\
+    \n        :do {\r\
+    \n          :if ([ :typeof \$Migration ] != \"str\") do={\r\
+    \n            \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\
+    \_\" is not available.\");\r\
+    \n            :error false;\r\
+    \n          }\r\
+    \n          :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\
+    \n            \$LogPrint warning \$0 (\"Migration code for change \" . \$I\
+    \_. \" failed syntax validation!\");\r\
+    \n            :error false}\r\
+    \n          \$LogPrint info \$0 (\"Applying migration for change \" . \$I \
+    . \": \" . \$Migration);\r\
+    \n          :onerror Err {\r\
+    \n            [ :parse \$Migration ];\r\
+    \n          } do={\$LogPrint warning \$0 (\"Migration code for change \" .\
+    \_\$I . \" failed to run: \" . \$Err)}\r\
+    \n        } on-error={ }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :local NotificationMessage (\"The configuration version on \" . \$Id\
+    entity . \" increased \" . \\\r\
+    \n       \"to \" . \$GlobalConfVersion . \", current configuration may nee\
+    d modification. \" . \\\r\
+    \n       \"Please review and update global-config-overlay, then re-run glo\
+    bal-config.\");\r\
+    \n    \$LogPrint info \$0 (\$NotificationMessage);\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\
+    \");\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\
+    \n        :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\
+    \r\
+    \n            [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\
+    \n        \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\
+    \n      }\r\
+    \n    } else={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\
+    \_changes are not available.\");\r\
+    \n\r\
+    \n      }\r\
+    \n\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \
+    } else={ :global GlobalConfChanges (a); }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\
+    on; } else={ :global GlobalConfMigration (a); }\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n\r\
+    \n# load modules\r\
+    \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\
+    ns\\\\.d|mod)/.\" ] do={\r\
+    \n  :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n  :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\
+    \n    :onerror Err {\r\
+    \n      /system/script/run \$Script;\r\
+    \n    } do={\r\
+    \n      \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\
+    ailed to run: \" . \$Err);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\
+    led syntax validation, skipping.\");\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# Add and fix global scheduler\r\
+    \n:put \"Add or/and fix Global scheduler...\";\r\
+    \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\
+    ; }\";\r\
+    \n:local Comment \"Every Day Set Global Environment Variables\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \
+    = 0) do={\r\
+    \n  /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\
+    ent=\$OnEvent start-time=startup;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\
+    \_do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\
+    ) do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\
+    \n}\r\
+    \n# Add Update Script scheduler\r\
+    \n:put \"Add or/and fix Update Script scheduler\";\r\
+    \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\
+    \r\
+    \n:set Comment \"Every Day Check For Update Scripts\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\
+    \" ] ] = 0) do={\r\
+    \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \
+    start-time=startup interval=1d on-event=\$OnEvent;\r\
+    \n}\r\
+    \n\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\
+    \_not ready.\"); }; } delay=100ms max=5;\r\
+    \n\r\
+    \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\
+    \n    [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \
+    \") ] . \\\r\
+    \n    \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\
+    \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\
+    \n    # signal we are ready\r\
+    \n:set GlobalFuncReady true;\r\
+    \n:set ExitOK true;\r\
+    \n\r\
+    \n:log info (\$0 . \"Global configs ready!\");\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n}\r\
+    \n"
+add comment=\
+    "Lookup IP addresses for RKN list and add them to firewall address-list" \
+    dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="#!rsc by Vados\r\
+    \n# RouterOS script: AM-RKN-dnsLookup\r\
+    \n# Script comment: Lookup IP addresses for RKN list and add them to firew\
+    all address-list\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n# Script description: This script is intended to be run periodically, e.\
+    g. once a day, to update the IP addresses in the firewall address-list bas\
+    ed on the RKN list.\r\
+    \n#                     It resolves the domain names in the RKN list and a\
+    dds the corresponding IP addresses to the specified firewall address-list.\
+    \r\
+    \n#                     The script also handles CNAME records by following\
+    \_them until it finds A records.\r\
+    \n# Usage:\r\
+    \n# /system/script { run AM-RKN-dnsLookup; }\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n\r\
+    \n:global dnsLookupReady false;\r\
+    \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\
+    \_true; }\r\
+    \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\
+    \n:set dnsLookupReady false;\r\
+    \n\r\
+    \n:local arrRKN {\r\
+    \n  \"telegra.ph\"\r\
+    \n  \"grani.ru\"\r\
+    \n  \"xhamster.com\"\r\
+    \n  \"lostfilm.tv\"\r\
+    \n  \"rutracker.org\"\r\
+    \n  \"lurkmore.to\"\r\
+    \n  \"dou.ua\"\r\
+    \n  \"youporn.com\"\r\
+    \n  \"pornolab.net\"\r\
+    \n  \"crimerussia.com\"\r\
+    \n  \"telegram.org\"\r\
+    \n  \"api.telegram.org\"\r\
+    \n  \"facebook.com\"\r\
+    \n  \"instagram.com\"\r\
+    \n  \"x.com\"\r\
+    \n  \"twitter.com\"\r\
+    \n  \"youtube.com\"\r\
+    \n  \"googleapis.com\"\r\
+    \n  \"youtu.be\"\r\
+    \n  \"googlevideo.com\"\r\
+    \n  \"gstatic.com\"\r\
+    \n  \"googleusercontent.com\"\r\
+    \n  \"nhacmp3youtube.com\"\r\
+    \n  \"telegram.me\"\r\
+    \n  \"t.me\";}\r\
+    \n\r\
+    \n:local ListRKN \"RKN-dnsLookup\";\r\
+    \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\
+    \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\
+    ={\r\
+    \n    /ip firewall address-list remove \$aListItem;\r\
+    \n}\r\
+    \n:foreach aItem in=\$arrRKN do={\r\
+    \n#    :do {\r\
+    \n        :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\
+    ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\
+    \n#    } on-error={\r\
+    \n#        :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\
+    \n#    }\r\
+    \n    :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \
+    do={\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\
+    \n            :local newAddress [/ip dns cache all get \$dnsRecord data];\
+    \r\
+    \n            :do {\r\
+    \n             /ip firewall address-list add list=\$ListRKN address=\$newA\
+    ddress comment=\$aItem;\r\
+    \n                :log warning \"Successfully adding ip to list A record: \
+    \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            } on-error={\r\
+    \n                :log error \"error when adding ip to list A record: \$dn\
+    sRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            }\r\
+    \n        }\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\
+    \n            :local cname;\r\
+    \n            :local nextCname;\r\
+    \n            :local cnameAddress;\r\
+    \n            :set cname [/ip dns cache all find where (name=\$aItem && ty\
+    pe=\"CNAME\")];\r\
+    \n            :set nextCname [/ip dns cache all find where (name=[/ip dns \
+    cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            :while (\$nextCname != \"\") do={\r\
+    \n                :set cname \$nextCname;\r\
+    \n                :set nextCname [/ip dns cache all find where (name=[/ip \
+    dns cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            }\r\
+    \n            :foreach aRecord in=[/ip dns cache all find where (name=[/ip\
+    \_dns cache all get \$cname data] && type=\"A\")] do={\r\
+    \n                :do {\r\
+    \n                    :set cnameAddress [/ip dns cache all get \$aRecord d\
+    ata];\r\
+    \n                    /ip firewall address-list add list=\$ListRKN address\
+    =\$cnameAddress comment=\$aItem;\r\
+    \n                    :log warning \"Succesfully adding ip to list CNAME r\
+    ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \
+    \$aItem.\";\r\
+    \n#                    /ip firewall raw add action=add-dst-to-address-list\
+    \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\
+    g comment=\$aItem content=\$aItem;\r\
+    \n                } on-error={\r\
+    \n                    :log error \"error when adding ip to list CNAME reco\
+    rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\
+    tem.\";\r\
+    \n                }\r\
+    \n            }\r\
+    \n        }\r\
+    \n    }\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\
+    ={\r\
+    \n   :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\
+    ptName . \" is NOT SET! Fix It Now!\");\r\
+    \n    /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \
+    run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\
+    olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\
+    \_start-time=startup;\r\
+    \n  }\r\
+    \n:set dnsLookupReady true;\r\
+    \ndelay 2s;  \r\
+    \n:global dnsLookupReady (a);\r\
+    \n"
+add dont-require-permissions=no name="renameLists " owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    local oldName \"Test\";\
+    \n:local newName \"Test-IP\";\
+    \n/ip firewall address-list\
+    \n:foreach i in=[find list=\$oldName] do={\
+    \nset \$i list=\$newName;\
+    \n}\
+    \n"
+add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    #############Script Settings##################\
+    \n\
+    \n:local \"IF-TUN\" \"6to4-tun\"\
+    \n:local \"IF-LOC\" \"Bridge-LAN\"\
+    \n:local \"POOL-6TO4\" \"poolV6-local\"\
+    \n:local \"force-update\" false\
+    \n############ use then static ip #######################\
+    \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \
+    address]\
+    \n#:local \"interface\" \"ext\"\
+    \n:local bound 0\
+    \n\
+    \n###############################################\
+    \n\
+    \n:local 6to4prefix do={\
+    \n    :global dec2hex\
+    \n    :local ipv4 \$1\
+    \n    :local ipv6 \"2002:\"\
+    \n    :for i from=0 to=2 step=1 do={        \
+    \n        :if ( \$i = 2) do={\
+    \n            :set ipv6 (\$ipv6.\":\")\
+    \n        }\
+    \n        :local fp [:find \$ipv4 \".\"]\
+    \n        :if ( \$fp > 0 ) do={\
+    \n            :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\
+    \n            :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\
+    \n        }\
+    \n    }\
+    \n    :return (\$ipv6.[\$dec2hex \$ipv4])\
+    \n}\
+    \n:local \"str_replace\" do={\
+    \n    :local \"str-pos\" [:find \$1 \$2]\
+    \n    :local \"str-len\" [:len \$2]\
+    \n    :local str \"\"\
+    \n    :local rest \$1\
+    \n    :while (\$\"str-pos\" >= 0) do={\
+    \n        :local t [:pick \$rest 0 \$\"str-pos\"]\
+    \n        :if ( \$4 > 0 ) do={\
+    \n            :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\
+    \n                :set str (\$str.\$5)\
+    \n            }\
+    \n        }\
+    \n        :set str (\$str.\$t.\$3)\
+    \n        :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\
+    st]]\
+    \n        :set \"str-pos\" [:find \$rest \$2]\
+    \n    }\
+    \n    :return (\$str.\$rest)\
+    \n}\
+    \n\
+    \n:if (\$bound=1) do={\
+    \n    :local t [:find \$\"lease-address\" \"/\"]\
+    \n\
+    \n    :if ( \$t >= 0 ) do={\
+    \n        :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\
+    \n    }\
+    \n\
+    \n    :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\
+    ) do={\
+    \n        /interface 6to4 add !keepalive local-address=\$\"lease-address\"\
+    \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\
+    \n        :set \"force-update\" true\
+    \n    }\
+    \n\
+    \n    :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\
+    cal-address];\
+    \n\
+    \n    :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \
+    true) do={\
+    \n        /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\
+    ease-address\"\
+    \n        /ipv6 address remove [find interface=\$\"IF-TUN\"]\
+    \n        /ipv6 address remove [find interface=\$\"IF-LOC\"]\
+    \n        /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\
+    \"::/0\"]\
+    \n        :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\
+    \n        :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\
+    \_0) do={    \
+    \n            /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\
+    \".\":1::/64\")  prefix-length=64\
+    \n        } else={\
+    \n            /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \
+    prefix=(\$\"pool-prefix\".\":1::/64\")\
+    \n        }\
+    \n        /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\
+    \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\
+    ace=\$\"IF-TUN\" advertise=no\
+    \n        /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\
+    =\$\"IF-LOC\" advertise=yes\
+    \n        /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\
+    \"IF-TUN\")\
+    \n        :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\
+    s]\
+    \n        :set t [:pick \$t 0 [:find \$t \"/\"]]\
+    \n        :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\
+    \_= 0) do={\
+    \n            /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\
+    [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        } else={\
+    \n            /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \
+    where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        }\
+    \n        :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\
+    -LOC\"] = 0) do={\
+    \n            /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\
+    on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\
+    \n        }\
+    \n        :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \
+    0) do={\
+    \n            /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\
+    onfiguration=yes\
+    \n        }\
+    \n    }\
+    \n}"
+add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global MAC2EUI64 do={\
+    \n    :local EUI64 \"\"\
+    \n    :local MAC \$1\
+    \n    :local HEX2DEC \"0123456789ABCDEF\"\
+    \n    :for i from=0 to=5 step=1 do={\
+    \n        :if ( \$i = 0 ) do={\
+    \n            :set EUI64 [:pick \$MAC 0]\
+    \n            :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\
+    \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\
+    \n        }\
+    \n        :if ( \$i = 1 || \$i = 3) do={\
+    \n            :set EUI64 (\$EUI64.\":\")\
+    \n        }\
+    \n        :if ( \$i = 2 ) do={\
+    \n            :set EUI64 (\$EUI64.\"FF:FE\")\
+    \n        }\
+    \n        :if ( [:find \$MAC \":\"] = 2 ) do={\
+    \n            :set MAC [:pick \$MAC 3  [:len \$MAC]]\
+    \n            :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\
+    \n        }\
+    \n    }\
+    \n    :return (\$EUI64)\
+    \n}\
+    \n\
+    \n:global dec2hex do={\
+    \n    :local hex \"\"\
+    \n    :local dec [:tonum \$1]\
+    \n    :for i from=0 to=4 step=4 do={\
+    \n        :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\
+    c>>\$i)&0xf)+1)].\$hex)\
+    \n    }\
+    \n    :return ([:tostr \$hex])\
+    \n}"
+add comment=Generator dont-require-permissions=no name=proxySet owner=vados \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="# 2. WireGuard interface\r\
+    \n/interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDg\
+    uMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=21641\r\
+    \n/interface/wireguard/peers/add interface=wg-VDSina public-key=\"o5IgCl1/\
+    G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcYQnD9\
+    N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=10.30.30.33 endpoint-port=518\
+    20 allowed-address=0.0.0.0/0 persistent-keepalive=11\r\
+    \n/ip/address/add address=10.9.0.3/32 interface=wg-VDSina\r\
+    \n\r\
+    \n# 3. DNS\r\
+    \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\
+    n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\
+    \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /system/script/add name=VDS\
+    ina-prev-dns comment=\"\$prevDNS\" source=\"\" }\r\
+    \n/ip/dns/set servers=8.8.4.4\r\
+    \n/ip/route/add dst-address=8.8.4.4/32 gateway=wg-VDSina distance=1 commen\
+    t=VDSina-dns\r\
+    \n\r\
+    \n# 4. Enable WireGuard\r\
+    \n/interface/wireguard/enable wg-VDSina\r\
+    \n"
+add dont-require-permissions=no name=AM-Telegram-Send owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\
+    \n# RouterOS script: AM-Telegram-Send\
+    \n# Script comment: Mini script for send messages to admin Telegram chat\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\
+    \n#\
+    \n#\
+    \n# requires RouterOS, version=7.19\
+    \n# requires device-mode, fetch\
+    \n#\
+    \n# Script description: \
+    \n#\
+    \n#\
+    \n# Usage:\
+    \n# /system/script { run AM-Telegram-Send \"Message here )))\"; }\
+    \n\
+    \n/system/script\
+    \nadd name=telegram-send dont-require-permissions=no source={\
+    \n  :global TelegramTokenId;\
+    \n  :global TelegramChatId;\
+    \n  :local message [:tostr \$1];\
+    \n  :local identity [/system/identity/get name];\
+    \n  :local sendMsg (\"[\".\$identity.\"] \".\$message)\
+    \n  /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\
+    \n    \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\
+    \n    \"&text=\".\$sendMsg.\\\
+    \n    \"&parse_mode=HTML\") \\\
+    \n    mode=https keep-result=no\
+    \n}"
+add dont-require-permissions=no name=telegram-send owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\
+    \n  :global TelegramTokenId;\
+    \n  :global TelegramChatId;\
+    \n  :local message [:tostr \$1];\
+    \n  :local identity [/system/identity/get name];\
+    \n  :local sendMsg (\"[\".\$identity.\"] \".\$message)\
+    \n  /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\
+    \n    \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\
+    \n    \"&text=\".\$sendMsg.\\\
+    \n    \"&parse_mode=HTML\") \\\
+    \n    mode=https keep-result=no\
+    \n"
+/user group
+add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\
+    t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon"
+/ip smb
+set enabled=no interfaces=lo
+/interface bridge port
+add bridge=Bridge-LAN interface=ether5
+add bridge=Bridge-LAN interface=ether2
+add bridge=Bridge-LAN interface=ether4 trusted=yes
+add bridge=Bridge-LAN interface=ether3
+add bridge=Bridge-LAN interface=wlan2
+add bridge=Bridge-LAN interface=wlan1
+/interface bridge settings
+set use-ip-firewall=yes
+/ip firewall connection tracking
+set udp-timeout=10s
+/ip neighbor discovery-settings
+set discover-interface-list=LAN lldp-med=no lldp-poe-power=no
+/ip settings
+set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\
+    8192
+/ipv6 settings
+set disable-ipv6=yes disable-link-local-address=yes forward=no \
+    max-neighbor-entries=8192 multipath-hash-policy=l4
+/interface detect-internet
+set detect-interface-list=WAN internet-interface-list=Internet \
+    lan-interface-list=LAN request-interval=1m wan-interface-list=WAN
+/interface l2tp-server server
+set authentication=mschap2 use-ipsec=yes
+/interface list member
+add interface=Unet-ether1 list=Internet
+add interface=WG list=WAN
+add interface=Bridge-LAN list=LAN
+add interface=Unet-ether1 list=WAN
+/interface wireguard peers
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\
+    109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \
+    persistent-keepalive=10s public-key=\
+    "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4="
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 disabled=yes \
+    endpoint-address=10.30.30.33 endpoint-port=55055 interface=wg-nuc name=\
+    NUC persistent-keepalive=11s public-key=\
+    "+OvzAjLC45Td52hjkQPmpGvC3RGhZ+Q2CDMJ1U/D4Rw="
+/interface wireless cap
+# 
+set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \
+    caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\
+    CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\
+    wlan2,wlan1 lock-to-caps-man=yes
+/ip address
+add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0
+add address=10.8.0.2/24 interface=WG network=10.8.0.0
+add address=192.168.33.2/24 disabled=yes interface=wg-nuc network=\
+    192.168.33.0
+/ip cloud
+set update-time=no
+/ip dhcp-client
+add add-default-route=special-classless check-gateway=arp comment=Unet-client \
+    default-route-distance=2 default-route-tables=main:2 dhcp-options=\
+    hostname,clientid_duid interface=Unet-ether1 name=UnetDHCP use-peer-dns=\
+    no use-peer-ntp=no
+/ip dhcp-server config
+set accounting=no
+/ip dhcp-server lease
+add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\
+    48:8F:5A:8E:EE:A8 server=masterDHCP
+add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\
+    F0:DE:F1:91:0D:1E server=masterDHCP
+add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\
+    00:80:77:EC:43:86 server=masterDHCP
+add address=10.30.30.70 dhcp-option=domain-search-list,HostName \
+    dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP
+add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\
+    04:7C:16:36:F5:37 server=masterDHCP
+add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\
+    10:2D:41:2C:20:C2 server=masterDHCP
+add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\
+    10:08:C1:81:59:5F server=masterDHCP
+add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\
+    10:38:1F:D2:5F:13 server=masterDHCP
+add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\
+    10:B1:DF:E9:D0:D5 server=masterDHCP
+add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\
+    FE:02:52:BE:3F:16 server=masterDHCP
+add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\
+    D4:6D:6D:FD:E5:49 server=masterDHCP
+add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\
+    CC:42:10:12:46:94 server=masterDHCP
+add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\
+    50:CC:F8:85:96:0A server=masterDHCP
+add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\
+    E4:18:6B:58:34:AB server=masterDHCP
+add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\
+    00:27:15:41:97:A9 server=masterDHCP
+add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \
+    mac-address=C4:82:E1:03:49:10 server=masterDHCP
+add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\
+    10:38:1F:82:81:F2 server=masterDHCP
+add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \
+    dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP
+add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \
+    dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP
+add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \
+    server=masterDHCP
+add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\
