From b7f16a45e485d95601acee926d131fee2e022c83 Mon Sep 17 00:00:00 2001 From: vados-dev Date: Fri, 10 Jul 2026 11:20:03 +0300 Subject: [PATCH] Backup for MikroNUC created successfully at Jul 10 11:20:03. --- .../20260710/20260710062002-Config.rsc | 3841 ++++++++++++ .../20260710/20260710110002-Config.rsc | 36 + MikroMaster/tmp/Config.rsc | 0 MikroMaster/tmp/Diff-Config.rsc | 3806 ++++++++++++ .../20260710/20260710112001-Binary.backup | Bin 0 -> 385044 bytes MikroNUC/20260710/20260710112001-Config.rsc | 5521 +++++++++++++++++ .../20260710/20260710112001-Diff-Config.rsc | 3 + 7 files changed, 13207 insertions(+) create mode 100644 MikroMaster/20260710/20260710062002-Config.rsc create mode 100644 MikroMaster/20260710/20260710110002-Config.rsc delete mode 100644 MikroMaster/tmp/Config.rsc create mode 100644 MikroMaster/tmp/Diff-Config.rsc create mode 100644 MikroNUC/20260710/20260710112001-Binary.backup create mode 100644 MikroNUC/20260710/20260710112001-Config.rsc create mode 100644 MikroNUC/history/20260710/20260710112001-Diff-Config.rsc diff --git a/MikroMaster/20260710/20260710062002-Config.rsc b/MikroMaster/20260710/20260710062002-Config.rsc new file mode 100644 index 0000000..5604efb --- /dev/null +++ b/MikroMaster/20260710/20260710062002-Config.rsc @@ -0,0 +1,3841 @@ +# 2026-07-10 06:20:06 by RouterOS 7.23.1 +# software id = A8L5-07YF +# +# model = RB952Ui-5ac2nD +# serial number = D3D50CEDCD38 +/interface bridge +add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\ + "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\ + Bridge-LAN port-cost-mode=short +/interface ethernet +set [ find default-name=ether1 ] comment=Unet-cable loop-protect=off name=\ + Unet-ether1 rx-flow-control=auto tx-flow-control=auto +set [ find default-name=ether2 ] comment=LAN-2 +set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\ + -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3 +set [ find default-name=ether4 ] comment=LAN-4 +set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\ + -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \ + loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto +/interface wireless +# managed by CAPsMAN +# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding +set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \ + ssid=vados wireless-protocol=802.11 +# managed by CAPsMAN +# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding +set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \ + ssid=vados5g wireless-protocol=802.11 +/interface wireguard +add comment=WG listen-port=13231 mtu=1320 name=WG +add comment="WG interface for Amnezia route" disabled=yes listen-port=33033 \ + mtu=1360 name=wg-nuc +/interface list +add include=static name=LAN +add name=Internet +add include=Internet name=WAN +/interface wireless security-profiles +set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\ + dynamic-keys supplicant-identity=MikroTik +/iot wiliot servers +set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East" +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=HP1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +add name=VADOS-LEN options=HostName +add name=VADOS-NUC options=HostName +add name=MikroNUC options=HostName +add name=master options=HostName +add name=MikroYellow options=HostName +add name="=\"Client ID\"" options=HostName +add name=iVados options=HostName +/ip dns forwarders +add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no +add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \ + verify-doh-cert=no +add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no +add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no +add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\ + no +add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\ + no +add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no +/ip ipsec proposal +set [ find default=yes ] disabled=yes +/ip pool +add name=dhcp ranges=10.30.30.83-10.30.30.254 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \ + name=masterDHCP server-address=10.30.30.81 +/ip smb users +set [ find default=yes ] disabled=yes +add disabled=yes name=vados +/ipv6 dhcp-client option +add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" +add code=12 name=HostName value="\$(HOSTNAME)" +add code=61 name=DUID value=0x00030001488f5a8e1abc +add code=61 name=clientid +/ipv6 dhcp-server option +add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" +add code=12 name=HostName value="\$(HOSTNAME)" +add code=61 name=CLIENT_DUID +add code=61 name=CLIENT_MAC +/ppp profile +set *FFFFFFFE use-upnp=no +/routing bgp template +set default disabled=no output.network=bgp-networks +/routing table +add disabled=no fib name=To-VPN +add disabled=no fib name=r_to_vpn +/system logging action +add email-start-tls=yes email-to=vados@vados.ru name=email target=email +/system script +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\ + \n\r\ + \n#:local Script AM-setup\ + \n;\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n\ + \n\r\ + \n#\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n\r\ + \n#\r\ + \n\ + \n#root.mnuc.backuper\ + \n\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ + .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ + \n\ + \n#:local Script AM-GlobalConfig;\ + \n\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\r\ + \n\r\ + \n#\ + \n:global MkDir;\ + \n\r\ + \n\ + \n#:local FetchFile Binary.backup\ + \n:local localDir \"\";\ + \n\ + \n\r\ + \n#\$MkDir \$localDir;\r\ + \n\ + \n#\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/729/f42d43ae\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 00:05:03 01.07.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add comment=\ + "Lookup IP addresses for RKN list and add them to firewall address-list" \ + dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-RKN-dnsLookup\r\ + \n# Script comment: Lookup IP addresses for RKN list and add them to firew\ + all address-list\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Script description: This script is intended to be run periodically, e.\ + g. once a day, to update the IP addresses in the firewall address-list bas\ + ed on the RKN list.\r\ + \n# It resolves the domain names in the RKN list and a\ + dds the corresponding IP addresses to the specified firewall address-list.\ + \r\ + \n# The script also handles CNAME records by following\ + \_them until it finds A records.\r\ + \n# Usage:\r\ + \n# /system/script { run AM-RKN-dnsLookup; }\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:global dnsLookupReady false;\r\ + \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\ + \_true; }\r\ + \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\ + \n:set dnsLookupReady false;\r\ + \n\r\ + \n:local arrRKN {\r\ + \n \"telegra.ph\"\r\ + \n \"grani.ru\"\r\ + \n \"xhamster.com\"\r\ + \n \"lostfilm.tv\"\r\ + \n \"rutracker.org\"\r\ + \n \"lurkmore.to\"\r\ + \n \"dou.ua\"\r\ + \n \"youporn.com\"\r\ + \n \"pornolab.net\"\r\ + \n \"crimerussia.com\"\r\ + \n \"telegram.org\"\r\ + \n \"api.telegram.org\"\r\ + \n \"facebook.com\"\r\ + \n \"instagram.com\"\r\ + \n \"x.com\"\r\ + \n \"twitter.com\"\r\ + \n \"youtube.com\"\r\ + \n \"googleapis.com\"\r\ + \n \"youtu.be\"\r\ + \n \"googlevideo.com\"\r\ + \n \"gstatic.com\"\r\ + \n \"googleusercontent.com\"\r\ + \n \"nhacmp3youtube.com\"\r\ + \n \"telegram.me\"\r\ + \n \"t.me\";}\r\ + \n\r\ + \n:local ListRKN \"RKN-dnsLookup\";\r\ + \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\ + \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\ + ={\r\ + \n /ip firewall address-list remove \$aListItem;\r\ + \n}\r\ + \n:foreach aItem in=\$arrRKN do={\r\ + \n# :do {\r\ + \n :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\ + ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\ + \n# } on-error={\r\ + \n# :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\ + \n# }\r\ + \n :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \ + do={\r\ + \n :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\ + \n :local newAddress [/ip dns cache all get \$dnsRecord data];\ + \r\ + \n :do {\r\ + \n /ip firewall address-list add list=\$ListRKN address=\$newA\ + ddress comment=\$aItem;\r\ + \n :log warning \"Successfully adding ip to list A record: \ + \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\ + \n } on-error={\r\ + \n :log error \"error when adding ip to list A record: \$dn\ + sRecord, address: \$newAddress domain: \$aItem\";\r\ + \n }\r\ + \n }\r\ + \n :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\ + \n :local cname;\r\ + \n :local nextCname;\r\ + \n :local cnameAddress;\r\ + \n :set cname [/ip dns cache all find where (name=\$aItem && ty\ + pe=\"CNAME\")];\r\ + \n :set nextCname [/ip dns cache all find where (name=[/ip dns \ + cache all get \$cname data] && type=\"CNAME\")];\r\ + \n :while (\$nextCname != \"\") do={\r\ + \n :set cname \$nextCname;\r\ + \n :set nextCname [/ip dns cache all find where (name=[/ip \ + dns cache all get \$cname data] && type=\"CNAME\")];\r\ + \n }\r\ + \n :foreach aRecord in=[/ip dns cache all find where (name=[/ip\ + \_dns cache all get \$cname data] && type=\"A\")] do={\r\ + \n :do {\r\ + \n :set cnameAddress [/ip dns cache all get \$aRecord d\ + ata];\r\ + \n /ip firewall address-list add list=\$ListRKN address\ + =\$cnameAddress comment=\$aItem;\r\ + \n :log warning \"Succesfully adding ip to list CNAME r\ + ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \ + \$aItem.\";\r\ + \n# /ip firewall raw add action=add-dst-to-address-list\ + \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\ + g comment=\$aItem content=\$aItem;\r\ + \n } on-error={\r\ + \n :log error \"error when adding ip to list CNAME reco\ + rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\ + tem.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\ + ptName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \ + run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\ + olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\ + \_start-time=startup;\r\ + \n }\r\ + \n:set dnsLookupReady true;\r\ + \ndelay 2s; \r\ + \n:global dnsLookupReady (a);\r\ + \n" +add dont-require-permissions=no name="renameLists " owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local oldName \"Test\";\ + \n:local newName \"Test-IP\";\ + \n/ip firewall address-list\ + \n:foreach i in=[find list=\$oldName] do={\ + \nset \$i list=\$newName;\ + \n}\ + \n" +add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + #############Script Settings##################\ + \n\ + \n:local \"IF-TUN\" \"6to4-tun\"\ + \n:local \"IF-LOC\" \"Bridge-LAN\"\ + \n:local \"POOL-6TO4\" \"poolV6-local\"\ + \n:local \"force-update\" false\ + \n############ use then static ip #######################\ + \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \ + address]\ + \n#:local \"interface\" \"ext\"\ + \n:local bound 0\ + \n\ + \n###############################################\ + \n\ + \n:local 6to4prefix do={\ + \n :global dec2hex\ + \n :local ipv4 \$1\ + \n :local ipv6 \"2002:\"\ + \n :for i from=0 to=2 step=1 do={ \ + \n :if ( \$i = 2) do={\ + \n :set ipv6 (\$ipv6.\":\")\ + \n }\ + \n :local fp [:find \$ipv4 \".\"]\ + \n :if ( \$fp > 0 ) do={\ + \n :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\ + \n :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\ + \n }\ + \n }\ + \n :return (\$ipv6.[\$dec2hex \$ipv4])\ + \n}\ + \n:local \"str_replace\" do={\ + \n :local \"str-pos\" [:find \$1 \$2]\ + \n :local \"str-len\" [:len \$2]\ + \n :local str \"\"\ + \n :local rest \$1\ + \n :while (\$\"str-pos\" >= 0) do={\ + \n :local t [:pick \$rest 0 \$\"str-pos\"]\ + \n :if ( \$4 > 0 ) do={\ + \n :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\ + \n :set str (\$str.\$5)\ + \n }\ + \n }\ + \n :set str (\$str.\$t.\$3)\ + \n :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\ + st]]\ + \n :set \"str-pos\" [:find \$rest \$2]\ + \n }\ + \n :return (\$str.\$rest)\ + \n}\ + \n\ + \n:if (\$bound=1) do={\ + \n :local t [:find \$\"lease-address\" \"/\"]\ + \n\ + \n :if ( \$t >= 0 ) do={\ + \n :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\ + \n }\ + \n\ + \n :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\ + ) do={\ + \n /interface 6to4 add !keepalive local-address=\$\"lease-address\"\ + \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\ + \n :set \"force-update\" true\ + \n }\ + \n\ + \n :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\ + cal-address];\ + \n\ + \n :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \ + true) do={\ + \n /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\ + ease-address\"\ + \n /ipv6 address remove [find interface=\$\"IF-TUN\"]\ + \n /ipv6 address remove [find interface=\$\"IF-LOC\"]\ + \n /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\ + \"::/0\"]\ + \n :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\ + \n :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\ + \_0) do={ \ + \n /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\ + \".\":1::/64\") prefix-length=64\ + \n } else={\ + \n /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \ + prefix=(\$\"pool-prefix\".\":1::/64\")\ + \n }\ + \n /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\ + \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\ + ace=\$\"IF-TUN\" advertise=no\ + \n /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\ + =\$\"IF-LOC\" advertise=yes\ + \n /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\ + \"IF-TUN\")\ + \n :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\ + s]\ + \n :set t [:pick \$t 0 [:find \$t \"/\"]]\ + \n :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\ + \_= 0) do={\ + \n /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\ + [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ + \n } else={\ + \n /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \ + where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ + \n }\ + \n :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\ + -LOC\"] = 0) do={\ + \n /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\ + on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\ + \n }\ + \n :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \ + 0) do={\ + \n /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\ + onfiguration=yes\ + \n }\ + \n }\ + \n}" +add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global MAC2EUI64 do={\ + \n :local EUI64 \"\"\ + \n :local MAC \$1\ + \n :local HEX2DEC \"0123456789ABCDEF\"\ + \n :for i from=0 to=5 step=1 do={\ + \n :if ( \$i = 0 ) do={\ + \n :set EUI64 [:pick \$MAC 0]\ + \n :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\ + \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\ + \n }\ + \n :if ( \$i = 1 || \$i = 3) do={\ + \n :set EUI64 (\$EUI64.\":\")\ + \n }\ + \n :if ( \$i = 2 ) do={\ + \n :set EUI64 (\$EUI64.\"FF:FE\")\ + \n }\ + \n :if ( [:find \$MAC \":\"] = 2 ) do={\ + \n :set MAC [:pick \$MAC 3 [:len \$MAC]]\ + \n :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\ + \n }\ + \n }\ + \n :return (\$EUI64)\ + \n}\ + \n\ + \n:global dec2hex do={\ + \n :local hex \"\"\ + \n :local dec [:tonum \$1]\ + \n :for i from=0 to=4 step=4 do={\ + \n :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\ + c>>\$i)&0xf)+1)].\$hex)\ + \n }\ + \n :return ([:tostr \$hex])\ + \n}" +add comment=Generator dont-require-permissions=no name=proxySet owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# 2. WireGuard interface\r\ + \n/interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDg\ + uMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=21641\r\ + \n/interface/wireguard/peers/add interface=wg-VDSina public-key=\"o5IgCl1/\ + G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcYQnD9\ + N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=10.30.30.33 endpoint-port=518\ + 20 allowed-address=0.0.0.0/0 persistent-keepalive=11\r\ + \n/ip/address/add address=10.9.0.3/32 interface=wg-VDSina\r\ + \n\r\ + \n# 3. DNS\r\ + \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\ + n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\ + \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /system/script/add name=VDS\ + ina-prev-dns comment=\"\$prevDNS\" source=\"\" }\r\ + \n/ip/dns/set servers=8.8.4.4\r\ + \n/ip/route/add dst-address=8.8.4.4/32 gateway=wg-VDSina distance=1 commen\ + t=VDSina-dns\r\ + \n\r\ + \n# 4. Enable WireGuard\r\ + \n/interface/wireguard/enable wg-VDSina\r\ + \n" +add dont-require-permissions=no name=AM-Telegram-Send owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\ + \n# RouterOS script: AM-Telegram-Send\ + \n# Script comment: Mini script for send messages to admin Telegram chat\ + \n# Copyright (c) 2007-2026 Vados \ + \n#\ + \n#\ + \n# requires RouterOS, version=7.19\ + \n# requires device-mode, fetch\ + \n#\ + \n# Script description: \ + \n#\ + \n#\ + \n# Usage:\ + \n# /system/script { run AM-Telegram-Send \"Message here )))\"; }\ + \n\ + \n/system/script\ + \nadd name=telegram-send dont-require-permissions=no source={\ + \n :global TelegramTokenId;\ + \n :global TelegramChatId;\ + \n :local message [:tostr \$1];\ + \n :local identity [/system/identity/get name];\ + \n :local sendMsg (\"[\".\$identity.\"] \".\$message)\ + \n /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\ + \n \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\ + \n \"&text=\".\$sendMsg.\\\ + \n \"&parse_mode=HTML\") \\\ + \n mode=https keep-result=no\ + \n}" +add dont-require-permissions=no name=telegram-send owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n :global TelegramTokenId;\ + \n :global TelegramChatId;\ + \n :local message [:tostr \$1];\ + \n :local identity [/system/identity/get name];\ + \n :local sendMsg (\"[\".\$identity.\"] \".\$message)\ + \n /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\ + \n \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\ + \n \"&text=\".\$sendMsg.\\\ + \n \"&parse_mode=HTML\") \\\ + \n mode=https keep-result=no\ + \n" +/user group +add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\ + t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon" +/ip smb +set enabled=no interfaces=lo +/interface bridge port +add bridge=Bridge-LAN interface=ether5 +add bridge=Bridge-LAN interface=ether2 +add bridge=Bridge-LAN interface=ether4 trusted=yes +add bridge=Bridge-LAN interface=ether3 +add bridge=Bridge-LAN interface=wlan2 +add bridge=Bridge-LAN interface=wlan1 +/interface bridge settings +set use-ip-firewall=yes +/ip firewall connection tracking +set udp-timeout=10s +/ip neighbor discovery-settings +set discover-interface-list=LAN lldp-med=no lldp-poe-power=no +/ip settings +set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\ + 8192 +/ipv6 settings +set disable-ipv6=yes disable-link-local-address=yes forward=no \ + max-neighbor-entries=8192 multipath-hash-policy=l4 +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN request-interval=1m wan-interface-list=WAN +/interface l2tp-server server +set authentication=mschap2 use-ipsec=yes +/interface list member +add interface=Unet-ether1 list=Internet +add interface=WG list=WAN +add interface=Bridge-LAN list=LAN +add interface=Unet-ether1 list=WAN +/interface wireguard peers +add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\ + 109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \ + persistent-keepalive=10s public-key=\ + "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4=" +add allowed-address=0.0.0.0/0 client-allowed-address=::/0 disabled=yes \ + endpoint-address=10.30.30.33 endpoint-port=55055 interface=wg-nuc name=\ + NUC persistent-keepalive=11s public-key=\ + "+OvzAjLC45Td52hjkQPmpGvC3RGhZ+Q2CDMJ1U/D4Rw=" +/interface wireless cap +# +set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \ + caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\ + CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\ + wlan2,wlan1 lock-to-caps-man=yes +/ip address +add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.8.0.2/24 interface=WG network=10.8.0.0 +add address=192.168.33.2/24 disabled=yes interface=wg-nuc network=\ + 192.168.33.0 +/ip cloud +set update-time=no +/ip dhcp-client +add add-default-route=special-classless check-gateway=arp comment=Unet-client \ + default-route-distance=2 default-route-tables=main:2 dhcp-options=\ + hostname,clientid_duid interface=Unet-ether1 name=UnetDHCP use-peer-dns=\ + no use-peer-ntp=no +/ip dhcp-server config +set accounting=no +/ip dhcp-server lease +add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ + 48:8F:5A:8E:EE:A8 server=masterDHCP +add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ + F0:DE:F1:91:0D:1E server=masterDHCP +add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ + 00:80:77:EC:43:86 server=masterDHCP +add address=10.30.30.70 dhcp-option=domain-search-list,HostName \ + dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP +add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ + 04:7C:16:36:F5:37 server=masterDHCP +add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ + 10:2D:41:2C:20:C2 server=masterDHCP +add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ + 10:08:C1:81:59:5F server=masterDHCP +add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ + 10:38:1F:D2:5F:13 server=masterDHCP +add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ + 10:B1:DF:E9:D0:D5 server=masterDHCP +add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ + FE:02:52:BE:3F:16 server=masterDHCP +add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ + D4:6D:6D:FD:E5:49 server=masterDHCP +add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ + CC:42:10:12:46:94 server=masterDHCP +add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ + 50:CC:F8:85:96:0A server=masterDHCP +add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ + E4:18:6B:58:34:AB server=masterDHCP +add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ + 00:27:15:41:97:A9 server=masterDHCP +add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ + mac-address=C4:82:E1:03:49:10 server=masterDHCP +add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ + 10:38:1F:82:81:F2 server=masterDHCP +add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \ + dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP +add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \ + dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP +add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ + server=masterDHCP +add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ + MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP +add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \ + mac-address=F0:75:5D:1E:5F:71 server=masterDHCP +add address=10.30.30.100 client-id=iVados dhcp-option=HostName \ + dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP +add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\ + ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \ + dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \ + use-src-mac=yes +/ip dhcp-server network +add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\ + domain-search-list dhcp-option-set=domain-search-set dns-server=\ + 10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\ + 24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +/ip dns +set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=8.8.8.8 verify-doh-cert=yes +/ip dns static +add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \ + type=A +add address=109.107.177.79 name=vds.vados.ru type=A +add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \ + regexp=*.vados.ru type=NS +add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\ + "\".*\\\\.vados\\\\.ru\"" type=FWD +add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\ + 10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\ + FWD +add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\ + ns.vados.ru.local type=A +add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\ + vados.ru ns=ns.vados.ru.local type=NS +add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A +add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\ + dns.google type=A +add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A +add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A +add address=10.30.30.33 name=ros.vados.ru type=A +add address=10.30.30.95 name=vados-nuc type=A +add address=10.30.30.33 name=amster-nuc type=A +add address=10.30.30.33 name=amster type=A +add address=10.30.30.33 name=amster-reg type=A +add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A +add address=10.30.30.33 name=mgr.vados.ru type=A +add address=10.30.30.33 name=prt.vados.ru type=A +add address=10.30.30.33 disabled=yes match-subdomain=yes name=\ + mikrots.vados.ru type=A +add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A +add address=10.30.30.30 name=MILLER-LEN type=A +add address=10.30.30.30 name=miller type=A +add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\ + security.cloudflare-dns.com type=A +add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\ + security.cloudflare-dns.com type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\ + dns.quad9.net type=A +add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \ + type=A +add address=10.30.30.81 comment=LocalNet name=MikroVados type=A +add address=10.30.30.10 name=MikroNUC type=A +add address=10.30.30.86 disabled=yes name=MikroYellow type=A +add address=10.30.30.85 disabled=yes name=MikroMic type=A +add address=10.30.30.95 name=VADOS-NUC type=A +add address=10.30.30.98 name=VADOS-LEN type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +add address=10.30.30.20 disabled=yes name=garage type=A +/ip firewall address-list +add address=91.215.120.206 list=TRUSTED +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=8.8.4.0/24 list=YouTube +add address=8.8.8.0/24 list=YouTube +add address=8.34.208.0/20 list=YouTube +add address=8.35.192.0/20 list=YouTube +add address=23.236.48.0/20 list=YouTube +add address=23.251.128.0/19 list=YouTube +add address=34.0.0.0/15 list=YouTube +add address=34.2.0.0/16 list=YouTube +add address=34.3.0.0/23 list=YouTube +add address=34.3.3.0/24 list=YouTube +add address=34.3.4.0/24 list=YouTube +add address=34.3.8.0/21 list=YouTube +add address=34.3.16.0/20 list=YouTube +add address=34.3.32.0/19 list=YouTube +add address=34.3.64.0/18 list=YouTube +add address=34.4.0.0/14 list=YouTube +add address=34.8.0.0/13 list=YouTube +add address=34.16.0.0/12 list=YouTube +add address=34.32.0.0/11 list=YouTube +add address=34.64.0.0/10 list=YouTube +add address=34.128.0.0/10 list=YouTube +add address=35.184.0.0/13 list=YouTube +add address=35.192.0.0/14 list=YouTube +add address=35.196.0.0/15 list=YouTube +add address=35.198.0.0/16 list=YouTube +add address=35.199.0.0/17 list=YouTube +add address=35.199.128.0/18 list=YouTube +add address=35.200.0.0/13 list=YouTube +add address=35.208.0.0/12 list=YouTube +add address=35.224.0.0/12 list=YouTube +add address=35.240.0.0/13 list=YouTube +add address=57.140.192.0/18 list=YouTube +add address=64.15.112.0/20 list=YouTube +add address=64.233.160.0/19 list=YouTube +add address=66.22.228.0/23 list=YouTube +add address=66.102.0.0/20 list=YouTube +add address=66.249.64.0/19 list=YouTube +add address=70.32.128.0/19 list=YouTube +add address=72.14.192.0/18 list=YouTube +add address=74.125.0.0/16 list=YouTube +add address=104.154.0.0/15 list=YouTube +add address=104.196.0.0/14 list=YouTube +add address=104.237.160.0/19 list=YouTube +add address=107.167.160.0/19 list=YouTube +add address=107.178.192.0/18 list=YouTube +add address=108.59.80.0/20 list=YouTube +add address=108.170.192.0/18 list=YouTube +add address=108.177.0.0/17 list=YouTube +add address=130.211.0.0/16 list=YouTube +add address=136.22.160.0/20 list=YouTube +add address=136.22.176.0/21 list=YouTube +add address=136.22.184.0/23 list=YouTube +add address=136.22.186.0/24 list=YouTube +add address=142.250.0.0/15 list=YouTube +add address=146.148.0.0/17 list=YouTube +add address=152.65.208.0/22 list=YouTube +add address=152.65.214.0/23 list=YouTube +add address=152.65.218.0/23 list=YouTube +add address=152.65.222.0/23 list=YouTube +add address=152.65.224.0/19 list=YouTube +add address=162.120.128.0/17 list=YouTube +add address=162.216.148.0/22 list=YouTube +add address=162.222.176.0/21 list=YouTube +add address=172.110.32.0/21 list=YouTube +add address=172.217.0.0/16 list=YouTube +add address=172.253.0.0/16 list=YouTube +add address=173.194.0.0/16 list=YouTube +add address=173.255.112.0/20 list=YouTube +add address=192.158.28.0/22 list=YouTube +add address=192.178.0.0/15 list=YouTube +add address=193.186.4.0/24 list=YouTube +add address=199.36.154.0/23 list=YouTube +add address=199.36.156.0/24 list=YouTube +add address=199.192.112.0/22 list=YouTube +add address=199.223.232.0/21 list=YouTube +add address=207.223.160.0/20 list=YouTube +add address=208.65.152.0/22 list=YouTube +add address=208.68.108.0/22 list=YouTube +add address=208.81.188.0/22 list=YouTube +add address=208.117.224.0/19 list=YouTube +add address=209.85.128.0/17 list=YouTube +add address=216.58.192.0/19 list=YouTube +add address=216.73.80.0/20 list=YouTube +add address=216.239.32.0/19 list=YouTube +add address=2ip.ru list=Test-IP +add address=wg.vados.ru comment=VDSIna list=TRUSTED +add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED +add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina +add address=love.ru comment=love.ru list=NoVdsina +add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina +add address=pochta.ru comment=pochta.ru list=NoVdsina +add address=vdsina.com list=NoVdsina +add address=vdsina.ru list=NoVdsina +add address=youla.ru list=NoVdsina +add address=kupiprodai.ru list=NoVdsina +add address=myip.ru list=Test-IP +add address=geoip.co list=NoVdsina +add address=comp-lenta.ru list=NoVdsina +add address=128.85.102.70 comment=update.microsoft.com list=\ + windowsupdateslist +add address=wu-b-net.trafficmanager.net. comment=\ + ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ + ctldl.windowsupdate.com list=windowsupdateslist +add address=redir.update.msft.com.trafficmanager.net. comment=\ + update.microsoft.com list=windowsupdateslist +add address=geo.prod.do.dsp.trafficmanager.net. comment=\ + geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12437.d.akamaiedge.