+    MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP
+add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \
+    mac-address=F0:75:5D:1E:5F:71 server=masterDHCP
+add address=10.30.30.100 client-id=iVados dhcp-option=HostName \
+    dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP
+add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\
+    ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \
+    dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \
+    use-src-mac=yes
+/ip dhcp-server network
+add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\
+    domain-search-list dhcp-option-set=domain-search-set dns-server=\
+    10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\
+    24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98
+/ip dns
+set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \
+    doh-max-server-connections=20 servers=8.8.8.8 verify-doh-cert=yes
+/ip dns static
+add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \
+    type=A
+add address=109.107.177.79 name=vds.vados.ru type=A
+add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \
+    regexp=*.vados.ru type=NS
+add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\
+    "\".*\\\\.vados\\\\.ru\"" type=FWD
+add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\
+    10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\
+    FWD
+add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\
+    ns.vados.ru.local type=A
+add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\
+    vados.ru ns=ns.vados.ru.local type=NS
+add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A
+add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\
+    dns.google type=A
+add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A
+add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A
+add address=10.30.30.33 name=ros.vados.ru type=A
+add address=10.30.30.95 name=vados-nuc type=A
+add address=10.30.30.33 name=amster-nuc type=A
+add address=10.30.30.33 name=amster type=A
+add address=10.30.30.33 name=amster-reg type=A
+add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A
+add address=10.30.30.33 name=mgr.vados.ru type=A
+add address=10.30.30.33 name=prt.vados.ru type=A
+add address=10.30.30.33 disabled=yes match-subdomain=yes name=\
+    mikrots.vados.ru type=A
+add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A
+add address=10.30.30.30 name=MILLER-LEN type=A
+add address=10.30.30.30 name=miller type=A
+add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\
+    dns.quad9.net type=A
+add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\
+    dns.quad9.net type=A
+add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \
+    type=A
+add address=10.30.30.81 comment=LocalNet name=MikroVados type=A
+add address=10.30.30.10 name=MikroNUC type=A
+add address=10.30.30.86 disabled=yes name=MikroYellow type=A
+add address=10.30.30.85 disabled=yes name=MikroMic type=A
+add address=10.30.30.95 name=VADOS-NUC type=A
+add address=10.30.30.98 name=VADOS-LEN type=A
+add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\
+    A
+add address=10.30.30.20 disabled=yes name=garage type=A
+/ip firewall address-list
+add address=91.215.120.206 list=TRUSTED
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=8.8.4.0/24 list=YouTube
+add address=8.8.8.0/24 list=YouTube
+add address=8.34.208.0/20 list=YouTube
+add address=8.35.192.0/20 list=YouTube
+add address=23.236.48.0/20 list=YouTube
+add address=23.251.128.0/19 list=YouTube
+add address=34.0.0.0/15 list=YouTube
+add address=34.2.0.0/16 list=YouTube
+add address=34.3.0.0/23 list=YouTube
+add address=34.3.3.0/24 list=YouTube
+add address=34.3.4.0/24 list=YouTube
+add address=34.3.8.0/21 list=YouTube
+add address=34.3.16.0/20 list=YouTube
+add address=34.3.32.0/19 list=YouTube
+add address=34.3.64.0/18 list=YouTube
+add address=34.4.0.0/14 list=YouTube
+add address=34.8.0.0/13 list=YouTube
+add address=34.16.0.0/12 list=YouTube
+add address=34.32.0.0/11 list=YouTube
+add address=34.64.0.0/10 list=YouTube
+add address=34.128.0.0/10 list=YouTube
+add address=35.184.0.0/13 list=YouTube
+add address=35.192.0.0/14 list=YouTube
+add address=35.196.0.0/15 list=YouTube
+add address=35.198.0.0/16 list=YouTube
+add address=35.199.0.0/17 list=YouTube
+add address=35.199.128.0/18 list=YouTube
+add address=35.200.0.0/13 list=YouTube
+add address=35.208.0.0/12 list=YouTube
+add address=35.224.0.0/12 list=YouTube
+add address=35.240.0.0/13 list=YouTube
+add address=57.140.192.0/18 list=YouTube
+add address=64.15.112.0/20 list=YouTube
+add address=64.233.160.0/19 list=YouTube
+add address=66.22.228.0/23 list=YouTube
+add address=66.102.0.0/20 list=YouTube
+add address=66.249.64.0/19 list=YouTube
+add address=70.32.128.0/19 list=YouTube
+add address=72.14.192.0/18 list=YouTube
+add address=74.125.0.0/16 list=YouTube
+add address=104.154.0.0/15 list=YouTube
+add address=104.196.0.0/14 list=YouTube
+add address=104.237.160.0/19 list=YouTube
+add address=107.167.160.0/19 list=YouTube
+add address=107.178.192.0/18 list=YouTube
+add address=108.59.80.0/20 list=YouTube
+add address=108.170.192.0/18 list=YouTube
+add address=108.177.0.0/17 list=YouTube
+add address=130.211.0.0/16 list=YouTube
+add address=136.22.160.0/20 list=YouTube
+add address=136.22.176.0/21 list=YouTube
+add address=136.22.184.0/23 list=YouTube
+add address=136.22.186.0/24 list=YouTube
+add address=142.250.0.0/15 list=YouTube
+add address=146.148.0.0/17 list=YouTube
+add address=152.65.208.0/22 list=YouTube
+add address=152.65.214.0/23 list=YouTube
+add address=152.65.218.0/23 list=YouTube
+add address=152.65.222.0/23 list=YouTube
+add address=152.65.224.0/19 list=YouTube
+add address=162.120.128.0/17 list=YouTube
+add address=162.216.148.0/22 list=YouTube
+add address=162.222.176.0/21 list=YouTube
+add address=172.110.32.0/21 list=YouTube
+add address=172.217.0.0/16 list=YouTube
+add address=172.253.0.0/16 list=YouTube
+add address=173.194.0.0/16 list=YouTube
+add address=173.255.112.0/20 list=YouTube
+add address=192.158.28.0/22 list=YouTube
+add address=192.178.0.0/15 list=YouTube
+add address=193.186.4.0/24 list=YouTube
+add address=199.36.154.0/23 list=YouTube
+add address=199.36.156.0/24 list=YouTube
+add address=199.192.112.0/22 list=YouTube
+add address=199.223.232.0/21 list=YouTube
+add address=207.223.160.0/20 list=YouTube
+add address=208.65.152.0/22 list=YouTube
+add address=208.68.108.0/22 list=YouTube
+add address=208.81.188.0/22 list=YouTube
+add address=208.117.224.0/19 list=YouTube
+add address=209.85.128.0/17 list=YouTube
+add address=216.58.192.0/19 list=YouTube
+add address=216.73.80.0/20 list=YouTube
+add address=216.239.32.0/19 list=YouTube
+add address=2ip.ru list=Test-IP
+add address=wg.vados.ru comment=VDSIna list=TRUSTED
+add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED
+add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina
+add address=love.ru comment=love.ru list=NoVdsina
+add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina
+add address=pochta.ru comment=pochta.ru list=NoVdsina
+add address=vdsina.com list=NoVdsina
+add address=vdsina.ru list=NoVdsina
+add address=youla.ru list=NoVdsina
+add address=kupiprodai.ru list=NoVdsina
+add address=myip.ru list=Test-IP
+add address=geoip.co list=NoVdsina
+add address=comp-lenta.ru list=NoVdsina
+add address=128.85.102.70 comment=update.microsoft.com list=\
+    windowsupdateslist
+add address=wu-b-net.trafficmanager.net. comment=\
+    ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\
+    ctldl.windowsupdate.com list=windowsupdateslist
+add address=redir.update.msft.com.trafficmanager.net. comment=\
+    update.microsoft.com list=windowsupdateslist
+add address=geo.prod.do.dsp.trafficmanager.net. comment=\
+    geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12437.d.akamaiedge.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \
+    comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \
+    list=windowsupdateslist
+add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\
+    sls.update.microsoft.com list=windowsupdateslist
+add address=fe3.delivery.mp.microsoft.com. comment=\
+    fe3cr.delivery.mp.microsoft.com list=windowsupdateslist
+add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\
+    fe3.delivery.mp.microsoft.com list=windowsupdateslist
+add address=fe2cr.update.msft.com.trafficmanager.net. comment=\
+    fe2cr.update.microsoft.com list=windowsupdateslist
+add address=download.windowsupdate.com.delivery.microsoft.com. comment=\
+    download.windowsupdate.com list=windowsupdateslist
+add address=wu-f-net.trafficmanager.net. comment=\
+    download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=tsfe.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \
+    comment=9.au.download.windowsupdate.com list=windowsupdateslist
+add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dspw65.akamai.net. comment=\
+    download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \
+    comment=licensing.mp.microsoft.com list=windowsupdateslist
+add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-nlu-net.trafficmanager.net. comment=\
+    star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-tlu-net.trafficmanager.net. comment=\
+    star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=storeedgefd.xbetservices.akadns.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \
+    comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\
+    windowsupdateslist
+add address=e16646.dscg.akamaiedge.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\
+    windowsupdateslist
+add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=bg.microsoft.map.fastly.net. comment=\
+    3.au.download.windowsupdate.com list=windowsupdateslist
+add list=windowsupdateslist
+add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\
+    star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a2033.dscd.akamai.net. comment=\
+    star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-nlu-net.trafficmanager.net. comment=\
+    dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-b-tlu-net.trafficmanager.net. comment=\
+    1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a122.dscg3.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist
+add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e10370.d.akamaiedge.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=a1683.dscd.akamai.net. comment=\
+    dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \
+    comment=collections.mp.microsoft.com list=windowsupdateslist
+add address=a1847.dscd.akamai.net. comment=\
+    wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=au.download.windowsupdate.com.edgesuite.net. comment=\
+    2.au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dscg3.akamai.net. comment=\
+    au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    4.au.download.windowsupdate.com list=windowsupdateslist
+add address=cl-glcb907925.gcdn.co. comment=\
+    4.au.download.windowsupdate.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \
+    comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=ts-frontend.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=sds.trafficmanager.net. comment=software-download.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\
+    windowsupdateslist
+add address=e12671.dscd.akamaiedge.net. comment=\
+    download.microsoft.com.edgekey.net list=windowsupdateslist
+add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12358.d.akamaiedge.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-tlu-net.trafficmanager.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a1856.dspw65.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina
+add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=purchase.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.mp.microsoft.com list=windowsupdateslist
+add address=e110219.a.akamaiedge.net. comment=\
+    purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.141 list=windowsupdateslist
+add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=storesdk.xbetservices.akadns.net. comment=\
+    storesdk.dsx.mp.microsoft.com list=windowsupdateslist
+add address=e16646.g.akamaiedge.net. comment=\
+    storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=software-download.microsoft.com.delivery.microsoft.com. comment=\
+    software-download.microsoft.com list=windowsupdateslist
+add address=download.prss.microsoft.com.akamaized.net. comment=\
+    software-download.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina
+add address=87.250.250.50 comment=YandexDisk list=NoVdsina
+add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\
+    purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\
+    cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=a1996.dscd.akamai.net. comment=\
+    wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\
+    tas02.sls.update.microsoft.com list=windowsupdateslist
+add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\
+    star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\
+    paymentinstruments.mp.microsoft.com list=windowsupdateslist
+add address=10.30.30.33 comment=amster list=NoWG
+add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG
+add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG
+add address=wg.vados.ru comment=VDSina-vpn list=VDSina
+add address=80.85.244.9 list=TRUSTED
+add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina
+add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS
+add address=dns.google comment=Google-dns list=Trusted-DNS
+add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\
+    Trusted-DNS
+add address=time.google.com comment=Google-time list=Trusted-NTP
+add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP
+add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=cp.vdsina.com comment=VDSina-vpn list=VDSina
+add address=vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns.vados.ru comment=VDSina-vpn list=VDSina
+add address=vdsina.com comment=VDSina-vpn list=VDSina
+add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=10.30.30.0/24 comment="Local Network" list=Local-Net
+add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net
+add address=146.120.64.208/29 comment="External Net" list=Unet
+add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina
+add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina
+add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina
+add address=10.30.30.30 comment=miller disabled=yes list=NoWG
+add address=10.30.30.33 comment="Direct connet to DNS servers" list=\
+    Direct-DNS
+add address=109.107.177.79 list=VPN-Server
+add address=10.0.0.0/8 list=RFC1918
+add address=172.16.0.0/12 list=RFC1918
+add address=192.168.0.0/16 list=RFC1918
+add address=8.8.4.4 disabled=yes list=to_vpn
+add address=myip.ru disabled=yes list=to_vpn
+add address=10.30.30.98 disabled=yes list=to_vpn
+/ip firewall filter
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=12h chain=input comment="block honeypot DNS" \
+    connection-state=new dst-port=53 in-interface=Unet-ether1 protocol=udp \
+    src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment=\
+    "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=!TRUSTED
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \
+    connection-state=new dst-port=5060 in-interface=Unet-ether1 protocol=udp
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot NTP" \
+    connection-state=new dst-port=123 in-interface=Unet-ether1 protocol=udp
+add action=fasttrack-connection chain=forward comment=\
+    "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \
+    connection-state=established,related,new disabled=yes
+add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \
+    protocol=tcp
+add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \
+    protocol=udp
+add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \
+    dst-port=53 protocol=tcp src-address=10.30.30.0/24
+add action=accept chain=input comment="udp Accept input DNS queries" \
+    dst-port=53 protocol=udp src-address=10.30.30.0/24
+add action=accept chain=output comment="accept WireGuard" disabled=yes \
+    dst-address-list=VPN-Server out-interface=Unet-ether1 protocol=udp \
+    src-port=13231
+add action=accept chain=output disabled=yes dst-address-list=VPN-Server \
+    dst-port=29185 out-interface=Unet-ether1 protocol=udp
+add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
+    connection-state=established,related,new disabled=yes routing-mark=\
+    !To-VPN
+add action=accept chain=output disabled=yes protocol=tcp src-port=443
+add action=accept chain=output disabled=yes src-address=127.0.0.1
+add action=accept chain=forward comment="defconf: accept in ipsec policy" \
+    disabled=yes ipsec-policy=in,ipsec
+add action=accept chain=forward comment="defconf: accept out ipsec policy" \
+    disabled=yes ipsec-policy=out,ipsec
+add action=accept chain=forward comment=\
+    "defconf: accept established,related, untracked" connection-state=\
+    established,related,untracked disabled=yes
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid in-interface=Unet-ether1 src-address=\
+    !10.30.30.0/24
+add action=drop chain=forward comment=\
+    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
+    connection-state=new in-interface=Unet-ether1 src-address-list=!VDSina
+add action=accept chain=input in-interface=Unet-ether1 protocol=icmp \
+    src-address-list=VDSina
+add action=accept chain=input connection-state=established
+add action=accept chain=input connection-state=related
+/ip firewall mangle
+add action=accept chain=prerouting comment=RFC1918 dst-address-list=RFC1918 \
+    in-interface-list=!WAN
+add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \
+    new-routing-mark=main passthrough=no src-address-list=NoWG
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for NoVdsina" disabled=yes dst-address-list=NoVdsina \
+    new-routing-mark=main passthrough=no src-address=10.30.30.0/24
+add action=mark-connection chain=prerouting comment=\
+    "Transit for address-list \"to_vpn\"" connection-mark=no-mark disabled=\
+    yes dst-address-list=to_vpn in-interface-list=!WAN new-connection-mark=\
+    to-vpn-conn routing-mark=!main
+add action=mark-routing chain=prerouting comment=\
+    "Find routing over table r_to_vpn" connection-mark=to-vpn-conn disabled=\
+    yes in-interface-list=!WAN new-routing-mark=r_to_vpn
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for VDSina" dst-address-list=VPN-Server \
+    new-routing-mark=main passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\
+    Unet new-routing-mark=main passthrough=no
+add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\
+    To-VPN src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \
+    new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment="WG for all" \
+    dst-address-list=!NoVdsina new-routing-mark=To-VPN src-address=\
+    10.30.30.0/24
+add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \
+    out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\
+    1381-65535
+add action=mark-connection chain=prerouting comment=\
+    "Mark VPN connections to exclude from FastTrack" disabled=yes \
+    new-connection-mark=VPN_No_FastTrack routing-mark=To-VPN
+add action=mark-routing chain=prerouting comment="VPN Network" disabled=yes \
+    dst-address=10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24
+add action=mark-connection chain=output comment="For this router" \
+    connection-mark=no-mark disabled=yes dst-address-list=to_vpn \
+    new-connection-mark=to-vpn-conn-local
+add action=mark-routing chain=output comment="For this router" \
+    connection-mark=to-vpn-conn-local disabled=yes new-routing-mark=r_to_vpn
+/ip firewall nat
+add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=masquerade chain=srcnat comment=\
+    "Nat Addresses for routing mark r_to_vpn" disabled=yes routing-mark=\
+    r_to_vpn
+add action=dst-nat chain=dstnat comment=\
+    "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=VPN-Server \
+    to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat comment=\
+    "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\
+    udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\
+    Unet-ether1 protocol=udp src-address=!10.30.30.0/24 to-addresses=\
+    10.30.30.33 to-ports=44333
+add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \
+    routing-mark=To-VPN
+add action=masquerade chain=srcnat comment="Default NAT" out-interface=\
+    Unet-ether1 routing-mark=!To-VPN src-address=10.30.30.0/24
+add action=dst-nat chain=dstnat dst-port=44044 in-interface=Unet-ether1 \
+    protocol=udp src-address=109.107.177.79 to-addresses=10.30.30.33 \
+    to-ports=44044
+add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \
+    fragment=no in-interface=Unet-ether1 protocol=tcp routing-mark=main \
+    to-addresses=10.30.30.33 to-ports=443
+add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \
+    dst-port=80 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=80
+add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \
+    dst-port=2904 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2904
+add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\
+    5000 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=5000
+add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\
+    2377 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=2377
+add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\
+    Unet-ether1 protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \
+    to-ports=81
+add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\
+    Unet-ether1 protocol=tcp src-address-list=TRUSTED to-addresses=\
+    10.30.30.33 to-ports=22
+add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \
+    dst-port=2377 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2377
+add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\
+    Unet-ether1 protocol=tcp routing-mark=!To-VPN to-addresses=10.30.30.33 \
+    to-ports=22
+add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \
+    dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \
+    time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\
+    Bridge-LAN protocol=tcp src-address-list=KIDS time=\
+    6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+/ip firewall raw
+add action=drop chain=prerouting comment="Drop Honeypot Hackers" \
+    in-interface=Unet-ether1 src-address-list="Honeypot Hacker"
+add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \
+    in-interface-list=WAN src-address-list=Trusted-DNS
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \
+    content=linux.duke.edu disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleapis.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googlevideo.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleusercontent.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    nhacmp3youtube.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \
+    content=rutube.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \
+    content=me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "icloud.com raw" content=icloud.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \
+    disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "api.db-ip.com raw" content=api.db-ip.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \
+    content=gosuslugi.ru disabled=yes
+/ip firewall service-port
+set ftp disabled=yes
+set tftp disabled=yes
+set irc disabled=no
+set sip disabled=yes
+set pptp disabled=yes
+set rtsp disabled=no
+/ip ipsec settings
+set accounting=no
+/ip ipsec policy
+set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0
+/ip ipsec profile
+set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
+/ip proxy
+set cache-administrator="" max-cache-size=none port=80,443 src-address=\
+    0.0.0.0
+/ip route
+add check-gateway=none comment=WG-Default disabled=no distance=1 dst-address=\
+    0.0.0.0/0 gateway=WG routing-table=To-VPN scope=30 target-scope=10
+/ip service
+set ftp disabled=yes
+set telnet disabled=yes
+set reverse-proxy disabled=yes
+set ssh address=10.30.30.0/24 port=2222
+set winbox address=10.30.30.0/24
+set api address=10.30.30.0/24
+set api-ssl address=10.30.30.0/24 disabled=yes
+set www-ssl certificate=Root-YE port=18443
+set www address=10.30.30.0/24 disabled=yes port=18880
+/ip service webserver
+set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\
+    no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \
+    webfig-secure=no
+/ip ssh
+set forwarding-enabled=both publickey-authentication-options=verify-required
+/ip upnp
+set enabled=yes
+/ip upnp interfaces
+add interface=Bridge-LAN type=internal
+add forced-ip=146.120.64.211 interface=Unet-ether1 type=external
+add forced-ip=109.107.177.79 interface=*E type=external
+add interface=lo type=internal
+add interface=wlan2 type=internal
+add interface=wlan1 type=internal
+/ipv6 dhcp-client
+add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\
+    info use-interface-duid=yes validate-server-duid=no
+/ipv6 dhcp-server option sets
+add name=domain-search-set options=domain-search-list
+add name="=\"Client ID\"" options=HostName
+/ipv6 firewall address-list
+add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
+add address=::1/128 comment="defconf: lo" list=bad_ipv6
+add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
+add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
+add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
+add address=100::/64 comment="defconf: discard only " list=bad_ipv6
+add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
+add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
+add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
+/ipv6 firewall filter
+add action=accept chain=input comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=input comment="defconf: drop invalid" connection-state=\
+    invalid
+add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=input comment="defconf: accept UDP traceroute" \
+    dst-port=33434-33534 protocol=udp
+add action=accept chain=input comment=\
+    "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
+    udp src-address=fe80::/10
+add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
+    protocol=udp
+add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=input comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=input comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+add action=accept chain=forward comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
+add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
+    hop-limit=equal:1 protocol=icmpv6
+add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=forward comment="defconf: accept HIP" protocol=139
+add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
+    500,4500 protocol=udp
+add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=forward comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=forward comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+/ipv6 nd
+set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \
+    managed-address-configuration=yes other-configuration=yes pref64=::/64
+/ipv6 nd prefix
+add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none
+/ipv6 nd prefix default
+set dhcp6-pd-preferred=yes
+/ipv6 nd proxy
+add disabled=yes interface=lo
+/ipv6 nd settings
+set router-advertisement-route-distance=100
+/routing settings
+set single-process=no
+/system clock
+set time-zone-name=Europe/Moscow
+/system clock manual
+set time-zone=+03:00
+/system identity
+set name=MikroMaster
+/system logging
+add action=email disabled=yes regex="* added|changed|removed *" topics=\
+    system,info
+/system ntp client
+set enabled=yes
+/system ntp server
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes
+/system ntp client servers
+add address=0.ru.pool.ntp.org
+add address=1.ru.pool.ntp.org
+add address=2.ru.pool.ntp.org
+add address=3.ru.pool.ntp.org
+add address=time.google.com disabled=yes
+/system package update
+set check-certificate=yes-without-crl ip-version=ipv4
+/system scheduler
+add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \
+    on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Every Day Check For Update Scripts" interval=1d name=\
+    AM-ScriptInstallUpdate on-event=\
+    ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\
+    AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+/system watchdog
+set watchdog-timer=no
+/tool e-mail
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \
+    server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com
+/tool mac-server
+set allowed-interface-list=LAN
+/tool mac-server mac-winbox
+set allowed-interface-list=LAN
+/tool netwatch
+add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\
+    -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\
+    e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \
+    interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\
+    https-get up-script=""
+add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\
+    flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\
+    oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \
+    name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \
+    up-script=""
+add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\
+    8.8.8.8 down-script="" host=dns.google http-codes="" name=\
+    "Google-DNS IPv4" test-script="" type=dns up-script=""
+add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\
+    rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\
+    -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \
+    http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\
+    "" test-script="" type=dns up-script=""
+add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \
+    dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \
+    interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \
+    test-script="" timeout=800ms type=dns up-script=""
+add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\
+    ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \
+    down-script="" host=149.112.112.112 http-codes="" interval=10s name=\
+    "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script=""
+add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \
+    down-script="" host=91.192.189.2 http-codes="" interval=10s name=\
+    ns1.unet.ws test-script="" type=simple up-script=""
+add check-certificate=yes comment=\
+    "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \
+    disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\
+    vds.vados.ru port=443 test-script="" type=https-get up-script=""
+add comment="WireGuard NAT " disabled=yes down-script="/log info \"[WG-Monitor\
+    ] WireGuard is NOT running - reverting rules\"\
+    \n/ip firewall nat remove [find comment=\"Redirect to Router\"]\
+    \n/ip dns set servers=8.8.8.8\
+    \n/ip dns cache flush\
+    \n/ip route remove [find comment=\"wg-auto-route\"]\
+    \n" host=10.8.0.1 http-codes="" interval=15s name=WG test-script="" \
+    timeout=5s type=simple up-script="/log info \"[WG-Monitor] WireGuard is RU\
+    NNING - applying rules\";\
+    \n:local routeFile \"ips.txt\";\
+    \n:local routeDefAddr \"0.0.0.0/0\";\
+    \n:local routeGateway \"10.8.0.1\";\
+    \n:local routeIF \"WG\";\
+    \n:local routeTable \"To-VPN\";\
+    \n:local routeComment \"wg-auto-route\";\
+    \n/ip dns cache flush;\
+    \n:if ([:len [/ip firewall nat find comment=\"Redirect to Router\"]] > 0) \
+    do={\
+    \n  /ip firewall nat remove [find comment=\"Redirect to Router\"];\
+    \n}\
+    \n/ip firewall nat add action=redirect chain=dstnat src-address-list=\"Red\
+    irectDNS\" dst-port=53 protocol=udp comment=\"Redirect to Router\";\
+    \n/ip dns set servers=\$routeGateway;\
+    \n:local content [/file get \$routeFile contents];\
+    \n:if ([:len \$content] > 0) do={\
+    \n    :local line \"\";\
+    \n    :for i from=0 to=([:len \$content] - 1) do={\
+    \n        :local char [:pick \$content \$i];\
+    \n        :if (\$char != \"\\r\" && \$char != \"\\n\") do={\
+    \n            :set line (\$line . \$char);\
+    \n        } else={\
+    \n            :if ([:len \$line] > 5) do={\
+    \n                :do { /ip route add disabled=no dst-address=\$routeDefAd\
+    dr gateway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$r\
+    outeTable comment=\$routeComment check-gateway=none } on-error={}\
+    \n            }\
+    \n            :set line \"\";\
+    \n        }\
+    \n    }\
+    \n    :if ([:len \$line] > 5) do={\
+    \n#         :do { /ip route add dst-address=\$line gateway=\$routeGateway \
+    distance=1 comment=\$routeComment } on-error={}\
+    \n           :do { /ip route add disabled=no dst-address=\$routeDefAddr ga\
+    teway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$routeT\
+    able comment=\$routeComment check-gateway=none } on-error={}\
+    \n    }\
+    \n}\
+    \n:local dotPos [:find \$routeGateway \".\"];\
+    \n:if (\$dotPos != \"\") do={\
+    \n    :local firstOctet [:pick \$routeGateway 0 \$dotPos];\
+    \n    :local derivedDstAddress (\$firstOctet . \".30.0.0/15\");\
+    \n    :do { /ip route add dst-address=\$derivedDstAddress gateway=\$routeG\
+    ateway distance=1 comment=\$routeComment } on-error={}\
+    \n}\
+    \n\
+    \n"
+add comment=WG-Default disabled=yes down-script=\
+    "/ip route disable [find comment=\"WG-Default\"];" host=10.8.0.1 \
+    interval=15s name=WG packet-count=20 test-script="" thr-loss-count=5 \
+    type=icmp up-script="/ip route enable [find comment=\"WG-Default\"];"
+/user aaa
+set accounting=no
diff --git a/MikroMaster/20260712/20260712054002-Config.rsc b/MikroMaster/20260712/20260712054002-Config.rsc
new file mode 100644
index 0000000..a3c2332
--- /dev/null
+++ b/MikroMaster/20260712/20260712054002-Config.rsc
@@ -0,0 +1,3841 @@
+# 2026-07-12 05:40:06 by RouterOS 7.23.1
+# software id = A8L5-07YF
+#
+# model = RB952Ui-5ac2nD
+# serial number = D3D50CEDCD38
+/interface bridge
+add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\
+    "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\
+    Bridge-LAN port-cost-mode=short
+/interface ethernet
+set [ find default-name=ether1 ] comment=Unet-cable loop-protect=off name=\
+    Unet-ether1 rx-flow-control=auto tx-flow-control=auto
+set [ find default-name=ether2 ] comment=LAN-2
+set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3
+set [ find default-name=ether4 ] comment=LAN-4
+set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \
+    loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto
+/interface wireless
+# managed by CAPsMAN
+# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding
+set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados wireless-protocol=802.11
+# managed by CAPsMAN
+# channel: 5260/20-Ceee/ac/DP(18dBm), SSID: vados5g, local forwarding
+set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados5g wireless-protocol=802.11
+/interface wireguard
+add comment=WG listen-port=13231 mtu=1320 name=WG
+add comment="WG interface for Amnezia route" disabled=yes listen-port=33033 \
+    mtu=1360 name=wg-nuc
+/interface list
+add include=static name=LAN
+add name=Internet
+add include=Internet name=WAN
+/interface wireless security-profiles
+set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
+    dynamic-keys supplicant-identity=MikroTik
+/iot wiliot servers
+set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East"
+/ip dhcp-server option
+add code=12 name=HostName
+add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00"
+/ip dhcp-server option sets
+add name=HP1505n options=HostName
+add name=StartLife1 options=HostName
+add name=amsterDev options=HostName
+add name=MiTV options=HostName
+add name=miller options=HostName
+add name=amster options=HostName
+add name=garage options=HostName
+add name=domain-search-set options=domain-search-list
+add name=VADOS-LEN options=HostName
+add name=VADOS-NUC options=HostName
+add name=MikroNUC options=HostName
+add name=master options=HostName
+add name=MikroYellow options=HostName
+add name="=\"Client ID\"" options=HostName
+add name=iVados options=HostName
+/ip dns forwarders
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no
+add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \
+    verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no
+/ip ipsec proposal
+set [ find default=yes ] disabled=yes
+/ip pool
+add name=dhcp ranges=10.30.30.83-10.30.30.254
+/ip dhcp-server
+add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \
+    dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \
+    name=masterDHCP server-address=10.30.30.81
+/ip smb users
+set [ find default=yes ] disabled=yes
+add disabled=yes name=vados
+/ipv6 dhcp-client option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=DUID value=0x00030001488f5a8e1abc
+add code=61 name=clientid
+/ipv6 dhcp-server option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=CLIENT_DUID
+add code=61 name=CLIENT_MAC
+/ppp profile
+set *FFFFFFFE use-upnp=no
+/routing bgp template
+set default disabled=no output.network=bgp-networks
+/routing table
+add disabled=no fib name=To-VPN
+add disabled=no fib name=r_to_vpn
+/system logging action
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email
+/system script
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\
+    \n\r\
+    \n#:local Script AM-setup\
+    \n;\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n\
+    \n\r\
+    \n#\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\
+    \n\r\
+    \n#\r\
+    \n\
+    \n#root.mnuc.backuper\
+    \n\
+    \n\r\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\
+    .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\
+    \n\
+    \n#:local Script AM-GlobalConfig;\
+    \n\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n#:local FetchFile AM-DOHCert.rsc\
+    \n\
+    \n\r\
+    \n\r\
+    \n#\
+    \n:global MkDir;\
+    \n\r\
+    \n\
+    \n#:local FetchFile Binary.backup\
+    \n:local localDir \"\";\
+    \n\
+    \n\r\
+    \n#\$MkDir \$localDir;\r\
+    \n\
+    \n#\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\
+    \$localDir . \$FetchFile);\r\
+    \n"
+add comment="Global Config Script" dont-require-permissions=no name=\
+    AM-GlobalConfig owner=AM-GlobalConfig policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GlobalConfig\r\
+    \n# Script comment: Global Config Script\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# Warning: Dont touch this line!\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global GlobalConfReady false;\r\
+    \n#\r\
+    \n#\r\
+    \n# Global Url For Amster scripts to fetch\r\
+    \n# most be defined in AM-Init-Script or AM-setup scripts\r\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n:global ScriptsUrlSuffix (a);\r\
+    \n:global CheckSumsVerify true;\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF true;\r\
+    \n:global CommentsInScripts true;\r\
+    \n\r\
+    \n# Debug output:\r\
+    \n:global PrintDebug true; #false;\r\
+    \n\r\
+    \n# Debug output for specific script:\r\
+    \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\
+    \n\r\
+    \n# Debug logs\r\
+    \n# Other actions (disk, email, remote or support) can be used as well.\r\
+    \n# I do not recommend using echo - use debug output instead (https://rsc.\
+    eworm.de/main/DEBUG.html#debug-output).\r\
+    \n#/system/logging/add topics=script,debug action=memory;\r\
+    \n\r\
+    \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\
+    \n:global Domain \"WORKGROUP\";\r\
+    \n\r\
+    \n:global EmailGeneralTo \"vados@vados.ru\";\r\
+    \n#:global EmailGeneralCc \"\";\r\
+    \n\r\
+    \n# \$ScriptInstallUpdate mod/notification-telegram\r\
+    \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\
+    \";\r\
+    \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\
+    \n# Use this to send notifications to a specific topic in group.\r\
+    \n#:global TelegramThreadId \"30\";\r\
+    \n# Using telegram-chat you have to define trusted chat ids (not group ids\
+    !)\r\
+    \n# or user names. Groups allow to chat with devices simultaneously.\r\
+    \n:global TelegramChatIdsTrusted {\r\
+    \n  \"454403445\"\r\
+    \n  \"-1003631309063\"\r\
+    \n  \"-5124482807\"\r\
+    \n  \"1087968824\";\r\
+    \n};\r\
+    \n#  \"-5294757340\";\r\
+    \n\r\
+    \n:global TelegramChatGroups \"(all)\";\r\
+    \n#:global TelegramChatGroups \"(all|home|office)\";\r\
+    \n\r\
+    \n:global NotificationFunctions {\r\
+    \n  \"email\"\r\
+    \n  \"telegram\";\r\
+    \n};\r\
+    \n# Toggle this to disable symbols in notifications.\r\
+    \n:global NotificationsWithSymbols true;\r\
+    \n:global TerminalColorOutput true;\r\
+    \n\r\
+    \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\
+    \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\
+    \n\r\
+    \n## Update channel. Possible values: stable, long-term, testing, developm\
+    ent\r\
+    \n:global updateChannel \"stable\";\r\
+    \n\r\
+    \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\
+    \");\r\
+    \n:global CertRenewTime 2w;\r\
+    \n:global CertRenewPass (a); #{\r\
+    \n#  \"\";\r\
+    \n#  \"v3ry-s3cr3t\";\r\
+    \n#  \"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n:global CertWarnTime 1w;\r\
+    \n:global CertIssuedExportPass (a); # {\r\
+    \n#  \"\";\r\
+    \n#  \"cert1-cn\"=\"v3ry-s3cr3t\";\r\
+    \n#  \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n\r\
+    \n# Script BackupAndUpdate mode, possible values: backup,\r\
+    \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\
+    n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;).  \r\
+    \n# osupdate - Update if available and creates backups before/after update\
+    \_(ignores `forceBackup`)\r\
+    \n#               Set `forceBackup` to true to always create backups, even\
+    \_without updates\r\
+    \n# osnotify - Set `forceBackup` to always create backups on every run\r\
+    \n:global DevInfoIncludeIP true;\r\
+    \n:global BackupAndUpdateMode \"osnotify\"\r\
+    \n\r\
+    \n:global forceBackup true;\r\
+    \n:global BackupPassword \"Peskar55\";\r\
+    \n\r\
+    \n# SFTP Backup Variables\r\
+    \n:global BackupRandomDelay 0;\r\
+    \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\
+    \n:global BackupUploadUser \$Identity;\r\
+    \n:global BackupUploadPass \"root.mnuc.backuper\";\r\
+    \n\r\
+    \n:global BackupSendBinary true;\r\
+    \n:global BackupSendExport true;\r\
+    \n:global BackupSendGlobalConfig true;\r\
+    \n:global BackupSendScripts true;\r\
+    \n\r\
+    \n# Remove local file after uploading if no errors\r\
+    \n:global BackupRmLocal true;\r\
+    \n\r\
+    \n# Local Backups Root Directory \r\
+    \n:global BackupLocalRoot \"tmpfs\";\r\
+    \n\r\
+    \n# Encrypt Backup\r\
+    \n:global BackupEncrypt true;\r\
+    \n\r\
+    \n# Sensitive information in Backups\r\
+    \n:global BackupSens true;\r\
+    \n\r\
+    \n# User Export\r\
+    \n:global BackupUser true;\r\
+    \n\r\
+    \n# License Export (not for CHR, will silently skip)\r\
+    \n:global BackupLicense false;\r\
+    \n\r\
+    \n# SSH Keys\r\
+    \n:global BackupSshKeys true;\r\
+    \n\r\
+    \n# Certificate Export\r\
+    \n:global BackupCerts true;\r\
+    \n\r\
+    \n# Certificate Password\r\
+    \n:global BackupCertsPasswd \"\";\r\
+    \n\r\
+    \n# User-Manager Export\r\
+    \n:global BackupUserMan false;\r\
+    \n\r\
+    \n# The Dude Export\r\
+    \n:global BackupDude false;\r\
+    \n\r\
+    \n# User Files to export, comma-separated string or array of strings\r\
+    \n# User Files are not removed on backup\r\
+    \n# Any directory paths will be removed (/ -> _) on remote file\r\
+    \n# Nonpresent files are silently skipped\r\
+    \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\
+    \n\r\
+    \n# load functions and any custom scripts\r\
+    \n#                    [ /system/script/find where name=\"global-config-ov\
+    erlay\" ], \\\r\
+    \n#                    [ /system/script/find where name~\"^global-config-o\
+    verlay\\\\.d/.\" ]\r\
+    \n#\r\
+    \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\
+    ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\
+    \r\
+    \n#  :onerror Err {\r\
+    \n#     /system/script/run \$Script;\r\
+    \n#     } do={\r\
+    \n#       :log error (\"Loading configuration from configs and functions\"\
+    \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\
+    \n#  }\r\
+    \n#}\r\
+    \n#:log info \"\\ndevMode = \$devMode\";\r\
+    \n#:log info \"\\ndevRunning = \$devRunning\";\r\
+    \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \
+    GlobalRUN\\r\?\\n\" ] do={\r\
+    \n  :onerror Err {\r\
+    \n    /system/script/run \$Script;\r\
+    \n       } do={\r\
+    \n       :log error (\"Run script \" . [ /system/script/get \$Script name \
+    ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# signal we are ready\r\
+    \n:set GlobalConfReady true;\r\
+    \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\
+    \n"
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \
+    owner=AM-GlobalFunc policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GglobalFunc\r\
+    \n# Script comment: Global functions\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch, scheduler\r\
+    \n:local ExitOK false;\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n#:global checkRunJob \$SriptName;\r\
+    \n#:global fixCRLF;\r\
+    \n#:if (\$fixCRLF !=  false) do={\r\
+    \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\
+    ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\
+    }\r\
+    \n#:if (\$fixCRLF !=  \"LF\") do={ /system/script/set source=[ :tocrlf [ g\
+    et \$fixScript source ] ] \$fixScript};};\r\
+    \n#}\r\
+    \n:global GlobalFuncReady false;\r\
+    \n\r\
+    \n# Git commit id & info, expected configuration version\r\
+    \n:global CommitId \"main/729/f42d43ae\";\r\
+    \n:global CommitTAG \"unknown\";\r\
+    \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\
+    r: root, in 00:05:03 01.07.2026.\";\r\
+    \n\r\
+    \n# The variables are received right here.\r\
+    \n:global GlobalConfVersion 140;\r\
+    \n\r\
+    \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\
+    \n\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global IdentityShort [:pick \$Identity 0 18];\r\
+    \n\r\
+    \n:global devBoardName [/system/resource/get board-name];\r\
+    \n:global devMode [/system/device-mode/get mode];\r\
+    \n:global devCurArch [/system/resource/get architecture-name];\r\
+    \n:global devCurVersion [/system/resource/get version];\r\
+    \n\r\
+    \n# Variables defined in AM-GlobalConfig.rsc\r\
+    \n:global TerminalColorOutput;\r\
+    \n:global CommentsInScripts;\r\
+    \n:global DetectIpAddrDefault;\r\
+    \n:global DetectIpAddrFallback;\r\
+    \n:global updateChannel;\r\
+    \n:global Domain;\r\
+    \n:global EmailGeneralTo;\r\
+    \n:global BackupAndUpdateMode;\r\
+    \n\r\