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ + comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ + list=windowsupdateslist +add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ + sls.update.microsoft.com list=windowsupdateslist +add address=fe3.delivery.mp.microsoft.com. comment=\ + fe3cr.delivery.mp.microsoft.com list=windowsupdateslist +add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ + fe3.delivery.mp.microsoft.com list=windowsupdateslist +add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ + fe2cr.update.microsoft.com list=windowsupdateslist +add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ + download.windowsupdate.com list=windowsupdateslist +add address=wu-f-net.trafficmanager.net. comment=\ + download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=tsfe.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ + comment=9.au.download.windowsupdate.com list=windowsupdateslist +add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dspw65.akamai.net. comment=\ + download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ + comment=licensing.mp.microsoft.com list=windowsupdateslist +add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-nlu-net.trafficmanager.net. comment=\ + star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-tlu-net.trafficmanager.net. comment=\ + star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=storeedgefd.xbetservices.akadns.net. comment=\ + storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ + comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ + windowsupdateslist +add address=e16646.dscg.akamaiedge.net. comment=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ + windowsupdateslist +add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=bg.microsoft.map.fastly.net. comment=\ + 3.au.download.windowsupdate.com list=windowsupdateslist +add list=windowsupdateslist +add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ + star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a2033.dscd.akamai.net. comment=\ + star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-nlu-net.trafficmanager.net. comment=\ + dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-b-tlu-net.trafficmanager.net. comment=\ + 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a122.dscg3.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist +add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e10370.d.akamaiedge.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=a1683.dscd.akamai.net. comment=\ + dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ + comment=collections.mp.microsoft.com list=windowsupdateslist +add address=a1847.dscd.akamai.net. comment=\ + wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=au.download.windowsupdate.com.edgesuite.net. comment=\ + 2.au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dscg3.akamai.net. comment=\ + au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + 4.au.download.windowsupdate.com list=windowsupdateslist +add address=cl-glcb907925.gcdn.co. comment=\ + 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ + comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=ts-frontend.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ + list=windowsupdateslist +add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ + windowsupdateslist +add address=e12671.dscd.akamaiedge.net. comment=\ + download.microsoft.com.edgekey.net list=windowsupdateslist +add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12358.d.akamaiedge.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-tlu-net.trafficmanager.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a1856.dspw65.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina +add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ + purchase.mp.microsoft.com list=windowsupdateslist +add address=e110219.a.akamaiedge.net. comment=\ + purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.141 list=windowsupdateslist +add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=storesdk.xbetservices.akadns.net. comment=\ + storesdk.dsx.mp.microsoft.com list=windowsupdateslist +add address=e16646.g.akamaiedge.net. comment=\ + storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ + software-download.microsoft.com list=windowsupdateslist +add address=download.prss.microsoft.com.akamaized.net. comment=\ + software-download.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina +add address=87.250.250.50 comment=YandexDisk list=NoVdsina +add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ + purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ + purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ + cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=a1996.dscd.akamai.net. comment=\ + wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ + tas02.sls.update.microsoft.com list=windowsupdateslist +add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ + star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ + paymentinstruments.mp.microsoft.com list=windowsupdateslist +add address=10.30.30.33 comment=amster list=NoWG +add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG +add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG +add address=wg.vados.ru comment=VDSina-vpn list=VDSina +add address=80.85.244.9 list=TRUSTED +add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina +add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS +add address=dns.google comment=Google-dns list=Trusted-DNS +add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\ + Trusted-DNS +add address=time.google.com comment=Google-time list=Trusted-NTP +add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP +add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=cp.vdsina.com comment=VDSina-vpn list=VDSina +add address=vdsina.ru comment=VDSina-vpn list=VDSina +add address=ns.vados.ru comment=VDSina-vpn list=VDSina +add address=vdsina.com comment=VDSina-vpn list=VDSina +add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina +add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina +add address=10.30.30.0/24 comment="Local Network" list=Local-Net +add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net +add address=146.120.64.208/29 comment="External Net" list=Unet +add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina +add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina +add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina +add address=10.30.30.30 comment=miller disabled=yes list=NoWG +add address=10.30.30.33 comment="Direct connet to DNS servers" list=\ + Direct-DNS +add address=109.107.177.79 list=VPN-Server +add address=10.0.0.0/8 list=RFC1918 +add address=172.16.0.0/12 list=RFC1918 +add address=192.168.0.0/16 list=RFC1918 +add address=8.8.4.4 disabled=yes list=to_vpn +add address=myip.ru disabled=yes list=to_vpn +add address=10.30.30.98 disabled=yes list=to_vpn +/ip firewall filter +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=12h chain=input comment="block honeypot DNS" \ + connection-state=new dst-port=53 in-interface=Unet-ether1 protocol=udp \ + src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \ + in-interface=Unet-ether1 protocol=tcp src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment=\ + "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \ + in-interface=Unet-ether1 protocol=tcp src-address-list=!TRUSTED +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ + connection-state=new dst-port=5060 in-interface=Unet-ether1 protocol=udp +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot NTP" \ + connection-state=new dst-port=123 in-interface=Unet-ether1 protocol=udp +add action=fasttrack-connection chain=forward comment=\ + "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \ + connection-state=established,related,new disabled=yes +add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \ + protocol=tcp +add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \ + protocol=udp +add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \ + dst-port=53 protocol=tcp src-address=10.30.30.0/24 +add action=accept chain=input comment="udp Accept input DNS queries" \ + dst-port=53 protocol=udp src-address=10.30.30.0/24 +add action=accept chain=output comment="accept WireGuard" disabled=yes \ + dst-address-list=VPN-Server out-interface=Unet-ether1 protocol=udp \ + src-port=13231 +add action=accept chain=output disabled=yes dst-address-list=VPN-Server \ + dst-port=29185 out-interface=Unet-ether1 protocol=udp +add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ + connection-state=established,related,new disabled=yes routing-mark=\ + !To-VPN +add action=accept chain=output disabled=yes protocol=tcp src-port=443 +add action=accept chain=output disabled=yes src-address=127.0.0.1 +add action=accept chain=forward comment="defconf: accept in ipsec policy" \ + disabled=yes ipsec-policy=in,ipsec +add action=accept chain=forward comment="defconf: accept out ipsec policy" \ + disabled=yes ipsec-policy=out,ipsec +add action=accept chain=forward comment=\ + "defconf: accept established,related, untracked" connection-state=\ + established,related,untracked disabled=yes +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid in-interface=Unet-ether1 src-address=\ + !10.30.30.0/24 +add action=drop chain=forward comment=\ + "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ + connection-state=new in-interface=Unet-ether1 src-address-list=!VDSina +add action=accept chain=input in-interface=Unet-ether1 protocol=icmp \ + src-address-list=VDSina +add action=accept chain=input connection-state=established +add action=accept chain=input connection-state=related +/ip firewall mangle +add action=accept chain=prerouting comment=RFC1918 dst-address-list=RFC1918 \ + in-interface-list=!WAN +add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \ + new-routing-mark=main passthrough=no src-address-list=NoWG +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for NoVdsina" disabled=yes dst-address-list=NoVdsina \ + new-routing-mark=main passthrough=no src-address=10.30.30.0/24 +add action=mark-connection chain=prerouting comment=\ + "Transit for address-list \"to_vpn\"" connection-mark=no-mark disabled=\ + yes dst-address-list=to_vpn in-interface-list=!WAN new-connection-mark=\ + to-vpn-conn routing-mark=!main +add action=mark-routing chain=prerouting comment=\ + "Find routing over table r_to_vpn" connection-mark=to-vpn-conn disabled=\ + yes in-interface-list=!WAN new-routing-mark=r_to_vpn +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for VDSina" dst-address-list=VPN-Server \ + new-routing-mark=main passthrough=no src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \ + new-routing-mark=main src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=\ + "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\ + Unet new-routing-mark=main passthrough=no +add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\ + To-VPN src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \ + new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment="WG for all" \ + dst-address-list=!NoVdsina new-routing-mark=To-VPN src-address=\ + 10.30.30.0/24 +add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \ + out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\ + 1381-65535 +add action=mark-connection chain=prerouting comment=\ + "Mark VPN connections to exclude from FastTrack" disabled=yes \ + new-connection-mark=VPN_No_FastTrack routing-mark=To-VPN +add action=mark-routing chain=prerouting comment="VPN Network" disabled=yes \ + dst-address=10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24 +add action=mark-connection chain=output comment="For this router" \ + connection-mark=no-mark disabled=yes dst-address-list=to_vpn \ + new-connection-mark=to-vpn-conn-local +add action=mark-routing chain=output comment="For this router" \ + connection-mark=to-vpn-conn-local disabled=yes new-routing-mark=r_to_vpn +/ip firewall nat +add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\ + yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\ + !NoWG to-addresses=10.30.30.33 to-ports=53 +add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\ + yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\ + !NoWG to-addresses=10.30.30.33 to-ports=53 +add action=masquerade chain=srcnat comment=\ + "Nat Addresses for routing mark r_to_vpn" disabled=yes routing-mark=\ + r_to_vpn +add action=dst-nat chain=dstnat comment=\ + "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \ + in-interface=Unet-ether1 protocol=tcp src-address-list=VPN-Server \ + to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat comment=\ + "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\ + udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\ + Unet-ether1 protocol=udp src-address=!10.30.30.0/24 to-addresses=\ + 10.30.30.33 to-ports=44333 +add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \ + routing-mark=To-VPN +add action=masquerade chain=srcnat comment="Default NAT" out-interface=\ + Unet-ether1 routing-mark=!To-VPN src-address=10.30.30.0/24 +add action=dst-nat chain=dstnat dst-port=44044 in-interface=Unet-ether1 \ + protocol=udp src-address=109.107.177.79 to-addresses=10.30.30.33 \ + to-ports=44044 +add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \ + fragment=no in-interface=Unet-ether1 protocol=tcp routing-mark=main \ + to-addresses=10.30.30.33 to-ports=443 +add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \ + dst-port=80 in-interface=Unet-ether1 protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=80 +add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \ + dst-port=2904 in-interface=Unet-ether1 protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=2904 +add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\ + 5000 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \ + to-ports=5000 +add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\ + 2377 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \ + to-ports=2377 +add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\ + Unet-ether1 protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \ + to-ports=81 +add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\ + Unet-ether1 protocol=tcp src-address-list=TRUSTED to-addresses=\ + 10.30.30.33 to-ports=22 +add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \ + dst-port=2377 in-interface=Unet-ether1 protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=2377 +add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\ + Unet-ether1 protocol=tcp routing-mark=!To-VPN to-addresses=10.30.30.33 \ + to-ports=22 +add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \ + dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \ + time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\ + Bridge-LAN protocol=tcp src-address-list=KIDS time=\ + 6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +/ip firewall raw +add action=drop chain=prerouting comment="Drop Honeypot Hackers" \ + in-interface=Unet-ether1 src-address-list="Honeypot Hacker" +add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \ + in-interface-list=WAN src-address-list=Trusted-DNS +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \ + content=linux.duke.edu disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googleapis.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googlevideo.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googleusercontent.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + nhacmp3youtube.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \ + content=rutube.ru disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \ + content=me.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "icloud.com raw" content=icloud.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \ + disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "api.db-ip.com raw" content=api.db-ip.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \ + content=gosuslugi.ru disabled=yes +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set irc disabled=no +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip ipsec settings +set accounting=no +/ip ipsec policy +set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0 +/ip ipsec profile +set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 +/ip proxy +set cache-administrator="" max-cache-size=none port=80,443 src-address=\ + 0.0.0.0 +/ip route +add check-gateway=none comment=WG-Default disabled=no distance=1 dst-address=\ + 0.0.0.0/0 gateway=WG routing-table=To-VPN scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set reverse-proxy disabled=yes +set ssh address=10.30.30.0/24 port=2222 +set winbox address=10.30.30.0/24 +set api address=10.30.30.0/24 +set api-ssl address=10.30.30.0/24 disabled=yes +set www-ssl certificate=Root-YE port=18443 +set www address=10.30.30.0/24 disabled=yes port=18880 +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \ + webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=Bridge-LAN type=internal +add forced-ip=146.120.64.211 interface=Unet-ether1 type=external +add forced-ip=109.107.177.79 interface=*E type=external +add interface=lo type=internal +add interface=wlan2 type=internal +add interface=wlan1 type=internal +/ipv6 dhcp-client +add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\ + info use-interface-duid=yes validate-server-duid=no +/ipv6 dhcp-server option sets +add name=domain-search-set options=domain-search-list +add name="=\"Client ID\"" options=HostName +/ipv6 firewall address-list +add address=::/128 comment="defconf: unspecified address" list=bad_ipv6 +add address=::1/128 comment="defconf: lo" list=bad_ipv6 +add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6 +add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6 +add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6 +add address=100::/64 comment="defconf: discard only " list=bad_ipv6 +add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6 +add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6 +add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6 +/ipv6 firewall filter +add action=accept chain=input comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=input comment="defconf: drop invalid" connection-state=\ + invalid +add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\ + icmpv6 +add action=accept chain=input comment="defconf: accept UDP traceroute" \ + dst-port=33434-33534 protocol=udp +add action=accept chain=input comment=\ + "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\ + udp src-address=fe80::/10 +add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \ + protocol=udp +add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\ + ipsec-ah +add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\ + ipsec-esp +add action=accept chain=input comment=\ + "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +add action=drop chain=input comment=\ + "defconf: drop everything else not coming from LAN" in-interface-list=\ + !LAN +add action=accept chain=forward comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid +add action=drop chain=forward comment=\ + "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6 +add action=drop chain=forward comment=\ + "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6 +add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \ + hop-limit=equal:1 protocol=icmpv6 +add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\ + icmpv6 +add action=accept chain=forward comment="defconf: accept HIP" protocol=139 +add action=accept chain=forward comment="defconf: accept IKE" dst-port=\ + 500,4500 protocol=udp +add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\ + ipsec-ah +add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\ + ipsec-esp +add action=accept chain=forward comment=\ + "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +add action=drop chain=forward comment=\ + "defconf: drop everything else not coming from LAN" in-interface-list=\ + !LAN +/ipv6 nd +set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \ + managed-address-configuration=yes other-configuration=yes pref64=::/64 +/ipv6 nd prefix +add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none +/ipv6 nd prefix default +set dhcp6-pd-preferred=yes +/ipv6 nd proxy +add disabled=yes interface=lo +/ipv6 nd settings +set router-advertisement-route-distance=100 +/routing settings +set single-process=no +/system clock +set time-zone-name=Europe/Moscow +/system clock manual +set time-zone=+03:00 +/system identity +set name=MikroMaster +/system logging +add action=email disabled=yes regex="* added|changed|removed *" topics=\ + system,info +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes use-local-clock=yes +/system ntp client servers +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +add address=time.google.com disabled=yes +/system package update +set check-certificate=yes-without-crl ip-version=ipv4 +/system scheduler +add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \ + on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" interval=1d name=\ + AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\ + AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +/system watchdog +set watchdog-timer=no +/tool e-mail +set certificate-verification=no from=MikroVados port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool mac-server +set allowed-interface-list=LAN +/tool mac-server mac-winbox +set allowed-interface-list=LAN +/tool netwatch +add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\ + -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\ + e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \ + interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\ + https-get up-script="" +add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\ + flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\ + oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \ + name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \ + up-script="" +add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\ + 8.8.8.8 down-script="" host=dns.google http-codes="" name=\ + "Google-DNS IPv4" test-script="" type=dns up-script="" +add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\ + rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\ + -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \ + http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\ + "" test-script="" type=dns up-script="" +add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \ + dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \ + interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \ + test-script="" timeout=800ms type=dns up-script="" +add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\ + ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \ + down-script="" host=149.112.112.112 http-codes="" interval=10s name=\ + "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script="" +add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \ + down-script="" host=91.192.189.2 http-codes="" interval=10s name=\ + ns1.unet.ws test-script="" type=simple up-script="" +add check-certificate=yes comment=\ + "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \ + disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\ + vds.vados.ru port=443 test-script="" type=https-get up-script="" +add comment="WireGuard NAT " disabled=yes down-script="/log info \"[WG-Monitor\ + ] WireGuard is NOT running - reverting rules\"\ + \n/ip firewall nat remove [find comment=\"Redirect to Router\"]\ + \n/ip dns set servers=8.8.8.8\ + \n/ip dns cache flush\ + \n/ip route remove [find comment=\"wg-auto-route\"]\ + \n" host=10.8.0.1 http-codes="" interval=15s name=WG test-script="" \ + timeout=5s type=simple up-script="/log info \"[WG-Monitor] WireGuard is RU\ + NNING - applying rules\";\ + \n:local routeFile \"ips.txt\";\ + \n:local routeDefAddr \"0.0.0.0/0\";\ + \n:local routeGateway \"10.8.0.1\";\ + \n:local routeIF \"WG\";\ + \n:local routeTable \"To-VPN\";\ + \n:local routeComment \"wg-auto-route\";\ + \n/ip dns cache flush;\ + \n:if ([:len [/ip firewall nat find comment=\"Redirect to Router\"]] > 0) \ + do={\ + \n /ip firewall nat remove [find comment=\"Redirect to Router\"];\ + \n}\ + \n/ip firewall nat add action=redirect chain=dstnat src-address-list=\"Red\ + irectDNS\" dst-port=53 protocol=udp comment=\"Redirect to Router\";\ + \n/ip dns set servers=\$routeGateway;\ + \n:local content [/file get \$routeFile contents];\ + \n:if ([:len \$content] > 0) do={\ + \n :local line \"\";\ + \n :for i from=0 to=([:len \$content] - 1) do={\ + \n :local char [:pick \$content \$i];\ + \n :if (\$char != \"\\r\" && \$char != \"\\n\") do={\ + \n :set line (\$line . \$char);\ + \n } else={\ + \n :if ([:len \$line] > 5) do={\ + \n :do { /ip route add disabled=no dst-address=\$routeDefAd\ + dr gateway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$r\ + outeTable comment=\$routeComment check-gateway=none } on-error={}\ + \n }\ + \n :set line \"\";\ + \n }\ + \n }\ + \n :if ([:len \$line] > 5) do={\ + \n# :do { /ip route add dst-address=\$line gateway=\$routeGateway \ + distance=1 comment=\$routeComment } on-error={}\ + \n :do { /ip route add disabled=no dst-address=\$routeDefAddr ga\ + teway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$routeT\ + able comment=\$routeComment check-gateway=none } on-error={}\ + \n }\ + \n}\ + \n:local dotPos [:find \$routeGateway \".