+    \n# Single functions, without nested functions.\r\
+    \n:global MiniDateTimeStamp;\r\
+    \n:global MicroDateTimeStamp;\r\
+    \n\r\
+    \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\
+    \n:global LogPrint;\r\
+    \n\r\
+    \n# DeviceInfo and Updates\r\
+    \n:global IsCheckUpdates;\r\
+    \n:global WaitCheckUpdates;\r\
+    \n:global GetPubIp;\r\
+    \n\r\
+    \n:global GetArrDeviceInfo;\r\
+    \n:global WaitArrDeviceInfo;\r\
+    \n\r\
+    \n:global devModel;\r\
+    \n:global devRunningMode;\r\
+    \n\r\
+    \n:global devRbRevision;\r\
+    \n:global devRbSerialNumber;\r\
+    \n:global devRbVerAvail;\r\
+    \n\r\
+    \n:global runningChannelVersion;\r\
+    \n:global runningChannel;\r\
+    \n:global runningVersion;\r\
+    \n\r\
+    \n:global devBuildTime;\r\
+    \n:global ROsVerAvail;\r\
+    \n:global PkgUpdStatus;\r\
+    \n:global currentUpdateChannel;\r\
+    \n\r\
+    \n:global ScriptInstallUpdate;\r\
+    \n\r\
+    \n:global DeviceInfo;\r\
+    \n\r\
+    \n:global OldMode;\r\
+    \n\r\
+    \n:global ParseKeyValueStore;\r\
+    \n:global RandomDelay;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global EscapeForRegEx;\r\
+    \n:global CharacterMultiply;\r\
+    \n:global CharacterReplace;\r\
+    \n:global CleanFilePath;\r\
+    \n:global CleanName;\r\
+    \n\r\
+    \n:global CommitBrief;\r\
+    \n\r\
+    \n:global EitherOr;\r\
+    \n:global FormatLine;\r\
+    \n:global GetRandom20CharAlNum;\r\
+    \n:global GetRandom20CharHex;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global Grep;\r\
+    \n:global IfThenElse;\r\
+    \n:global MAX;\r\
+    \n:global MIN;\r\
+    \n:global HumanReadableNum;\r\
+    \n\r\
+    \n:global IsFullyConnected;\r\
+    \n:global IsDNSResolving;\r\
+    \n:global IsTimeSync;\r\
+    \n:global IsTimeSyncCached;\r\
+    \n:global IsTimeSyncResetNtp;\r\
+    \n\r\
+    \n:global MkDir;\r\
+    \n:global RmDir;\r\
+    \n:global RmFile;\r\
+    \n:global FileGet;\r\
+    \n:global Unix2Dos;\r\
+    \n:global UrlEncode;\r\
+    \n:global WaitForFile;\r\
+    \n:global ScriptLock;\r\
+    \n:global SendTelegram;\r\
+    \n:global NotificationFunctions;\r\
+    \n:global SendNotification;\r\
+    \n:global SendNotification2;\r\
+    \n:global SymbolForNotification;\r\
+    \n:global SymbolByUnicodeName;\r\
+    \n:global ValidateSyntax;\r\
+    \n:global CheckSumsVerify;\r\
+    \n:global GlobalConfChanges;\r\
+    \n:global GlobalConfMigration;\r\
+    \n:global VersionToNum;\r\
+    \n:global RequiredRouterOS;\r\
+    \n:global ExitError;\r\
+    \n:global ExitOnError;\r\
+    \n\r\
+    \n:global FetchHugeFiles;\r\
+    \n:global FetchUserAgentStr;\r\
+    \n:global FileExists;\r\
+    \n:global CertificateAvailable;\r\
+    \n:global CertificateDownload;\r\
+    \n:global CertificateNameByCN;\r\
+    \n:global CharacterMultiply;\r\
+    \n\r\
+    \n:global InspectVar;\r\
+    \n:global InspectVarRet;\r\
+    \n:global ParseCustom;\r\
+    \n\r\
+    \n:set IsCheckUpdates do={\r\
+    \n  :local isInfo [:tobool \$1];\r\
+    \n  :global updateChannel;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\
+    \n  :local CurrentChannel [ /system/package/update/get channel ];\r\
+    \n  :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\
+    el) do={\r\
+    \n    :retry command={/system/package/update set channel=\$updateChannel} \
+    \_delay=300ms max=5 on-error={};\r\
+    \n    :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\
+    \n  }\r\
+    \n  :local Update [ /system/package/update/get ];\r\
+    \n  :local Channel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set currentUpdateChannel \$Channel;\r\
+    \n  :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\
+    \n  :local StatusPkg \"undefined\";\r\
+    \n  :log info (\$0 . \" Checking for updates...\");\r\
+    \n  :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\
+    dates without-paging as-value]->\"status\")} \\\r\
+    \n   delay=300ms max=5 on-error={};\r\
+    \n  :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\
+    \n  :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\
+    s true; } else={ :set PkgUpdStatus false; }\r\
+    \n  :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \
+    ] ];\r\
+    \n  :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n  :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\
+    \n    :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n    :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n      :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n    }\r\
+    \n    :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\
+    kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\
+    \n    :return true;\r\
+    \n  } else={\r\
+    \n    :return \$PkgUpdStatus;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitCheckUpdates do={\r\
+    \n  :global IsCheckUpdates;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :local Status \"\";\r\
+    \n  :local Update;\r\
+    \n  :local WaitCount 0;\r\
+    \n  :if ([ \$IsCheckUpdates true ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n  :while ((\$Status = \"\" || \$Status = \"finding out latest version...\
+    \") && \$WaitCount < 60) do={\r\
+    \n    :delay 1s;\r\
+    \n    :set WaitCount (\$WaitCount + 1);\r\
+    \n    :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n   }\r\
+    \n  :set Update [ /system/package/update/get ];\r\
+    \n  :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n  :if ((\$Update->\"status\") = \"New version is available\") do={\r\
+    \n    :set PkgUpdStatus true;\r\
+    \n  } else={\r\
+    \n    :set PkgUpdStatus false;\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n    :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n  }\r\
+    \n  :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\
+    \n  :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \
+    do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitArrDeviceInfo do={\r\
+    \n   :global GetArrDeviceInfo;\r\
+    \n   :while ([ \$GetArrDeviceInfo ] = false) do={\r\
+    \n    :delay 1s;\r\
+    \n   }\r\
+    \n}\r\
+    \n\r\
+    \n:set GetArrDeviceInfo do={\r\
+    \n   :global LogPrint;\r\
+    \n   :global arrDeviceInfo;\r\
+    \n   :global devBoardName;\r\
+    \n   :global devModel;\r\
+    \n   :global devRunning;\r\
+    \n   :global devCurArch;\r\
+    \n   :global devRbRevision;\r\
+    \n   :global devRbSerialNumber;\r\
+    \n   :global devBuildTime;\r\
+    \n   :global runningChannelVersion;\r\
+    \n   :global runningChannel;\r\
+    \n   :global runningVersion;\r\
+    \n   :global currentUpdateChannel;\r\
+    \n   :global ROsVerAvail;\r\
+    \n\r\
+    \n   :local DeviceInfo;\r\
+    \n   :local Resource [/system/resource/get];\r\
+    \n   :local Update [ /system/package/update/get ];\r\
+    \n   :local VersionString [ :tostr (\$Resource->\"version\") ];\r\
+    \n   :local ChannelStart [ :find \$VersionString \" (\" ];\r\
+    \n   :local RouterBoard;\r\
+    \n   :local IsRouterBoard false;\r\
+    \n   :local RunningMode \"\";\r\
+    \n\r\
+    \n   :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\
+    \n   :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\
+    \n   :set runningChannelVersion \$VersionString;\r\
+    \n   :set runningVersion \$VersionString;\r\
+    \n   :set runningChannel \"\";\r\
+    \n\r\
+    \n   :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\
+    {\r\
+    \n     :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\
+    \n     :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\
+    len \$VersionString ] ];\r\
+    \n     :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\
+    \n     :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\
+    \r\
+    \n       :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\
+    \n     }\r\
+    \n   }\r\
+    \n\r\
+    \n   :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\
+    \_3] != \"x86\") do={\r\
+    \n   :do {\r\
+    \n      :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\
+    \n#     :set RouterBoard [ /system/routerboard/get ];\r\
+    \n      :if ((\$RouterBoard->\"routerboard\") = true) do={\r\
+    \n        :set IsRouterBoard true;\r\
+    \n     }\r\
+    \n   } on-error={}\r\
+    \n    }\r\
+    \n\r\
+    \n   :do {\r\
+    \n     :set RunningMode [ /system/device-mode/get mode ];\r\
+    \n   } on-error={\r\
+    \n     :do {\r\
+    \n       :set RunningMode [ /system/device-mode/get running ];\r\
+    \n     } on-error={\r\
+    \n       :set RunningMode \"\";\r\
+    \n     }\r\
+    \n   }\r\
+    \n   :set devRunning \$RunningMode;\r\
+    \n\r\
+    \n   :if (\$IsRouterBoard = true) do={\r\
+    \n     :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\
+    \n     :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\
+    \n     :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \
+    ];\r\
+    \n   } else={\r\
+    \n     :set devModel \$devBoardName;\r\
+    \n     :set devRbRevision \"\";\r\
+    \n     :set devRbSerialNumber \"\";\r\
+    \n   }\r\
+    \n\r\
+    \n   :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n   :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n\r\
+    \n   :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\
+    \n   :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\
+    \n   :set (\$DeviceInfo->\"model\") \$devModel;\r\
+    \n   :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\
+    \n   :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\
+    \n   :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\
+    \n   :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\
+    \n   :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\
+    ion;\r\
+    \n   :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\
+    \n   :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\
+    \n   :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\
+    \n   :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\
+    current-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\
+    upgrade-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\
+    \n   :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\
+    alled-version\") ];\r\
+    \n   :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\
+    \n   :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\
+    ) ];\r\
+    \n\r\
+    \n   :set arrDeviceInfo \$DeviceInfo;\r\
+    \n   :return \$DeviceInfo;\r\
+    \n}\r\
+    \n\r\
+    \n:set DeviceInfo do={\r\
+    \n  :global GetArrDeviceInfo;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global FormatLine;\r\
+    \n  :global CommitBrief;\r\
+    \n\r\
+    \n  :local License [/system/license/get];\r\
+    \n  :local Snmp [ /snmp/get ];\r\
+    \n  :local Info [ \$GetArrDeviceInfo ];\r\
+    \n\r\
+    \n  :if ([ :typeof \$Info ] != \"array\") do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :return ( \\\r\
+    \n    [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\
+    \_. \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\
+    \_\\\r\
+    \n    \"Hardware:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Board\" (\$Info->\"board-name\") ] . \"\\n\" . \
+    \\\r\
+    \n    [ \$FormatLine \"    Arch\" (\$Info->\"architecture-name\") ] . \"\\\
+    n\" . \\\r\
+    \n    [ \$FormatLine \"    Model\" (\$Info->\"model\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\
+    \n      (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Serial\" (\$Info->\"serial-number\") ] . \"\
+    \\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"nlevel\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS:\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"level\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    [ \$FormatLine \"    Channel\" (\$Info->\"package-channel\") ] . \"\
+    \\n\" . \\\r\
+    \n    [ \$FormatLine \"    Installed\" (\$Info->\"installed-version\") ] .\
+    \_\"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Running\" ((\$Info->\"running-version\") . \
+    \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\
+    \n      ([ \$FormatLine \"    Running\" (\$Info->\"running-version\") ] . \
+    \"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\
+    \n        (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\
+    \_\\\r\
+    \n      ([ \$FormatLine \"    Available\" (\$Info->\"latest-version\") ] .\
+    \_\"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\
+    \n        (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\
+    ) \\\r\
+    \n      ([ \$FormatLine \"    Firmware\" ((\$Info->\"current-firmware\") .\
+    \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS-Scripts:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Version\" \$GlobalConfVersion ]);\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\
+    tionFunctions ({})}\r\
+    \n\r\
+    \n:set GetRandom20CharAlNum do={\r\
+    \n  :global EitherOr;\r\
+    \n  :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\
+    FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\
+    \n}\r\
+    \n\r\
+    \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\
+    \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\
+    \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\
+    \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\
+    \n\r\
+    \n:global checkRunJob;\r\
+    \n:set checkRunJob do={\r\
+    \n  :local Script [ :tostr \$1 ];\r\
+    \n  :global ScriptLock; \r\
+    \n  :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\
+    \n  :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\
+    :set Job [ /system/script/job/get \$Job ];\r\
+    \n    :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\
+    stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\
+    \n     :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\
+    lse; \r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVar do={\r\
+    \n  :global InspectVarRet;\r\
+    \n  :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\
+    \n}\r\
+    \n\r\
+    \n:set CommitBrief do={\r\
+    \n  :global CommitId;\r\
+    \n  :global CommitInfo;\r\
+    \n  :if (\$CommitId = \"unknown\") do={\r\
+    \n    :return \"unknown\";\r\
+    \n    }\r\
+    \n  :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVarRet do={\r\
+    \n  :local Input \$1;\r\
+    \n  :local Level (0 + [ :tonum \$2 ]);\r\
+    \n  :global CharacterReplace;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global InspectVarRet;\r\
+    \n  :local IndentReturn do={\r\
+    \n    :local Prefix [ :tostr \$1 ];\r\
+    \n    :local Value  [ :tostr \$2 ];\r\
+    \n    :local Level  [ :tonum \$3 ];\r\
+    \n    :global CharacterMultiply;\r\
+    \n    :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\
+    fix . \"-> \" . \$Value);\r\
+    \n  }\r\
+    \n  :local TypeOf [ :typeof \$Input ];\r\
+    \n  :local Len    [ :len \$Input ];\r\
+    \n  :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\
+    \n  :if (\$TypeOf = \"array\") do={\r\
+    \n    :foreach Key,Value in=\$Input do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n        [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\
+    \n        [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    :if (\$TypeOf = \"str\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n         [ \$IndentReturn \"len\" \$Len \$Level ]);\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\
+    \n      }\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if (\$TypeOf != \"nothing\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n       [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\
+    \_\\\r\
+    \n        ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set GetPubIp do={\r\
+    \n    :global DetectIpAddrDefault;\r\
+    \n    :global DetectIpAddrFallback;\r\
+    \n\r\
+    \n    :local PubIpAddr false;\r\
+    \n    :local Url \$DetectIpAddrDefault;\r\
+    \n    :local JobName [ :jobname ];\r\
+    \n\r\
+    \n    :do {\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using default serv\
+    ice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \
+    detect public IP using default service: \" . \$Url . \".\")}\r\
+    \n     } on-error={\r\
+    \n      :log error (\$0 . \" Failed to detect public IP using default serv\
+    ice: \" . \$Url . \".\");\r\
+    \n      :set Url \$DetectIpAddrFallBack;\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using fallback ser\
+    vice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\
+    \_detect public IP using fallback service: \" . \$Url . \".\")}\r\
+    \n    };\r\
+    \n    :local IpLen ([ :len \$PubIpAddr ] -1);\r\
+    \n    :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\
+    {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\
+    \n    :return \$PubIpAddr;\r\
+    \n}\r\
+    \n\r\
+    \n:set FormatLine do={\r\
+    \n  :local Key    [ :tostr \$1 ];\r\
+    \n  :local Value  [ :tostr \$2 ];\r\
+    \n  :local Indent [ :tonum \$3 ];\r\
+    \n  :local Spaces;\r\
+    \n  :local Return \"\";\r\
+    \n  :global CharacterMultiply;\r\
+    \n  :global EitherOr;\r\
+    \n  :set Indent [ \$EitherOr \$Indent 16 ];\r\
+    \n  :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\
+    \n  :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\
+    \n  :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\
+    n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\
+    \n  } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \
+    \$Return ]) ] . \$Value)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseCustom do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Start [:find [ \$Str ] [:tostr \$2]];\r\
+    \n  :local End [ :tostr \$3 ];\r\
+    \n  :local Num [ :tonum \$4 ];\r\
+    \n  :local Return;\r\
+    \n  :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\
+    \n  :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\
+    \n  :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\
+    lse={\r\
+    \n  :set End [:find \$rest \$End];\r\
+    \n  :set Return [:pick \$rest 0 \$End];\r\
+    \n  }\r\
+    \n:return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set LogPrint do={\r\
+    \n  :local Severity [ :tostr \$1 ];\r\
+    \n  :local Name     [ :tostr \$2 ];\r\
+    \n  :local Message  [ :tostr \$3 ];\r\
+    \n  :global PrintDebug;\r\
+    \n  :global PrintDebugOverride;\r\
+    \n  :global EitherOr;\r\
+    \n  :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \
+    ];\r\
+    \n  :local PrintSeverity do={\r\
+    \n  :global TerminalColorOutput;\r\
+    \n   :if (\$TerminalColorOutput != true) do={:return \$1}\r\
+    \n   :local Color { debug=96; info=97; warning=93; error=91 };\r\
+    \n   :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\
+    \n}\r\
+    \n  :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\
+    \r\
+    \n  :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\
+    \n    :if (\$Severity = \"debug\") do={:log debug \$Log}\r\
+    \n    :if (\$Severity = \"error\") do={:log error \$Log}\r\
+    \n    :if (\$Severity = \"info\" ) do={:log info  \$Log}\r\
+    \n  } else={:log warning \$Log; :set Severity \"warning\"}\r\
+    \n  :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\
+    erity \$Severity ] . \": \" . \$Message)}\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateAvailable do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :local UseFor     [ :tostr \$2 ];\r\
+    \n\r\
+    \n  :global CertificateDownload;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n\r\
+    \n  :if ([ :len \$UseFor ] = 0) do={\r\
+    \n    :log warning (\$0 . \"The intended use is undefined!\");\r\
+    \n    :set UseFor \"undefined\";\r\
+    \n  }\r\
+    \n  :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\
+    \n       [ /certificate/settings/get crl-download ] = true && \\\r\
+    \n       [ /certificate/settings/get crl-store ] = \"system\") do={\r\
+    \n    :log warning (\$0 . \"This system has low free flash space but \" . \
+    \\\r\
+    \n      \"is configured to download certificate CRLs to system!\");\r\
+    \n  }\r\
+    \n  :if ([ :len \$CommonName ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No CommonName given!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\
+    \r\
+    \n        (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\
+    \n        (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n       [ :len [ /certificate/builtin/find where common-name=\$CommonName\
+    \_] ] > 0) do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \
+    \"' not available.\");\r\
+    \n    :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\
+    ) do={\r\
+    \n    :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\
+    \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\
+    e ] ];\r\
+    \n  :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\
+    ertVal->\"skid\")) do={\r\
+    \n    :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\
+    \_= 0) do={\r\
+    \n      :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\
+    >\"CN\");\r\
+    \n      :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \
+    is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\
+    \n      :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\
+    \") ] ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateDownload do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :global ScriptUpdatesBaseUrl;\r\
+    \n  :global ScriptUpdatesUrlSuffix;\r\
+    \n  :global CertificateNameByCN;\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :log info (\$0 . \"Downloading and importing certificate with \" . \\\
+    \r\
+    \n      \"CommonName '\" . \$CommonName . \"'.\");\r\
+    \n  :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\
+    \n  :do {\r\
+    \n    /tool/fetch check-certificate=yes-without-crl mode=https http-header\
+    -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\
+    sUrlSuffix) \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n    \$WaitForFile \$FileName;\r\
+    \n  } on-error={\r\
+    \n    :log warning (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \\\r\
+    \n      \"' from repository! Trying fallback to mkcert.org...\");\r\
+    \n    :do {\r\
+    \n      :local CertSettings [ /certificate/settings/get ];\r\
+    \n      :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\
+    \_] ] = 0 && \\\r\
+    \n           !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \
+    || \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \
+    \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\
+    \r\
+    \n             [ :len [ /certificate/builtin/find where common-name=\"ISRG\
+    \_Root X1\" ] ] > 0)) do={\r\
+    \n        :log error (\$0 . \" Required certificate is not available.\");\
+    \r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n      /tool/fetch check-certificate=yes-without-crl mode=https http-head\
+    er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\
+    n ({ \$CommonName }) ] \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n      \$WaitForFile \$FileName;\r\
+    \n      :if ([ /file/get \$FileName size ] = 0) do={\r\
+    \n        \$RmFile \$FileName;\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n    } on-error={\r\
+    \n      :log error (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \"'!\");\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\