\"];\ + \n:if (\$dotPos != \"\") do={\ + \n :local firstOctet [:pick \$routeGateway 0 \$dotPos];\ + \n :local derivedDstAddress (\$firstOctet . \".30.0.0/15\");\ + \n :do { /ip route add dst-address=\$derivedDstAddress gateway=\$routeG\ + ateway distance=1 comment=\$routeComment } on-error={}\ + \n}\ + \n\ + \n" +add comment=WG-Default disabled=yes down-script=\ + "/ip route disable [find comment=\"WG-Default\"];" host=10.8.0.1 \ + interval=15s name=WG packet-count=20 test-script="" thr-loss-count=5 \ + type=icmp up-script="/ip route enable [find comment=\"WG-Default\"];" +/user aaa +set accounting=no diff --git a/MikroMaster/20260710/20260710110002-Config.rsc b/MikroMaster/20260710/20260710110002-Config.rsc new file mode 100644 index 0000000..b150c5b --- /dev/null +++ b/MikroMaster/20260710/20260710110002-Config.rsc @@ -0,0 +1,36 @@ +# 2026-07-10 11:00:06 by RouterOS 7.23.1 +# software id = A8L5-07YF +# +# model = RB952Ui-5ac2nD +# serial number = D3D50CEDCD38 +/interface bridge +add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\ + "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\ + Bridge-LAN port-cost-mode=short +/interface ethernet +set [ find default-name=ether1 ] comment=Unet-cable loop-protect=off name=\ + Unet-ether1 rx-flow-control=auto tx-flow-control=auto +set [ find default-name=ether2 ] comment=LAN-2 +set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\ + -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3 +set [ find default-name=ether4 ] comment=LAN-4 +set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\ + -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \ + loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto +/interface wireless +# managed by CAPsMAN +# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding +set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \ + ssid=vados wireless-protocol=802.11 +# managed by CAPsMAN +# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding +set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \ + ssid=vados5g wireless-protocol=802.11 +/interface wireguard +add comment=WG listen-port=13231 mtu=1320 name=WG +add comment="WG interface for Amnezia route" disabled=yes listen-port=33033 \ + mtu=1360 name=wg-nuc +/interface list +add include=static name=LAN +add name=Internet +add include=Internet name=WAN diff --git a/MikroMaster/tmp/Config.rsc b/MikroMaster/tmp/Config.rsc deleted file mode 100644 index e69de29..0000000 diff --git a/MikroMaster/tmp/Diff-Config.rsc b/MikroMaster/tmp/Diff-Config.rsc new file mode 100644 index 0000000..b53a30d --- /dev/null +++ b/MikroMaster/tmp/Diff-Config.rsc @@ -0,0 +1,3806 @@ +36a37,3841 +> /interface wireless security-profiles +> set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\ +> dynamic-keys supplicant-identity=MikroTik +> /iot wiliot servers +> set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East" +> /ip dhcp-server option +> add code=12 name=HostName +> add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +> /ip dhcp-server option sets +> add name=HP1505n options=HostName +> add name=StartLife1 options=HostName +> add name=amsterDev options=HostName +> add name=MiTV options=HostName +> add name=miller options=HostName +> add name=amster options=HostName +> add name=garage options=HostName +> add name=domain-search-set options=domain-search-list +> add name=VADOS-LEN options=HostName +> add name=VADOS-NUC options=HostName +> add name=MikroNUC options=HostName +> add name=master options=HostName +> add name=MikroYellow options=HostName +> add name="=\"Client ID\"" options=HostName +> add name=iVados options=HostName +> /ip dns forwarders +> add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no +> add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \ +> verify-doh-cert=no +> add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no +> add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no +> add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\ +> no +> add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\ +> no +> add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no +> /ip ipsec proposal +> set [ find default=yes ] disabled=yes +> /ip pool +> add name=dhcp ranges=10.30.30.83-10.30.30.254 +> /ip dhcp-server +> add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ +> dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \ +> name=masterDHCP server-address=10.30.30.81 +> /ip smb users +> set [ find default=yes ] disabled=yes +> add disabled=yes name=vados +> /ipv6 dhcp-client option +> add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" +> add code=12 name=HostName value="\$(HOSTNAME)" +> add code=61 name=DUID value=0x00030001488f5a8e1abc +> add code=61 name=clientid +> /ipv6 dhcp-server option +> add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" +> add code=12 name=HostName value="\$(HOSTNAME)" +> add code=61 name=CLIENT_DUID +> add code=61 name=CLIENT_MAC +> /ppp profile +> set *FFFFFFFE use-upnp=no +> /routing bgp template +> set default disabled=no output.network=bgp-networks +> /routing table +> add disabled=no fib name=To-VPN +> add disabled=no fib name=r_to_vpn +> /system logging action +> add email-start-tls=yes email-to=vados@vados.ru name=email target=email +> /system script +> add dont-require-permissions=no name=fetchCustom owner=vados policy=\ +> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ +> global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ +> \n\r\ +> \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ +> 0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\ +> \n\r\ +> \n#:local Script AM-setup\ +> \n;\r\ +> \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ +> heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ +> sc\") output=user as-value ]->\"data\");\r\ +> \n\ +> \n#/usb1/mikro_bak_rsa.pub\ +> \n\ +> \n\r\ +> \n#\ +> \n\r\ +> \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ +> 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ +> \n\r\ +> \n#\r\ +> \n\ +> \n#root.mnuc.backuper\ +> \n\ +> \n\r\ +> \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ +> .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ +> \n\ +> \n#:local Script AM-GlobalConfig;\ +> \n\r\ +> \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ +> heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ +> sc\") output=user as-value ]->\"data\");\r\ +> \n\ +> \n#/usb1/mikro_bak_rsa.pub\ +> \n#:local FetchFile AM-DOHCert.rsc\ +> \n\ +> \n\r\ +> \n\r\ +> \n#\ +> \n:global MkDir;\ +> \n\r\ +> \n\ +> \n#:local FetchFile Binary.backup\ +> \n:local localDir \"\";\ +> \n\ +> \n\r\ +> \n#\$MkDir \$localDir;\r\ +> \n\ +> \n#\ +> \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ +> \$localDir . \$FetchFile);\r\ +> \n" +> add comment="Global Config Script" dont-require-permissions=no name=\ +> AM-GlobalConfig owner=AM-GlobalConfig policy=\ +> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ +> !rsc by Vados\r\ +> \n# RouterOS script: AM-GlobalConfig\r\ +> \n# Script comment: Global Config Script\r\ +> \n# Copyright (c) 2007-2026 Vados \r\ +> \n#\r\ +> \n#\r\ +> \n# Warning: Dont touch this line!\r\ +> \n:global Identity [/system/identity/get name];\r\ +> \n:global GlobalConfReady false;\r\ +> \n#\r\ +> \n#\r\ +> \n# Global Url For Amster scripts to fetch\r\ +> \n# most be defined in AM-Init-Script or AM-setup scripts\r\ +> \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ +> \n:global ScriptsUrlSuffix (a);\r\ +> \n:global CheckSumsVerify true;\r\ +> \n\r\ +> \n:global ScriptUpdatesCRLF true;\r\ +> \n:global CommentsInScripts true;\r\ +> \n\r\ +> \n# Debug output:\r\ +> \n:global PrintDebug true; #false;\r\ +> \n\r\ +> \n# Debug output for specific script:\r\ +> \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ +> \n\r\ +> \n# Debug logs\r\ +> \n# Other actions (disk, email, remote or support) can be used as well.\r\ +> \n# I do not recommend using echo - use debug output instead (https://rsc.\ +> eworm.de/main/DEBUG.html#debug-output).\r\ +> \n#/system/logging/add topics=script,debug action=memory;\r\ +> \n\r\ +> \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ +> \n:global Domain \"WORKGROUP\";\r\ +> \n\r\ +> \n:global EmailGeneralTo \"vados@vados.ru\";\r\ +> \n#:global EmailGeneralCc \"\";\r\ +> \n\r\ +> \n# \$ScriptInstallUpdate mod/notification-telegram\r\ +> \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ +> \";\r\ +> \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ +> \n# Use this to send notifications to a specific topic in group.\r\ +> \n#:global TelegramThreadId \"30\";\r\ +> \n# Using telegram-chat you have to define trusted chat ids (not group ids\ +> !)\r\ +> \n# or user names. Groups allow to chat with devices simultaneously.\r\ +> \n:global TelegramChatIdsTrusted {\r\ +> \n \"454403445\"\r\ +> \n \"-1003631309063\"\r\ +> \n \"-5124482807\"\r\ +> \n \"1087968824\";\r\ +> \n};\r\ +> \n# \"-5294757340\";\r\ +> \n\r\ +> \n:global TelegramChatGroups \"(all)\";\r\ +> \n#:global TelegramChatGroups \"(all|home|office)\";\r\ +> \n\r\ +> \n:global NotificationFunctions {\r\ +> \n \"email\"\r\ +> \n \"telegram\";\r\ +> \n};\r\ +> \n# Toggle this to disable symbols in notifications.\r\ +> \n:global NotificationsWithSymbols true;\r\ +> \n:global TerminalColorOutput true;\r\ +> \n\r\ +> \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ +> \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ +> \n\r\ +> \n## Update channel. Possible values: stable, long-term, testing, developm\ +> ent\r\ +> \n:global updateChannel \"stable\";\r\ +> \n\r\ +> \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ +> \");\r\ +> \n:global CertRenewTime 2w;\r\ +> \n:global CertRenewPass (a); #{\r\ +> \n# \"\";\r\ +> \n# \"v3ry-s3cr3t\";\r\ +> \n# \"4n0th3r-s3cr3t\";\r\ +> \n#};\r\ +> \n:global CertWarnTime 1w;\r\ +> \n:global CertIssuedExportPass (a); # {\r\ +> \n# \"\";\r\ +> \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ +> \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ +> \n#};\r\ +> \n\r\ +> \n# Script BackupAndUpdate mode, possible values: backup,\r\ +> \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ +> n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ +> \n# osupdate - Update if available and creates backups before/after update\ +> \_(ignores `forceBackup`)\r\ +> \n# Set `forceBackup` to true to always create backups, even\ +> \_without updates\r\ +> \n# osnotify - Set `forceBackup` to always create backups on every run\r\ +> \n:global DevInfoIncludeIP true;\r\ +> \n:global BackupAndUpdateMode \"osnotify\"\r\ +> \n\r\ +> \n:global forceBackup true;\r\ +> \n:global BackupPassword \"Peskar55\";\r\ +> \n\r\ +> \n# SFTP Backup Variables\r\ +> \n:global BackupRandomDelay 0;\r\ +> \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ +> \n:global BackupUploadUser \$Identity;\r\ +> \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ +> \n\r\ +> \n:global BackupSendBinary true;\r\ +> \n:global BackupSendExport true;\r\ +> \n:global BackupSendGlobalConfig true;\r\ +> \n:global BackupSendScripts true;\r\ +> \n\r\ +> \n# Remove local file after uploading if no errors\r\ +> \n:global BackupRmLocal true;\r\ +> \n\r\ +> \n# Local Backups Root Directory \r\ +> \n:global BackupLocalRoot \"tmpfs\";\r\ +> \n\r\ +> \n# Encrypt Backup\r\ +> \n:global BackupEncrypt true;\r\ +> \n\r\ +> \n# Sensitive information in Backups\r\ +> \n:global BackupSens true;\r\ +> \n\r\ +> \n# User Export\r\ +> \n:global BackupUser true;\r\ +> \n\r\ +> \n# License Export (not for CHR, will silently skip)\r\ +> \n:global BackupLicense false;\r\ +> \n\r\ +> \n# SSH Keys\r\ +> \n:global BackupSshKeys true;\r\ +> \n\r\ +> \n# Certificate Export\r\ +> \n:global BackupCerts true;\r\ +> \n\r\ +> \n# Certificate Password\r\ +> \n:global BackupCertsPasswd \"\";\r\ +> \n\r\ +> \n# User-Manager Export\r\ +> \n:global BackupUserMan false;\r\ +> \n\r\ +> \n# The Dude Export\r\ +> \n:global BackupDude false;\r\ +> \n\r\ +> \n# User Files to export, comma-separated string or array of strings\r\ +> \n# User Files are not removed on backup\r\ +> \n# Any directory paths will be removed (/ -> _) on remote file\r\ +> \n# Nonpresent files are silently skipped\r\ +> \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ +> \n\r\ +> \n# load functions and any custom scripts\r\ +> \n# [ /system/script/find where name=\"global-config-ov\ +> erlay\" ], \\\r\ +> \n# [ /system/script/find where name~\"^global-config-o\ +> verlay\\\\.d/.\" ]\r\ +> \n#\r\ +> \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ +> ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ +> \r\ +> \n# :onerror Err {\r\ +> \n# /system/script/run \$Script;\r\ +> \n# } do={\r\ +> \n# :log error (\"Loading configuration from configs and functions\"\ +> \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ +> \n# }\r\ +> \n#}\r\ +> \n#:log info \"\\ndevMode = \$devMode\";\r\ +> \n#:log info \"\\ndevRunning = \$devRunning\";\r\ +> \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ +> GlobalRUN\\r\?\\n\" ] do={\r\ +> \n :onerror Err {\r\ +> \n /system/script/run \$Script;\r\ +> \n } do={\r\ +> \n :log error (\"Run script \" . [ /system/script/get \$Script name \ +> ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ +> \n }\r\ +> \n}\r\ +> \n\r\ +> \n# signal we are ready\r\ +> \n:set GlobalConfReady true;\r\ +> \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ +> \n" +> add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ +> owner=AM-GlobalFunc policy=\ +> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ +> !rsc by Vados\r\ +> \n# RouterOS script: AM-GglobalFunc\r\ +> \n# Script comment: Global functions\r\ +> \n# Copyright (c) 2005-2026 Vados \r\ +> \n#\r\ +> \n#\r\ +> \n# requires RouterOS, version=7.19\r\ +> \n# requires device-mode, fetch, scheduler\r\ +> \n:local ExitOK false;\r\ +> \n:local ScriptName [ :jobname ];\r\ +> \n#:global checkRunJob \$SriptName;\r\ +> \n#:global fixCRLF;\r\ +> \n#:if (\$fixCRLF != false) do={\r\ +> \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ +> ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ +> }\r\ +> \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ +> et \$fixScript source ] ] \$fixScript};};\r\ +> \n#}\r\ +> \n:global GlobalFuncReady false;\r\ +> \n\r\ +> \n# Git commit id & info, expected configuration version\r\ +> \n:global CommitId \"main/729/f42d43ae\";\r\ +> \n:global CommitTAG \"unknown\";\r\ +> \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ +> r: root, in 00:05:03 01.07.2026.\";\r\ +> \n\r\ +> \n# The variables are received right here.\r\ +> \n:global GlobalConfVersion 140;\r\ +> \n\r\ +> \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ +> \n\r\ +> \n:global Identity [/system/identity/get name];\r\ +> \n:global IdentityShort [:pick \$Identity 0 18];\r\ +> \n\r\ +> \n:global devBoardName [/system/resource/get board-name];\r\ +> \n:global devMode [/system/device-mode/get mode];\r\ +> \n:global devCurArch [/system/resource/get architecture-name];\r\ +> \n:global devCurVersion [/system/resource/get version];\r\ +> \n\r\ +> \n# Variables defined in AM-GlobalConfig.rsc\r\ +> \n:global TerminalColorOutput;\r\ +> \n:global CommentsInScripts;\r\ +> \n:global DetectIpAddrDefault;\r\ +> \n:global DetectIpAddrFallback;\r\ +> \n:global updateChannel;\r\ +> \n:global Domain;\r\ +> \n:global EmailGeneralTo;\r\ +> \n:global BackupAndUpdateMode;\r\ +> \n\r\ +> \n# Single functions, without nested functions.\r\ +> \n:global MiniDateTimeStamp;\r\ +> \n:global MicroDateTimeStamp;\r\ +> \n\r\ +> \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ +> \n:global LogPrint;\r\ +> \n\r\ +> \n# DeviceInfo and Updates\r\ +> \n:global IsCheckUpdates;\r\ +> \n:global WaitCheckUpdates;\r\ +> \n:global GetPubIp;\r\ +> \n\r\ +> \n:global GetArrDeviceInfo;\r\ +> \n:global WaitArrDeviceInfo;\r\ +> \n\r\ +> \n:global devModel;\r\ +> \n:global devRunningMode;\r\ +> \n\r\ +> \n:global devRbRevision;\r\ +> \n:global devRbSerialNumber;\r\ +> \n:global devRbVerAvail;\r\ +> \n\r\ +> \n:global runningChannelVersion;\r\ +> \n:global runningChannel;\r\ +> \n:global runningVersion;\r\ +> \n\r\ +> \n:global devBuildTime;\r\ +> \n:global ROsVerAvail;\r\ +> \n:global PkgUpdStatus;\r\ +> \n:global currentUpdateChannel;\r\ +> \n\r\ +> \n:global ScriptInstallUpdate;\r\ +> \n\r\ +> \n:global DeviceInfo;\r\ +> \n\r\ +> \n:global OldMode;\r\ +> \n\r\ +> \n:global ParseKeyValueStore;\r\ +> \n:global RandomDelay;\r\ +> \n:global GetRandomNumber;\r\ +> \n:global EscapeForRegEx;\r\ +> \n:global CharacterMultiply;\r\ +> \n:global CharacterReplace;\r\ +> \n:global CleanFilePath;\r\ +> \n:global CleanName;\r\ +> \n\r\ +> \n:global CommitBrief;\r\ +> \n\r\ +> \n:global EitherOr;\r\ +> \n:global FormatLine;\r\ +> \n:global GetRandom20CharAlNum;\r\ +> \n:global GetRandom20CharHex;\r\ +> \n:global GetRandomNumber;\r\ +> \n:global Grep;\r\ +> \n:global IfThenElse;\r\ +> \n:global MAX;\r\ +> \n:global MIN;\r\ +> \n:global HumanReadableNum;\r\ +> \n\r\ +> \n:global IsFullyConnected;\r\ +> \n:global IsDNSResolving;\r\ +> \n:global IsTimeSync;\r\ +> \n:global IsTimeSyncCached;\r\ +> \n:global IsTimeSyncResetNtp;\r\ +> \n\r\ +> \n:global MkDir;\r\ +> \n:global RmDir;\r\ +> \n:global RmFile;\r\ +> \n:global FileGet;\r\ +> \n:global Unix2Dos;\r\ +> \n:global UrlEncode;\r\ +> \n:global WaitForFile;\r\ +> \n:global ScriptLock;\r\ +> \n:global SendTelegram;\r\ +> \n:global NotificationFunctions;\r\ +> \n:global SendNotification;\r\ +> \n:global SendNotification2;\r\ +> \n:global SymbolForNotification;\r\ +> \n:global SymbolByUnicodeName;\r\ +> \n:global ValidateSyntax;\r\ +> \n:global CheckSumsVerify;\r\ +> \n:global GlobalConfChanges;\r\ +> \n:global GlobalConfMigration;\r\ +> \n:global VersionToNum;\r\ +> \n:global RequiredRouterOS;\r\ +> \n:global ExitError;\r\ +> \n:global ExitOnError;\r\ +> \n\r\ +> \n:global FetchHugeFiles;\r\ +> \n:global FetchUserAgentStr;\r\ +> \n:global FileExists;\r\ +> \n:global CertificateAvailable;\r\ +> \n:global CertificateDownload;\r\ +> \n:global CertificateNameByCN;\r\ +> \n:global CharacterMultiply;\r\ +> \n\r\ +> \n:global InspectVar;\r\ +> \n:global InspectVarRet;\r\ +> \n:global ParseCustom;\r\ +> \n\r\ +> \n:set IsCheckUpdates do={\r\ +> \n :local isInfo [:tobool \$1];\r\ +> \n :global updateChannel;\r\ +> \n :global PkgUpdStatus;\r\ +> \n :global currentUpdateChannel;\r\ +> \n :global ROsVerAvail;\r\ +> \n :global arrDeviceInfo;\r\ +> \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ +> \n :local CurrentChannel [ /system/package/update/get channel ];\r\ +> \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ +> el) do={\r\ +> \n :retry command={/system/package/update set channel=\$updateChannel} \ +> \_delay=300ms max=5 on-error={};\r\ +> \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ +> \n }\r\ +> \n :local Update [ /system/package/update/get ];\r\ +> \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ +> \n :set currentUpdateChannel \$Channel;\r\ +> \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ +> \n :local StatusPkg \"undefined\";\r\ +> \n :log info (\$0 . \" Checking for updates...\");\r\ +> \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ +> dates without-paging as-value]->\"status\")} \\\r\ +> \n delay=300ms max=5 on-error={};\r\ +> \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ +> \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ +> s true; } else={ :set PkgUpdStatus false; }\r\ +> \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ +> ] ];\r\ +> \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ +> \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ +> \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ +> \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ +> \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ +> \n }\r\ +> \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ +> kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ +> \n :return true;\r\ +> \n } else={\r\ +> \n :return \$PkgUpdStatus;\r\ +> \n }\r\ +> \n}\r\ +> \n\r\ +> \n:set WaitCheckUpdates do={\r\ +> \n :global IsCheckUpdates;\r\ +> \n :global PkgUpdStatus;\r\ +> \n :global currentUpdateChannel;\r\ +> \n :global ROsVerAvail;\r\ +> \n :global arrDeviceInfo;\r\ +> \n :local Status \"\";\r\ +> \n :local Update;\r\ +> \n :local WaitCount 0;\r\ +> \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ +> \n :return false;\r\ +> \n }\r\ +> \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ +> \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ +> \") && \$WaitCount < 60) do={\r\ +> \n :delay 1s;\r\ +> \n :set WaitCount (\$WaitCount + 1);\r\ +> \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ +> \n }\r\ +> \n :set Update [ /system/package/update/get ];\r\ +> \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ +> \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ +> \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ +> \n :set PkgUpdStatus true;\r\ +> \n } else={\r\ +> \n :set PkgUpdStatus false;\r\ +> \n }\r\ +> \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ +> \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ +> \n }\r\ +> \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ +> \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ +> do={\r\ +> \n :return false;\r\ +> \n }\r\ +> \n :return true;\r\ +> \n}\r\ +> \n\r\ +> \n:set WaitArrDeviceInfo do={\r\ +> \n :global GetArrDeviceInfo;\r\ +> \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ +> \n :delay 1s;\r\ +> \n }\r\ +> \n}\r\ +> \n\r\ +> \n:set GetArrDeviceInfo do={\r\ +> \n :global LogPrint;\r\ +> \n :global arrDeviceInfo;\r\ +> \n :global devBoardName;\r\ +> \n :global devModel;\r\ +> \n :global devRunning;\r\ +> \n :global devCurArch;\r\ +> \n :global devRbRevision;\r\ +> \n :global devRbSerialNumber;\r\ +> \n :global devBuildTime;\r\ +> \n :global runningChannelVersion;\r\ +> \n :global runningChannel;\r\ +> \n :global runningVersion;\r\ +> \n :global currentUpdateChannel;\r\ +> \n :global ROsVerAvail;\r\ +> \n\r\ +> \n :local DeviceInfo;\r\ +> \n :local Resource [/system/resource/get];\r\ +> \n :local Update [ /system/package/update/get ];\r\ +> \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ +> \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ +> \n :local RouterBoard;\r\ +> \n :local IsRouterBoard false;\r\ +> \n :local RunningMode \"\";\r\ +> \n\r\ +> \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ +> \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ +> \n :set runningChannelVersion \$VersionString;\r\ +> \n :set runningVersion \$VersionString;\r\ +> \n :set runningChannel \"\";\r\ +> \n\r\ +> \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ +> {\r\ +> \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ +> \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ +> len \$VersionString ] ];\r\ +> \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ +> \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ +> \r\ +> \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ +> \n }\r\ +> \n }\r\ +> \n\r\ +> \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ +> \_3] != \"x86\") do={\r\ +> \n :do {\r\ +> \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ +> \n# :set RouterBoard [ /system/routerboard/get ];\r\ +> \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ +> \n :set IsRouterBoard true;\r\ +> \n }\r\ +> \n } on-error={}\r\ +> \n }\r\ +> \n\r\ +> \n :do {\r\ +> \n :set RunningMode [ /system/device-mode/get mode ];\r\ +> \n } on-error={\r\ +> \n :do {\r\ +> \n :set RunningMode [ /system/device-mode/get running ];\r\ +> \n } on-error={\r\ +> \n :set RunningMode \"\";\r\ +> \n }\r\ +> \n }\r\ +> \n :set devRunning \$RunningMode;\r\ +> \n\r\ +> \n :if (\$IsRouterBoard = true) do={\r\ +> \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ +> \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ +> \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ +> ];\r\ +> \n } else={\r\ +> \n :set devModel \$devBoardName;\r\ +> \n :set devRbRevision \"\";\r\ +> \n :set devRbSerialNumber \"\";\r\ +> \n }\r\ +> \n\r\ +> \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ +> \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ +> \n\r\ +> \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ +> \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ +> \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ +> \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ +> \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ +> \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ +> \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ +> \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ +> ion;\r\ +> \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ +> \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ +> \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ +> \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ +> current-firmware\") ];\r\ +> \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ +> upgrade-firmware\") ];\r\ +> \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ +> \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ +> alled-version\") ];\r\ +> \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ +> \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ +> ) ];\r\ +> \n\r\ +> \n :set arrDeviceInfo \$DeviceInfo;\r\ +> \n :return \$DeviceInfo;\r\ +> \n}\r\ +> \n\r\ +> \n:set DeviceInfo do={\r\ +> \n :global GetArrDeviceInfo;\r\ +> \n :global GlobalConfVersion;\r\ +> \n :global Identity;\r\ +> \n :global IfThenElse;\r\ +> \n :global FormatLine;\r\ +> \n :global CommitBrief;\r\ +> \n\r\ +> \n :local License [/system/license/get];\r\ +> \n :local Snmp [ /snmp/get ];\r\ +> \n :local Info [ \$GetArrDeviceInfo ];\r\ +> \n\r\ +> \n :if ([ :typeof \$Info ] != \"array\") do={\r\ +> \n :return false;\r\ +> \n }\r\ +> \n\r\ +> \n :return ( \\\r\ +> \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ +> \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ +> \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ +> \_. \\\r\ +> \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ +> \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ +> \_\\\r\ +> \n \"Hardware:\\n\" . \\\r\ +> \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ +> \\\r\ +> \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ +> n\" . \\\r\ +> \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ +> \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ +> \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ +> \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ +> \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ +> \\n\") ] . \\\r\ +> \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ +> \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ +> \")) ] . \"\\n\") ] . \\\r\ +> \n \"RouterOS:\\n\" . \\\r\ +> \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ +> \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ +> \")) ] . \"\\n\") ] . \\\r\ +> \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ +> \\n\" . \\\r\ +> \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ +> \_\"\\n\" . \\\r\ +> \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ +> \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ +> \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ +> \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ +> \"\\n\") ] . \\\r\ +> \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ +> \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ +> \_\\\r\ +> \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ +> \_\"\\n\") ] . \\\r\ +> \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ +> \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ +> ) \\\r\ +> \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ +> \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ +> \n \"RouterOS-Scripts:\\n\" . \\\r\ +> \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ +> \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ +> \n}\r\ +> \n\r\ +> \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ +> tionFunctions ({})}\r\ +> \n\r\ +> \n:set GetRandom20CharAlNum do={\r\ +> \n :global EitherOr;\r\ +> \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ +> FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ +> \n}\r\ +> \n\r\ +> \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ +> \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ +> \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ +> \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ +> \n\r\ +> \n:global checkRunJob;\r\ +> \n:set checkRunJob do={\r\ +> \n :local Script [ :tostr \$1 ];\r\ +> \n :global ScriptLock; \r\ +> \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ +> \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ +> :set Job [ /system/script/job/get \$Job ];\r\ +> \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ +> stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ +> \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ +> lse; \r\ +> \n}\r\ +> \n\r\ +> \n:set InspectVar do={\r\ +> \n :global InspectVarRet;\r\ +> \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ +> \n}\r\ +> \n\r\ +> \n:set CommitBrief do={\r\ +> \n :global CommitId;\r\ +> \n :global CommitInfo;\r\ +> \n :if (\$CommitId = \"unknown\") do={\r\ +> \n :return \"unknown\";\r\ +> \n }\r\ +> \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ +> \n}\r\ +> \n\r\ +> \n:set InspectVarRet do={\r\ +> \n :local Input \$1;\r\ +> \n :local Level (0 + [ :tonum \$2 ]);\r\ +> \n :global CharacterReplace;\r\ +> \n :global IfThenElse;\r\ +> \n :global InspectVarRet;\r\ +> \n :local IndentReturn do={\r\ +> \n :local Prefix [ :tostr \$1 ];\r\ +> \n :local Value [ :tostr \$2 ];\r\ +> \n :local Level [ :tonum \$3 ];\r\ +> \n :global CharacterMultiply;\r\ +> \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ +> fix . \"-> \" . \$Value);\r\ +> \n }\r\ +> \n :local TypeOf [ :typeof \$Input ];\r\ +> \n :local Len [ :len \$Input ];\r\ +> \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ +> \n :if (\$TypeOf = \"array\") do={\r\ +> \n :foreach Key,Value in=\$Input do={\r\ +> \n :set \$Return (\$Return . \"\\n\" . \\\r\ +> \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ +> \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ +> \n }\r\ +> \n } else={\r\ +> \n :if (\$TypeOf = \"str\") do={\r\ +> \n :set \$Return (\$Return . \"\\n\" . \\\r\ +> \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ +> \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ +> \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ +> \n }\r\ +> \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ +> \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ +> \n }\r\ +> \n }\r\ +> \n :if (\$TypeOf != \"nothing\") do={\r\ +> \n :set \$Return (\$Return . \"\\n\" . \\\r\ +> \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ +> \_\\\r\ +> \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ +> \n }\r\ +> \n }\r\ +> \n :return \$Return;\r\ +> \n}\r\ +> \n\r\ +> \n:set GetPubIp do={\r\ +> \n :global DetectIpAddrDefault;\r\ +> \n :global DetectIpAddrFallback;\r\ +> \n\r\ +> \n :local PubIpAddr false;\r\ +> \n :local Url \$DetectIpAddrDefault;\r\ +> \n :local JobName [ :jobname ];\r\ +> \n\r\ +> \n :do {\r\ +> \n :log debug (\$0 . \" Trying to detect public IP using default serv\ +> ice: \" . \$Url . \"...\");\r\ +> \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ +> \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ +> )} \\\r\ +> \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ +> detect public IP using default service: \" . \$Url . \".\")}\r\ +> \n } on-error={\r\ +> \n :log error (\$0 . \" Failed to detect public IP using default serv\ +> ice: \" . \$Url . \".\");\r\ +> \n :set Url \$DetectIpAddrFallBack;\r\ +> \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ +> vice: \" . \$Url . \"...\");\r\ +> \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ +> \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ +> )} \\\r\ +> \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ +> \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ +> \n };\r\ +> \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ +> \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ +> {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ +> \n :return \$PubIpAddr;\r\ +> \n}\r\ +> \n\r\ +> \n:set FormatLine do={\r\ +> \n :local Key [ :tostr \$1 ];\r\ +> \n :local Value [ :tostr \$2 ];\r\ +> \n :local Indent [ :tonum \$3 ];\r\ +> \n :local Spaces;\r\ +> \n :local Return \"\";\r\ +> \n :global CharacterMultiply;\r\ +> \n :global EitherOr;\r\ +> \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ +> \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ +> \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ +> \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ +> n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ +> \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ +> \$Return ]) ] . \$Value)}\r\ +> \n :return \$Return;\r\ +> \n}\r\ +> \n\r\ +> \n:set ParseCustom do={\r\ +> \n :local Str [ :tostr \$1 ];\r\ +> \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ +> \n :local End [ :tostr \$3 ];\r\ +> \n :local Num [ :tonum \$4 ];\r\ +> \n :local Return;\r\ +> \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ +> \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ +> \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ +> lse={\r\ +> \n :set End [:find \$rest \$End];\r\ +> \n :set Return [:pick \$rest 0 \$End];\r\ +> \n }\r\ +> \n:return \$Return;\r\ +> \n}\r\ +> \n\r\ +> \n:set LogPrint do={\r\ +> \n :local Severity [ :tostr \$1 ];\r\ +> \n :local Name [ :tostr \$2 ];\r\ +> \n :local Message [ :tostr \$3 ];\r\ +> \n :global PrintDebug;\r\ +> \n :global PrintDebugOverride;\r\ +> \n :global EitherOr;\r\ +> \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ +> ];\r\ +> \n :local PrintSeverity do={\r\ +> \n :global TerminalColorOutput;\r\ +> \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ +> \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ +> \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ +> \n}\r\ +> \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ +> \r\ +> \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ +> \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ +> \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ +> \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ +> \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ +> \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ +> erity \$Severity ] . \": \" . \$Message)}\r\ +> \n}\r\ +> \n\r\ +> \n:set CertificateAvailable do={\r\ +> \n :local CommonName [ :tostr \$1 ];\r\ +> \n :local UseFor [ :tostr \$2 ];\r\ +> \n\r\ +> \n :global CertificateDownload;\r\ +> \n :global ParseKeyValueStore;\r\ +> \n\r\ +> \n :if ([ :len \$UseFor ] = 0) do={\r\ +> \n :log warning (\$0 . \"The intended use is undefined!\");\r\ +> \n :set UseFor \"undefined\";\r\ +> \n }\r\ +> \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ +> \n [ /certificate/settings/get crl-download ] = true && \\\r\ +> \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ +> \n :log warning (\$0 . \"This system has low free flash space but \" . \ +> \\\r\ +> \n \"is configured to download certificate CRLs to system!\");\r\ +> \n }\r\ +> \n :if ([ :len \$CommonName ] = 0) do={\r\ +> \n :log warning (\$0 . \"No CommonName given!\");\r\ +> \n :return false;\r\ +> \n }\r\ +> \n :local CertSettings [ /certificate/settings/get ];\r\ +> \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ +> \r\ +> \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ +> \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ +> \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ +> \_] ] > 0) do={\r\ +> \n :return true;\r\ +> \n }\r\ +> \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ +> ) do={\r\ +> \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ +> \"' not available.\");\r\ +> \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ +> \n :return false;\r\ +> \n }\r\ +> \n }\r\ +> \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ +> ) do={\r\ +> \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ +> \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ +> \n :return true;\r\ +> \n }\r\ +> \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ +> e ] ];\r\ +> \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ +> ertVal->\"skid\")) do={\r\ +> \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ +> \_= 0) do={\r\ +> \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ +> >\"CN\");\r\ +> \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ +> is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ +> \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ +> \n :return false;\r\ +> \n }\r\ +> \n }\r\ +> \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ +> \") ] ];\r\ +> \n }\r\ +> \n :return true;\r\ +> \n}\r\ +> \n\r\ +> \n:set CertificateDownload do={\r\ +> \n :local CommonName [ :tostr \$1 ];\r\ +> \n :global ScriptUpdatesBaseUrl;\r\ +> \n :global ScriptUpdatesUrlSuffix;\r\ +> \n :global CertificateNameByCN;\r\ +> \n :global CleanName;\r\ +> \n :global FetchUserAgentStr;\r\ +> \n :global RmFile;\r\ +> \n :global WaitForFile;\r\ +> \n\r\ +> \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ +> \r\ +> \n \"CommonName '\" . \$CommonName . \"'.\");\r\ +> \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ +> \n :do {\r\ +> \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ +> -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ +> \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ +> sUrlSuffix) \\\r\ +> \n dst-path=\$FileName as-value;\r\ +> \n \$WaitForFile \$FileName;\r\ +> \n } on-error={\r\ +> \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ +> e '\" . \$CommonName . \\\r\ +> \n \"' from repository! Trying fallback to mkcert.org...\");\r\ +> \n :do {\r\ +> \n :local CertSettings [ /certificate/settings/get ];\r\ +> \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ +> \_] ] = 0 && \\\r\ +> \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ +> || \\\r\ +> \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ +> \\\r\ +> \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ +> \r\ +> \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ +> \_Root X1\" ] ] > 0)) do={\r\ +> \n :log error (\$0 . \" Required certificate is not available.\");\ +> \r\ +> \n :return false;\r\ +> \n }\r\ +> \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ +> er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ +> \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ +> n ({ \$CommonName }) ] \\\r\ +> \n dst-path=\$FileName as-value;\r\ +> \n \$WaitForFile \$FileName;\r\ +> \n :if ([ /file/get \$FileName size ] = 0) do={\r\ +> \n \$RmFile \$FileName;\r\ +> \n :error false;\r\ +> \n }\r\ +> \n } on-error={\r\ +> \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ +> e '\" . \$CommonName . \"'!\");\r\ +> \n :return false;\r\ +> \n }\r\ +> \n }\r\ +> \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ +> \n :delay 1s;\r\ +> \n \$RmFile \$FileName;\r\ +> \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ +> ) do={\r\ +> \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ +> +\\\$\") ];\r\ +> \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ +> e . \"' still unavailable!\");\r\ +> \n :return false;\r\ +> \n }\r\ +> \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ +> \"_[0-9]+\\\$\") ] do={\r\ +> \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ +> \n }\r\ +> \n :return true;\r\ +> \n}\r\ +> \n\r\ +> \n:set CertificateNameByCN do={\r\ +> \n :local Match [ :tostr \$1 ];\r\ +> \n :global CleanName;\r\ +> \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ +> rint=\$Match or name=\$Match) ]->0);\r\ +> \n :if ([ :len \$Cert ] = 0) do={\r\ +> \n :log warning (\$0 .\" No matching certificate found.\");\r\ +> \n :return false;\r\ +> \n }\r\ +> \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ +> \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ +> \n :return true;\r\ +> \n}\r\ +> \n\r\ +> \n:set CharacterMultiply do={\r\ +> \n :local Str [ :tostr \$1 ];\r\ +> \n :local Num [ :tonum \$2 ];\r\ +> \n :if (\$Num = 0) do={:return \"\"}\r\ +> \n :local Return \"\";\r\ +> \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ +> \n :return \$Return;\r\ +> \n}\r\ +> \n\r\ +> \n:set FileExists do={\r\ +> \n :local FileName [ :tostr \$1 ];\r\ +> \n :local Type [ :tostr \$2 ];\r\ +> \n :global FileGet;\r\ +> \n :local FileVal [ \$FileGet \$FileName ];\r\ +> \n :if (\$FileVal = false) do={ :return false; }\r\ +> \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ +> \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ +> \_true; }\r\ +> \n :return false;\r\ +> \n}\r\ +> \n\r\ +> \n:set Grep do={\r\ +> \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ +> \n :local Pattern [ :tostr \$2 ];\r\ +> \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ +> }\r\ +> \n :do {\r\ +> \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ +> \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ +> \$Line}\r\ +> \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ +> Input ] ];\r\ +> \n } while=([ :len \$Input ] > 0);\r\ +> \n :return [];\r\ +> \n}\r\ +> \n\r\ +> \n:set HumanReadableNum do={\r\ +> \n :local Input [ :tonum \$1 ];\r\ +> \n :local Base [ :tonum \$2 ];\r\ +> \n :global EitherOr;\r\ +> \n :global IfThenElse;\r\ +> \n :local Prefix \"kMGTPE\";\r\ +> \n :local Pow 1;\r\ +> \n :set Base [ \$EitherOr \$Base 1024 ];\r\ +> \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ +> \n :if (\$Input < \$Base) do={:return \$Input}\r\ +> \n :for I from=0 to=[ :len \$Prefix ] do={\r\ +> \n :set Pow (\$Pow * \$Base);\r\ +> \n :if (\$Input / \$Base < \$Pow) do={\r\ +> \n :set Prefix [ :pick \$Prefix \$I ];\r\ +> \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ +> \n :local Tmp2 (\$Tmp1 / 100);\r\ +> \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ +> \n :return (\$Tmp2 . \".\" . \\\r\ +> \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ +> 2 ] + 1) ] . \\\r\ +> \n \$Prefix . \$Bin);\r\ +> \n }\r\ +> \n }\r\ +> \n}\r\ +> \n\r\ +> \n:set CleanFilePath do={\r\ +> \n :local Path [ :tostr \$1 ];\r\ +> \n :global CharacterReplace;\r\ +> \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ +> \"//\" \"/\" ]; }\r\ +> \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ +> n \$Path ] ]; }\r\ +> \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ +> :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ +> \n :return \$Path;\r\ +> \n}\r\ +> \n\r\ +> \n:set CleanName do={\r\ +> \n :local Input [ :tostr \$1 ];\r\ +> \n :local Return \"\";\r\ +> \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ +> \n :local Char [ :pick \$Input \$I ];\r\ +> \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ +> stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ +> \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ +> \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ +> ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ +> \n };\r\ +> \n :set Return (\$Return . \$Char)};\r\ +> \n :return \$Return;\r\ +> \n}\r\ +> \n\r\ +> \n:set RandomDelay do={\r\ +> \n :local Time [ :tonum \$1 ];\r\ +> \n :local Unit [ :tostr \$2 ];\r\ +> \n :global EitherOr;\r\ +> \n :global GetRandomNumber;\r\ +> \n :global MAX;\r\ +> \n :if (\$Time = 0) do={:return false}\r\ +> \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ +> [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ +> \n}\r\ +> \n\r\ +> \n:set EscapeForRegEx do={\r\ +> \n :local Input [ :tostr \$1 ];\r\ +> \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ +> \n :local Return \"\";\r\ +> \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ +> \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ +> \n :local Char [ :pick \$Input \$I ];\r\ +> \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ +> \n :set Return (\$Return . \$Char);\r\ +> \n }\r\ +> \n :return \$Return;\r\ +> \n}\r\ +> \n\r\ +> \n:set ExitError do={\r\ +> \n :local ExitOK [ :tostr \$1 ];\r\ +> \n :local Name [ :tostr \$2 ];\r\ +> \n :local Error [ :tostr \$3 ];\r\ +> \n :global IfThenElse;\r\ +> \n :if (\$ExitOK = \"false\") do={\r\ +> \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ +> \\\r\ +> \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ +> ror\" . \\\r\ +> \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ +> \$Error) \".\" ]);\r\ +> \n }\r\ +> \n}\r\ +> \n\r\ +> \n:set ExitOnError do={\r\ +> \n :local Name [ :tostr \$1 ];\r\ +> \n :local Error [ :tostr \$2 ];\r\ +> \n :global IfThenElse;\r\ +> \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ +> \\\$\") \\\r\ +> \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ +> r\" . \\\r\ +> \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ +> rror) \".\" ]);\r\ +> \n}\r\ +> \n\r\ +> \n:set MiniDateTimeStamp do={\r\ +> \n :local mikro [ :tobool \$1 ];\r\ +> \n /system/clock;\r\ +> \n :local vdate [get date];\r\ +> \n :local vtime [get time];\r\ +> \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ +> \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ +> \n :local M [:tonum \$MM];\r\ +> \n :if (\$vdate ~ \".../../....\") do={\r\ +> \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ +> \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ +> PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ +> \n :if (\$M>12) do={:set M (\$M - 12)}\r\ +> \n :set MM [:pick (100 + \$M) 1 3];\r\ +> \n }\r\ +> \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ +> \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ +> \n :local HH [:pick \$vtime 0 2];\r\ +> \n :local mm [:pick \$vtime 3 5];\r\ +> \n :local ss [:pick \$vtime 6 8];\r\ +> \n :local Return;\r\ +> \n :if (\$mikro = true) do={\r\ +> \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ +> \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ +> \n } else={\r\ +> \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ +> \r\ +> \n }\r\ +> \n :return \$Return;\r\ +> \n}\r\ +> \n\r\ +> \n:set WaitForFile do={\r\ +> \n :local FileName [ :tostr \$1 ];\r\ +> \n :local WaitTime [ :totime \$2 ];\r\ +> \n :global CleanFilePath;\r\ +> \n :global EitherOr;\r\ +> \n :global MAX;\r\ +> \n :set FileName [ \$CleanFilePath \$FileName ];\r\ +> \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ +> \n :do {\r\ +> \n :retry {\r\ +> \n /file/get \$FileName;\r\ +> \n :return true;\r\ +> \n } delay=\$Delay max=10;\r\ +> \n } on-error={ }\r\ +> \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ +> \n :do {\r\ +> \n /file/get \$FileName;\r\ +> \n :return true;\r\ +> \n } on-error={ }\r\ +> \n :delay \$Delay;\r\ +> \n :set Delay (\$Delay * 3 / 2);\r\ +> \n }\r\ +> \n :return false;\r\ +> \n}\r\ +> \n\r\ +> \n:set FileGet do={\r\ +> \n :local FileName [ :tostr \$1 ];\r\ +> \n :global WaitForFile;\r\ +> \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ +> \n :return false;\r\ +> \n }\r\ +> \n :local FileVal false;\r\ +> \n :do {\r\ +> \n :set FileVal [ /file/get \$FileName ];\r\ +> \n } on-error={ }\r\ +> \n :return \$FileVal;\r\ +> \n}\r\ +> \n\r\ +> \n:set RmDir do={\r\ +> \n :local DirName [ :tostr \$1 ];\r\ +> \n :global FileGet;\r\ +> \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ +> \n :local DirVal [ \$FileGet \$DirName ];\r\ +> \n :if (\$DirVal = false) do={\r\ +> \n :log debug (\$0 . \" ... which does not exist.\");\r\ +> \n :return true;\r\ +> \n };\r\ +> \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ +> \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ +> ory.\");\r\ +> \n :return false;\r\ +> \n };\r\ +> \n :onerror Err {\r\ +> \n /file/remove \$DirName;\r\ +> \n } do={\r\ +> \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ +> : \" . \$Err);\r\ +> \n :return false;\r\ +> \n };\r\ +> \n :return true;\r\ +> \n}\r\ +> \n\r\ +> \n:set RmFile do={\r\ +> \n :local FileName [ :tostr \$1 ];\r\ +> \n :global FileGet;\r\ +> \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ +> \n :local FileVal [ \$FileGet \$FileName ];\r\ +> \n :if (\$FileVal = false) do={\r\ +> \n :log debug (\$0 . \" ... which does not exist.\");\r\ +> \n :return true;\r\ +> \n }\r\ +> \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ +> sk\") do={\r\ +> \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ +> \r\ +> \n :return false;\r\ +> \n }\r\ +> \n :onerror Err {\r\ +> \n /file/remove \$FileName;\r\ +> \n } do={\r\ +> \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ +> \_. \$Err); :return false;\r\ +> \n }\r\ +> \n :return true;\r\ +> \n}\r\ +> \n\r\ +> \n:set MkDir do={\r\ +> \n :local Path [ :tostr \$1 ];\r\ +> \n :global CleanFilePath;\r\ +> \n :global FileGet;\r\ +> \n :global RmDir;\r\ +> \n :global WaitForFile;\r\ +> \n\r\ +> \n :local MkTmpfs do={\r\ +> \n :global WaitForFile;\r\ +> \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ +> \n :if ([ :len \$TmpFs ] = 1) do={\r\ +> \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ +> \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ +> \n /disk/enable \$TmpFs;\r\ +> \n }\r\ +> \n :return true;\r\ +> \n }\r\ +> \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ +> \n \$RmDir \"tmpfs\";\r\ +> \n :onerror Err {\r\ +> \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ +> /get total-memory ] / 3);\r\ +> \n \$WaitForFile \"tmpfs\";\r\ +> \n } do={\r\ +> \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ +> Err);\r\ +> \n :return false;\r\ +> \n }\r\ +> \n :return true;\r\ +> \n }\r\ +> \n :set Path [ \$CleanFilePath \$Path ];\r\ +> \n :if (\$Path = \"\") do={\r\ +> \n :return true;\r\ +> \n }\r\ +> \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ +> \n :local PathVal [ \$FileGet \$Path ];\r\ +> \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ +> \n :log debug (\$0 . \" ... which already exists.\");\r\ +> \n :return true;\r\ +> \n }\r\ +> \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ +> \n :if ([ \$MkTmpfs ] = false) do={\r\ +> \n :return false;\r\ +> \n }\r\ +> \n }\r\ +> \n :onerror Err {\r\ +> \n /file/add type=\"directory\" name=\$Path;\r\ +> \n \$WaitForFile \$Path;\r\ +> \n } do={\r\ +> \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ +> \" . \$Err);\r\ +> \n :return false;\r\ +> \n }\r\ +> \n :return true;\r\ +> \n}\r\ +> \n\r\ +> \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ +> \n :return \$2;\r\ +> \n}\r\ +> \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ +> \n :return \$2;\r\ +> \n}\r\ +> \n\r\ +> \n:set CharacterMultiply do={\r\ +> \n :local Str [ :tostr \$1 ];\r\ +> \n :local Num [ :tonum \$2 ];\r\ +> \n :if (\$Num = 0) do={:return \"\"}\r\ +> \n :local Return \"\";\r\ +> \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ +> \n :return \$Return;\r\ +> \n}\r\ +> \n\r\ +> \n:set CharacterReplace do={\r\ +> \n :local String [ :tostr \$1 ];\r\ +> \n :local ReplaceFrom [ :tostr \$2 ];\r\ +> \n :local ReplaceWith [ :tostr \$3 ];\r\ +> \n :local Return \"\";\r\ +> \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ +> \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ +> \r\ +> \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ +> \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ +> \r\ +> \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ +> \_\$String ] ];\r\ +> \n }\r\ +> \n :return (\$Return . \$String);\r\ +> \n}\r\ +> \n\r\ +> \n:set IfThenElse do={\r\ +> \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ +> \$2};\r\ +> \n :return \$3;\r\ +> \n}\r\ +> \n\r\ +> \n:set EitherOr do={\r\ +> \n :global IfThenElse;\r\ +> \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ +> \$1 \$2 ]}\r\ +> \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ +> \_\$1 \$2 ]}\r\ +> \n# this works for boolean values, literal ones with parentheses\r\ +> \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ +> \n}\r\ +> \n\r\ +> \n:set ParseKeyValueStore do={\r\ +> \n :local Source \$1;\r\ +> \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ +> \n :do {\r\ +> \n :return [ :deserialize from=json \$Source ];\r\ +> \n } on-error={ }\r\ +> \n } \r\ +> \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ +> }\r\ +> \n :local Result ({});\r\ +> \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ +> \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ +> \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ +> \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ +> \_:len \$KeyValue ] ];\r\ +> \n :if (\$Value=\"true\") do={:set Value true}\r\ +> \n :if (\$Value=\"false\") do={:set Value false}\r\ +> \n :set (\$Result->\$Key) \$Value;\r\ +> \n } else={:set (\$Result->\$KeyValue) true}\r\ +> \n }\r\ +> \n :return \$Result;\r\ +> \n}\r\ +> \n:set RequiredRouterOS do={\r\ +> \n :local Caller [ :tostr \$1 ];\r\ +> \n :local Required [ :tostr \$2 ];\r\ +> \n :local Warn [ :tostr \$3 ];\r\ +> \n :global IfThenElse;\r\ +> \n :global VersionToNum;\r\ +> \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ +> \\\$\")) do={\r\ +> \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ +> \n :return false;\r\ +> \n }\r\ +> \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ +> e/update/get installed-version ] ]) do={\r\ +> \n :if (\$Warn = \"true\") do={\r\ +> \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ +> 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ +> \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ +> es RouterOS \" . \$Required . \". Please update!\");\r\ +> \n }\r\ +> \n :return false;\r\ +> \n }\r\ +> \n :return true;\r\ +> \n}\r\ +> \n\r\ +> \n:set ValidateSyntax do={\r\ +> \n :local Code [ :tostr \$1 ];\r\ +> \n :global LogPrint;\r\ +> \n :onerror Err {\r\ +> \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ +> \n } do={\r\ +> \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ +> \n :return false;\r\ +> \n }\r\ +> \n :return true;\r\ +> \n}\r\ +> \n\r\ +> \n:set VersionToNum do={\r\ +> \n :local Input [ :tostr \$1 ];\r\ +> \n :local Multi 0x1000000;\r\ +> \n :local Return 0;\r\ +> \n :global CharacterReplace;\r\ +> \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ +> \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ +> \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ +> \r\ +> \n }\r\ +> \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ +> \n :local Num [ :tonum \$Value ];\r\ +> \n :if (\$Multi = 0x100) do={\r\ +> \n :if ([ :typeof \$Num ] = \"num\") do={\r\ +> \n :set Return (\$Return + 0xff00);\r\ +> \n :set Multi (\$Multi / 0x100);\r\ +> \n } else={\r\ +> \n :if (\$Value = \"zero\") do={ }\r\ +> \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ +> }\r\ +> \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ +> \r\ +> \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ +> \n }\r\ +> \n }\r\ +> \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ +> lue * \$Multi)); }\r\ +> \n :set Multi (\$Multi / 0x100);\r\ +> \n }\r\ +> \n :return \$Return;\r\ +> \n}\r\ +> \n\r\ +> \n:set ScriptLock do={\r\ +> \n :local Script [ :tostr \$1 ];\r\ +> \n :local WaitMax [ :totime \$2 ];\r\ +> \n :global GetRandom20CharAlNum;\r\ +> \n :global IfThenElse;\r\ +> \n :global ScriptLockOrder;\r\ +> \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ +> \n :set ScriptLockOrder ({});\r\ +> \n }\r\ +> \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ +> \n :set (\$ScriptLockOrder->\$Script) ({});\r\ +> \n }\r\ +> \n :local JobCount do={\r\ +> \n :local Script [ :tostr \$1 ];\r\ +> \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ +> \r\ +> \n }\r\ +> \n :local TicketCount do={\r\ +> \n :local Script [ :tostr \$1 ];\r\ +> \n :global ScriptLockOrder;\r\ +> \n :local Count 0;\r\ +> \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ +> \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ +> + 1)}\r\ +> \n }\r\ +> \n :return \$Count;\r\ +> \n }\r\ +> \n :local IsFirstTicket do={\r\ +> \n :local Script [ :tostr \$1 ];\r\ +> \n :local Check [ :tostr \$2 ];\r\ +> \n :global ScriptLockOrder;\r\ +> \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ +> \n :if (\$Ticket = \$Check) do={:return true}\r\ +> \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ +> o={:return false}\r\ +> \n }\r\ +> \n :return false;\r\ +> \n }\r\ +> \n :local AddTicket do={\r\ +> \n :local Script [ :tostr \$1 ];\r\ +> \n :local Add [ :tostr \$2 ];\r\ +> \n :global ScriptLockOrder;\r\ +> \n :while (true) do={\r\ +> \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ +> \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ +> \n :delay 10ms;\r\ +> \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ +> e}\r\ +> \n }\r\ +> \n }\r\ +> \n :local RemoveTicket do={\r\ +> \n :local Script [ :tostr \$1 ];\r\ +> \n :local Remove [ :tostr \$2 ];\r\ +> \n :global ScriptLockOrder;\r\ +> \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ +> \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ +> \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ +> \n :delay 10ms;\r\ +> \n }\r\ +> \n }\r\ +> \n }\r\ +> \n :local CleanupTickets do={\r\ +> \n :local Script [ :tostr \$1 ];\r\ +> \n :global ScriptLockOrder;\r\ +> \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ +> \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ +> \n }\r\ +> \n :set (\$ScriptLockOrder->\$Script) ({});\r\ +> \n }\r\ +> \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ +> \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ +> \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ +> ist!\");\r\ +> \n :error false;\r\ +> \n }\r\ +> \n :if ([ \$JobCount \$Script ] = 0) do={\r\ +> \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ +> );\r\ +> \n :error false;\r\ +> \n }\r\ +> \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ +> \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ +> t . \"', resetting!\");\r\ +> \n :set (\$ScriptLockOrder->\$Script) ({});\r\ +> \n /system/script/job/remove [ find where script=\$Script ];\r\ +> \n }\r\ +> \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ +> \n \$AddTicket \$Script \$MyTicket;\r\ +> \n :local WaitInterval (\$WaitMax / 20);\r\ +> \n :local WaitTime \$WaitMax;\r\ +> \n :while (\$WaitTime > 0 && \\\r\ +> \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ +> \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ +> \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ +> \n :delay \$WaitInterval;\r\ +> \n }\r\ +> \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ +> \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ +> \n \$RemoveTicket \$Script \$MyTicket;\r\ +> \n \$CleanupTickets \$Script;\r\ +> \n :return true;\r\ +> \n }\r\ +> \n \$RemoveTicket \$Script \$MyTicket;\r\ +> \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ +> once\" . \\\r\ +> \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ +> \_lock\" \"\" ] . \"...\");\r\ +> \n :return false;\r\ +> \n}\r\ +> \n\r\ +> \n:set SendNotification do={ :onerror Err {\r\ +> \n :global SendNotification2;\r\ +> \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ +> \_silent=\$4 });\r\ +> \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ +> \n}\r\ +> \n\r\ +> \n:set SendNotification2 do={\r\ +> \n :local Notification \$1;\r\ +> \n :global NotificationFunctions;\r\ +> \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ +> \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ +> ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ +> \n }\r\ +> \n}\r\ +> \n\r\ +> \n:set SymbolByUnicodeName do={\r\ +> \n :local Name [ :tostr \$1 ];\r\ +> \n :global EitherOr;\r\ +> \n :global SymbolsExtra;\r\ +> \n :local Symbols ({\r\ +> \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ +> \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ +> \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ +> \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ +> \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ +> \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ +> \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ +> \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ +> \n \"cloud\"=\"\\E2\\98\\81\";\r\ +> \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ +> \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ +> \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ +> \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ +> \n \"gear\"=\"\\E2\\9A\\99\";\r\ +> \n \"heart\"=\"\\E2\\99\\A5\";\r\ +> \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ +> \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ +> \n \"information\"=\"\\E2\\84\\B9\";\r\ +> \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ +> \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ +> \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ +> \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ +> \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ +> \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ +> \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ +> \n \"scissors\"=\"\\E2\\9C\\82\";\r\ +> \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ +> \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ +> \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ +> \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ +> \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ +> \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ +> \n \"star\"=\"\\E2\\AD\\90\";\r\ +> \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ +> \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ +> \n }, \$SymbolsExtra);\r\ +> \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ +> \n :local Special {\r\ +> \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ +> \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ +> \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ +> \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ +> \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ +> \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ +> '!\");\r\ +> \n :return \"\";\r\ +> \n }\r\ +> \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ +> me) ] . \"\\EF\\B8\\8F\");\r\ +> \n}\r\ +> \n\r\ +> \n:set SymbolForNotification do={\r\ +> \n :global NotificationsWithSymbols;\r\ +> \n :global SymbolByUnicodeName;\r\ +> \n :global IfThenElse;\r\ +> \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ +> \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ +> \n :local Return \"\";\r\ +> \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ +> mbolByUnicodeName \$Symbol ])}\r\ +> \n :return (\$Return . \" \");\r\ +> \n}\r\ +> \n\r\ +> \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ +> \n:set UrlEncode do={\r\ +> \n :local Input [ :tostr \$1 ];\r\ +> \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ +> \n :local Return \"\";\r\ +> \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ +> \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ +> %24\"; \"%25\"; \"%26\"; \"%27\";\r\ +> \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ +> \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ +> \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ +> \"%7C\"; \"%7D\"; \"%7E\" };\r\ +> \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ +> \n :local Char [ :pick \$Input \$I ];\r\ +> \n :local Replace [ :find \$Chars \$Char ];\r\ +> \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ +> ce)}\r\ +> \n :set Return (\$Return . \$Char);\r\ +> \n }\r\ +> \n :return \$Return;\r\ +> \n}\r\ +> \n\r\ +> \n:set IsDNSResolving do={\r\ +> \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ +> \n :return true;\r\ +> \n}\r\ +> \n\r\ +> \n:set IsFullyConnected do={\r\ +> \n :global IsDNSResolving;\r\ +> \n :global IsTimeSync;\r\ +> \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ +> \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ +> \n :return true;\r\ +> \n}\r\ +> \n\r\ +> \n:set IsTimeSync do={\r\ +> \n :global IsTimeSyncCached;\r\ +> \n :global IsTimeSyncResetNtp;\r\ +> \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ +> \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ +> \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ +> \n :set IsTimeSyncCached true;\r\ +> \n :return true;\r\ +> \n }\r\ +> \n :local Uptime [ /system/resource/get uptime ];\r\ +> \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ +> \n :set IsTimeSyncResetNtp \$Uptime;\r\ +> \n }\r\ +> \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ +> \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ +> ;\r\ +> \n :set IsTimeSyncResetNtp \$Uptime;\r\ +> \n /system/ntp/client/set enabled=no;\r\ +> \n :delay 20ms;\r\ +> \n /system/ntp/client/set enabled=yes;\r\ +> \n :return false;\r\ +> \n }\r\ +> \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ +> \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ +> \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ +> ee license and x86.\";\r\ +> \n :return true;\r\ +> \n }\r\ +> \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ +> \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ +> \n :set IsTimeSyncCached true;\r\ +> \n :return true;\r\ +> \n }\r\ +> \n :return false;\r\ +> \n }\r\ +> \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ +> \r\ +> \n :return true;\r\ +> \n}\r\ +> \n\r\ +> \n:set FetchHugeFiles do={\r\ +> \n :local ScriptName [ :tostr \$1 ];\r\ +> \n :local Url [ :tostr \$2 ];\r\ +> \n :local CheckCert [ :tostr \$3 ];\r\ +> \n\r\ +> \n :global CleanName;\r\ +> \n :global FetchUserAgentStr;\r\ +> \n :global GetRandom20CharAlNum;\r\ +> \n :global IfThenElse;\r\ +> \n :global LogPrint;\r\ +> \n :global MkDir;\r\ +> \n :global RmDir;\r\ +> \n :global RmFile;\r\ +> \n :global WaitForFile;\r\ +> \n\r\ +> \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ +> ithout-crl\" ];\r\ +> \n\r\ +> \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ +> \n :if ([ \$MkDir \$DirName ] = false) do={\r\ +> \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ +> \n :return false;\r\ +> \n }\r\ +> \n\r\ +> \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ +> \$GetRandom20CharAlNum ]);\r\ +> \n :onerror Err {\r\ +> \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ +> \\\r\ +> \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ +> lue;\r\ +> \n } do={\r\ +> \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ +> \n \$RmFile \$FileName;\r\ +> \n }\r\ +> \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ +> \_. \$Err);\r\ +> \n \$RmDir \$DirName;\r\ +> \n :return false;\r\ +> \n }\r\ +> \n\r\ +> \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ +> \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ +> \_not show up.\");\r\ +> \n :return false;\r\ +> \n }\r\ +> \n\r\ +> \n :local FileSize [ /file/get \$FileName size ];\r\ +> \n :local Return \"\";\r\ +> \n :local VarSize 0;\r\ +> \n :while (\$VarSize != \$FileSize) do={\r\ +> \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ +> 768 file=\$FileName as-value ]->\"data\"));\r\ +> \n :set FileSize [ /file/get \$FileName size ];\r\ +> \n :set VarSize [ :len \$Return ];\r\ +> \n :if (\$VarSize > \$FileSize) do={\r\ +> \n :delay 100ms;\r\ +> \n }\r\ +> \n }\r\ +> \n \$RmDir \$DirName;\r\ +> \n :return \$Return;\r\ +> \n}\r\ +> \n\r\ +> \n:set FetchUserAgentStr do={\r\ +> \n :local Caller [ :tostr \$1 ];\r\ +> \n :global GlobalScriptsUrl;\r\ +> \n :global CommitBrief;\r\ +> \n :global IfThenElse;\r\ +> \n :local Resource [ /system/resource/get ];\r\ +> \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ +> \_\$Resource->\"architecture-name\" . \\\r\ +> \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ +> CommitBrief ] . \")\");\r\ +> \n}\r\ +> \n\r\ +> \n:set ScriptInstallUpdate do={ :onerror Err {\r\ +> \n :local Scripts [ :toarray \$1 ];\r\ +> \n :local NewComment [ :tostr \$2 ];\r\ +> \n :global InitSetup;\r\ +> \n\r\ +> \n :global CommitId;\r\ +> \n :global ScriptUpdatesCRLF;\r\ +> \n :global GlobalConfVersion;\r\ +> \n :global Identity;\r\ +> \n :global CertificateAvailable;\r\ +> \n :global CheckSumsVerify;\r\ +> \n :global GlobalScriptsUrl;\r\ +> \n :global SumsDirAndFileName;\r\ +> \n :global GlobalScriptsUrlSuffix;\r\ +> \n :global EitherOr;\r\ +> \n :global FetchUserAgentStr;\r\ +> \n :global Grep;\r\ +> \n :global IfThenElse;\r\ +> \n :global LogPrint;\r\ +> \n :global ParseKeyValueStore;\r\ +> \n :global RequiredRouterOS;\r\ +> \n :global SendNotification2;\r\ +> \n :global SymbolForNotification;\r\ +> \n :global ValidateSyntax;\r\ +> \n :global CommentsInScripts;\r\ +> \n\r\ +> \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ +> \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ +> hout.\");\r\ +> \n }\r\ +> \n\r\ +> \n :foreach Script in=\$Scripts do={\r\ +> \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ +> \r\ +> \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ +> \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ +> Vados\\n\" comment=\$NewComment;\r\ +> \n }\r\ +> \n }\r\ +> \n\r\ +> \n :local CommitIdBefore \$CommitId;\r\ +> \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ +> \n :local ReloadGlobal false;\r\ +> \n :local DeviceMode [ /system/device-mode/get ];\r\ +> \n\r\ +> \n :if (\$CheckSumsVerify = true) do={\r\ +> \n :local CheckSums ({});\r\ +> \n :do {\r\ +> \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ +> iptsUrlSuffix);\r\ +> \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ +> \r\ +> \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ +> ficate=yes-without-crl \\\r\ +> \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ +> =user as-value ]->\"data\") ];\r\ +> \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ +> \n }\r\ +> \n\r\ +> \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ +> s\" ] do={\r\ +> \n :local ScriptVal [ /system/script/get \$Script ];\r\ +> \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ +> ];\r\ +> \n :local SourceNew;\r\ +> \n\r\ +> \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ +> \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ +> \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ +> \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ +> \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ +> iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ +> \"'!\");\r\ +> \n }\r\ +> \n }\r\ +> \n :do {\r\ +> \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ +> \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ +> e\" . \"', as requested.\");\r\ +> \n :error true;\r\ +> \n }\r\ +> \n :if (\$CheckSumsVerify = true) do={\r\ +> \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ +> \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ +> ptInfo->\"url-suffix\") ] = 0 && \\\r\ +> \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ +> rce\") ] ] = \$CheckSum) do={\r\ +> \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ +> >\"name\" . \"' matches, ignoring.\");\r\ +> \n :error true;\r\ +> \n }\r\ +> \n }\r\ +> \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ +> \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ +> fetch\" ] = false) do={\r\ +> \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ +> ng without.\");\r\ +> \n }\r\ +> \n }\r\ +> \n :onerror Err {\r\ +> \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ +> lScriptsUrl ];\r\ +> \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ +> lobalScriptsUrlSuffix ];\r\ +> \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ +> Suffix);\r\ +> \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ +> name\") . \"' from url: \" . \$Url);\r\ +> \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ +> \r\ +> \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ +> ut=user as-value ];\r\ +> \n :if (\$Result->\"status\" = \"finished\") do={\r\ +> \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ +> \n } \r\ +> \n } do={\r\ +> \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ +> al->\"name\" . \"': \" . \$Err);\r\ +> \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ +> \n :error false;\r\ +> \n }\r\ +> \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ +> \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ +> \?\");\r\ +> \n /system/script/remove \$Script;\r\ +> \n :error false;\r\ +> \n }\r\ +> \n :if (\$CheckSumsVerify = true) do={\r\ +> \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ +> riptInfo->\"url-suffix\") ] = 0 && \\\r\ +> \n [ :len \$CheckSum ] = 0) do={\r\ +> \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ +> pdates with 'ignore=true' in comment.\");\r\ +> \n }\r\ +> \n }\r\ +> \n :error false;\r\ +> \n }\r\ +> \n\r\ +> \n :if ([ :len \$SourceNew ] = 0) do={\r\ +> \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ +> >\"name\") . \"'.\");\r\ +> \n :error false;\r\ +> \n }\r\ +> \n\r\ +> \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ +> \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ +> lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ +> \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ +> \$ScriptVal->\"source\")) do={\r\ +> \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ +> . \"' source did not change. End of lines set to CRLF.\");\r\ +> \n if (\$ScriptUpdatesCRLF = false) do={\r\ +> \n :put [ :tolf \$SourceNew ];\r\ +> \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ +> ) . \"' source update end of lines to LF.\");\r\ +> \n }\r\ +> \n :error false;\r\ +> \n }\r\ +> \n }\r\ +> \n\r\ +> \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ +> \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ +> l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ +> );\r\ +> \n :error false;\r\ +> \n }\r\ +> \n\r\ +> \n :if (\$CommentsInScripts = true) do={\r\ +> \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ +> \_\") ];\r\ +> \n :if ([ :len \$CommentLine ] = 0) do={\r\ +> \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ +> iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ +> noring!\");\r\ +> \n :error false;\r\ +> \n } else={\r\ +> \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ +> ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ +> ] + 2) [ :len \$CommentLine] ]) do={\r\ +> \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ +> \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ +> ;\r\ +> \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ +> ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ +> \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ +> omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ +> ded!\");\r\ +> \n } else={\r\ +> \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ +> al->\"name\") . \"' did not change.\");\r\ +> \n :error false;\r\ +> \n }\r\ +> \n } \r\ +> \n }\r\ +> \n\r\ +> \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ +> \"\\23 requires RouterOS, \") ] ]->version);\r\ +> \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ +> \_false ] = false) do={\r\ +> \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ +> \") . \"' requires RouterOS \" . \\\r\ +> \n \$RequiredROS . \", which is not met by your installation. I\ +> gnoring!\");\r\ +> \n :error false;\r\ +> \n }\r\ +> \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ +> \\23 requires device-mode, \") ] ];\r\ +> \n :local MissingDM ({});\r\ +> \n :foreach Feature,Value in=\$RequiredDM do={\r\ +> \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ +> ceMode->\$Feature) = false) do={\r\ +> \n :set MissingDM (\$MissingDM, \$Feature);\r\ +> \n }\r\ +> \n }\r\ +> \n :if ([ :len \$MissingDM ] > 0) do={\r\ +> \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ +> \") . \"' requires disabled \" . \\\r\ +> \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ +> gnoring!\");\r\ +> \n :error false;\r\ +> \n }\r\ +> \n\r\ +> \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ +> \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ +> ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ +> \n :error false;\r\ +> \n }\r\ +> \n \r\ +> \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ +> ript comment: \" . (\$ScriptVal->\"comment\"));\r\ +> \n\r\ +> \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ +> Val->\"comment\") \\\r\ +> \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ +> F \$SourceNew ] \$Script;\r\ +> \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ +> \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ +> \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ +> o={\r\ +> \n :set ReloadGlobal true;\r\ +> \n }\r\ +> \n } on-error={ }\r\ +> \n }\r\ +> \n :if (\$ReloadGlobal = true) do={\r\ +> \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ +> \");\r\ +> \n :onerror Err {\r\ +> \n :global InitSetup (a);\r\ +> \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ +> \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ +> ctions failed! \" . \$Err)}\r\ +> \n }\r\ +> \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ +> \n \$LogPrint warning \$0 (\"The configuration version decreased from \ +> \" . \\\r\ +> \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ +> \n \". Installed an older version\?\");\r\ +> \n }\r\ +> \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ +> \n :global GlobalConfChanges;\r\ +> \n :global GlobalConfMigration;\r\ +> \n :local ChangeLogCode;\r\ +> \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ +> \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ +> \n :onerror Err {\r\ +> \n [ :parse \$ChangeLogCode ];\r\ +> \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ +> . \$Err)}\r\ +> \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ +> dation!\")}\r\ +> \n }\r\ +> \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ +> \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ +> \_do={\r\ +> \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ +> \n :do {\r\ +> \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ +> \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ +> \_\" is not available.\");\r\ +> \n :error false;\r\ +> \n }\r\ +> \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ +> \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ +> \_. \" failed syntax validation!\");\r\ +> \n :error false}\r\ +> \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ +> . \": \" . \$Migration);\r\ +> \n :onerror Err {\r\ +> \n [ :parse \$Migration ];\r\ +> \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ +> \_\$I . \" failed to run: \" . \$Err)}\r\ +> \n } on-error={ }\r\ +> \n }\r\ +> \n }\r\ +> \n :local NotificationMessage (\"The configuration version on \" . \$Id\ +> entity . \" increased \" . \\\r\ +> \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ +> d modification. \" . \\\r\ +> \n \"Please review and update global-config-overlay, then re-run glo\ +> bal-config.\");\r\ +> \n \$LogPrint info \$0 (\$NotificationMessage);\r\ +> \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ +> \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ +> \");\r\ +> \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ +> \_do={\r\ +> \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ +> \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ +> \r\ +> \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ +> \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ +> \n }\r\ +> \n } else={\r\ +> \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ +> \_changes are not available.\");\r\ +> \n\r\ +> \n }\r\ +> \n\r\ +> \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ +> } else={ :global GlobalConfChanges (a); }\r\ +> \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ +> on; } else={ :global GlobalConfMigration (a); }\r\ +> \n }\r\ +> \n} do={\r\ +> \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ +> \n} }\r\ +> \n\r\ +> \n# load modules\r\ +> \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ +> ns\\\\.d|mod)/.\" ] do={\r\ +> \n :local ScriptVal [ /system/script/get \$Script ];\r\ +> \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ +> \n :onerror Err {\r\ +> \n /system/script/run \$Script;\r\ +> \n } do={\r\ +> \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ +> ailed to run: \" . \$Err);\r\ +> \n }\r\ +> \n } else={\r\ +> \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ +> led syntax validation, skipping.\");\r\ +> \n }\r\ +> \n}\r\ +> \n\r\ +> \n# Add and fix global scheduler\r\ +> \n:put \"Add or/and fix Global scheduler...