+    \n  :delay 1s;\r\
+    \n  \$RmFile \$FileName;\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\
+    +\\\$\") ];\r\
+    \n    :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\
+    e . \"' still unavailable!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \
+    \"_[0-9]+\\\$\") ] do={\r\
+    \n    \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateNameByCN do={\r\
+    \n  :local Match [ :tostr \$1 ];\r\
+    \n  :global CleanName;\r\
+    \n  :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\
+    rint=\$Match or name=\$Match) ]->0);\r\
+    \n  :if ([ :len \$Cert ] = 0) do={\r\
+    \n    :log warning (\$0 .\" No matching certificate found.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CommonName [ /certificate/get \$Cert common-name ];\r\
+    \n  /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileExists do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :local Type     [ :tostr \$2 ];\r\
+    \n  :global FileGet;\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={ :return false; }\r\
+    \n  :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\
+    \n  :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\
+    \_true; }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set Grep do={\r\
+    \n  :local Input  ([ :tostr \$1 ] . \"\\n\");\r\
+    \n  :local Pattern [ :tostr \$2 ];\r\
+    \n  :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\
+    }\r\
+    \n  :do {\r\
+    \n    :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\
+    \n    :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \
+    \$Line}\r\
+    \n    :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\
+    Input ] ];\r\
+    \n  } while=([ :len \$Input ] > 0);\r\
+    \n  :return [];\r\
+    \n}\r\
+    \n\r\
+    \n:set HumanReadableNum do={\r\
+    \n  :local Input [ :tonum \$1 ];\r\
+    \n  :local Base  [ :tonum \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Prefix \"kMGTPE\";\r\
+    \n  :local Pow 1;\r\
+    \n  :set Base [ \$EitherOr \$Base 1024 ];\r\
+    \n  :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\
+    \n  :if (\$Input < \$Base) do={:return \$Input}\r\
+    \n  :for I from=0 to=[ :len \$Prefix ] do={\r\
+    \n    :set Pow (\$Pow * \$Base);\r\
+    \n    :if (\$Input / \$Base < \$Pow) do={\r\
+    \n      :set Prefix [ :pick \$Prefix \$I ];\r\
+    \n      :local Tmp1 (\$Input * 100 / \$Pow);\r\
+    \n      :local Tmp2 (\$Tmp1 / 100);\r\
+    \n      :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\
+    \n      :return (\$Tmp2 . \".\" . \\\r\
+    \n          [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\
+    2 ] + 1) ] . \\\r\
+    \n          \$Prefix . \$Bin);\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanFilePath do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CharacterReplace;\r\
+    \n  :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \
+    \"//\" \"/\" ]; }\r\
+    \n  :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\
+    n \$Path ] ]; }\r\
+    \n  :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \
+    :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\
+    \n  :return \$Path;\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanName do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\
+    stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\
+    \n      :do {:if ([ :len \$Return ] = 0) do={:error true};\r\
+    \n        :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\
+    ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\
+    \n    };\r\
+    \n    :set Return (\$Return . \$Char)};\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set RandomDelay do={\r\
+    \n  :local Time [ :tonum \$1 ];\r\
+    \n  :local Unit [ :tostr \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global GetRandomNumber;\r\
+    \n  :global MAX;\r\
+    \n  :if (\$Time = 0) do={:return false}\r\
+    \n  :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \
+    [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\
+    \n}\r\
+    \n\r\
+    \n:set EscapeForRegEx do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitError do={\r\
+    \n  :local ExitOK [ :tostr \$1 ];\r\
+    \n  :local Name   [ :tostr \$2 ];\r\
+    \n  :local Error  [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$ExitOK = \"false\") do={\r\
+    \n    :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \
+    \\\r\
+    \n        \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\
+    ror\" . \\\r\
+    \n        [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \
+    \$Error) \".\" ]);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitOnError do={\r\
+    \n  :local Name   [ :tostr \$1 ];\r\
+    \n  :local Error  [ :tostr \$2 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\
+    \\\$\") \\\r\
+    \n      \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\
+    r\" . \\\r\
+    \n      [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\
+    rror) \".\" ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set MiniDateTimeStamp do={\r\
+    \n    :local mikro [ :tobool \$1 ];\r\
+    \n    /system/clock;\r\
+    \n    :local vdate [get date];\r\
+    \n    :local vtime [get time];\r\
+    \n    :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\
+    \n    :local MM    [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\
+    \n    :local M     [:tonum \$MM];\r\
+    \n    :if (\$vdate ~ \".../../....\") do={\r\
+    \n        :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\
+    \n        :set M     ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\
+    PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\
+    \n        :if (\$M>12) do={:set M (\$M - 12)}\r\
+    \n        :set MM    [:pick (100 + \$M) 1 3];\r\
+    \n    }\r\
+    \n    :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\
+    \n    :local dd   [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\
+    \n    :local HH   [:pick \$vtime 0  2];\r\
+    \n    :local mm   [:pick \$vtime 3  5];\r\
+    \n    :local ss   [:pick \$vtime 6  8];\r\
+    \n    :local Return;\r\
+    \n    :if (\$mikro = true) do={\r\
+    \n      :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\
+    \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\
+    \n    } else={\r\
+    \n    :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\
+    \r\
+    \n   }\r\
+    \n   :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitForFile do={\r\
+    \n  :local FileName [ :tostr  \$1 ];\r\
+    \n  :local WaitTime [ :totime \$2 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global EitherOr;\r\
+    \n  :global MAX;\r\
+    \n  :set FileName [ \$CleanFilePath \$FileName ];\r\
+    \n  :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } delay=\$Delay max=10;\r\
+    \n  } on-error={ }\r\
+    \n  :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\
+    \n    :do {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } on-error={ }\r\
+    \n    :delay \$Delay;\r\
+    \n    :set Delay (\$Delay * 3 / 2);\r\
+    \n  }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileGet do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global WaitForFile;\r\
+    \n  :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FileVal false;\r\
+    \n  :do {\r\
+    \n    :set FileVal [ /file/get \$FileName ];\r\
+    \n   } on-error={ }\r\
+    \n  :return \$FileVal;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmDir do={\r\
+    \n  :local DirName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing directory: \". \$DirName);\r\
+    \n  :local DirVal [ \$FileGet \$DirName ];\r\
+    \n  :if (\$DirVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  };\r\
+    \n  :if (\$DirVal->\"type\" != \"directory\") do={\r\
+    \n    :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\
+    ory.\");\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$DirName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\
+    : \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmFile do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing file: \". \$FileName);\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\
+    sk\") do={\r\
+    \n    :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\
+    \r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$FileName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\
+    \_. \$Err); :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MkDir do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global FileGet;\r\
+    \n  :global RmDir;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :local MkTmpfs do={\r\
+    \n   :global WaitForFile;\r\
+    \n   :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n   :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n     :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n       :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\
+    \n       /disk/enable \$TmpFs;\r\
+    \n      }\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :log info (\$0 . \" Creating disk of type tmpfs.\");\r\
+    \n    \$RmDir \"tmpfs\";\r\
+    \n    :onerror Err {\r\
+    \n      /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\
+    /get total-memory ] / 3);\r\
+    \n      \$WaitForFile \"tmpfs\";\r\
+    \n    } do={\r\
+    \n      :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\
+    Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :set Path [ \$CleanFilePath \$Path ];\r\
+    \n  :if (\$Path = \"\") do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log debug (\$0 . \" Making directory: \" . \$Path);\r\
+    \n  :local PathVal [ \$FileGet \$Path ];\r\
+    \n  :if (\$PathVal->\"type\" = \"directory\") do={\r\
+    \n    :log debug (\$0 . \" ... which already exists.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/add type=\"directory\" name=\$Path;\r\
+    \n    \$WaitForFile \$Path;\r\
+    \n  } do={\r\
+    \n    :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \
+    \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterReplace do={\r\
+    \n  :local String [ :tostr \$1 ];\r\
+    \n  :local ReplaceFrom [ :tostr \$2 ];\r\
+    \n  :local ReplaceWith [ :tostr \$3 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :if (\$ReplaceFrom = \"\") do={:return \$String}\r\
+    \n  :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\
+    \r\
+    \n    :local Pos [ :find \$String \$ReplaceFrom ];\r\
+    \n    :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\
+    \r\
+    \n    :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\
+    \_\$String ] ];\r\
+    \n  }\r\
+    \n  :return (\$Return . \$String);\r\
+    \n}\r\
+    \n\r\
+    \n:set IfThenElse do={\r\
+    \n  :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \
+    \$2};\r\
+    \n  :return \$3;\r\
+    \n}\r\
+    \n\r\
+    \n:set EitherOr do={\r\
+    \n  :global IfThenElse;\r\
+    \n  :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \
+    \$1 \$2 ]}\r\
+    \n  :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\
+    \_\$1 \$2 ]}\r\
+    \n# this works for boolean values, literal ones with parentheses\r\
+    \n  :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseKeyValueStore do={\r\
+    \n  :local Source \$1;\r\
+    \n  :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\
+    \n    :do {\r\
+    \n      :return [ :deserialize from=json \$Source ];\r\
+    \n    } on-error={ }\r\
+    \n  }   \r\
+    \n  :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\
+    }\r\
+    \n  :local Result ({});\r\
+    \n  :foreach KeyValue in=[ :toarray \$Source ] do={\r\
+    \n    :if ([ :find \$KeyValue \"=\" ]) do={\r\
+    \n      :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\
+    \n      :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\
+    \_:len \$KeyValue ] ];\r\
+    \n      :if (\$Value=\"true\") do={:set Value true}\r\
+    \n      :if (\$Value=\"false\") do={:set Value false}\r\
+    \n      :set (\$Result->\$Key) \$Value;\r\
+    \n      } else={:set (\$Result->\$KeyValue) true}\r\
+    \n  }\r\
+    \n  :return \$Result;\r\
+    \n}\r\
+    \n:set RequiredRouterOS do={\r\
+    \n  :local Caller   [ :tostr \$1 ];\r\
+    \n  :local Required [ :tostr \$2 ];\r\
+    \n  :local Warn     [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :global VersionToNum;\r\
+    \n  :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\
+    \\\$\")) do={\r\
+    \n    :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\
+    e/update/get installed-version ] ]) do={\r\
+    \n    :if (\$Warn = \"true\") do={\r\
+    \n      :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \
+    0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\
+    \n        \" '\" . \$Caller . \"' (at least specific functionality) requir\
+    es RouterOS \" . \$Required . \". Please update!\");\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set ValidateSyntax do={\r\
+    \n  :local Code [ :tostr \$1 ];\r\
+    \n  :global LogPrint;\r\
+    \n  :onerror Err {\r\
+    \n    [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\
+    \n  } do={\r\
+    \n    \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set VersionToNum do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Multi 0x1000000;\r\
+    \n  :local Return 0;\r\
+    \n  :global CharacterReplace;\r\
+    \n  :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\
+    \n  :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\
+    \n    :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\
+    \r\
+    \n  }\r\
+    \n  :foreach Value in=([ :toarray \$Input ], 0) do={\r\
+    \n    :local Num [ :tonum \$Value ];\r\
+    \n    :if (\$Multi = 0x100) do={\r\
+    \n      :if ([ :typeof \$Num ] = \"num\") do={\r\
+    \n        :set Return (\$Return + 0xff00);\r\
+    \n        :set Multi (\$Multi / 0x100);\r\
+    \n      } else={\r\
+    \n        :if (\$Value = \"zero\") do={ }\r\
+    \n        :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \
+    }\r\
+    \n        :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\
+    \r\
+    \n        :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\
+    lue * \$Multi)); }\r\
+    \n    :set Multi (\$Multi / 0x100);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptLock do={\r\
+    \n  :local Script  [ :tostr  \$1 ];\r\
+    \n  :local WaitMax [ :totime \$2 ];\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global ScriptLockOrder;\r\
+    \n  :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\
+    \n    :set ScriptLockOrder ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :local JobCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :return [ :len [ /system/script/job/find where script=\$Script ] ];\
+    \r\
+    \n  }\r\
+    \n  :local TicketCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :local Count 0;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \
+    + 1)}\r\
+    \n    }\r\
+    \n    :return \$Count;\r\
+    \n  }\r\
+    \n  :local IsFirstTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Check  [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if (\$Ticket = \$Check) do={:return true}\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\
+    o={:return false}\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local AddTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Add    [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :while (true) do={\r\
+    \n      :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\
+    \n      :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\
+    \n      :delay 10ms;\r\
+    \n      :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\
+    e}\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local RemoveTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Remove [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\
+    \n        :set (\$ScriptLockOrder->\$Script->\$Id);\r\
+    \n        :delay 10ms;\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local CleanupTickets do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\
+    \n    }\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\
+    \n  :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\
+    \n    :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\
+    ist!\");\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$JobCount \$Script ] = 0) do={\r\
+    \n    \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\
+    );\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\
+    \n    :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\
+    t . \"', resetting!\");\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n    /system/script/job/remove [ find where script=\$Script ];\r\
+    \n  }\r\
+    \n  :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\
+    \n  \$AddTicket \$Script \$MyTicket;\r\
+    \n  :local WaitInterval (\$WaitMax / 20);\r\
+    \n  :local WaitTime \$WaitMax;\r\
+    \n  :while (\$WaitTime > 0 && \\\r\
+    \n      ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\
+    \n      [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\
+    \n    :set WaitTime (\$WaitTime - \$WaitInterval);\r\
+    \n    :delay \$WaitInterval;\r\
+    \n  }\r\
+    \n  :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\
+    \n      [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\
+    \n    \$RemoveTicket \$Script \$MyTicket;\r\
+    \n    \$CleanupTickets \$Script;\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  \$RemoveTicket \$Script \$MyTicket;\r\
+    \n  \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \
+    once\" . \\\r\
+    \n    [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\
+    \_lock\" \"\" ] . \"...\");\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification do={ :onerror Err {\r\
+    \n  :global SendNotification2;\r\
+    \n  \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\
+    \_silent=\$4 });\r\
+    \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification2 do={\r\
+    \n  :local Notification \$1;\r\
+    \n  :global NotificationFunctions;\r\
+    \n  :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\
+    \n    (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\
+    ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolByUnicodeName do={\r\
+    \n  :local Name [ :tostr \$1 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global SymbolsExtra;\r\
+    \n  :local Symbols ({\r\
+    \n    \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\
+    \n    \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\
+    \n    \"arrow-down\"=\"\\E2\\AC\\87\";\r\
+    \n    \"arrow-up\"=\"\\E2\\AC\\86\";\r\
+    \n    \"calendar\"=\"\\F0\\9F\\93\\85\";\r\
+    \n    \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\
+    \n    \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\
+    \n    \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\
+    \n    \"cloud\"=\"\\E2\\98\\81\";\r\
+    \n    \"cross-mark\"=\"\\E2\\9D\\8C\";\r\
+    \n    \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\
+    \n    \"fire\"=\"\\F0\\9F\\94\\A5\";\r\
+    \n    \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\
+    \n    \"gear\"=\"\\E2\\9A\\99\";\r\
+    \n    \"heart\"=\"\\E2\\99\\A5\";\r\
+    \n    \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\
+    \n    \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\
+    \n    \"information\"=\"\\E2\\84\\B9\";\r\
+    \n    \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\
+    \n    \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\
+    \n    \"link\"=\"\\F0\\9F\\94\\97\";\r\
+    \n    \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\
+    \n    \"memo\"=\"\\F0\\9F\\93\\9D\";\r\
+    \n    \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\
+    \n    \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\
+    \n    \"scissors\"=\"\\E2\\9C\\82\";\r\
+    \n    \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\
+    \n    \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\
+    \n    \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\
+    \n    \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\
+    \n    \"sparkles\"=\"\\E2\\9C\\A8\";\r\
+    \n    \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\
+    \n    \"star\"=\"\\E2\\AD\\90\";\r\
+    \n    \"warning-sign\"=\"\\E2\\9A\\A0\";\r\
+    \n    \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\
+    \n  }, \$SymbolsExtra);\r\
+    \n  :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\
+    \n  :local Special {\r\
+    \n    \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\
+    \n    \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\
+    \n    \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\
+    \n    \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\
+    \n  :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\
+    '!\");\r\
+    \n    :return \"\";\r\
+    \n  }\r\
+    \n  :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\
+    me) ] . \"\\EF\\B8\\8F\");\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolForNotification do={\r\
+    \n  :global NotificationsWithSymbols;\r\
+    \n  :global SymbolByUnicodeName;\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\
+    \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\
+    \n  :local Return \"\";\r\
+    \n  :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\
+    mbolByUnicodeName \$Symbol ])}\r\
+    \n  :return (\$Return . \" \");\r\
+    \n}\r\
+    \n\r\
+    \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\
+    \n:set UrlEncode do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\
+    \n  :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\
+    %24\"; \"%25\"; \"%26\"; \"%27\";\r\
+    \n         \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \
+    \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\
+    \n         \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \
+    \"%7C\"; \"%7D\"; \"%7E\" };\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :local Replace [ :find \$Chars \$Char ];\r\
+    \n    :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\
+    ce)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsDNSResolving do={\r\
+    \n  :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsFullyConnected do={\r\
+    \n  :global IsDNSResolving;\r\
+    \n  :global IsTimeSync;\r\
+    \n  :if ([ \$IsDNSResolving ] = false) do={:return false};\r\
+    \n  :if ([ \$IsTimeSync ] = false) do={:return false};\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsTimeSync do={\r\
+    \n  :global IsTimeSyncCached;\r\
+    \n  :global IsTimeSyncResetNtp;\r\
+    \n  :if (\$IsTimeSyncCached = true) do={:return true}\r\
+    \n  :if ([ /system/ntp/client/get enabled ] = true) do={\r\
+    \n    :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :local Uptime [ /system/resource/get uptime ];\r\
+    \n    :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\
+    \n      :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    }\r\
+    \n    :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\
+    \n    :log warning \"\$0 The ntp client is configured, but did not sync.\"\
+    ;\r\
+    \n    :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    /system/ntp/client/set enabled=no;\r\
+    \n    :delay 20ms;\r\
+    \n    /system/ntp/client/set enabled=yes;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\
+    \n       [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\
+    \n    :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\
+    ee license and x86.\";\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ /ip/cloud/get update-time ] = true) do={\r\
+    \n    :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :log debug \"\$0 No time source configured! Returning gracefully...\";\
+    \r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchHugeFiles do={\r\
+    \n  :local ScriptName [ :tostr \$1 ];\r\
+    \n  :local Url        [ :tostr \$2 ];\r\
+    \n  :local CheckCert  [ :tostr \$3 ];\r\
+    \n\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global MkDir;\r\
+    \n  :global RmDir;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\
+    ithout-crl\" ];\r\
+    \n\r\
+    \n  :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\
+    \n  :if ([ \$MkDir \$DirName ] = false) do={\r\
+    \n    \$LogPrint error \$0 (\"Failed creating directory!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \
+    \$GetRandom20CharAlNum ]);\r\
+    \n  :onerror Err {\r\
+    \n    /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \
+    \\\r\
+    \n      http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\
+    lue;\r\
+    \n  } do={\r\
+    \n    :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\
+    \n      \$RmFile \$FileName;\r\
+    \n    }\r\
+    \n    \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\
+    \_. \$Err);\r\
+    \n    \$RmDir \$DirName;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\
+    \n    \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\
+    \_not show up.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileSize [ /file/get \$FileName size ];\r\
+    \n  :local Return \"\";\r\
+    \n  :local VarSize 0;\r\
+    \n  :while (\$VarSize != \$FileSize) do={\r\
+    \n    :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\
+    768 file=\$FileName as-value ]->\"data\"));\r\
+    \n    :set FileSize [ /file/get \$FileName size ];\r\
+    \n    :set VarSize [ :len \$Return ];\r\
+    \n    :if (\$VarSize > \$FileSize) do={\r\
+    \n      :delay 100ms;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  \$RmDir \$DirName;\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchUserAgentStr do={\r\
+    \n  :local Caller [ :tostr \$1 ];\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global CommitBrief;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Resource [ /system/resource/get ];\r\
+    \n  :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\
+    \_\$Resource->\"architecture-name\" . \\\r\
+    \n    \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\
+    CommitBrief ] . \")\");\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptInstallUpdate do={ :onerror Err {\r\
+    \n  :local Scripts    [ :toarray \$1 ];\r\
+    \n  :local NewComment [ :tostr   \$2 ];\r\
+    \n  :global InitSetup;\r\
+    \n\r\
+    \n  :global CommitId;\r\
+    \n  :global ScriptUpdatesCRLF;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global CheckSumsVerify;\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SumsDirAndFileName;\r\
+    \n  :global GlobalScriptsUrlSuffix;\r\
+    \n  :global EitherOr;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global Grep;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n  :global RequiredRouterOS;\r\
+    \n  :global SendNotification2;\r\
+    \n  :global SymbolForNotification;\r\
+    \n  :global ValidateSyntax;\r\
+    \n  :global CommentsInScripts;\r\
+    \n\r\
+    \n  :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\
+    hout.\");\r\
+    \n  }\r\
+    \n\r\
+    \n  :foreach Script in=\$Scripts do={\r\
+    \n    :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\
+    \r\
+    \n      \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\
+    \n      /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \
+    Vados\\n\" comment=\$NewComment;\r\
+    \n    }\r\
+    \n  }\r\
+    \n\r\
+    \n  :local CommitIdBefore \$CommitId;\r\
+    \n  :local GlobalConfVersionBefore \$GlobalConfVersion;\r\
+    \n  :local ReloadGlobal false;\r\
+    \n  :local DeviceMode [ /system/device-mode/get ];\r\
+    \n\r\
+    \n  :if (\$CheckSumsVerify = true) do={\r\
+    \n    :local CheckSums ({});\r\
+    \n     :do {\r\
+    \n     :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\
+    iptsUrlSuffix);\r\
+    \n      \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\
+    \r\
+    \n      :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\
+    ficate=yes-without-crl \\\r\
+    \n        http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\
+    =user as-value ]->\"data\") ];\r\
+    \n    } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\
+    \n    }\r\
+    \n\r\
+    \n  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\
+    s\" ] do={\r\
+    \n    :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n    :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \
+    ];\r\
+    \n    :local SourceNew;\r\
+    \n\r\
+    \n    :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\
+    \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\
+    \n      :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\
+    \n      :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\
+    iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \
+    \"'!\");\r\
+    \n        }\r\
+    \n    }\r\
+    \n    :do {\r\
+    \n      :if (\$ScriptInfo->\"ignore\" = true) do={\r\
+    \n        \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\
+    e\" . \"', as requested.\");\r\
+    \n        :error true;\r\
+    \n      }\r\
+    \n      :if (\$CheckSumsVerify = true) do={\r\
+    \n        :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\
+    \n        :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\
+    ptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n             [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\
+    rce\") ] ] = \$CheckSum) do={\r\
+    \n          \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\
+    >\"name\" . \"' matches, ignoring.\");\r\
+    \n          :error true;\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\
+    \n        :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\
+    fetch\" ] = false) do={\r\
+    \n          \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\
+    ng without.\");\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :onerror Err {\r\
+    \n        :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\
+    lScriptsUrl ];\r\
+    \n        :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\
+    lobalScriptsUrlSuffix ];\r\
+    \n        :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\
+    Suffix);\r\
+    \n        \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\
+    name\") . \"' from url: \" . \$Url);\r\
+    \n        :local Result [ /tool/fetch check-certificate=yes-without-crl \\\
+    \r\
+    \n          http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\
+    ut=user as-value ];\r\
+    \n        :if (\$Result->\"status\" = \"finished\") do={\r\
+    \n          :set SourceNew [ :tolf (\$Result->\"data\") ];\r\
+    \n        } \r\
+    \n      } do={\r\
+    \n        \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\
+    al->\"name\" . \"': \" . \$Err);\r\
+    \n        :if (\$Err != \"Fetch failed with status 404\") do={\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\
+    \n          \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\
+    \?\");\r\
+    \n          /system/script/remove \$Script;\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$CheckSumsVerify = true) do={\r\
+    \n          :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\
+    riptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n               [ :len \$CheckSum ] = 0) do={\r\
+    \n            \$LogPrint warning \$0 (\"Added the script manually\? Skip u\
+    pdates with 'ignore=true' in comment.\");\r\
+    \n          }\r\
+    \n        }\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :len \$SourceNew ] = 0) do={\r\
+    \n        \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\
+    >\"name\") . \"'.\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :local SourceCRLF [ :tocrlf \$SourceNew ];\r\
+    \n      :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\
+    lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\
+    \n        :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\
+    \$ScriptVal->\"source\")) do={\r\
+    \n          \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\") \
+    . \"' source did not change. End of lines set to CRLF.\");\r\
+    \n          if (\$ScriptUpdatesCRLF = false) do={\r\
+    \n            :put [ :tolf \$SourceNew ];\r\
+    \n            \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\"\
+    ) . \"' source update end of lines to LF.\");\r\
+    \n          }\r\
+    \n        :error false;\r\
+    \n        }\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\
+    l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\
+    );\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if (\$CommentsInScripts = true) do={\r\
+    \n         :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\
+    \_\") ];\r\
+    \n         :if ([ :len \$CommentLine ] = 0) do={\r\
+    \n           \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\
+    iptVal->\"name\") . \"' for comment in script body, is not found result Ig\
+    noring!\");\r\
+    \n           :error false;\r\
+    \n         } else={\r\
+    \n           :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\
+    ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\
+    ] + 2) [ :len \$CommentLine] ]) do={\r\
+    \n             \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\
+    \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\
+    ;\r\
+    \n             :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\
+    ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\
+    \n             \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\
+    omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\
+    ded!\");\r\
+    \n           } else={\r\
+    \n             \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\
+    al->\"name\") . \"' did not change.\");\r\
+    \n             :error false;\r\
+    \n           }\r\
+    \n         }   \r\
+    \n      }\r\
+    \n\r\
+    \n      :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\
+    \"\\23 requires RouterOS, \") ] ]->version);\r\
+    \n      :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\
+    \_false ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires RouterOS \" . \\\r\
+    \n            \$RequiredROS . \", which is not met by your installation. I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\
+    \\23 requires device-mode, \") ] ];\r\
+    \n      :local MissingDM ({});\r\
+    \n      :foreach Feature,Value in=\$RequiredDM do={\r\
+    \n        :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\
+    ceMode->\$Feature) = false) do={\r\
+    \n          :set MissingDM (\$MissingDM, \$Feature);\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len \$MissingDM ] > 0) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires disabled \" . \\\r\
+    \n            \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\
+    ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      \r\
+    \n      :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\
+    ript comment: \" . (\$ScriptVal->\"comment\"));\r\
+    \n\r\
+    \n      /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\
+    Val->\"comment\") \\\r\
+    \n          source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\
+    F \$SourceNew ] \$Script;\r\
+    \n      :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\
+    \n           \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\
+    \n           \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\
+    o={\r\
+    \n        :set ReloadGlobal true;\r\
+    \n      }\r\
+    \n    } on-error={ }\r\
+    \n  }\r\
+    \n  :if (\$ReloadGlobal = true) do={\r\
+    \n    \$LogPrint info \$0 (\"Reloading global configuration and functions.\
+    \");\r\
+    \n    :onerror Err {\r\
+    \n      :global InitSetup (a);\r\
+    \n      /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\
+    \n    } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\
+    ctions failed! \" . \$Err)}\r\
+    \n  }\r\
+    \n  :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\
+    \n    \$LogPrint warning \$0 (\"The configuration version decreased from \
+    \" . \\\r\
+    \n      \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\
+    \n      \". Installed an older version\?\");\r\
+    \n  }\r\
+    \n    :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\
+    \n    :global GlobalConfChanges;\r\
+    \n    :global GlobalConfMigration;\r\
+    \n    :local ChangeLogCode;\r\
+    \n    :if ([ :len \$ChangeLogCode ] > 0) do={\r\
+    \n      :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\
+    \n        :onerror Err {\r\
+    \n          [ :parse \$ChangeLogCode ];\r\
+    \n        } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \
+    . \$Err)}\r\
+    \n      } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\
+    dation!\")}\r\
+    \n    }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\
+    \n        :do {\r\
+    \n          :if ([ :typeof \$Migration ] != \"str\") do={\r\
+    \n            \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\
+    \_\" is not available.\");\r\
+    \n            :error false;\r\
+    \n          }\r\
+    \n          :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\
+    \n            \$LogPrint warning \$0 (\"Migration code for change \" . \$I\
+    \_. \" failed syntax validation!\");\r\
+    \n            :error false}\r\
+    \n          \$LogPrint info \$0 (\"Applying migration for change \" . \$I \
+    . \": \" . \$Migration);\r\
+    \n          :onerror Err {\r\
+    \n            [ :parse \$Migration ];\r\
+    \n          } do={\$LogPrint warning \$0 (\"Migration code for change \" .\
+    \_\$I . \" failed to run: \" . \$Err)}\r\
+    \n        } on-error={ }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :local NotificationMessage (\"The configuration version on \" . \$Id\
+    entity . \" increased \" . \\\r\
+    \n       \"to \" . \$GlobalConfVersion . \", current configuration may nee\
+    d modification. \" . \\\r\
+    \n       \"Please review and update global-config-overlay, then re-run glo\
+    bal-config.\");\r\
+    \n    \$LogPrint info \$0 (\$NotificationMessage);\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\
+    \");\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\
+    \n        :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\
+    \r\
+    \n            [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\
+    \n        \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\
+    \n      }\r\
+    \n    } else={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\
+    \_changes are not available.\");\r\
+    \n\r\
+    \n      }\r\
+    \n\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \
+    } else={ :global GlobalConfChanges (a); }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\
+    on; } else={ :global GlobalConfMigration (a); }\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n\r\
+    \n# load modules\r\
+    \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\
+    ns\\\\.d|mod)/.\" ] do={\r\
+    \n  :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n  :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\
+    \n    :onerror Err {\r\
+    \n      /system/script/run \$Script;\r\
+    \n    } do={\r\
+    \n      \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\
+    ailed to run: \" . \$Err);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\
+    led syntax validation, skipping.\");\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# Add and fix global scheduler\r\
+    \n:put \"Add or/and fix Global scheduler...\";\r\
+    \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\
+    ; }\";\r\
+    \n:local Comment \"Every Day Set Global Environment Variables\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \
+    = 0) do={\r\
+    \n  /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\
+    ent=\$OnEvent start-time=startup;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\
+    \_do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\
+    ) do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\
+    \n}\r\
+    \n# Add Update Script scheduler\r\
+    \n:put \"Add or/and fix Update Script scheduler\";\r\
+    \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\
+    \r\
+    \n:set Comment \"Every Day Check For Update Scripts\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\
+    \" ] ] = 0) do={\r\
+    \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \
+    start-time=startup interval=1d on-event=\$OnEvent;\r\
+    \n}\r\
+    \n\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\
+    \_not ready.\"); }; } delay=100ms max=5;\r\
+    \n\r\
+    \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\
+    \n    [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \
+    \") ] . \\\r\
+    \n    \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\
+    \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\
+    \n    # signal we are ready\r\
+    \n:set GlobalFuncReady true;\r\
+    \n:set ExitOK true;\r\
+    \n\r\
+    \n:log info (\$0 . \"Global configs ready!\");\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n}\r\
+    \n"
+add comment=\
+    "Lookup IP addresses for RKN list and add them to firewall address-list" \
+    dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="#!rsc by Vados\r\
+    \n# RouterOS script: AM-RKN-dnsLookup\r\
+    \n# Script comment: Lookup IP addresses for RKN list and add them to firew\
+    all address-list\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n# Script description: This script is intended to be run periodically, e.\
+    g. once a day, to update the IP addresses in the firewall address-list bas\
+    ed on the RKN list.\r\
+    \n#                     It resolves the domain names in the RKN list and a\
+    dds the corresponding IP addresses to the specified firewall address-list.\
+    \r\
+    \n#                     The script also handles CNAME records by following\
+    \_them until it finds A records.\r\
+    \n# Usage:\r\
+    \n# /system/script { run AM-RKN-dnsLookup; }\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n\r\
+    \n:global dnsLookupReady false;\r\
+    \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\
+    \_true; }\r\
+    \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\
+    \n:set dnsLookupReady false;\r\
+    \n\r\
+    \n:local arrRKN {\r\
+    \n  \"telegra.ph\"\r\
+    \n  \"grani.ru\"\r\
+    \n  \"xhamster.com\"\r\
+    \n  \"lostfilm.tv\"\r\
+    \n  \"rutracker.org\"\r\
+    \n  \"lurkmore.to\"\r\
+    \n  \"dou.ua\"\r\
+    \n  \"youporn.com\"\r\
+    \n  \"pornolab.net\"\r\
+    \n  \"crimerussia.com\"\r\
+    \n  \"telegram.org\"\r\
+    \n  \"api.telegram.org\"\r\
+    \n  \"facebook.com\"\r\
+    \n  \"instagram.com\"\r\
+    \n  \"x.com\"\r\
+    \n  \"twitter.com\"\r\
+    \n  \"youtube.com\"\r\
+    \n  \"googleapis.com\"\r\
+    \n  \"youtu.be\"\r\
+    \n  \"googlevideo.com\"\r\
+    \n  \"gstatic.com\"\r\
+    \n  \"googleusercontent.com\"\r\
+    \n  \"nhacmp3youtube.com\"\r\
+    \n  \"telegram.me\"\r\
+    \n  \"t.me\";}\r\
+    \n\r\
+    \n:local ListRKN \"RKN-dnsLookup\";\r\
+    \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\
+    \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\
+    ={\r\
+    \n    /ip firewall address-list remove \$aListItem;\r\
+    \n}\r\
+    \n:foreach aItem in=\$arrRKN do={\r\
+    \n#    :do {\r\
+    \n        :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\
+    ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\
+    \n#    } on-error={\r\
+    \n#        :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\
+    \n#    }\r\
+    \n    :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \
+    do={\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\
+    \n            :local newAddress [/ip dns cache all get \$dnsRecord data];\
+    \r\
+    \n            :do {\r\
+    \n             /ip firewall address-list add list=\$ListRKN address=\$newA\
+    ddress comment=\$aItem;\r\
+    \n                :log warning \"Successfully adding ip to list A record: \
+    \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            } on-error={\r\
+    \n                :log error \"error when adding ip to list A record: \$dn\
+    sRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            }\r\
+    \n        }\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\
+    \n            :local cname;\r\
+    \n            :local nextCname;\r\
+    \n            :local cnameAddress;\r\
+    \n            :set cname [/ip dns cache all find where (name=\$aItem && ty\
+    pe=\"CNAME\")];\r\
+    \n            :set nextCname [/ip dns cache all find where (name=[/ip dns \
+    cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            :while (\$nextCname != \"\") do={\r\
+    \n                :set cname \$nextCname;\r\
+    \n                :set nextCname [/ip dns cache all find where (name=[/ip \
+    dns cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            }\r\
+    \n            :foreach aRecord in=[/ip dns cache all find where (name=[/ip\
+    \_dns cache all get \$cname data] && type=\"A\")] do={\r\
+    \n                :do {\r\
+    \n                    :set cnameAddress [/ip dns cache all get \$aRecord d\
+    ata];\r\
+    \n                    /ip firewall address-list add list=\$ListRKN address\
+    =\$cnameAddress comment=\$aItem;\r\
+    \n                    :log warning \"Succesfully adding ip to list CNAME r\
+    ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \
+    \$aItem.\";\r\
+    \n#                    /ip firewall raw add action=add-dst-to-address-list\
+    \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\
+    g comment=\$aItem content=\$aItem;\r\
+    \n                } on-error={\r\
+    \n                    :log error \"error when adding ip to list CNAME reco\
+    rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\
+    tem.\";\r\
+    \n                }\r\
+    \n            }\r\
+    \n        }\r\
+    \n    }\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\
+    ={\r\
+    \n   :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\
+    ptName . \" is NOT SET! Fix It Now!\");\r\
+    \n    /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \
+    run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\
+    olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\
+    \_start-time=startup;\r\
+    \n  }\r\
+    \n:set dnsLookupReady true;\r\
+    \ndelay 2s;  \r\
+    \n:global dnsLookupReady (a);\r\
+    \n"
+add dont-require-permissions=no name="renameLists " owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    local oldName \"Test\";\
+    \n:local newName \"Test-IP\";\
+    \n/ip firewall address-list\
+    \n:foreach i in=[find list=\$oldName] do={\
+    \nset \$i list=\$newName;\
+    \n}\
+    \n"
+add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    #############Script Settings##################\