\";\r\ +> \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ +> ; }\";\r\ +> \n:local Comment \"Every Day Set Global Environment Variables\";\r\ +> \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ +> = 0) do={\r\ +> \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ +> ent=\$OnEvent start-time=startup;\r\ +> \n}\r\ +> \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ +> \_do={\r\ +> \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ +> \n}\r\ +> \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ +> ) do={\r\ +> \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ +> \n}\r\ +> \n# Add Update Script scheduler\r\ +> \n:put \"Add or/and fix Update Script scheduler\";\r\ +> \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ +> \r\ +> \n:set Comment \"Every Day Check For Update Scripts\";\r\ +> \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ +> \" ] ] = 0) do={\r\ +> \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ +> start-time=startup interval=1d on-event=\$OnEvent;\r\ +> \n}\r\ +> \n\r\ +> \n:onerror Err {\r\ +> \n :global GlobalConfReady;\r\ +> \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ +> \_not ready.\"); }; } delay=100ms max=5;\r\ +> \n\r\ +> \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ +> \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ +> \") ] . \\\r\ +> \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ +> \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ +> \n # signal we are ready\r\ +> \n:set GlobalFuncReady true;\r\ +> \n:set ExitOK true;\r\ +> \n\r\ +> \n:log info (\$0 . \"Global configs ready!\");\r\ +> \n} do={\r\ +> \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ +> \n}\r\ +> \n" +> add comment=\ +> "Lookup IP addresses for RKN list and add them to firewall address-list" \ +> dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \ +> policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ +> source="#!rsc by Vados\r\ +> \n# RouterOS script: AM-RKN-dnsLookup\r\ +> \n# Script comment: Lookup IP addresses for RKN list and add them to firew\ +> all address-list\r\ +> \n# Copyright (c) 2007-2026 Vados \r\ +> \n#\r\ +> \n#\r\ +> \n# requires RouterOS, version=7.19\r\ +> \n# requires device-mode, fetch\r\ +> \n#\r\ +> \n# Script description: This script is intended to be run periodically, e.\ +> g. once a day, to update the IP addresses in the firewall address-list bas\ +> ed on the RKN list.\r\ +> \n# It resolves the domain names in the RKN list and a\ +> dds the corresponding IP addresses to the specified firewall address-list.\ +> \r\ +> \n# The script also handles CNAME records by following\ +> \_them until it finds A records.\r\ +> \n# Usage:\r\ +> \n# /system/script { run AM-RKN-dnsLookup; }\r\ +> \n:local ScriptName [ :jobname ];\r\ +> \n\r\ +> \n:global dnsLookupReady false;\r\ +> \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\ +> \_true; }\r\ +> \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\ +> \n:set dnsLookupReady false;\r\ +> \n\r\ +> \n:local arrRKN {\r\ +> \n \"telegra.ph\"\r\ +> \n \"grani.ru\"\r\ +> \n \"xhamster.com\"\r\ +> \n \"lostfilm.tv\"\r\ +> \n \"rutracker.org\"\r\ +> \n \"lurkmore.to\"\r\ +> \n \"dou.ua\"\r\ +> \n \"youporn.com\"\r\ +> \n \"pornolab.net\"\r\ +> \n \"crimerussia.com\"\r\ +> \n \"telegram.org\"\r\ +> \n \"api.telegram.org\"\r\ +> \n \"facebook.com\"\r\ +> \n \"instagram.com\"\r\ +> \n \"x.com\"\r\ +> \n \"twitter.com\"\r\ +> \n \"youtube.com\"\r\ +> \n \"googleapis.com\"\r\ +> \n \"youtu.be\"\r\ +> \n \"googlevideo.com\"\r\ +> \n \"gstatic.com\"\r\ +> \n \"googleusercontent.com\"\r\ +> \n \"nhacmp3youtube.com\"\r\ +> \n \"telegram.me\"\r\ +> \n \"t.me\";}\r\ +> \n\r\ +> \n:local ListRKN \"RKN-dnsLookup\";\r\ +> \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\ +> \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\ +> ={\r\ +> \n /ip firewall address-list remove \$aListItem;\r\ +> \n}\r\ +> \n:foreach aItem in=\$arrRKN do={\r\ +> \n# :do {\r\ +> \n :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\ +> ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\ +> \n# } on-error={\r\ +> \n# :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\ +> \n# }\r\ +> \n :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \ +> do={\r\ +> \n :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\ +> \n :local newAddress [/ip dns cache all get \$dnsRecord data];\ +> \r\ +> \n :do {\r\ +> \n /ip firewall address-list add list=\$ListRKN address=\$newA\ +> ddress comment=\$aItem;\r\ +> \n :log warning \"Successfully adding ip to list A record: \ +> \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\ +> \n } on-error={\r\ +> \n :log error \"error when adding ip to list A record: \$dn\ +> sRecord, address: \$newAddress domain: \$aItem\";\r\ +> \n }\r\ +> \n }\r\ +> \n :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\ +> \n :local cname;\r\ +> \n :local nextCname;\r\ +> \n :local cnameAddress;\r\ +> \n :set cname [/ip dns cache all find where (name=\$aItem && ty\ +> pe=\"CNAME\")];\r\ +> \n :set nextCname [/ip dns cache all find where (name=[/ip dns \ +> cache all get \$cname data] && type=\"CNAME\")];\r\ +> \n :while (\$nextCname != \"\") do={\r\ +> \n :set cname \$nextCname;\r\ +> \n :set nextCname [/ip dns cache all find where (name=[/ip \ +> dns cache all get \$cname data] && type=\"CNAME\")];\r\ +> \n }\r\ +> \n :foreach aRecord in=[/ip dns cache all find where (name=[/ip\ +> \_dns cache all get \$cname data] && type=\"A\")] do={\r\ +> \n :do {\r\ +> \n :set cnameAddress [/ip dns cache all get \$aRecord d\ +> ata];\r\ +> \n /ip firewall address-list add list=\$ListRKN address\ +> =\$cnameAddress comment=\$aItem;\r\ +> \n :log warning \"Succesfully adding ip to list CNAME r\ +> ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \ +> \$aItem.\";\r\ +> \n# /ip firewall raw add action=add-dst-to-address-list\ +> \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\ +> g comment=\$aItem content=\$aItem;\r\ +> \n } on-error={\r\ +> \n :log error \"error when adding ip to list CNAME reco\ +> rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\ +> tem.\";\r\ +> \n }\r\ +> \n }\r\ +> \n }\r\ +> \n }\r\ +> \n}\r\ +> \n\r\ +> \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ +> ={\r\ +> \n :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\ +> ptName . \" is NOT SET! Fix It Now!\");\r\ +> \n /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \ +> run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\ +> olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\ +> \_start-time=startup;\r\ +> \n }\r\ +> \n:set dnsLookupReady true;\r\ +> \ndelay 2s; \r\ +> \n:global dnsLookupReady (a);\r\ +> \n" +> add dont-require-permissions=no name="renameLists " owner=vados policy=\ +> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ +> local oldName \"Test\";\ +> \n:local newName \"Test-IP\";\ +> \n/ip firewall address-list\ +> \n:foreach i in=[find list=\$oldName] do={\ +> \nset \$i list=\$newName;\ +> \n}\ +> \n" +> add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\ +> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ +> #############Script Settings##################\ +> \n\ +> \n:local \"IF-TUN\" \"6to4-tun\"\ +> \n:local \"IF-LOC\" \"Bridge-LAN\"\ +> \n:local \"POOL-6TO4\" \"poolV6-local\"\ +> \n:local \"force-update\" false\ +> \n############ use then static ip #######################\ +> \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \ +> address]\ +> \n#:local \"interface\" \"ext\"\ +> \n:local bound 0\ +> \n\ +> \n###############################################\ +> \n\ +> \n:local 6to4prefix do={\ +> \n :global dec2hex\ +> \n :local ipv4 \$1\ +> \n :local ipv6 \"2002:\"\ +> \n :for i from=0 to=2 step=1 do={ \ +> \n :if ( \$i = 2) do={\ +> \n :set ipv6 (\$ipv6.\":\")\ +> \n }\ +> \n :local fp [:find \$ipv4 \".\"]\ +> \n :if ( \$fp > 0 ) do={\ +> \n :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\ +> \n :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\ +> \n }\ +> \n }\ +> \n :return (\$ipv6.[\$dec2hex \$ipv4])\ +> \n}\ +> \n:local \"str_replace\" do={\ +> \n :local \"str-pos\" [:find \$1 \$2]\ +> \n :local \"str-len\" [:len \$2]\ +> \n :local str \"\"\ +> \n :local rest \$1\ +> \n :while (\$\"str-pos\" >= 0) do={\ +> \n :local t [:pick \$rest 0 \$\"str-pos\"]\ +> \n :if ( \$4 > 0 ) do={\ +> \n :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\ +> \n :set str (\$str.\$5)\ +> \n }\ +> \n }\ +> \n :set str (\$str.\$t.\$3)\ +> \n :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\ +> st]]\ +> \n :set \"str-pos\" [:find \$rest \$2]\ +> \n }\ +> \n :return (\$str.\$rest)\ +> \n}\ +> \n\ +> \n:if (\$bound=1) do={\ +> \n :local t [:find \$\"lease-address\" \"/\"]\ +> \n\ +> \n :if ( \$t >= 0 ) do={\ +> \n :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\ +> \n }\ +> \n\ +> \n :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\ +> ) do={\ +> \n /interface 6to4 add !keepalive local-address=\$\"lease-address\"\ +> \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\ +> \n :set \"force-update\" true\ +> \n }\ +> \n\ +> \n :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\ +> cal-address];\ +> \n\ +> \n :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \ +> true) do={\ +> \n /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\ +> ease-address\"\ +> \n /ipv6 address remove [find interface=\$\"IF-TUN\"]\ +> \n /ipv6 address remove [find interface=\$\"IF-LOC\"]\ +> \n /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\ +> \"::/0\"]\ +> \n :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\ +> \n :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\ +> \_0) do={ \ +> \n /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\ +> \".\":1::/64\") prefix-length=64\ +> \n } else={\ +> \n /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \ +> prefix=(\$\"pool-prefix\".\":1::/64\")\ +> \n }\ +> \n /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\ +> \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\ +> ace=\$\"IF-TUN\" advertise=no\ +> \n /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\ +> =\$\"IF-LOC\" advertise=yes\ +> \n /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\ +> \"IF-TUN\")\ +> \n :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\ +> s]\ +> \n :set t [:pick \$t 0 [:find \$t \"/\"]]\ +> \n :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\ +> \_= 0) do={\ +> \n /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\ +> [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ +> \n } else={\ +> \n /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \ +> where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ +> \n }\ +> \n :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\ +> -LOC\"] = 0) do={\ +> \n /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\ +> on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\ +> \n }\ +> \n :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \ +> 0) do={\ +> \n /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\ +> onfiguration=yes\ +> \n }\ +> \n }\ +> \n}" +> add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\ +> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ +> global MAC2EUI64 do={\ +> \n :local EUI64 \"\"\ +> \n :local MAC \$1\ +> \n :local HEX2DEC \"0123456789ABCDEF\"\ +> \n :for i from=0 to=5 step=1 do={\ +> \n :if ( \$i = 0 ) do={\ +> \n :set EUI64 [:pick \$MAC 0]\ +> \n :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\ +> \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\ +> \n }\ +> \n :if ( \$i = 1 || \$i = 3) do={\ +> \n :set EUI64 (\$EUI64.\":\")\ +> \n }\ +> \n :if ( \$i = 2 ) do={\ +> \n :set EUI64 (\$EUI64.\"FF:FE\")\ +> \n }\ +> \n :if ( [:find \$MAC \":\"] = 2 ) do={\ +> \n :set MAC [:pick \$MAC 3 [:len \$MAC]]\ +> \n :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\ +> \n }\ +> \n }\ +> \n :return (\$EUI64)\ +> \n}\ +> \n\ +> \n:global dec2hex do={\ +> \n :local hex \"\"\ +> \n :local dec [:tonum \$1]\ +> \n :for i from=0 to=4 step=4 do={\ +> \n :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\ +> c>>\$i)&0xf)+1)].\$hex)\ +> \n }\ +> \n :return ([:tostr \$hex])\ +> \n}" +> add comment=Generator dont-require-permissions=no name=proxySet owner=vados \ +> policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ +> source="# 2. WireGuard interface\r\ +> \n/interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDg\ +> uMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=21641\r\ +> \n/interface/wireguard/peers/add interface=wg-VDSina public-key=\"o5IgCl1/\ +> G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcYQnD9\ +> N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=10.30.30.33 endpoint-port=518\ +> 20 allowed-address=0.0.0.0/0 persistent-keepalive=11\r\ +> \n/ip/address/add address=10.9.0.3/32 interface=wg-VDSina\r\ +> \n\r\ +> \n# 3. DNS\r\ +> \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\ +> n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\ +> \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /system/script/add name=VDS\ +> ina-prev-dns comment=\"\$prevDNS\" source=\"\" }\r\ +> \n/ip/dns/set servers=8.8.4.4\r\ +> \n/ip/route/add dst-address=8.8.4.4/32 gateway=wg-VDSina distance=1 commen\ +> t=VDSina-dns\r\ +> \n\r\ +> \n# 4. Enable WireGuard\r\ +> \n/interface/wireguard/enable wg-VDSina\r\ +> \n" +> add dont-require-permissions=no name=AM-Telegram-Send owner=vados policy=\ +> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ +> !rsc by Vados\ +> \n# RouterOS script: AM-Telegram-Send\ +> \n# Script comment: Mini script for send messages to admin Telegram chat\ +> \n# Copyright (c) 2007-2026 Vados \ +> \n#\ +> \n#\ +> \n# requires RouterOS, version=7.19\ +> \n# requires device-mode, fetch\ +> \n#\ +> \n# Script description: \ +> \n#\ +> \n#\ +> \n# Usage:\ +> \n# /system/script { run AM-Telegram-Send \"Message here )))\"; }\ +> \n\ +> \n/system/script\ +> \nadd name=telegram-send dont-require-permissions=no source={\ +> \n :global TelegramTokenId;\ +> \n :global TelegramChatId;\ +> \n :local message [:tostr \$1];\ +> \n :local identity [/system/identity/get name];\ +> \n :local sendMsg (\"[\".\$identity.\"] \".\$message)\ +> \n /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\ +> \n \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\ +> \n \"&text=\".\$sendMsg.\\\ +> \n \"&parse_mode=HTML\") \\\ +> \n mode=https keep-result=no\ +> \n}" +> add dont-require-permissions=no name=telegram-send owner=vados policy=\ +> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ +> \n :global TelegramTokenId;\ +> \n :global TelegramChatId;\ +> \n :local message [:tostr \$1];\ +> \n :local identity [/system/identity/get name];\ +> \n :local sendMsg (\"[\".\$identity.\"] \".\$message)\ +> \n /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\ +> \n \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\ +> \n \"&text=\".\$sendMsg.\\\ +> \n \"&parse_mode=HTML\") \\\ +> \n mode=https keep-result=no\ +> \n" +> /user group +> add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\ +> t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon" +> /ip smb +> set enabled=no interfaces=lo +> /interface bridge port +> add bridge=Bridge-LAN interface=ether5 +> add bridge=Bridge-LAN interface=ether2 +> add bridge=Bridge-LAN interface=ether4 trusted=yes +> add bridge=Bridge-LAN interface=ether3 +> add bridge=Bridge-LAN interface=wlan2 +> add bridge=Bridge-LAN interface=wlan1 +> /interface bridge settings +> set use-ip-firewall=yes +> /ip firewall connection tracking +> set udp-timeout=10s +> /ip neighbor discovery-settings +> set discover-interface-list=LAN lldp-med=no lldp-poe-power=no +> /ip settings +> set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\ +> 8192 +> /ipv6 settings +> set disable-ipv6=yes disable-link-local-address=yes forward=no \ +> max-neighbor-entries=8192 multipath-hash-policy=l4 +> /interface detect-internet +> set detect-interface-list=WAN internet-interface-list=Internet \ +> lan-interface-list=LAN request-interval=1m wan-interface-list=WAN +> /interface l2tp-server server +> set authentication=mschap2 use-ipsec=yes +> /interface list member +> add interface=Unet-ether1 list=Internet +> add interface=WG list=WAN +> add interface=Bridge-LAN list=LAN +> add interface=Unet-ether1 list=WAN +> /interface wireguard peers +> add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\ +> 109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \ +> persistent-keepalive=10s public-key=\ +> "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4=" +> add allowed-address=0.0.0.0/0 client-allowed-address=::/0 disabled=yes \ +> endpoint-address=10.30.30.33 endpoint-port=55055 interface=wg-nuc name=\ +> NUC persistent-keepalive=11s public-key=\ +> "+OvzAjLC45Td52hjkQPmpGvC3RGhZ+Q2CDMJ1U/D4Rw=" +> /interface wireless cap +> # +> set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \ +> caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\ +> CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\ +> wlan2,wlan1 lock-to-caps-man=yes +> /ip address +> add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0 +> add address=10.8.0.2/24 interface=WG network=10.8.0.0 +> add address=192.168.33.2/24 disabled=yes interface=wg-nuc network=\ +> 192.168.33.0 +> /ip cloud +> set update-time=no +> /ip dhcp-client +> add add-default-route=special-classless check-gateway=arp comment=Unet-client \ +> default-route-distance=2 default-route-tables=main:2 dhcp-options=\ +> hostname,clientid_duid interface=Unet-ether1 name=UnetDHCP use-peer-dns=\ +> no use-peer-ntp=no +> /ip dhcp-server config +> set accounting=no +> /ip dhcp-server lease +> add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ +> 48:8F:5A:8E:EE:A8 server=masterDHCP +> add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ +> F0:DE:F1:91:0D:1E server=masterDHCP +> add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ +> 00:80:77:EC:43:86 server=masterDHCP +> add address=10.30.30.70 dhcp-option=domain-search-list,HostName \ +> dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP +> add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ +> 04:7C:16:36:F5:37 server=masterDHCP +> add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ +> 10:2D:41:2C:20:C2 server=masterDHCP +> add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ +> 10:08:C1:81:59:5F server=masterDHCP +> add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ +> 10:38:1F:D2:5F:13 server=masterDHCP +> add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ +> 10:B1:DF:E9:D0:D5 server=masterDHCP +> add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ +> FE:02:52:BE:3F:16 server=masterDHCP +> add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ +> D4:6D:6D:FD:E5:49 server=masterDHCP +> add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ +> CC:42:10:12:46:94 server=masterDHCP +> add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ +> 50:CC:F8:85:96:0A server=masterDHCP +> add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ +> E4:18:6B:58:34:AB server=masterDHCP +> add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ +> 00:27:15:41:97:A9 server=masterDHCP +> add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ +> mac-address=C4:82:E1:03:49:10 server=masterDHCP +> add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ +> 10:38:1F:82:81:F2 server=masterDHCP +> add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \ +> dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP +> add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \ +> dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP +> add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ +> server=masterDHCP +> add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ +> MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP +> add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \ +> mac-address=F0:75:5D:1E:5F:71 server=masterDHCP +> add address=10.30.30.100 client-id=iVados dhcp-option=HostName \ +> dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP +> add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\ +> ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \ +> dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \ +> use-src-mac=yes +> /ip dhcp-server network +> add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\ +> domain-search-list dhcp-option-set=domain-search-set dns-server=\ +> 10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\ +> 24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +> /ip dns +> set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \ +> doh-max-server-connections=20 servers=8.8.8.8 verify-doh-cert=yes +> /ip dns static +> add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \ +> type=A +> add address=109.107.177.79 name=vds.vados.ru type=A +> add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \ +> regexp=*.vados.ru type=NS +> add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\ +> "\".*\\\\.vados\\\\.ru\"" type=FWD +> add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\ +> 10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\ +> FWD +> add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\ +> ns.vados.ru.local type=A +> add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\ +> vados.ru ns=ns.vados.ru.local type=NS +> add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A +> add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\ +> dns.google type=A +> add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A +> add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A +> add address=10.30.30.33 name=ros.vados.ru type=A +> add address=10.30.30.95 name=vados-nuc type=A +> add address=10.30.30.33 name=amster-nuc type=A +> add address=10.30.30.33 name=amster type=A +> add address=10.30.30.33 name=amster-reg type=A +> add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A +> add address=10.30.30.33 name=mgr.vados.ru type=A +> add address=10.30.30.33 name=prt.vados.ru type=A +> add address=10.30.30.33 disabled=yes match-subdomain=yes name=\ +> mikrots.vados.ru type=A +> add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A +> add address=10.30.30.30 name=MILLER-LEN type=A +> add address=10.30.30.30 name=miller type=A +> add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\ +> security.cloudflare-dns.com type=A +> add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\ +> security.cloudflare-dns.com type=A +> add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ +> dns.quad9.net type=A +> add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\ +> dns.quad9.net type=A +> add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \ +> type=A +> add address=10.30.30.81 comment=LocalNet name=MikroVados type=A +> add address=10.30.30.10 name=MikroNUC type=A +> add address=10.30.30.86 disabled=yes name=MikroYellow type=A +> add address=10.30.30.85 disabled=yes name=MikroMic type=A +> add address=10.30.30.95 name=VADOS-NUC type=A +> add address=10.30.30.98 name=VADOS-LEN type=A +> add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ +> A +> add address=10.30.30.20 disabled=yes name=garage type=A +> /ip firewall address-list +> add address=91.215.120.206 list=TRUSTED +> add address=185.71.70.78 disabled=yes list=TRUSTED +> add address=176.53.203.171 disabled=yes list=TRUSTED +> add address=176.53.203.170 disabled=yes list=TRUSTED +> add address=176.53.202.194 disabled=yes list=TRUSTED +> add address=8.8.4.0/24 list=YouTube +> add address=8.8.8.0/24 list=YouTube +> add address=8.34.208.0/20 list=YouTube +> add address=8.35.192.0/20 list=YouTube +> add address=23.236.48.0/20 list=YouTube +> add address=23.251.128.0/19 list=YouTube +> add address=34.0.0.0/15 list=YouTube +> add address=34.2.0.0/16 list=YouTube +> add address=34.3.0.0/23 list=YouTube +> add address=34.3.3.0/24 list=YouTube +> add address=34.3.4.0/24 list=YouTube +> add address=34.3.8.0/21 list=YouTube +> add address=34.3.16.0/20 list=YouTube +> add address=34.3.32.0/19 list=YouTube +> add address=34.3.64.0/18 list=YouTube +> add address=34.4.0.0/14 list=YouTube +> add address=34.8.0.0/13 list=YouTube +> add address=34.16.0.0/12 list=YouTube +> add address=34.32.0.0/11 list=YouTube +> add address=34.64.0.0/10 list=YouTube +> add address=34.128.0.0/10 list=YouTube +> add address=35.184.0.0/13 list=YouTube +> add address=35.192.0.0/14 list=YouTube +> add address=35.196.0.0/15 list=YouTube +> add address=35.198.0.0/16 list=YouTube +> add address=35.199.0.0/17 list=YouTube +> add address=35.199.128.0/18 list=YouTube +> add address=35.200.0.0/13 list=YouTube +> add address=35.208.0.0/12 list=YouTube +> add address=35.224.0.0/12 list=YouTube +> add address=35.240.0.0/13 list=YouTube +> add address=57.140.192.0/18 list=YouTube +> add address=64.15.112.0/20 list=YouTube +> add address=64.233.160.0/19 list=YouTube +> add address=66.22.228.0/23 list=YouTube +> add address=66.102.0.0/20 list=YouTube +> add address=66.249.64.0/19 list=YouTube +> add address=70.32.128.0/19 list=YouTube +> add address=72.14.192.0/18 list=YouTube +> add address=74.125.0.0/16 list=YouTube +> add address=104.154.0.0/15 list=YouTube +> add address=104.196.0.0/14 list=YouTube +> add address=104.237.160.0/19 list=YouTube +> add address=107.167.160.0/19 list=YouTube +> add address=107.178.192.0/18 list=YouTube +> add address=108.59.80.0/20 list=YouTube +> add address=108.170.192.0/18 list=YouTube +> add address=108.177.0.0/17 list=YouTube +> add address=130.211.0.0/16 list=YouTube +> add address=136.22.160.0/20 list=YouTube +> add address=136.22.176.0/21 list=YouTube +> add address=136.22.184.0/23 list=YouTube +> add address=136.22.186.0/24 list=YouTube +> add address=142.250.0.0/15 list=YouTube +> add address=146.148.0.0/17 list=YouTube +> add address=152.65.208.0/22 list=YouTube +> add address=152.65.214.0/23 list=YouTube +> add address=152.65.218.0/23 list=YouTube +> add address=152.65.222.0/23 list=YouTube +> add address=152.65.224.0/19 list=YouTube +> add address=162.120.128.0/17 list=YouTube +> add address=162.216.148.0/22 list=YouTube +> add address=162.222.176.0/21 list=YouTube +> add address=172.110.32.0/21 list=YouTube +> add address=172.217.0.0/16 list=YouTube +> add address=172.253.0.0/16 list=YouTube +> add address=173.194.0.0/16 list=YouTube +> add address=173.255.112.0/20 list=YouTube +> add address=192.158.28.0/22 list=YouTube +> add address=192.178.0.0/15 list=YouTube +> add address=193.186.4.0/24 list=YouTube +> add address=199.36.154.0/23 list=YouTube +> add address=199.36.156.0/24 list=YouTube +> add address=199.192.112.0/22 list=YouTube +> add address=199.223.232.0/21 list=YouTube +> add address=207.223.160.0/20 list=YouTube +> add address=208.65.152.0/22 list=YouTube +> add address=208.68.108.0/22 list=YouTube +> add address=208.81.188.0/22 list=YouTube +> add address=208.117.224.0/19 list=YouTube +> add address=209.85.128.0/17 list=YouTube +> add address=216.58.192.0/19 list=YouTube +> add address=216.73.80.0/20 list=YouTube +> add address=216.239.32.0/19 list=YouTube +> add address=2ip.ru list=Test-IP +> add address=wg.vados.ru comment=VDSIna list=TRUSTED +> add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED +> add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina +> add address=love.ru comment=love.ru list=NoVdsina +> add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina +> add address=pochta.ru comment=pochta.ru list=NoVdsina +> add address=vdsina.com list=NoVdsina +> add address=vdsina.ru list=NoVdsina +> add address=youla.ru list=NoVdsina +> add address=kupiprodai.ru list=NoVdsina +> add address=myip.ru