+    \n\
+    \n:local \"IF-TUN\" \"6to4-tun\"\
+    \n:local \"IF-LOC\" \"Bridge-LAN\"\
+    \n:local \"POOL-6TO4\" \"poolV6-local\"\
+    \n:local \"force-update\" false\
+    \n############ use then static ip #######################\
+    \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \
+    address]\
+    \n#:local \"interface\" \"ext\"\
+    \n:local bound 0\
+    \n\
+    \n###############################################\
+    \n\
+    \n:local 6to4prefix do={\
+    \n    :global dec2hex\
+    \n    :local ipv4 \$1\
+    \n    :local ipv6 \"2002:\"\
+    \n    :for i from=0 to=2 step=1 do={        \
+    \n        :if ( \$i = 2) do={\
+    \n            :set ipv6 (\$ipv6.\":\")\
+    \n        }\
+    \n        :local fp [:find \$ipv4 \".\"]\
+    \n        :if ( \$fp > 0 ) do={\
+    \n            :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\
+    \n            :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\
+    \n        }\
+    \n    }\
+    \n    :return (\$ipv6.[\$dec2hex \$ipv4])\
+    \n}\
+    \n:local \"str_replace\" do={\
+    \n    :local \"str-pos\" [:find \$1 \$2]\
+    \n    :local \"str-len\" [:len \$2]\
+    \n    :local str \"\"\
+    \n    :local rest \$1\
+    \n    :while (\$\"str-pos\" >= 0) do={\
+    \n        :local t [:pick \$rest 0 \$\"str-pos\"]\
+    \n        :if ( \$4 > 0 ) do={\
+    \n            :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\
+    \n                :set str (\$str.\$5)\
+    \n            }\
+    \n        }\
+    \n        :set str (\$str.\$t.\$3)\
+    \n        :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\
+    st]]\
+    \n        :set \"str-pos\" [:find \$rest \$2]\
+    \n    }\
+    \n    :return (\$str.\$rest)\
+    \n}\
+    \n\
+    \n:if (\$bound=1) do={\
+    \n    :local t [:find \$\"lease-address\" \"/\"]\
+    \n\
+    \n    :if ( \$t >= 0 ) do={\
+    \n        :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\
+    \n    }\
+    \n\
+    \n    :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\
+    ) do={\
+    \n        /interface 6to4 add !keepalive local-address=\$\"lease-address\"\
+    \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\
+    \n        :set \"force-update\" true\
+    \n    }\
+    \n\
+    \n    :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\
+    cal-address];\
+    \n\
+    \n    :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \
+    true) do={\
+    \n        /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\
+    ease-address\"\
+    \n        /ipv6 address remove [find interface=\$\"IF-TUN\"]\
+    \n        /ipv6 address remove [find interface=\$\"IF-LOC\"]\
+    \n        /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\
+    \"::/0\"]\
+    \n        :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\
+    \n        :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\
+    \_0) do={    \
+    \n            /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\
+    \".\":1::/64\")  prefix-length=64\
+    \n        } else={\
+    \n            /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \
+    prefix=(\$\"pool-prefix\".\":1::/64\")\
+    \n        }\
+    \n        /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\
+    \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\
+    ace=\$\"IF-TUN\" advertise=no\
+    \n        /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\
+    =\$\"IF-LOC\" advertise=yes\
+    \n        /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\
+    \"IF-TUN\")\
+    \n        :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\
+    s]\
+    \n        :set t [:pick \$t 0 [:find \$t \"/\"]]\
+    \n        :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\
+    \_= 0) do={\
+    \n            /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\
+    [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        } else={\
+    \n            /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \
+    where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        }\
+    \n        :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\
+    -LOC\"] = 0) do={\
+    \n            /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\
+    on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\
+    \n        }\
+    \n        :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \
+    0) do={\
+    \n            /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\
+    onfiguration=yes\
+    \n        }\
+    \n    }\
+    \n}"
+add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global MAC2EUI64 do={\
+    \n    :local EUI64 \"\"\
+    \n    :local MAC \$1\
+    \n    :local HEX2DEC \"0123456789ABCDEF\"\
+    \n    :for i from=0 to=5 step=1 do={\
+    \n        :if ( \$i = 0 ) do={\
+    \n            :set EUI64 [:pick \$MAC 0]\
+    \n            :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\
+    \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\
+    \n        }\
+    \n        :if ( \$i = 1 || \$i = 3) do={\
+    \n            :set EUI64 (\$EUI64.\":\")\
+    \n        }\
+    \n        :if ( \$i = 2 ) do={\
+    \n            :set EUI64 (\$EUI64.\"FF:FE\")\
+    \n        }\
+    \n        :if ( [:find \$MAC \":\"] = 2 ) do={\
+    \n            :set MAC [:pick \$MAC 3  [:len \$MAC]]\
+    \n            :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\
+    \n        }\
+    \n    }\
+    \n    :return (\$EUI64)\
+    \n}\
+    \n\
+    \n:global dec2hex do={\
+    \n    :local hex \"\"\
+    \n    :local dec [:tonum \$1]\
+    \n    :for i from=0 to=4 step=4 do={\
+    \n        :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\
+    c>>\$i)&0xf)+1)].\$hex)\
+    \n    }\
+    \n    :return ([:tostr \$hex])\
+    \n}"
+add comment=Generator dont-require-permissions=no name=proxySet owner=vados \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="# 2. WireGuard interface\r\
+    \n/interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDg\
+    uMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=21641\r\
+    \n/interface/wireguard/peers/add interface=wg-VDSina public-key=\"o5IgCl1/\
+    G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcYQnD9\
+    N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=10.30.30.33 endpoint-port=518\
+    20 allowed-address=0.0.0.0/0 persistent-keepalive=11\r\
+    \n/ip/address/add address=10.9.0.3/32 interface=wg-VDSina\r\
+    \n\r\
+    \n# 3. DNS\r\
+    \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\
+    n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\
+    \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /system/script/add name=VDS\
+    ina-prev-dns comment=\"\$prevDNS\" source=\"\" }\r\
+    \n/ip/dns/set servers=8.8.4.4\r\
+    \n/ip/route/add dst-address=8.8.4.4/32 gateway=wg-VDSina distance=1 commen\
+    t=VDSina-dns\r\
+    \n\r\
+    \n# 4. Enable WireGuard\r\
+    \n/interface/wireguard/enable wg-VDSina\r\
+    \n"
+add dont-require-permissions=no name=AM-Telegram-Send owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\
+    \n# RouterOS script: AM-Telegram-Send\
+    \n# Script comment: Mini script for send messages to admin Telegram chat\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\
+    \n#\
+    \n#\
+    \n# requires RouterOS, version=7.19\
+    \n# requires device-mode, fetch\
+    \n#\
+    \n# Script description: \
+    \n#\
+    \n#\
+    \n# Usage:\
+    \n# /system/script { run AM-Telegram-Send \"Message here )))\"; }\
+    \n\
+    \n/system/script\
+    \nadd name=telegram-send dont-require-permissions=no source={\
+    \n  :global TelegramTokenId;\
+    \n  :global TelegramChatId;\
+    \n  :local message [:tostr \$1];\
+    \n  :local identity [/system/identity/get name];\
+    \n  :local sendMsg (\"[\".\$identity.\"] \".\$message)\
+    \n  /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\
+    \n    \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\
+    \n    \"&text=\".\$sendMsg.\\\
+    \n    \"&parse_mode=HTML\") \\\
+    \n    mode=https keep-result=no\
+    \n}"
+add dont-require-permissions=no name=telegram-send owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\
+    \n  :global TelegramTokenId;\
+    \n  :global TelegramChatId;\
+    \n  :local message [:tostr \$1];\
+    \n  :local identity [/system/identity/get name];\
+    \n  :local sendMsg (\"[\".\$identity.\"] \".\$message)\
+    \n  /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\
+    \n    \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\
+    \n    \"&text=\".\$sendMsg.\\\
+    \n    \"&parse_mode=HTML\") \\\
+    \n    mode=https keep-result=no\
+    \n"
+/user group
+add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\
+    t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon"
+/ip smb
+set enabled=no interfaces=lo
+/interface bridge port
+add bridge=Bridge-LAN interface=ether5
+add bridge=Bridge-LAN interface=ether2
+add bridge=Bridge-LAN interface=ether4 trusted=yes
+add bridge=Bridge-LAN interface=ether3
+add bridge=Bridge-LAN interface=wlan2
+add bridge=Bridge-LAN interface=wlan1
+/interface bridge settings
+set use-ip-firewall=yes
+/ip firewall connection tracking
+set udp-timeout=10s
+/ip neighbor discovery-settings
+set discover-interface-list=LAN lldp-med=no lldp-poe-power=no
+/ip settings
+set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\
+    8192
+/ipv6 settings
+set disable-ipv6=yes disable-link-local-address=yes forward=no \
+    max-neighbor-entries=8192 multipath-hash-policy=l4
+/interface detect-internet
+set detect-interface-list=WAN internet-interface-list=Internet \
+    lan-interface-list=LAN request-interval=1m wan-interface-list=WAN
+/interface l2tp-server server
+set authentication=mschap2 use-ipsec=yes
+/interface list member
+add interface=Unet-ether1 list=Internet
+add interface=WG list=WAN
+add interface=Bridge-LAN list=LAN
+add interface=Unet-ether1 list=WAN
+/interface wireguard peers
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\
+    109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \
+    persistent-keepalive=10s public-key=\
+    "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4="
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 disabled=yes \
+    endpoint-address=10.30.30.33 endpoint-port=55055 interface=wg-nuc name=\
+    NUC persistent-keepalive=11s public-key=\
+    "+OvzAjLC45Td52hjkQPmpGvC3RGhZ+Q2CDMJ1U/D4Rw="
+/interface wireless cap
+# 
+set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \
+    caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\
+    CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\
+    wlan2,wlan1 lock-to-caps-man=yes
+/ip address
+add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0
+add address=10.8.0.2/24 interface=WG network=10.8.0.0
+add address=192.168.33.2/24 disabled=yes interface=wg-nuc network=\
+    192.168.33.0
+/ip cloud
+set update-time=no
+/ip dhcp-client
+add add-default-route=special-classless check-gateway=arp comment=Unet-client \
+    default-route-distance=2 default-route-tables=main:2 dhcp-options=\
+    hostname,clientid_duid interface=Unet-ether1 name=UnetDHCP use-peer-dns=\
+    no use-peer-ntp=no
+/ip dhcp-server config
+set accounting=no
+/ip dhcp-server lease
+add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\
+    48:8F:5A:8E:EE:A8 server=masterDHCP
+add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\
+    F0:DE:F1:91:0D:1E server=masterDHCP
+add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\
+    00:80:77:EC:43:86 server=masterDHCP
+add address=10.30.30.70 dhcp-option=domain-search-list,HostName \
+    dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP
+add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\
+    04:7C:16:36:F5:37 server=masterDHCP
+add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\
+    10:2D:41:2C:20:C2 server=masterDHCP
+add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\
+    10:08:C1:81:59:5F server=masterDHCP
+add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\
+    10:38:1F:D2:5F:13 server=masterDHCP
+add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\
+    10:B1:DF:E9:D0:D5 server=masterDHCP
+add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\
+    FE:02:52:BE:3F:16 server=masterDHCP
+add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\
+    D4:6D:6D:FD:E5:49 server=masterDHCP
+add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\
+    CC:42:10:12:46:94 server=masterDHCP
+add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\
+    50:CC:F8:85:96:0A server=masterDHCP
+add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\
+    E4:18:6B:58:34:AB server=masterDHCP
+add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\
+    00:27:15:41:97:A9 server=masterDHCP
+add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \
+    mac-address=C4:82:E1:03:49:10 server=masterDHCP
+add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\
+    10:38:1F:82:81:F2 server=masterDHCP
+add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \
+    dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP
+add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \
+    dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP
+add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \
+    server=masterDHCP
+add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\
+    MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP
+add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \
+    mac-address=F0:75:5D:1E:5F:71 server=masterDHCP
+add address=10.30.30.100 client-id=iVados dhcp-option=HostName \
+    dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP
+add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\
+    ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \
+    dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \
+    use-src-mac=yes
+/ip dhcp-server network
+add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\
+    domain-search-list dhcp-option-set=domain-search-set dns-server=\
+    10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\
+    24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98
+/ip dns
+set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \
+    doh-max-server-connections=20 servers=8.8.8.8 verify-doh-cert=yes
+/ip dns static
+add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \
+    type=A
+add address=109.107.177.79 name=vds.vados.ru type=A
+add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \
+    regexp=*.vados.ru type=NS
+add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\
+    "\".*\\\\.vados\\\\.ru\"" type=FWD
+add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\
+    10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\
+    FWD
+add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\
+    ns.vados.ru.local type=A
+add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\
+    vados.ru ns=ns.vados.ru.local type=NS
+add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A
+add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\
+    dns.google type=A
+add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A
+add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A
+add address=10.30.30.33 name=ros.vados.ru type=A
+add address=10.30.30.95 name=vados-nuc type=A
+add address=10.30.30.33 name=amster-nuc type=A
+add address=10.30.30.33 name=amster type=A
+add address=10.30.30.33 name=amster-reg type=A
+add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A
+add address=10.30.30.33 name=mgr.vados.ru type=A
+add address=10.30.30.33 name=prt.vados.ru type=A
+add address=10.30.30.33 disabled=yes match-subdomain=yes name=\
+    mikrots.vados.ru type=A
+add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A
+add address=10.30.30.30 name=MILLER-LEN type=A
+add address=10.30.30.30 name=miller type=A
+add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\
+    dns.quad9.net type=A
+add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\
+    dns.quad9.net type=A
+add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \
+    type=A
+add address=10.30.30.81 comment=LocalNet name=MikroVados type=A
+add address=10.30.30.10 name=MikroNUC type=A
+add address=10.30.30.86 disabled=yes name=MikroYellow type=A
+add address=10.30.30.85 disabled=yes name=MikroMic type=A
+add address=10.30.30.95 name=VADOS-NUC type=A
+add address=10.30.30.98 name=VADOS-LEN type=A
+add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\
+    A
+add address=10.30.30.20 disabled=yes name=garage type=A
+/ip firewall address-list
+add address=91.215.120.206 list=TRUSTED
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=8.8.4.0/24 list=YouTube
+add address=8.8.8.0/24 list=YouTube
+add address=8.34.208.0/20 list=YouTube
+add address=8.35.192.0/20 list=YouTube
+add address=23.236.48.0/20 list=YouTube
+add address=23.251.128.0/19 list=YouTube
+add address=34.0.0.0/15 list=YouTube
+add address=34.2.0.0/16 list=YouTube
+add address=34.3.0.0/23 list=YouTube
+add address=34.3.3.0/24 list=YouTube
+add address=34.3.4.0/24 list=YouTube
+add address=34.3.8.0/21 list=YouTube
+add address=34.3.16.0/20 list=YouTube
+add address=34.3.32.0/19 list=YouTube
+add address=34.3.64.0/18 list=YouTube
+add address=34.4.0.0/14 list=YouTube
+add address=34.8.0.0/13 list=YouTube
+add address=34.16.0.0/12 list=YouTube
+add address=34.32.0.0/11 list=YouTube
+add address=34.64.0.0/10 list=YouTube
+add address=34.128.0.0/10 list=YouTube
+add address=35.184.0.0/13 list=YouTube
+add address=35.192.0.0/14 list=YouTube
+add address=35.196.0.0/15 list=YouTube
+add address=35.198.0.0/16 list=YouTube
+add address=35.199.0.0/17 list=YouTube
+add address=35.199.128.0/18 list=YouTube
+add address=35.200.0.0/13 list=YouTube
+add address=35.208.0.0/12 list=YouTube
+add address=35.224.0.0/12 list=YouTube
+add address=35.240.0.0/13 list=YouTube
+add address=57.140.192.0/18 list=YouTube
+add address=64.15.112.0/20 list=YouTube
+add address=64.233.160.0/19 list=YouTube
+add address=66.22.228.0/23 list=YouTube
+add address=66.102.0.0/20 list=YouTube
+add address=66.249.64.0/19 list=YouTube
+add address=70.32.128.0/19 list=YouTube
+add address=72.14.192.0/18 list=YouTube
+add address=74.125.0.0/16 list=YouTube
+add address=104.154.0.0/15 list=YouTube
+add address=104.196.0.0/14 list=YouTube
+add address=104.237.160.0/19 list=YouTube
+add address=107.167.160.0/19 list=YouTube
+add address=107.178.192.0/18 list=YouTube
+add address=108.59.80.0/20 list=YouTube
+add address=108.170.192.0/18 list=YouTube
+add address=108.177.0.0/17 list=YouTube
+add address=130.211.0.0/16 list=YouTube
+add address=136.22.160.0/20 list=YouTube
+add address=136.22.176.0/21 list=YouTube
+add address=136.22.184.0/23 list=YouTube
+add address=136.22.186.0/24 list=YouTube
+add address=142.250.0.0/15 list=YouTube
+add address=146.148.0.0/17 list=YouTube
+add address=152.65.208.0/22 list=YouTube
+add address=152.65.214.0/23 list=YouTube
+add address=152.65.218.0/23 list=YouTube
+add address=152.65.222.0/23 list=YouTube
+add address=152.65.224.0/19 list=YouTube
+add address=162.120.128.0/17 list=YouTube
+add address=162.216.148.0/22 list=YouTube
+add address=162.222.176.0/21 list=YouTube
+add address=172.110.32.0/21 list=YouTube
+add address=172.217.0.0/16 list=YouTube
+add address=172.253.0.0/16 list=YouTube
+add address=173.194.0.0/16 list=YouTube
+add address=173.255.112.0/20 list=YouTube
+add address=192.158.28.0/22 list=YouTube
+add address=192.178.0.0/15 list=YouTube
+add address=193.186.4.0/24 list=YouTube
+add address=199.36.154.0/23 list=YouTube
+add address=199.36.156.0/24 list=YouTube
+add address=199.192.112.0/22 list=YouTube
+add address=199.223.232.0/21 list=YouTube
+add address=207.223.160.0/20 list=YouTube
+add address=208.65.152.0/22 list=YouTube
+add address=208.68.108.0/22 list=YouTube
+add address=208.81.188.0/22 list=YouTube
+add address=208.117.224.0/19 list=YouTube
+add address=209.85.128.0/17 list=YouTube
+add address=216.58.192.0/19 list=YouTube
+add address=216.73.80.0/20 list=YouTube
+add address=216.239.32.0/19 list=YouTube
+add address=2ip.ru list=Test-IP
+add address=wg.vados.ru comment=VDSIna list=TRUSTED
+add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED
+add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina
+add address=love.ru comment=love.ru list=NoVdsina
+add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina
+add address=pochta.ru comment=pochta.ru list=NoVdsina
+add address=vdsina.com list=NoVdsina
+add address=vdsina.ru list=NoVdsina
+add address=youla.ru list=NoVdsina
+add address=kupiprodai.ru list=NoVdsina
+add address=myip.ru list=Test-IP
+add address=geoip.co list=NoVdsina
+add address=comp-lenta.ru list=NoVdsina
+add address=128.85.102.70 comment=update.microsoft.com list=\
+    windowsupdateslist
+add address=wu-b-net.trafficmanager.net. comment=\
+    ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\
+    ctldl.windowsupdate.com list=windowsupdateslist
+add address=redir.update.msft.com.trafficmanager.net. comment=\
+    update.microsoft.com list=windowsupdateslist
+add address=geo.prod.do.dsp.trafficmanager.net. comment=\
+    geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12437.d.akamaiedge.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \
+    comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \
+    list=windowsupdateslist
+add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\
+    sls.update.microsoft.com list=windowsupdateslist
+add address=fe3.delivery.mp.microsoft.com. comment=\
+    fe3cr.delivery.mp.microsoft.com list=windowsupdateslist
+add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\
+    fe3.delivery.mp.microsoft.com list=windowsupdateslist
+add address=fe2cr.update.msft.com.trafficmanager.net. comment=\
+    fe2cr.update.microsoft.com list=windowsupdateslist
+add address=download.windowsupdate.com.delivery.microsoft.com. comment=\
+    download.windowsupdate.com list=windowsupdateslist
+add address=wu-f-net.trafficmanager.net. comment=\
+    download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=tsfe.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \
+    comment=9.au.download.windowsupdate.com list=windowsupdateslist
+add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dspw65.akamai.net. comment=\
+    download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \
+    comment=licensing.mp.microsoft.com list=windowsupdateslist
+add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-nlu-net.trafficmanager.net. comment=\
+    star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-tlu-net.trafficmanager.net. comment=\
+    star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=storeedgefd.xbetservices.akadns.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \
+    comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\
+    windowsupdateslist
+add address=e16646.dscg.akamaiedge.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\
+    windowsupdateslist
+add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=bg.microsoft.map.fastly.net. comment=\
+    3.au.download.windowsupdate.com list=windowsupdateslist
+add list=windowsupdateslist
+add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\
+    star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a2033.dscd.akamai.net. comment=\
+    star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-nlu-net.trafficmanager.net. comment=\
+    dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-b-tlu-net.trafficmanager.net. comment=\
+    1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a122.dscg3.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist
+add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e10370.d.akamaiedge.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=a1683.dscd.akamai.net. comment=\
+    dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \
+    comment=collections.mp.microsoft.com list=windowsupdateslist
+add address=a1847.dscd.akamai.net. comment=\
+    wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=au.download.windowsupdate.com.edgesuite.net. comment=\
+    2.au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dscg3.akamai.net. comment=\
+    au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    4.au.download.windowsupdate.com list=windowsupdateslist
+add address=cl-glcb907925.gcdn.co. comment=\
+    4.au.download.windowsupdate.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \
+    comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=ts-frontend.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=sds.trafficmanager.net. comment=software-download.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\
+    windowsupdateslist
+add address=e12671.dscd.akamaiedge.net. comment=\
+    download.microsoft.com.edgekey.net list=windowsupdateslist
+add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12358.d.akamaiedge.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-tlu-net.trafficmanager.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a1856.dspw65.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina
+add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=purchase.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.mp.microsoft.com list=windowsupdateslist
+add address=e110219.a.akamaiedge.net. comment=\
+    purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.141 list=windowsupdateslist
+add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=storesdk.xbetservices.akadns.net. comment=\
+    storesdk.dsx.mp.microsoft.com list=windowsupdateslist
+add address=e16646.g.akamaiedge.net. comment=\
+    storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=software-download.microsoft.com.delivery.microsoft.com. comment=\
+    software-download.microsoft.com list=windowsupdateslist
+add address=download.prss.microsoft.com.akamaized.net. comment=\
+    software-download.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina
+add address=87.250.250.50 comment=YandexDisk list=NoVdsina
+add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\
+    purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\
+    cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=a1996.dscd.akamai.net. comment=\
+    wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\
+    tas02.sls.update.microsoft.com list=windowsupdateslist
+add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\
+    star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\
+    paymentinstruments.mp.microsoft.com list=windowsupdateslist
+add address=10.30.30.33 comment=amster list=NoWG
+add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG
+add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG
+add address=wg.vados.ru comment=VDSina-vpn list=VDSina
+add address=80.85.244.9 list=TRUSTED
+add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina
+add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS
+add address=dns.google comment=Google-dns list=Trusted-DNS
+add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\
+    Trusted-DNS
+add address=time.google.com comment=Google-time list=Trusted-NTP
+add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP
+add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=cp.vdsina.com comment=VDSina-vpn list=VDSina
+add address=vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns.vados.ru comment=VDSina-vpn list=VDSina
+add address=vdsina.com comment=VDSina-vpn list=VDSina
+add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=10.30.30.0/24 comment="Local Network" list=Local-Net
+add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net
+add address=146.120.64.208/29 comment="External Net" list=Unet
+add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina
+add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina
+add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina
+add address=10.30.30.30 comment=miller disabled=yes list=NoWG
+add address=10.30.30.33 comment="Direct connet to DNS servers" list=\
+    Direct-DNS
+add address=109.107.177.79 list=VPN-Server
+add address=10.0.0.0/8 list=RFC1918
+add address=172.16.0.0/12 list=RFC1918
+add address=192.168.0.0/16 list=RFC1918
+add address=8.8.4.4 disabled=yes list=to_vpn
+add address=myip.ru disabled=yes list=to_vpn
+add address=10.30.30.98 disabled=yes list=to_vpn
+/ip firewall filter
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=12h chain=input comment="block honeypot DNS" \
+    connection-state=new dst-port=53 in-interface=Unet-ether1 protocol=udp \
+    src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment=\
+    "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=!TRUSTED
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \
+    connection-state=new dst-port=5060 in-interface=Unet-ether1 protocol=udp
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot NTP" \
+    connection-state=new dst-port=123 in-interface=Unet-ether1 protocol=udp
+add action=fasttrack-connection chain=forward comment=\
+    "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \
+    connection-state=established,related,new disabled=yes
+add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \
+    protocol=tcp
+add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \
+    protocol=udp
+add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \
+    dst-port=53 protocol=tcp src-address=10.30.30.0/24
+add action=accept chain=input comment="udp Accept input DNS queries" \
+    dst-port=53 protocol=udp src-address=10.30.30.0/24
+add action=accept chain=output comment="accept WireGuard" disabled=yes \
+    dst-address-list=VPN-Server out-interface=Unet-ether1 protocol=udp \
+    src-port=13231
+add action=accept chain=output disabled=yes dst-address-list=VPN-Server \
+    dst-port=29185 out-interface=Unet-ether1 protocol=udp
+add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
+    connection-state=established,related,new disabled=yes routing-mark=\
+    !To-VPN
+add action=accept chain=output disabled=yes protocol=tcp src-port=443
+add action=accept chain=output disabled=yes src-address=127.0.0.1
+add action=accept chain=forward comment="defconf: accept in ipsec policy" \
+    disabled=yes ipsec-policy=in,ipsec
+add action=accept chain=forward comment="defconf: accept out ipsec policy" \
+    disabled=yes ipsec-policy=out,ipsec
+add action=accept chain=forward comment=\
+    "defconf: accept established,related, untracked" connection-state=\
+    established,related,untracked disabled=yes
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid in-interface=Unet-ether1 src-address=\
+    !10.30.30.0/24
+add action=drop chain=forward comment=\
+    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
+    connection-state=new in-interface=Unet-ether1 src-address-list=!VDSina
+add action=accept chain=input in-interface=Unet-ether1 protocol=icmp \
+    src-address-list=VDSina
+add action=accept chain=input connection-state=established
+add action=accept chain=input connection-state=related
+/ip firewall mangle
+add action=accept chain=prerouting comment=RFC1918 dst-address-list=RFC1918 \
+    in-interface-list=!WAN
+add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \
+    new-routing-mark=main passthrough=no src-address-list=NoWG
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for NoVdsina" disabled=yes dst-address-list=NoVdsina \
+    new-routing-mark=main passthrough=no src-address=10.30.30.0/24
+add action=mark-connection chain=prerouting comment=\
+    "Transit for address-list \"to_vpn\"" connection-mark=no-mark disabled=\
+    yes dst-address-list=to_vpn in-interface-list=!WAN new-connection-mark=\
+    to-vpn-conn routing-mark=!main
+add action=mark-routing chain=prerouting comment=\
+    "Find routing over table r_to_vpn" connection-mark=to-vpn-conn disabled=\
+    yes in-interface-list=!WAN new-routing-mark=r_to_vpn
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for VDSina" dst-address-list=VPN-Server \
+    new-routing-mark=main passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\
+    Unet new-routing-mark=main passthrough=no
+add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\
+    To-VPN src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \
+    new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment="WG for all" \
+    dst-address-list=!NoVdsina new-routing-mark=To-VPN src-address=\
+    10.30.30.0/24
+add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \
+    out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\
+    1381-65535
+add action=mark-connection chain=prerouting comment=\
+    "Mark VPN connections to exclude from FastTrack" disabled=yes \
+    new-connection-mark=VPN_No_FastTrack routing-mark=To-VPN
+add action=mark-routing chain=prerouting comment="VPN Network" disabled=yes \
+    dst-address=10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24
+add action=mark-connection chain=output comment="For this router" \
+    connection-mark=no-mark disabled=yes dst-address-list=to_vpn \
+    new-connection-mark=to-vpn-conn-local
+add action=mark-routing chain=output comment="For this router" \
+    connection-mark=to-vpn-conn-local disabled=yes new-routing-mark=r_to_vpn
+/ip firewall nat
+add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=masquerade chain=srcnat comment=\
+    "Nat Addresses for routing mark r_to_vpn" disabled=yes routing-mark=\
+    r_to_vpn
+add action=dst-nat chain=dstnat comment=\
+    "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=VPN-Server \
+    to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat comment=\
+    "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\
+    udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\
+    Unet-ether1 protocol=udp src-address=!10.30.30.0/24 to-addresses=\
+    10.30.30.33 to-ports=44333
+add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \
+    routing-mark=To-VPN
+add action=masquerade chain=srcnat comment="Default NAT" out-interface=\
+    Unet-ether1 routing-mark=!To-VPN src-address=10.30.30.0/24
+add action=dst-nat chain=dstnat dst-port=44044 in-interface=Unet-ether1 \
+    protocol=udp src-address=109.107.177.79 to-addresses=10.30.30.33 \
+    to-ports=44044
+add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \
+    fragment=no in-interface=Unet-ether1 protocol=tcp routing-mark=main \
+    to-addresses=10.30.30.33 to-ports=443
+add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \
+    dst-port=80 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=80
+add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \
+    dst-port=2904 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2904
+add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\
+    5000 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=5000
+add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\
+    2377 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=2377
+add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\
+    Unet-ether1 protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \
+    to-ports=81
+add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\
+    Unet-ether1 protocol=tcp src-address-list=TRUSTED to-addresses=\
+    10.30.30.33 to-ports=22
+add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \
+    dst-port=2377 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2377
+add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\
+    Unet-ether1 protocol=tcp routing-mark=!To-VPN to-addresses=10.30.30.33 \
+    to-ports=22
+add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \
+    dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \
+    time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\
+    Bridge-LAN protocol=tcp src-address-list=KIDS time=\
+    6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+/ip firewall raw
+add action=drop chain=prerouting comment="Drop Honeypot Hackers" \
+    in-interface=Unet-ether1 src-address-list="Honeypot Hacker"
+add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \
+    in-interface-list=WAN src-address-list=Trusted-DNS
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \
+    content=linux.duke.edu disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleapis.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googlevideo.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleusercontent.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    nhacmp3youtube.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \
+    content=rutube.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \
+    content=me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "icloud.com raw" content=icloud.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \
+    disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "api.db-ip.com raw" content=api.db-ip.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \
+    content=gosuslugi.ru disabled=yes
+/ip firewall service-port
+set ftp disabled=yes
+set tftp disabled=yes
+set irc disabled=no
+set sip disabled=yes
+set pptp disabled=yes
+set rtsp disabled=no
+/ip ipsec settings
+set accounting=no
+/ip ipsec policy
+set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0
+/ip ipsec profile
+set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
+/ip proxy
+set cache-administrator="" max-cache-size=none port=80,443 src-address=\
+    0.0.0.0
+/ip route
+add check-gateway=none comment=WG-Default disabled=no distance=1 dst-address=\
+    0.0.0.0/0 gateway=WG routing-table=To-VPN scope=30 target-scope=10
+/ip service
+set ftp disabled=yes
+set telnet disabled=yes
+set reverse-proxy disabled=yes
+set ssh address=10.30.30.0/24 port=2222
+set winbox address=10.30.30.0/24
+set api address=10.30.30.0/24
+set api-ssl address=10.30.30.0/24 disabled=yes
+set www-ssl certificate=Root-YE port=18443
+set www address=10.30.30.0/24 disabled=yes port=18880
+/ip service webserver
+set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\
+    no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \
+    webfig-secure=no
+/ip ssh
+set forwarding-enabled=both publickey-authentication-options=verify-required
+/ip upnp
+set enabled=yes
+/ip upnp interfaces
+add interface=Bridge-LAN type=internal
+add forced-ip=146.120.64.211 interface=Unet-ether1 type=external
+add forced-ip=109.107.177.79 interface=*E type=external
+add interface=lo type=internal
+add interface=wlan2 type=internal
+add interface=wlan1 type=internal
+/ipv6 dhcp-client
+add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\
+    info use-interface-duid=yes validate-server-duid=no
+/ipv6 dhcp-server option sets
+add name=domain-search-set options=domain-search-list
+add name="=\"Client ID\"" options=HostName
+/ipv6 firewall address-list
+add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
+add address=::1/128 comment="defconf: lo" list=bad_ipv6
+add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
+add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
+add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
+add address=100::/64 comment="defconf: discard only " list=bad_ipv6
+add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
+add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
+add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
+/ipv6 firewall filter
+add action=accept chain=input comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=input comment="defconf: drop invalid" connection-state=\
+    invalid
+add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=input comment="defconf: accept UDP traceroute" \
+    dst-port=33434-33534 protocol=udp
+add action=accept chain=input comment=\
+    "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
+    udp src-address=fe80::/10
+add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
+    protocol=udp
+add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=input comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=input comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+add action=accept chain=forward comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
+add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
+    hop-limit=equal:1 protocol=icmpv6
+add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=forward comment="defconf: accept HIP" protocol=139
+add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
+    500,4500 protocol=udp
+add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=forward comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=forward comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+/ipv6 nd
+set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \
+    managed-address-configuration=yes other-configuration=yes pref64=::/64
+/ipv6 nd prefix
+add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none
+/ipv6 nd prefix default
+set dhcp6-pd-preferred=yes
+/ipv6 nd proxy
+add disabled=yes interface=lo
+/ipv6 nd settings
+set router-advertisement-route-distance=100
+/routing settings
+set single-process=no
+/system clock
+set time-zone-name=Europe/Moscow
+/system clock manual
+set time-zone=+03:00
+/system identity
+set name=MikroMaster
+/system logging
+add action=email disabled=yes regex="* added|changed|removed *" topics=\
+    system,info
+/system ntp client
+set enabled=yes
+/system ntp server
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes
+/system ntp client servers
+add address=0.ru.pool.ntp.org
+add address=1.ru.pool.ntp.org
+add address=2.ru.pool.ntp.org
+add address=3.ru.pool.ntp.org
+add address=time.google.com disabled=yes
+/system package update
+set check-certificate=yes-without-crl ip-version=ipv4
+/system scheduler
+add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \
+    on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Every Day Check For Update Scripts" interval=1d name=\
+    AM-ScriptInstallUpdate on-event=\
+    ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\
+    AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+/system watchdog
+set watchdog-timer=no
+/tool e-mail
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \
+    server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com
+/tool mac-server
+set allowed-interface-list=LAN
+/tool mac-server mac-winbox
+set allowed-interface-list=LAN
+/tool netwatch
+add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\
+    -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\
+    e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \
+    interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\
+    https-get up-script=""
+add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\
+    flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\
+    oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \
+    name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \
+    up-script=""
+add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\
+    8.8.8.8 down-script="" host=dns.google http-codes="" name=\
+    "Google-DNS IPv4" test-script="" type=dns up-script=""
+add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\
+    rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\
+    -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \
+    http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\
+    "" test-script="" type=dns up-script=""
+add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \
+    dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \
+    interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \
+    test-script="" timeout=800ms type=dns up-script=""
+add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\
+    ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \
+    down-script="" host=149.112.112.112 http-codes="" interval=10s name=\
+    "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script=""
+add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \
+    down-script="" host=91.192.189.2 http-codes="" interval=10s name=\
+    ns1.unet.ws test-script="" type=simple up-script=""
+add check-certificate=yes comment=\
+    "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \
+    disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\
+    vds.vados.ru port=443 test-script="" type=https-get up-script=""
+add comment="WireGuard NAT " disabled=yes down-script="/log info \"[WG-Monitor\
+    ] WireGuard is NOT running - reverting rules\"\
+    \n/ip firewall nat remove [find comment=\"Redirect to Router\"]\
+    \n/ip dns set servers=8.8.8.8\
+    \n/ip dns cache flush\
+    \n/ip route remove [find comment=\"wg-auto-route\"]\
+    \n" host=10.8.0.1 http-codes="" interval=15s name=WG test-script="" \
+    timeout=5s type=simple up-script="/log info \"[WG-Monitor] WireGuard is RU\
+    NNING - applying rules\";\
+    \n:local routeFile \"ips.txt\";\
+    \n:local routeDefAddr \"0.0.0.0/0\";\
+    \n:local routeGateway \"10.8.0.1\";\
+    \n:local routeIF \"WG\";\
+    \n:local routeTable \"To-VPN\";\
+    \n:local routeComment \"wg-auto-route\";\
+    \n/ip dns cache flush;\
+    \n:if ([:len [/ip firewall nat find comment=\"Redirect to Router\"]] > 0) \
+    do={\
+    \n  /ip firewall nat remove [find comment=\"Redirect to Router\"];\
+    \n}\
+    \n/ip firewall nat add action=redirect chain=dstnat src-address-list=\"Red\
+    irectDNS\" dst-port=53 protocol=udp comment=\"Redirect to Router\";\
+    \n/ip dns set servers=\$routeGateway;\
+    \n:local content [/file get \$routeFile contents];\
+    \n:if ([:len \$content] > 0) do={\
+    \n    :local line \"\";\
+    \n    :for i from=0 to=([:len \$content] - 1) do={\
+    \n        :local char [:pick \$content \$i];\
+    \n        :if (\$char != \"\\r\" && \$char != \"\\n\") do={\
+    \n            :set line (\$line . \$char);\
+    \n        } else={\
+    \n            :if ([:len \$line] > 5) do={\
+    \n                :do { /ip route add disabled=no dst-address=\$routeDefAd\
+    dr gateway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$r\
+    outeTable comment=\$routeComment check-gateway=none } on-error={}\
+    \n            }\
+    \n            :set line \"\";\
+    \n        }\
+    \n    }\
+    \n    :if ([:len \$line] > 5) do={\
+    \n#         :do { /ip route add dst-address=\$line gateway=\$routeGateway \
+    distance=1 comment=\$routeComment } on-error={}\
+    \n           :do { /ip route add disabled=no dst-address=\$routeDefAddr ga\
+    teway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$routeT\
+    able comment=\$routeComment check-gateway=none } on-error={}\
+    \n    }\
+    \n}\
+    \n:local dotPos [:find \$routeGateway \".\"];\
+    \n:if (\$dotPos != \"\") do={\
+    \n    :local firstOctet [:pick \$routeGateway 0 \$dotPos];\
+    \n    :local derivedDstAddress (\$firstOctet . \".30.0.0/15\");\
+    \n    :do { /ip route add dst-address=\$derivedDstAddress gateway=\$routeG\
+    ateway distance=1 comment=\$routeComment } on-error={}\
+    \n}\
+    \n\
+    \n"
+add comment=WG-Default disabled=yes down-script=\
+    "/ip route disable [find comment=\"WG-Default\"];" host=10.8.0.1 \
+    interval=15s name=WG packet-count=20 test-script="" thr-loss-count=5 \
+    type=icmp up-script="/ip route enable [find comment=\"WG-Default\"];"
+/user aaa
+set accounting=no
-- 
2.52.0