list=Test-IP +> add address=geoip.co list=NoVdsina +> add address=comp-lenta.ru list=NoVdsina +> add address=128.85.102.70 comment=update.microsoft.com list=\ +> windowsupdateslist +> add address=wu-b-net.trafficmanager.net. comment=\ +> ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +> add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ +> ctldl.windowsupdate.com list=windowsupdateslist +> add address=redir.update.msft.com.trafficmanager.net. comment=\ +> update.microsoft.com list=windowsupdateslist +> add address=geo.prod.do.dsp.trafficmanager.net. comment=\ +> geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +> add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ +> kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +> add address=e12437.d.akamaiedge.net. comment=\ +> kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +> add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ +> displaycatalog.mp.microsoft.com list=windowsupdateslist +> add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ +> comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ +> windowsupdateslist +> add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ +> list=windowsupdateslist +> add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ +> sls.update.microsoft.com list=windowsupdateslist +> add address=fe3.delivery.mp.microsoft.com. comment=\ +> fe3cr.delivery.mp.microsoft.com list=windowsupdateslist +> add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ +> fe3.delivery.mp.microsoft.com list=windowsupdateslist +> add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ +> fe2cr.update.microsoft.com list=windowsupdateslist +> add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ +> download.windowsupdate.com list=windowsupdateslist +> add address=wu-f-net.trafficmanager.net. comment=\ +> download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +> add address=tsfe.trafficmanager.net. comment=\ +> tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +> add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ +> comment=9.au.download.windowsupdate.com list=windowsupdateslist +> add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ +> list=windowsupdateslist +> add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ +> au.download.windowsupdate.com list=windowsupdateslist +> add address=a767.dspw65.akamai.net. comment=\ +> download.windowsupdate.com.edgesuite.net list=windowsupdateslist +> add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ +> comment=licensing.mp.microsoft.com list=windowsupdateslist +> add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ +> consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ +> windowsupdateslist +> add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ +> comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist +> add address=cdp-f-nlu-net.trafficmanager.net. comment=\ +> star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ +> windowsupdateslist +> add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ +> comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +> add address=cdp-f-tlu-net.trafficmanager.net. comment=\ +> star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ +> windowsupdateslist +> add address=storeedgefd.xbetservices.akadns.net. comment=\ +> storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +> add address=\ +> storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ +> comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ +> windowsupdateslist +> add address=e16646.dscg.akamaiedge.net. comment=\ +> storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ +> windowsupdateslist +> add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=bg.microsoft.map.fastly.net. comment=\ +> 3.au.download.windowsupdate.com list=windowsupdateslist +> add list=windowsupdateslist +> add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ +> comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ +> windowsupdateslist +> add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ +> star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ +> windowsupdateslist +> add address=a2033.dscd.akamai.net. comment=\ +> star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ +> windowsupdateslist +> add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ +> dl.delivery.mp.microsoft.com list=windowsupdateslist +> add address=dcat-f-nlu-net.trafficmanager.net. comment=\ +> dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ +> windowsupdateslist +> add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ +> comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +> add address=dcat-b-tlu-net.trafficmanager.net. comment=\ +> 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ +> windowsupdateslist +> add address=a122.dscg3.akamai.net. comment=\ +> tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist +> add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ +> geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +> add address=e10370.d.akamaiedge.net. comment=\ +> geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +> add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=a1683.dscd.akamai.net. comment=\ +> dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +> add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ +> comment=collections.mp.microsoft.com list=windowsupdateslist +> add address=a1847.dscd.akamai.net. comment=\ +> wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ +> windowsupdateslist +> add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=au.download.windowsupdate.com.edgesuite.net. comment=\ +> 2.au.download.windowsupdate.com list=windowsupdateslist +> add address=a767.dscg3.akamai.net. comment=\ +> au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist +> add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ +> 4.au.download.windowsupdate.com list=windowsupdateslist +> add address=cl-glcb907925.gcdn.co. comment=\ +> 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ +> windowsupdateslist +> add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ +> list=windowsupdateslist +> add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ +> comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +> add address=ts-frontend.trafficmanager.net. comment=\ +> tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ +> windowsupdateslist +> add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ +> list=windowsupdateslist +> add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ +> list=windowsupdateslist +> add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ +> windowsupdateslist +> add address=e12671.dscd.akamaiedge.net. comment=\ +> download.microsoft.com.edgekey.net list=windowsupdateslist +> add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ +> list=windowsupdateslist +> add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ +> kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +> add address=e12358.d.akamaiedge.net. comment=\ +> kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +> add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ +> tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +> add address=dcat-f-tlu-net.trafficmanager.net. comment=\ +> tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ +> windowsupdateslist +> add address=a1856.dspw65.akamai.net. comment=\ +> tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +> add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ +> list=windowsupdateslist +> add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ +> kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +> add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ +> consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ +> windowsupdateslist +> add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ +> list=windowsupdateslist +> add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ +> list=windowsupdateslist +> add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina +> add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ +> list=windowsupdateslist +> add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ +> purchase.mp.microsoft.com list=windowsupdateslist +> add address=e110219.a.akamaiedge.net. comment=\ +> purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist +> add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.153.5.141 list=windowsupdateslist +> add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=storesdk.xbetservices.akadns.net. comment=\ +> storesdk.dsx.mp.microsoft.com list=windowsupdateslist +> add address=e16646.g.akamaiedge.net. comment=\ +> storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist +> add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ +> software-download.microsoft.com list=windowsupdateslist +> add address=download.prss.microsoft.com.akamaized.net. comment=\ +> software-download.microsoft.com.delivery.microsoft.com list=\ +> windowsupdateslist +> add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ +> windowsupdateslist +> add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina +> add address=87.250.250.50 comment=YandexDisk list=NoVdsina +> add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ +> displaycatalog.mp.microsoft.com list=windowsupdateslist +> add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ +> purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist +> add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ +> purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist +> add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ +> cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +> add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ +> comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +> add address=a1996.dscd.akamai.net. comment=\ +> wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ +> windowsupdateslist +> add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ +> cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +> add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ +> tas02.sls.update.microsoft.com list=windowsupdateslist +> add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ +> cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +> add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ +> comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ +> windowsupdateslist +> add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ +> comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist +> add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ +> star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ +> windowsupdateslist +> add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ +> paymentinstruments.mp.microsoft.com list=windowsupdateslist +> add address=10.30.30.33 comment=amster list=NoWG +> add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG +> add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG +> add address=wg.vados.ru comment=VDSina-vpn list=VDSina +> add address=80.85.244.9 list=TRUSTED +> add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ +> disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +> add address=185.71.70.78 disabled=yes list=TRUSTED +> add address=176.53.203.171 disabled=yes list=TRUSTED +> add address=176.53.203.170 disabled=yes list=TRUSTED +> add address=176.53.202.194 disabled=yes list=TRUSTED +> add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina +> add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS +> add address=dns.google comment=Google-dns list=Trusted-DNS +> add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\ +> Trusted-DNS +> add address=time.google.com comment=Google-time list=Trusted-NTP +> add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\ +> Trusted-NTP +> add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP +> add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\ +> Trusted-NTP +> add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\ +> Trusted-NTP +> add address=cp.vdsina.com comment=VDSina-vpn list=VDSina +> add address=vdsina.ru comment=VDSina-vpn list=VDSina +> add address=ns.vados.ru comment=VDSina-vpn list=VDSina +> add address=vdsina.com comment=VDSina-vpn list=VDSina +> add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina +> add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina +> add address=10.30.30.0/24 comment="Local Network" list=Local-Net +> add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net +> add address=146.120.64.208/29 comment="External Net" list=Unet +> add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina +> add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina +> add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina +> add address=10.30.30.30 comment=miller disabled=yes list=NoWG +> add address=10.30.30.33 comment="Direct connet to DNS servers" list=\ +> Direct-DNS +> add address=109.107.177.79 list=VPN-Server +> add address=10.0.0.0/8 list=RFC1918 +> add address=172.16.0.0/12 list=RFC1918 +> add address=192.168.0.0/16 list=RFC1918 +> add address=8.8.4.4 disabled=yes list=to_vpn +> add address=myip.ru disabled=yes list=to_vpn +> add address=10.30.30.98 disabled=yes list=to_vpn +> /ip firewall filter +> add action=add-src-to-address-list address-list="Honeypot Hacker" \ +> address-list-timeout=12h chain=input comment="block honeypot DNS" \ +> connection-state=new dst-port=53 in-interface=Unet-ether1 protocol=udp \ +> src-address-list=!Trusted-DNS +> add action=add-src-to-address-list address-list="Honeypot Hacker" \ +> address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \ +> in-interface=Unet-ether1 protocol=tcp src-address-list=!Trusted-DNS +> add action=add-src-to-address-list address-list="Honeypot Hacker" \ +> address-list-timeout=4w2d chain=input comment=\ +> "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \ +> in-interface=Unet-ether1 protocol=tcp src-address-list=!TRUSTED +> add action=add-src-to-address-list address-list="Honeypot Hacker" \ +> address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ +> connection-state=new dst-port=5060 in-interface=Unet-ether1 protocol=udp +> add action=add-src-to-address-list address-list="Honeypot Hacker" \ +> address-list-timeout=4w2d chain=input comment="block honeypot NTP" \ +> connection-state=new dst-port=123 in-interface=Unet-ether1 protocol=udp +> add action=fasttrack-connection chain=forward comment=\ +> "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \ +> connection-state=established,related,new disabled=yes +> add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \ +> protocol=tcp +> add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \ +> protocol=udp +> add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \ +> dst-port=53 protocol=tcp src-address=10.30.30.0/24 +> add action=accept chain=input comment="udp Accept input DNS queries" \ +> dst-port=53 protocol=udp src-address=10.30.30.0/24 +> add action=accept chain=output comment="accept WireGuard" disabled=yes \ +> dst-address-list=VPN-Server out-interface=Unet-ether1 protocol=udp \ +> src-port=13231 +> add action=accept chain=output disabled=yes dst-address-list=VPN-Server \ +> dst-port=29185 out-interface=Unet-ether1 protocol=udp +> add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ +> connection-state=established,related,new disabled=yes routing-mark=\ +> !To-VPN +> add action=accept chain=output disabled=yes protocol=tcp src-port=443 +> add action=accept chain=output disabled=yes src-address=127.0.0.1 +> add action=accept chain=forward comment="defconf: accept in ipsec policy" \ +> disabled=yes ipsec-policy=in,ipsec +> add action=accept chain=forward comment="defconf: accept out ipsec policy" \ +> disabled=yes ipsec-policy=out,ipsec +> add action=accept chain=forward comment=\ +> "defconf: accept established,related, untracked" connection-state=\ +> established,related,untracked disabled=yes +> add action=drop chain=forward comment="defconf: drop invalid" \ +> connection-state=invalid in-interface=Unet-ether1 src-address=\ +> !10.30.30.0/24 +> add action=drop chain=forward comment=\ +> "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ +> connection-state=new in-interface=Unet-ether1 src-address-list=!VDSina +> add action=accept chain=input in-interface=Unet-ether1 protocol=icmp \ +> src-address-list=VDSina +> add action=accept chain=input connection-state=established +> add action=accept chain=input connection-state=related +> /ip firewall mangle +> add action=accept chain=prerouting comment=RFC1918 dst-address-list=RFC1918 \ +> in-interface-list=!WAN +> add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \ +> new-routing-mark=main passthrough=no src-address-list=NoWG +> add action=mark-routing chain=prerouting comment=\ +> "Mark Routing main for NoVdsina" disabled=yes dst-address-list=NoVdsina \ +> new-routing-mark=main passthrough=no src-address=10.30.30.0/24 +> add action=mark-connection chain=prerouting comment=\ +> "Transit for address-list \"to_vpn\"" connection-mark=no-mark disabled=\ +> yes dst-address-list=to_vpn in-interface-list=!WAN new-connection-mark=\ +> to-vpn-conn routing-mark=!main +> add action=mark-routing chain=prerouting comment=\ +> "Find routing over table r_to_vpn" connection-mark=to-vpn-conn disabled=\ +> yes in-interface-list=!WAN new-routing-mark=r_to_vpn +> add action=mark-routing chain=prerouting comment=\ +> "Mark Routing main for VDSina" dst-address-list=VPN-Server \ +> new-routing-mark=main passthrough=no src-address=10.30.30.0/24 +> add action=mark-routing chain=prerouting comment=\ +> "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \ +> new-routing-mark=main src-address=10.30.30.0/24 +> add action=mark-routing chain=prerouting comment=\ +> "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\ +> Unet new-routing-mark=main passthrough=no +> add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \ +> dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\ +> To-VPN src-address=10.30.30.0/24 +> add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \ +> dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \ +> new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24 +> add action=mark-routing chain=prerouting comment="WG for all" \ +> dst-address-list=!NoVdsina new-routing-mark=To-VPN src-address=\ +> 10.30.30.0/24 +> add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \ +> out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\ +> 1381-65535 +> add action=mark-connection chain=prerouting comment=\ +> "Mark VPN connections to exclude from FastTrack" disabled=yes \ +> new-connection-mark=VPN_No_FastTrack routing-mark=To-VPN +> add action=mark-routing chain=prerouting comment="VPN Network" disabled=yes \ +> dst-address=10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24 +> add action=mark-connection chain=output comment="For this router" \ +> connection-mark=no-mark disabled=yes dst-address-list=to_vpn \ +> new-connection-mark=to-vpn-conn-local +> add action=mark-routing chain=output comment="For this router" \ +> connection-mark=to-vpn-conn-local disabled=yes new-routing-mark=r_to_vpn +> /ip firewall nat +> add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\ +> yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\ +> !NoWG to-addresses=10.30.30.33 to-ports=53 +> add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\ +> yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\ +> !NoWG to-addresses=10.30.30.33 to-ports=53 +> add action=masquerade chain=srcnat comment=\ +> "Nat Addresses for routing mark r_to_vpn" disabled=yes routing-mark=\ +> r_to_vpn +> add action=dst-nat chain=dstnat comment=\ +> "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \ +> in-interface=Unet-ether1 protocol=tcp src-address-list=VPN-Server \ +> to-addresses=10.30.30.33 to-ports=53 +> add action=dst-nat chain=dstnat comment=\ +> "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\ +> udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53 +> add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\ +> Unet-ether1 protocol=udp src-address=!10.30.30.0/24 to-addresses=\ +> 10.30.30.33 to-ports=44333 +> add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \ +> routing-mark=To-VPN +> add action=masquerade chain=srcnat comment="Default NAT" out-interface=\ +> Unet-ether1 routing-mark=!To-VPN src-address=10.30.30.0/24 +> add action=dst-nat chain=dstnat dst-port=44044 in-interface=Unet-ether1 \ +> protocol=udp src-address=109.107.177.79 to-addresses=10.30.30.33 \ +> to-ports=44044 +> add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \ +> fragment=no in-interface=Unet-ether1 protocol=tcp routing-mark=main \ +> to-addresses=10.30.30.33 to-ports=443 +> add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \ +> dst-port=80 in-interface=Unet-ether1 protocol=tcp to-addresses=\ +> 10.30.30.33 to-ports=80 +> add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \ +> dst-port=2904 in-interface=Unet-ether1 protocol=tcp to-addresses=\ +> 10.30.30.33 to-ports=2904 +> add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\ +> 5000 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \ +> to-ports=5000 +> add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\ +> 2377 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \ +> to-ports=2377 +> add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\ +> Unet-ether1 protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \ +> to-ports=81 +> add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\ +> Unet-ether1 protocol=tcp src-address-list=TRUSTED to-addresses=\ +> 10.30.30.33 to-ports=22 +> add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \ +> dst-port=2377 in-interface=Unet-ether1 protocol=tcp to-addresses=\ +> 10.30.30.33 to-ports=2377 +> add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\ +> Unet-ether1 protocol=tcp routing-mark=!To-VPN to-addresses=10.30.30.33 \ +> to-ports=22 +> add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \ +> dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \ +> time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +> add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\ +> Bridge-LAN protocol=tcp src-address-list=KIDS time=\ +> 6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +> /ip firewall raw +> add action=drop chain=prerouting comment="Drop Honeypot Hackers" \ +> in-interface=Unet-ether1 src-address-list="Honeypot Hacker" +> add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \ +> in-interface-list=WAN src-address-list=Trusted-DNS +> add action=add-dst-to-address-list address-list=NoVdsina \ +> address-list-timeout=none-dynamic chain=prerouting comment=\ +> extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes +> add action=add-dst-to-address-list address-list=NoVdsina \ +> address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \ +> content=linux.duke.edu disabled=yes +> add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ +> none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \ +> disabled=yes +> add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ +> none-dynamic chain=prerouting comment="YouTube raw" content=\ +> googleapis.com disabled=yes +> add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ +> none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \ +> disabled=yes +> add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ +> none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \ +> disabled=yes +> add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ +> none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \ +> disabled=yes +> add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ +> none-dynamic chain=prerouting comment="YouTube raw" content=\ +> googlevideo.com disabled=yes +> add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ +> none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \ +> disabled=yes +> add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ +> none-dynamic chain=prerouting comment="YouTube raw" content=\ +> googleusercontent.com disabled=yes +> add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ +> none-dynamic chain=prerouting comment="YouTube raw" content=\ +> nhacmp3youtube.com disabled=yes +> add action=add-dst-to-address-list address-list=NoVdsina \ +> address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \ +> content=rutube.ru disabled=yes +> add action=add-dst-to-address-list address-list=NoVdsina \ +> address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \ +> content=me.com disabled=yes +> add action=add-dst-to-address-list address-list=NoVdsina \ +> address-list-timeout=none-dynamic chain=prerouting comment=\ +> "icloud.com raw" content=icloud.com disabled=yes +> add action=add-dst-to-address-list address-list=NoVdsina \ +> address-list-timeout=none-dynamic chain=prerouting comment=\ +> "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes +> add action=add-dst-to-address-list address-list=NoVdsina \ +> address-list-timeout=none-dynamic chain=prerouting comment=\ +> "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \ +> disabled=yes +> add action=add-dst-to-address-list address-list=NoVdsina \ +> address-list-timeout=none-dynamic chain=prerouting comment=\ +> "api.db-ip.com raw" content=api.db-ip.com disabled=yes +> add action=add-dst-to-address-list address-list=NoVdsina \ +> address-list-timeout=none-dynamic chain=prerouting comment=\ +> esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes +> add action=add-dst-to-address-list address-list=NoVdsina \ +> address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \ +> content=gosuslugi.ru disabled=yes +> /ip firewall service-port +> set ftp disabled=yes +> set tftp disabled=yes +> set irc disabled=no +> set sip disabled=yes +> set pptp disabled=yes +> set rtsp disabled=no +> /ip ipsec settings +> set accounting=no +> /ip ipsec policy +> set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0 +> /ip ipsec profile +> set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 +> /ip proxy +> set cache-administrator="" max-cache-size=none port=80,443 src-address=\ +> 0.0.0.0 +> /ip route +> add check-gateway=none comment=WG-Default disabled=no distance=1 dst-address=\ +> 0.0.0.0/0 gateway=WG routing-table=To-VPN scope=30 target-scope=10 +> /ip service +> set ftp disabled=yes +> set telnet disabled=yes +> set reverse-proxy disabled=yes +> set ssh address=10.30.30.0/24 port=2222 +> set winbox address=10.30.30.0/24 +> set api address=10.30.30.0/24 +> set api-ssl address=10.30.30.0/24 disabled=yes +> set www-ssl certificate=Root-YE port=18443 +> set www address=10.30.30.0/24 disabled=yes port=18880 +> /ip service webserver +> set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ +> no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \ +> webfig-secure=no +> /ip ssh +> set forwarding-enabled=both publickey-authentication-options=verify-required +> /ip upnp +> set enabled=yes +> /ip upnp interfaces +> add interface=Bridge-LAN type=internal +> add forced-ip=146.120.64.211 interface=Unet-ether1 type=external +> add forced-ip=109.107.177.79 interface=*E type=external +> add interface=lo type=internal +> add interface=wlan2 type=internal +> add interface=wlan1 type=internal +> /ipv6 dhcp-client +> add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\ +> info use-interface-duid=yes validate-server-duid=no +> /ipv6 dhcp-server option sets +> add name=domain-search-set options=domain-search-list +> add name="=\"Client ID\"" options=HostName +> /ipv6 firewall address-list +> add address=::/128 comment="defconf: unspecified address" list=bad_ipv6 +> add address=::1/128 comment="defconf: lo" list=bad_ipv6 +> add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6 +> add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6 +> add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6 +> add address=100::/64 comment="defconf: discard only " list=bad_ipv6 +> add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6 +> add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6 +> add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6 +> /ipv6 firewall filter +> add action=accept chain=input comment=\ +> "defconf: accept established,related,untracked" connection-state=\ +> established,related,untracked +> add action=drop chain=input comment="defconf: drop invalid" connection-state=\ +> invalid +> add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\ +> icmpv6 +> add action=accept chain=input comment="defconf: accept UDP traceroute" \ +> dst-port=33434-33534 protocol=udp +> add action=accept chain=input comment=\ +> "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\ +> udp src-address=fe80::/10 +> add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \ +> protocol=udp +> add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\ +> ipsec-ah +> add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\ +> ipsec-esp +> add action=accept chain=input comment=\ +> "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +> add action=drop chain=input comment=\ +> "defconf: drop everything else not coming from LAN" in-interface-list=\ +> !LAN +> add action=accept chain=forward comment=\ +> "defconf: accept established,related,untracked" connection-state=\ +> established,related,untracked +> add action=drop chain=forward comment="defconf: drop invalid" \ +> connection-state=invalid +> add action=drop chain=forward comment=\ +> "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6 +> add action=drop chain=forward comment=\ +> "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6 +> add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \ +> hop-limit=equal:1 protocol=icmpv6 +> add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\ +> icmpv6 +> add action=accept chain=forward comment="defconf: accept HIP" protocol=139 +> add action=accept chain=forward comment="defconf: accept IKE" dst-port=\ +> 500,4500 protocol=udp +> add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\ +> ipsec-ah +> add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\ +> ipsec-esp +> add action=accept chain=forward comment=\ +> "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +> add action=drop chain=forward comment=\ +> "defconf: drop everything else not coming from LAN" in-interface-list=\ +> !LAN +> /ipv6 nd +> set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \ +> managed-address-configuration=yes other-configuration=yes pref64=::/64 +> /ipv6 nd prefix +> add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none +> /ipv6 nd prefix default +> set dhcp6-pd-preferred=yes +> /ipv6 nd proxy +> add disabled=yes interface=lo +> /ipv6 nd settings +> set router-advertisement-route-distance=100 +> /routing settings +> set single-process=no +> /system clock +> set time-zone-name=Europe/Moscow +> /system clock manual +> set time-zone=+03:00 +> /system identity +> set name=MikroMaster +> /system logging +> add action=email disabled=yes regex="* added|changed|removed *" topics=\ +> system,info +> /system ntp client +> set enabled=yes +> /system ntp server +> set enabled=yes manycast=yes multicast=yes use-local-clock=yes +> /system ntp client servers +> add address=0.ru.pool.ntp.org +> add address=1.ru.pool.ntp.org +> add address=2.ru.pool.ntp.org +> add address=3.ru.pool.ntp.org +> add address=time.google.com disabled=yes +> /system package update +> set check-certificate=yes-without-crl ip-version=ipv4 +> /system scheduler +> add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \ +> on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \ +> policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ +> start-time=startup +> add comment="Every Day Check For Update Scripts" interval=1d name=\ +> AM-ScriptInstallUpdate on-event=\ +> ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ +> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ +> start-time=startup +> add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\ +> AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \ +> policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ +> start-time=startup +> /system watchdog +> set watchdog-timer=no +> /tool e-mail +> set certificate-verification=no from=MikroVados port=587 \ +> server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +> /tool mac-server +> set allowed-interface-list=LAN +> /tool mac-server mac-winbox +> set allowed-interface-list=LAN +> /tool netwatch +> add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\ +> -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\ +> e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \ +> interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\ +> https-get up-script="" +> add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\ +> flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\ +> oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \ +> name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \ +> up-script="" +> add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\ +> 8.8.8.8 down-script="" host=dns.google http-codes="" name=\ +> "Google-DNS IPv4" test-script="" type=dns up-script="" +> add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\ +> rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\ +> -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \ +> http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\ +> "" test-script="" type=dns up-script="" +> add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \ +> dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \ +> interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \ +> test-script="" timeout=800ms type=dns up-script="" +> add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\ +> ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \ +> down-script="" host=149.112.112.112 http-codes="" interval=10s name=\ +> "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script="" +> add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \ +> down-script="" host=91.192.189.2 http-codes="" interval=10s name=\ +> ns1.unet.ws test-script="" type=simple up-script="" +> add check-certificate=yes comment=\ +> "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \ +> disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\ +> vds.vados.ru port=443 test-script="" type=https-get up-script="" +> add comment="WireGuard NAT " disabled=yes down-script="/log info \"[WG-Monitor\ +> ] WireGuard is NOT running - reverting rules\"\ +> \n/ip firewall nat remove [find comment=\"Redirect to Router\"]\ +> \n/ip dns set servers=8.8.8.8\ +> \n/ip dns cache flush\ +> \n/ip route remove [find comment=\"wg-auto-route\"]\ +> \n" host=10.8.0.1 http-codes="" interval=15s name=WG test-script="" \ +> timeout=5s type=simple up-script="/log info \"[WG-Monitor] WireGuard is RU\ +> NNING - applying rules\";\ +> \n:local routeFile \"ips.txt\";\ +> \n:local routeDefAddr \"0.0.0.0/0\";\ +> \n:local routeGateway \"10.8.0.1\";\ +> \n:local routeIF \"WG\";\ +> \n:local routeTable \"To-VPN\";\ +> \n:local routeComment \"wg-auto-route\";\ +> \n/ip dns cache flush;\ +> \n:if ([:len [/ip firewall nat find comment=\"Redirect to Router\"]] > 0) \ +> do={\ +> \n /ip firewall nat remove [find comment=\"Redirect to Router\"];\ +> \n}\ +> \n/ip firewall nat add action=redirect chain=dstnat src-address-list=\"Red\ +> irectDNS\" dst-port=53 protocol=udp comment=\"Redirect to Router\";\ +> \n/ip dns set servers=\$routeGateway;\ +> \n:local content [/file get \$routeFile contents];\ +> \n:if ([:len \$content] > 0) do={\ +> \n :local line \"\";\ +> \n :for i from=0 to=([:len \$content] - 1) do={\ +> \n :local char [:pick \$content \$i];\ +> \n :if (\$char != \"\\r\" && \$char != \"\\n\") do={\ +> \n :set line (\$line . \$char);\ +> \n } else={\ +> \n :if ([:len \$line] > 5) do={\ +> \n :do { /ip route add disabled=no dst-address=\$routeDefAd\ +> dr gateway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$r\ +> outeTable comment=\$routeComment check-gateway=none } on-error={}\ +> \n }\ +> \n :set line \"\";\ +> \n }\ +> \n }\ +> \n :if ([:len \$line] > 5) do={\ +> \n# :do { /ip route add dst-address=\$line gateway=\$routeGateway \ +> distance=1 comment=\$routeComment } on-error={}\ +> \n :do { /ip route add disabled=no dst-address=\$routeDefAddr ga\ +> teway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$routeT\ +> able comment=\$routeComment check-gateway=none } on-error={}\ +> \n }\ +> \n}\ +> \n:local dotPos [:find \$routeGateway \".\"];\ +> \n:if (\$dotPos != \"\") do={\ +> \n :local firstOctet [:pick \$routeGateway 0 \$dotPos];\ +> \n :local derivedDstAddress (\$firstOctet . \".30.0.0/15\");\ +> \n :do { /ip route add dst-address=\$derivedDstAddress gateway=\$routeG\ +> ateway distance=1 comment=\$routeComment } on-error={}\ +> \n}\ +> \n\ +> \n" +> add comment=WG-Default disabled=yes down-script=\ +> "/ip route disable [find comment=\"WG-Default\"];" host=10.8.0.1 \ +> interval=15s name=WG packet-count=20 test-script="" thr-loss-count=5 \ +> type=icmp up-script="/ip route enable [find comment=\"WG-Default\"];" +> /user aaa +> set accounting=no diff --git a/MikroNUC/20260710/20260710112001-Binary.backup b/MikroNUC/20260710/20260710112001-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..19aced9b609d9dd92e093bc0dac33ce57725c610 GIT binary patch literal 385044 zcmeEv2Ut_f7VhjMKthqKh#-b0payn&qM~#}>CG;tLL?AO0*DR7h8=tFz4wmo*n7j? zd&k}t-nVvk02R;izVF<7&wJN=y7y!=WzCv3YyGpHUY*2+8EmNY( zvL#5UphKl5kj>uEMXe@BugXgE&yl8O`^%JRmSkU>lMTbYIf~|3p$g0%%0U}gLsa4G zSmPlyV##3h0N0e zLufPkyd~rzpJ$pOl!>A_=?KFJ`Y?nsq9_PsSXv^Cfm*=D6k%=@wT6x`-@s@NuuG0G zI*jaNDq>)cG{nH_(GUaGry+)k6AjUuVF=M^h;3?U<`K0j`L#x46le^iAdIeYry)y( z(Z5tyR#r7>s?et^v}_xMx!K7Ca*3EPZKLRJXGp#r_8BJ2YdG0;c2e1eM~&;@k~KTu_}4oxR`R(5T)|~YLPV zW6>NJR51sE{=kMJgoY!8Mj(VnB80{ugh~)X3WTt9gfJCCs0RYEMwkX6l#LKFLlwkW z!yHpB1U&%ipb&vb5OQmR5W|{|5W_)^5QCD25X004RG2+H%K)vUhOb#r zZU90(;fWTq>foYBh#}8Gh+d*VC>J663>iXs2+_-MgnA)Fe@I0rA0ay5l9a7JP^>T1 zG5{e$0S$yFgUBy~5n>b$L5N|ZL{-zs1|c^PW;c6JpU9Y`u!QiSkTBooo<1p&p}xZq zaOk&sYR45VBfx^>m>En9m`-sf2tA=9x@ij0b+=|3l_I5AOh~AN7r~E8=ESG8X{zG|b;y%sCuYi3 zp}8q3>A{Kq;c@b$pnykI@jW8iz5UC0FSH|XXQM(;)@isA)hV>OMo{s626!&Zlw_$uv}MXPKtN#L0SmwffR;O%ZbLjbU=E4_^AO6AwD$&; zLtq|v6wLu-VN{opgNh+U=xZVeU>|w9EZbkERw=UdshVtPe@c`SWHrCXmVtzZxtG|GPJ3Z zr^<6w@}TdkfhMb}vBi7g?5b)&1yC~z$VksR{@!Z!a_1_h9ShOrUL`pV;C2(N?8>Q zsD)kvWC13{5OSkw6%skWwlWkbQ%;t#saeJ(Ppi@^*tHd+LZOOEq9I0&R+KqvwZKq- zpuUPS8WgxHBSehuKBGn%Q>jFjk&`W~t&|Crx;%hR^vAP5R^5_WrX)*}rqBW;SIgvj zO^z%bq#HirHSXaknv;bP))OJ5Lx_-IF!dRL#=&?h5Tet~5K_Vyu-ah#8CW)4dI00t z94-%PRx9MGdaWugO`+AncbI_21q$3@%>lp;0}QU#q_HG~snEe-!)F|MhxrD;13obD z#xxAPF%Jy~BX5kurqr5TQW+ zFJ*}KEk(3iD5{eyk!y5;#MMum^Mgd0C^97~HB2FxHQF4tLT7XU)KrkhG|UrY8s>>H zeTqmEmZ+GpYQ-2a*I=H|Ngz)%iaw}JH>k>uP^1)8T?Xo}wG8FwWndoHT88@bGC=$H zWhgK$Y1L(n&I(C(7N{Ih9dc4Fz+FzNW*ACq1ZyGE7Qi|L6a|AqEJ2JW8&=H-7UqZz z&65nUM97V<0>GQ4&{r8eqj$kbf>x4e)UR&9A_R&7{u>rq7*ZfrcCLV#rBJ1%OEp@i zOp~QlrR8WPVCtFa5*<^PF3Cz$$eS^<)e4DD!PF{rdWlxg)Tb+$28RVxmBrL(;AF~vBOr1gxeiL06gfKZmptnJ1V>Sp8B5aQk=713BG*DnzeT1+E1|^S< zBZRpkgf&7419$^)#}^^22|^ePR4`#r5fT%=7lc|Mgg|YBW2hBEs5L?;5FsoGAq_xnj-oh(FdPg98zF`(A0avwA&P)hze0oP+6#;V&v! z6=K8+lu?)gUuX!ydQqN9DrHzVf?q*{5dE$fu|8!4!XnZY){oSa)&}p?DdJ8;r>&8} zNWZ}hHW%)M3+w#ADwAPaZ90hQ57q+=0E4`nBSha~L8uCPTsQ(rA^vWK5WV|jguuWc zWP`xK*n)vUj&N}Tst&`&86k$b3qthz^$}_axdRb80l7~?##2OjL}3E&jv&Nnc@&=5 zAao4wOb}5+nWm7v8C(*eLGlw{BOO*F9aqXAwB+{`4%A+fphM8qdgM#QzJ_q#Ig-m~{ ztgMuh>Ccswm2xr-UN9M%{#sdCsV36^RE%|&S|OB#MRSHzLE-JDAT)%E&=@L0B~*ht z@}wecEEQoBs0fY45W{2~hUkw?5PA#f>m7y|ocECWfFb%RGXjeF$yc;(vgA~oE;Q{811AW`kWyc+C@S1Vta)4Pz=S~sE7`HcBdNt?m;#D z9iZBj<_LLF4fz^FJ{m&aa7T#ZLp4weCW$f>JaWZw0ZHTxgVYGJ!jbT06kJAA5yNa8 zq{hRAg&{^uKj@=B^aIBb!-0(%sGSHI22-o04`7l}OLqO+c}n@8<*5zfz|B(VS)_ye z?`JOcpT}IE)dTA|Y!ncMwumt5LEkGa(U40G*u`B}1bttLy8Q^nsde>;Co z{(1cU4+*bzx<;?d)>J75>EFRytcE3{gKhoivDf53BffUovYxD*Y_&!rH);p@-@#!@ zO%4NM`Jd&m18`Wb$;+zAW7*%q03cx?8ckz#vImO7u6F44;KBw7WFz}@P< zoy7pK|9LDn{m-!2B{N5@R~cB#`nRJsVhhDTkJsO=FwFl=D-0_V1haIR5;fr^%hqW1 zscMZZ!x+6OAeY0ikTj+%h;%fEN$g*7M$sHsSUop_3mqXhbJ!x{uh-`%;?AVk1e{}r zP=YC>z@JPZJQjre2v+ulKeo_|@LRh3<&;F(6 zDgScwY;ePCCGuRkKN0OR`p>$N%z}G26wNWZ28}LtD@6D;2wzDD3gKR7P=O&;4t9uL z7~E?_;DGS3*};=4HybSD8HZpkug%uMC>i{Nh7UNOpb_|hgUSjSHpf6|O3g2gfn)%fjE-U!Jokh9;VM_`T0jMH^hy}sEB=FLi+_&`0vFn9C_1v2jq;(m6`fEME z1I{IOYaITO4gCOQP_U;|x+n}Ih;)2t`vI(!}+Q8IKP zZ}g>E?LysKuf1ov=g72EZ|!e9A7h}VSGPt_TDE!O*z)9p(Yr2tS^_onXjO(*6O$YQ zv5>zSEC>x&4c0dVK@5;Vt0t(=CYvG7{lDH4c8u!sSdIdepT@5k?DJ+*3)T3y>B(U> z;5KC2T<$kmA5_<_@8ZOWLB1)f>F&zn4EqL>7>N|Nj1YEwc;aabFF5}D5N7e`-<4QkU zt5K@dgaU-mO>%m{{U(a$)I$&{fmsbZBAlwUQU&HkssNZ)beL8UCnd~BwF)#$euEOU zC$~aX2N*$XQ|gmS1DwGyRTtmFNp$NC>;)2I|ALN{XT*Lu}zm9k^J* z1)>%p%5LE9a|3?30b{B>a)iKuB7^9loTbZ@vVg-zGfcEJ4XupIjPw>QqXz2e4SpA3Hv1A<44}Xu?uky_<(oUC^E4`o@frKyGeI^ePA#6 z`s<8?q-1A7}H=2jA^i+ z#x&RkW4h)}2;dQitPdhp#`G!-^26p81lEZN`-3GT1Q?JIgzgO?GKiirusZM+2E$kk z0&3qBg9y_1#VA$9FtW8DicxAQ29bF~Ym}cAqkdbALKxesV$`1%qt#N3R#lAlvtlN- z6f>zRX2LOW@`t{eep?Kto1t5#KPzGOvl3=7ssze0#(s^$1|nfhLndPyhTfQlG9a~$ z5Tcti!+IFg$>-v#(y|(9-+`e$K%`^}Z6?495J4}foWyF0>qi3t(rC?qBzL8H+#JBAG+AW$)wETi@BrdTw-5H~laHyP6AL;#IS#r@b8IKz~h zOf$8oBqy@1a0~ciZcl?=v2E}=@Re#$G{fu|hPygiarn3x=i6wrCR{Ors>W2prKNsxfF5556)s#DVUfsbA5XqXEyp7TI*nRGh ze3aeB=*_MD+N9@?;Fp%S`s_467!M@+*3cTmDrqz-1vAC1O{vKZ?cuu#PQ|cFydgZO zL#sz~n185or_pnxPVr@5rh6P}zAEK)Y)VZ&QqvGFr{KM!R`2b{I`cM}vf_OeTDU--gehvIIiR=rDB;< z#OEk+jzoxyBoe-yFAxZZBgC#%q(?v#y%2I^N_aR&AeC?wN`Xu$!8?xP*s{LM4{C)BeP`oC^k7DFE7te zu1ZtM6k5HXOq1CFG-y?>2(?BkQ8S4KLV|ulqwYxz1C3g^wxd1`G%WFxmI?+1lr=!%R#NF8Nl^*2V1&de+j|ATWmQgge4x z3wxXI*~4byt_D@?SXJU%CV^_k1#C9kpqW86bJ;b%{wGK%!rW_i95X@GBFq}$MVL9I z2*c3r7PoA**Ox3fJHP$1xOrnN@=6ZRTUc&)Vp3;}!90eIUmSyPPJAD-PlejgygkbO z+ECL#G=Op9g!8~%H;%XH8Gie`@}SB3T<>~g`pj~j*spwZoB8z1=U4Z(6q_mv+IDSJ z>iA*#&T^j%`hwoQrgj{hp4G*J({5MH?uVT+?_}@Fv)T0pdpG#fl2DrtoTWMS&z+vP zGvc;)k2lk}A0p}9N0g;*Xg+Ay++}T}`n5V4o2t(3Hm99%?5wNq_cKp8G#K6EXvOjM z4syqXoqcCy6G2BYoy&UuM&;ywb3ru9=+~ zFVBs>llW$|>{IK-S2iebNR{VLX9bOV#oG8dukGxa9d0-6xI56}8Ox_AtW|!}xW-d% z7PeU;eE#Bme)oFUS3In9JZnX$qsTw<@~yB|O|}XWPd1M;eed^hU;9Y4#I620+R9!n zn>8=YSo~ylU57^(hwa%aQr{k{9$qQmn&;IX-|g%<|JKznBq%yOoEE4@}{ujxuj~;L*8>6Em-a?F0o;WjpsIh8b<=?+I;C&)?~k-xK=x zg#PDF=xRj7Tq9|)9$i?~t+&KHPr9)~B8vL$RGUm%f*`C>6!Cge!~ zCH>4^XCvhHgP8{?^$jE-A=NaCzZFtNaDD+&^^kT4NL6Xg*42bmRDe_=bqGjBmmswJ zM^r_hV_2%z09O7+)M8LD5uBu`#Dv74#5O@3zJP;s@Q@%ji(L!SI!42bXov73>KYPh zS-#z2+BAjoruUY(W**00C~I0ei~j)9ir^57U^dPr*T4p(g>yM#<081@FM&NS&Nd*r zCPv;EwQmH6nG}`COh^o38W_X`4lzT5*ng>zkG;2%#xB|}(>yClNZFt1-KV!*%J7$O zKAwMYYs`*`%U^X5s+)bq4t?@A-`HN%x!=0@@jWNj=@B%cGvE1BpHJKO@ASkgQl9U7 z-EZ<8hqn&VM;F_?s`q%g`wO}l?QJKub1xtvhG`d`n1*V znW^I#@ejz2a1waY>fsKi^rohmiHR8%t4dMuTw@x;Xg%twUX|ejNeTwSg%BIU>4!Q(Dg>N7PuG}&f(AD4q+Rs(W<$> zREHW5fI65o0nWoMOc~vWw84gaRZ}qB%+w@pfF*|EbW>AEP^wdus%O;iCME$vOI~Il z^_i@i+*ki~_ov2v5|^($uK2obhUtvq7dnLueHI;+lDcxw{*5L~zmBIX+rFLCr% zD-Zj%ZE<1oJ590g7reFSpzV7%_Ze^2Z1vELT<$ZJoUpFrth-xJy}t3ly5ic0eOqm` z0~oZ_lapupadJkVoYvt?dv<>zHej7H)3?D|B_s26R>_;KpZqb0{asSz*rk3$mxvN) zkLVhn+2w%upaEt5M~<97J>kKD;-|vCO+LR!?j+LMTtxOKqjXo63HeKW2dHM`mR_&l zr=;x2$>(X*ue45X_10ECZhhlw(c33)I*#+O@@z8EE9%JHvG>b1uNbOd|1xv_)GHs) z?HCj|+iVIzP*A8<5VVJs@VtZj=C`Kf@PBK%-%kSpd3#cUx@z*WjbY_1%a3OIa;n84<>*=hot z*Jh&)*j%RMOXawLBjpQlj*=&oNJV^{Bja#oG9@k$05<;@kk`+U`2^D0X-Yaf87MIz zNUQ3t$&y&2sDMP7Mz7b&C2EBgiVcX+gi7S{eDHVDP-K?OuPJyvBQ#9nG3oA9X!RiJVs<)UcC}Bfu_bVW)&kg@MQB(ARV)A% ztQu6Ys;FW`aK7`49tOYYe!PgX(ty@6^c@Po2Mqic9Frj?y1g06HMTu&3%J;`y!cxY~KTZ4zqz-j8oX5;<_Ano(3oFsguVqA=q&QkD|3fUYk+lb)*8C3q2_hna4 zDgEWAj=cBIhwIOOUl`fpk^4aVMf;f{Sc^d~?+=cg?fv-OAm^Al8?IzeImp4*nzS;D zDSz`R*1sd}{$RONO2+L%voEjfhY$cL{Ami}1c2tJg^BerS{`Q!vuD{^qmmT)J-%eWHv!arRoc*>&?)PrCL! z)c5n6rily2NmcP)CXxoB14cGm8Zyb_#){?xrq%J?@3Qn!SJzFmX5r@I6EBMkKey|8 zjPrD`G{lQXN%6+UZfKF+q;=NXhck+?ezVIyUP;XCK66*I2OXAgNe%yUVxKd$CF4mX zyNfD({mlpi*oRQw51~7VTh@&2RfqDLPaAAzljgJO`MVt^L0QZ_6E0g{|4v8=s57&1H^`RSezme$kB5i;w(IUFlSQQa@6+K@@!1q|XOR&X%tW z*Irol?!tBZqlq^Chlih@{AsgaQ`_YwYrG3TKAhd@k#P3%yEoM92RqITxa1j|KbC(! zmG-1?;PPn{)<&B*7fTM(bb-&bUUQbtemZM;y4}?F2gcYnXDrwe`qi|qaL@F+ocYg0 z4=>7JH|y{4h4Ogz@k+CF$1Cn7B3AEFr;}c)?xb>$^bY7_e&vK;u zd*L6o^8MNeCt{cEo8C6bbbmp=b9C$5E*1S9x2)*)uB_g=5Qb&+yTutBrVdgZ>0NyL zcIeJ7?;pFoB_fTE4~f02M5IwZ1AbmhK-J&V{O?pozo+@{Y5rfE=G8cj$7l0!DVM_& zDx_kWOeEt=c}iR^l=8W_n5`6og9{gl6#@lcBH$`GLY`PI=SpM}F-N--#i==@?(!dG{`VNNe0vNU(FQUvhz%VK;bazb~ z2NCK1HE>v56x$tV8g!b|PdUZ*#=Rhqg}v*a^UGKn)!yl+Tq7Wuh>deNYz{8u3OhMk zal`<@$glr(`u<8Q-}&5czINLmFAh5leVc*B+{y|x+m`9wwcvec*7{Bd<5QO};4G31 z-IQfL! zw0P36Pp_A!mw627=zWsmUAiJmJJ1E!-ncpM(V1KN9H$*kX7#C?M036nB3_y7v;TI3 z?QeG9T_uX-9?Km(TO4*~!K_zyBjZ2xy~`?iyCU^Tz1eG7r?(v&8=M#Ab+|;Nx$@%J z=h3c{JGMI4J?6fN&$GyU`*z#fT=D;?Ju5y^(dZ&i`*uU%NjA3k>2+I{W7kGo;!byS zTCBQm#`QT8H}T`*q@zhg;=-1GjQkVuRSmZ2xyO&1ReHYLfBf0@lG59QgyA{wf52w7 zgsK-US?PWP3s^M2QhKV*%n{wRYkGy=x$3f-@ztZvryWi9ZB3?aw3$E3`?^Ju>{R)6 zOJROcXZLk$rUi9blzp@8RNhgKv*@Ne#s8Md%IeaxU2X&7E}1S|QaMq0YFWkY^>3%L z!Uhe$7tFYzr})1gc5&*XQtz^eQQNG-UGh#kEO6PnfW2>qkDkh_@dlsRH@NJtgV=>m%65c9 z>`bM>A!cKEIgU9XuY2AR0@O&^&EXR}3BKC*ufsYR3@_Z?DT-yy}E zQbfT}p`F4}P-pKI`ubBV+FRv5JMMipYGvF&$?av#Xa-BpxO!sP>|+5-pT0Y}=jzL| zYtQ!)`q(y&xGX+U+T3YF>Y^R}X3m!dZ_0hOv_;dgA8u<-J*~$qVYIsaP=C1ohOuQ* z`IUnCrZ0=@_b731Sz2NLVyHu(cXu0&F1s6lz&0(M9)EO*LsIKfZbg6fjLLd5>+gsk z&0n-wc}Saf#Z9@kY<}TAVY-R==DRAel>fa(=iG@DEV!{)rbGyHvurpCuq6>M=*_-(M%CZW5jOt*< z$nN8>?>lID;}&PtvGFb9dreFmQ67*|VR=er?QH$pt8oT5^LJN|o;f(Rp(HoT~y^4ou*4)MNM`wYi*VA_Stj)BI|0bS`AGT^LKSx*0k-(q{3Slr|+KmY8_R1^ap7A zgI}=*R<(rPtrQG(DeG%>@;%lsXsW_ew?AR_(GMr5nie=;4yikP7A3j;B!`y?Exm_M z@Ojp#IVPN!`z0}M_n_$qGGexkbc>xgI$1jQwW{vL(&9V&mRWp#zT{E6iT~&`m%=0_dnRj^ie%mUdkgmv^+c+Z2*f zdGC6((l-9&)KyO%H$Ch*cI5TQifjCy^Xhs}a5*Wt(|EgPewvqC*ZbERTKJ_qww7`xBR9RgunpH5n9ayT ztxsJ&_cWmF)ArWK2A|gyEM?u;N_qcw^0bZo%X`z-3~jsAXO_q4$}Zj+x7NhIHY-Pd zWgUkeO$eI!_)Wxxa(Pg4-%%YY6R$~U{;{>ZlaGGT!s(k!4qBSscsop>=bZQ1vu2IO z%^6X9UCw{GquLk|KEQuo(eksh(CmGqDp}lZE64QNm|eW8mD9;UpNn4(m2B@i)%|V4 z{SNyZ6|+OiiyK}zFuG+(kA{ouU+))C@1^wPk&-1}2}kLf$|^@G*c>BP|E>T3Bc|%N z{{OB2f9wC>`v1S8|ErgC3Za-Q6H9T9QZAB6*jxpNE#tB|9FasOlj0&aTP)ylr9z%q zCK8Lp0-h8$JIHwg8CTAeN#z`3IaeDlsano4akf$}kaKaROv05(_-u)YEtSdyJY2!$ z<6Mp$b~XGOzK0cE?JEUvu-9B!fQP-t@`H4;OHBXXEy>)!Ud`=}{uB?Zxj_DBSj`!J zH)}yG<=hQRx$l1B_4D7&HZ<g;4M!N^86b+fT0FOp;SdUv*o+ z=kHx$eQtS}w&ssO|Lwo9ir^B9GA<75Fb@3A3pOsm7e4v*KS9DzezJRQ@uls(Njk@e_n*a@T|Qc7>G;$v`|Zg=et`pL zJZv45*<$6{1r8kry=GEF%5Ch`+Uu)|7thVu7;+-*sz)W&W&Z6}zY^ykQUl+wztU#G z$GQ72t`YHqcHdHuQ_9~?oF{^WU=@5`^BT; z1}~O5^$nhwnd)c6>;>J?&oSzU#dm0U(0N8lAZy#zuhnTfnqc+un&^dq!}73)sIZ zVAU3g%a+Im0-i`IV&gnES0od1MM|z%A>na3IGfAmin$7|ge{WEa1KW-P$dw0QC^jHbFVQMh3bp*30Iy+_T{CbfR%al@tlFda_wBN?{MUEcv8u@Wm$up6g81$= zyof@YrCPSxjrrD(_>0@@yl@YL57DKHux}Vj?zrRNxWSd^Tb=DM*!tI7?*4HU|5cD^ z$Fn`uFYm^Dp{&((p55ls%>3K)Hd7@j_4h_>x^N_b?>8*u{an@b>%$v-wP()Q5ShpE zP5HX@>BwvDpR`xKC6mkFbsF?E%W3PdW>*JwKBxbjk-C4_LYstP;mL2dK& zcRl{Jys zb{zI}%kZ>5?AvL6BPUWD`-RMG%YIj9qviI^w}l1n+tBO*Uy;`nbLirDR7^FNRysv#0wtyi{+^ zQc1umbL9TzV4tH5d6-3uzya_3_2s;sa-_rPeoe|tI_l&f1^RAYbKfdW{0hW%mp1tv zH)8Z))tf)te)oI&8#h(|I~CUN>HmBB|JSB}HKgOn6l|Fkmny|_j#8{(;~cS=tCT7@ zY(AUMk#VIQxg3{Cq;dsYCJ-t3T((#$;)>aPo?I#wD)|JYt4-@xK{|3<-mlwoa2@<9 zK=|t|dV6f5fBqX}!;1~!Ww-Q#RTba-lEDfvRy~Q~z#7U)gy?7MA5)!yBURzOS()%- zWa0(6#Cx-T^4kW-kf1nSbWjW{B#6al2Xpvgd|Vic3#}2tm(X6a2eP(MXqrfk~Lc$DRU{=+{p?ReLon7kae=y;&x%fly%>^}=OtJO~$9go@{=`}iY zYPaQ*-A9J@e)M&RZDzN1;_?oM+I3prJ9DrV^VK`*>pp8_Ny50jZr2(P;d2*hC%is> zG9hEvo@D`lOfN1x&~LoQg)xr{qWe;Yuc}gS+X(k-PTpc;*$jXF+qtft_Iko9-F7 zvR4zo$~jE~7nl3LEpK4?qWt8+ws)`FUwhrMe?DUGde)_4V`A5`fXQpwS4~~L%vMZ# zguTo=-*shAilSsgX}6F|NgJl+xlRd;IC8PH=a`Qx73ZyHtj>LK=5vRGf>#|an>47b z_z<^9HRQS18yQm)H6vx$*r|uMn3adWOCFKBbgts7Pyr`}TbYU)fQv9d23rY@tT$5mbGnhJZ$GIDCub`4ws&Yr~ z>n6{?Trf@fsyWiq$$##+uz0!e`j3gzR__}#acgM7oSod$(TCUXy)nV-^~lAx#|K>L z7CCi+$MMlNY1f-oEPV9pKkjs zr?dIki~5H9KYW<7r(a~2%Er$o`0@cXMBsmR?TNISc z=wy1R!#dWL7MeGgy2pK?KRfGwV^+!FH8G6ElaAXBePKE2t^1}C6$PvP2GFLZ+OPg& zckD;DtHqlJb@C@)nR<13pK-@qp6yQ)KFE38?#|4NBa=7c6Ca~cmE*wXpC{_x)tPxu zapKF==O^i_#hJ&^YUqXs5@_vq-a8J>}iJuI#7FBAdK-891z4lgMEiT4uWKlr-hCfzMBU zaaoap2BaT39ek$aAIox|ab8X?JoY*{q{8v^v96O=xMrGMh^gxw_6O<^+$DI)-E?@{ zpCv2=>39+L!r-5z*S!-LR~*rL?01kFcdvSZl;zK~AFR-XuR$5Z9sErpKE{yu~|=_a5pNQDi#u{DVa_o8@lnCm(x1G{0?Z-FMGyc^B+` zJ%lDc^|p>6BCQO+uR%3Fo{j~Hep zG4WhvQrX4!dgN>Ff_ggZ`Sf$UdeuD@rPr24cslF8rgVQ|gC`GKAvl^_Vb5B;rRnEg zZB7Uh$8|q?jXkDlYAUTePRWACtAZ6`4Mi8mI!zu1d zL!Dk+?C?fxZvJli9tT(2(FpYRFwOfq=Hh|GR$VV>{z!T1*~a6o_wYS7 zM;yV#-pneFm6y02Xu z)89`?yyGPhtit~2%)Vef_{@Ip+bb<^+$iafK48T)-7^1Tu+GhU2(UB9e-vYzgsNYKel&<>N}JkS$V(l>z}r z!RE@u60RY%RU4A3@`Kp0`C(i>&c{U}o{$?ZW)q>TpZE%{e(%75V|RsPI@mV++>G;uMVSAQy$8E0Z%+=mou3BvIiWN@Yo7tVa zHKUUQtO>ukQw|&CjUZy1fi}du=aLo^C*yG;Bk*i{q*7 zE0z|XSm1;wOgruDS$g1!;-Gj;<>ldwA$ZQpRb4HQ#k;!qQ!HT|TIYFv$@y8nHzV&m zs53)_MY%_A6lS}J+BpFAKZ}Z4#z-^smSeF z*X!uHddJQlJ2w1_3FV#okJWXl1x575!uQjY^CG8CzSw5Wt7ldR@_5z-eMT^rFozCT zl?l6e-S9Y{zgyz)s!7+$wuk4P>hyFb%Wlr)TdguTy}j4PuVB-W(fh|r%{NE#Hq8w^ z@#&JYW6^E#qX%bNWhNe0-CxL^y2$(A7BiG+o#AaDHTi`k_|6K3{Valw1+&c}PeUAI6TD4nqn%N+2cj&Fn{Y&=s&a>rb z6i2ROT6Np7;f;6LnmX;)*&WHqlB_uLq0@|%*|BH#o#pg=HS$pU)LE5Yjpm#vX*^J! zf7HUH^QgN{yF&xkUFmM#Vq6+?TF~2edEpC(b?VW%U`GGr`_s3l*1zF1b6;=2 zTU=$&F6*;*b`J`!7w~?Jde*&*b0?>M_;mS>3AO#r;`vwClol_2&%br>iYdqI{Y?#H zhIe7&AF-F7B#t?}lQqm+=UKd6tVU2 z(q-a~5%^&2vbSb?#Ga$eZqlqfhUbm1`*3E9udt527h=ZfU_+dKK@F*>RvgvD>C?qa8D=-0hekgdHX|gmW56TNC+<|~ z!uG+Ob!Cx0y$())vN?lgoi=4}=^OWh=T8i~zVAqu!;W_8A48>C)2C0Kde@~gV^~kw z%%Tx4?VZaU&xn&BZz$~f?)({fo2^$4J)7^0chv-YtZYS}y})75g%04bZ~})#UAzeU zN;)ihpT+Bq7_lbkyY=iZIUD}UVbO@)5O*d5)t0rY&%g9moY8a|`c;u(Rv7NTS^sRW zf;p(WYIRr2(vUGF8=4#}JC{@9d|#YpfV@L|J{?h*Y!VKPu1U&BB zfG%xK4d=wLuyNL(nQbmkKh(#Tw@&H3?)jRD-@HY!Hk7h11OvGqN@vM_zzrh_{lOG7K8Kc>=|9Dr_s`R|=Hr=B= zPCY-h&~Q5K_v+%(VBO=xBTesDB)5<8?&w);T7I?B$}^XIKisZIeK;WQY&5f!N*_O6 z^k?3S-_z#zwE2nC?|*&T7+e{@G4O8;{2K%R#=!q{3{1E(_&Ap*7ASd2wp_v$OJy>F zkk96@WpZ3870E3M6c{ge$`(QaQ))v;W#~7q~KN#ar-3 zOdDZPD3^<~1)^Y4a4^mz+#9vx;@)Q8ZO-^td>eNEx^KfKBq)x>6N$q4L835rP;f}q zIXiV>xnPSIVIRrmLQB)RX?L1be7|MzZ&@xl8_(aNTK+)MUoI8O#gWq~hZBlFKd-2t zbH3ZMoQ3TgPcC5}Thza0qIKW%jdORMZtOd!?ex24<^8Sr6|XNHXfd?!hg+iiJ&Fzu zUL5Ng?91%)*m-4KKPUZyL5o){6|FzGkza6?z4%kbP}djD!w)w}p0deK&DmA_a)Wv&U(IGyZ#1L+TZoKK!_{{zX${dso}i+9#lqV5rYn$EEUM*Sk3Z8wT}w?mlGw zyMp+lh^?Zhcj`TTvV!6BC?_Rk(c|UkT5s!m?eIi(FiI`Fr)aUPo5Q5TdG_IboqlDh zupn(}!uY-!U0>1m(hpgDeB0&nJJbKGr9v~ita@|p625G2A2YY^$ivIFj|iO5W+Rc}4%~Hn(l*n2!zaxUTWq@GoKuIdPRn+#J&<;~ z^U5Z5pL&?Q?~xUf(vaS|G;5;$_AAROR}O7^2FXg61;uvj)pb*l*K~24F0*z{{(3ie zeTe8wo!NymXP>KR^U{~%5YTtnp`E=R_Fu8Hwbd$R;jueoVoJB%;c2*0XB{oh?(!HU zTlLsvNVNHsBd;F4`LypvKjwn`3(*g*Io9Pwh}c)I-g;E-vTJs__0oz__3K ze|^eSZ>Z$+cycAq6AC#>wi4%XI5N4E%@N~#g+Q#t1#Br#!4>kkV!j9$NjV%Dht1`2 z*mALwBUf-lN+q$OvNl!r=hl}Sf(wG!0$~`J6BHiC5khd`2Q$M!(QsNW!we2B&CbsD zC(nt7^XlPqg51&o2Mk{#(~GI_JepINI1$pGxVj@Whd9w5QzC@Y5JDLUp)7!0^5LXYgis+OP85aLyrN+Uq2UOj5eUIygJ=|a5d0YOuy;5J9u9yHKnMjPgo2Ub z%w!IEpfsPn3(0$P_?>1;xU?dUf3K`;P2L0HyuNtMaKJBwKZq0H4QEahM*^EeDMzv% z!(kgMnss}=hLO8zK+>3nD7%K9Ci!WS=L*D%$MV#?WocS$R zC?z>+Jr7Q-=EB7qF2u>!P2reL^3$wFnmGH~2C~(Iix|P7&fk7S@CQ~ce;`iM7QkP9 zYWeG>|F=hz4$}E61ImDt&51Gldq>lb98H!YOQy}whBq|*GX@sqNSBqF&5~&{Gjp<3 zdX++FJTBRI0yo^dqiBvZLQ62@jG{SkU^~dz58`EoDlk)oV52l~Dz-IbBo2D73#sbU z*i8^}GtJJCs#P*VeL|ul!(x(Bqk}?xiMrt!O>>!ArO48!W=drBzH7?RQmRg&hmL{@Gag(H zXG(jM^9Rm&ZcL`(OlUVU4aY$n^TUzO#x!uin5Ne_l-&n|=g}Mtp<>W9hPQti&UObv zP2<>noS)_WLl#PPU*IQh`Y4rB!EXFRHfmKih9py`S7<{Oxo$t?qE+RhMXQohek91G zDuZdJO08CCf6QW9oyE}7k6FyBv!qG1k~D>16(zu1I7ppdmBm)B$&{$FSUQD7D@$kT z6nZ%KnmARS6bi#gfzScpe8~}jn!?GnhIk&$ff0h*F^~&OkPCxm1rF2OXmt7*Nv0y) zkP(B76v&td8SU|2IM=&mhA@RNdT4Fws! z2(~~eWP&OPok$e4C5F(TQlUDS??AXrnPxnbJ+KDh5o8+XPk%BEqfk}R1rO-)K+^BRN6sxg?v ztM?Hi2D1hE9F(Ck4Ps$TgEBOxK^YqBgoEsj&+RDi+%N(dF#;xJU(KPL$jC}U6l$`P z#))8YSyd&wcTK4(NhcTtB`DBoGkye%FA(5us|Gr-G=^X`8XNa*AzNsUZf4LTRA>&q zKqZz?30r`(_#6@5qPki0*s2;Vh-PcnK&x4U2|t3x6;v06u{QSg$D$_R7vNEl2~UYO*Z!zfHpW=v9NnfB7L5*0EU z6Sd%SkIuCVFr^y#}Fzs#}ETqV2EK(Fxvz}zLwD(ugVGrV#37=L%!zG z9A;$&-Q3kR9+&~tOXPB`&N%R}q=b(nG1!LB0Ai_WFrqYspm3!LLUdn(FvFb?LCo++ zbBf^(mJoVt03?8A!G0UrOK(mVhdUH^B#N6O3Q^n~8H-mEy#Z=q!b>=r)pRe}vFXG7V-L7S!-zBZMxJ=`<=r>kaf^ewbky#0KtV!eSPPVf93a{vrc| z^*d>Mfs7_$xe9GQGgOk#OjK08JS8kESEbctWh%1t%oK@MC6THXIu?f9n)~bWb$Ugn zzfPuAW$T%JnA)5yW>7Tw;-e5vmQt10;@gMeIa#t6%zjFQ+^mD5S&0hr*w(PD+>Jky zOswKL7@{v57Ssc%w*>0_YNy`4n);A*g)D;^uF*1+v*mEyRU$zlK{cm&npz{3sL5xM zSvtK$tv2Lq!Spob{PrnOTMwuuYWe1GGk=w6|JsRW)<$%=BtyXr)~e)b21a{)%V>XK zbEZb_9~8}sjFS@i2pX-wdpP_@;ux;L&c>=hU?+WUu|YWDEzY&bgKd&Rtw_^KGMORi z5=IV13(%YSA?m zXBosHEK{OVlhRr@D7uzE0#K5GX)&tX@7D}4`>6=Q8kb=OYPSw--L;|{b#EOrSkr)Y zG>l`mMyuDs!T~JfYH~uu3dxuT{R`RxK4};{kLG};wnhj8y$g1vE<%_iLRfu-zz>3f z*)T&D$QdEzLayi=B17zrNv?tEr~>mM+XXd9sy_zMMlARl$O=++;Qq1)MMAg(U_Lg6 z<%2KbDRYM`;3k6w6a!QxqY(6@fG{={ZvO;weT~bYKckq@nAFSB9OzwRK)Y~AuD?tR zfSUMN8K3DCdN6cV4i}@Z0q&#&fWR8y=pc4ugCN+zkI*YCD+{P3TfbQ%8&=9j`@ex~ z5$+pMG{=>2!qy{)nH*Zo994j;k{D78gfI{Zuw)%5F#L!?1*tPES?fTXwq(O#at&4j zMiZolft+CHcmqhez@;IX!40Z$C)}(Ab^vQ>UKfrQS1Tks1}14f*3)9C;?)_iDKj>NM8JsAc2CsRFF-%$($ zIT%bA&)Gj~uf6tKYp=ET+J~c)ac6Q^>~)5NRQC%S^OEL%Cd@lQ@SAu&ei~1XzVEv6v zu>Qt4^*8oS`WyQu{ry+Ijo)NVphXF-0kdO%)}MsSt=0$oZ${})w_5*dyY)W`4E#Xn z`=$GzJ$doq(Px{_9(J~#b~cAYKu*X$xAAZLjsMC|>(2h0Y5Y5W;|t&Uf27%OrtwRD z z1NqNGS5L}(1Z(YpR5o3tzb8%L-``_v@oz&}Z~fl4TYs7jfLQ-mMCHDs@5V=e{|VmV zU&y{c#q#e1m<+)AHhvoZnRPfxS|7l2{d29>2Y>K06M7p}F4I}KrS{zXWeUj#oG z{$i{3!EgT=l5J$NCJ95`L!m}j{_r$nSYfJzSU~|rEj%b{}84W zxT?O@YW*A*H#TYCX|?`P+%`XkrVY{1YPJ5u@3dO$kgBa#>$fkpT7U1C`1fDF)N1|3 zf6Tvs=TfWnyI>x0gI!`b7@og+snz-t3pzz=|L&z$>-XVvYqeT`<5H{jccqTI=I|HY+N>n3o}YPJ6ErB>^g5)=>Lz_j4rJV*ewbtrMuy^Zr+MG`t=8JRX^Pd&>t&rCS*qzpazJo(O&xWUKReJnGzy&}+0vWv{-h z0Y{Aib-c|(QNrmk8O5h&wd7%zNhSC-^#&$InpNKL`e+ScpqW}{bIWdgc=_tf^~toF zX}$(unNN#B@`^yD;skp!sKZPUD+L$@2@{E--~-M3LR%@IYuZ|Tk;V+VJ1{44k)_#z ziFUJ2#f{hkFemkQMC72Jeq>>fUTITUE4q*mSfLhz^GeeQ zlGn*#S|!p|KYICceG(UCVs<0_^_8KiUx?ljFbkIjD_YzzZ_RG>>Q%I1b{WVT0AEpG zwr>Z8B0vo!K2r3ZLrOaswFO{<`+keguNpl2=_u(h5U4c8T@!VSava0OM zO4X(3tv%|i?Xga&yYb=WbD$JX^VZ~9Cn<`&5MFp-=r630htHlpd1iQ>G?D+?4=-O0 z`kvcmeU6!+8fTR7GfO!e28*L+y8(;L3ovI{C^VUNE@vw&ONB<(H)mD8YH0Oh1Dewy zEdgDi0moy`#)3hZ8~s5m)i|0xmujyvK4dY~@XTN-^Hq+q@%H>yg~2IXQtX$-pkW!= z9IGD@oC3dZ;0WrGDd53@BHPh*%7>*;}v#we1h&3Vfl3c9XyDtHz# zqcAOV1~boinLI2C@CWW^xytj=@_tec4$X8j%Hv`GG%3xr81)z0Yz%uruU`}+Fq-Aa z7lXulxEoBh1>H=`r09qB%cL-qxGYcdVibj*p_0Rp3DzQK3E3qrS7CZdU{yJ%~U;VFt zowQhN8ep^j8_g>0PeFxUfe!n7mz?A)rWurp&y&KuTqoIJmjZTa&}?X^$4OD9dG^Xg z3lRor6+CI+{$ZSD$q3w=bz|2s>bdt%Avy0)%PJppGvMalOHnzEQ5_pHz=$wtuP}Dq z$GE60;HHhjuZ)V0_A1E%Tl!%(^qN`=n|eGQ^T%vDHtp--$7e}3Eii}=(OSB17GAE8 zlFYOpPsguJ-}G2hrm>)*s29DZqJoR01eB9>aKtb!v?&zlBh+6s($-E@yn3}^>RkZp zdLIl=&?K5d<8e{FdTWwVnLt_z{nE&JdfNmHS|vJV60NmIMS5PLw;x_!F9-*wZE-;( zbeofq5X{TAKdI*vm5CN3vqEy)=YcQVVY^fSBoortJ9cNdyVd#KeJ=D)bB=kx8cuvZ zNiuI%L{%ctMLB5iY(F*k^XZ8E0w#G~74ZPuG4lT;L-Sv-MrOar$GXH!Srut^ zux@@+hyJA8%!abSezPl*4srlGiQ$gu_mUZqBWjc%lu`@|h+O~y9SQ>d#?1na>!TG* zlMRJvO}RD)qr6OX2{PqGi^L+lGBQkE0!m+07br$ir7tOrw{M9T{^2huFZ^ZYg}s%I zNVcskt;A2}^Tz-5|M(r^jep~x{zc-AFrtt*vY9vjQe%VQl_$S&RfMQPSE=3gf5?Ua z*_rdzD-W~dXURA}PE1uylZ~1{HeZpu(%)#?3ZlD-db|Slc>Suh{Vai)sE;9|Kbd z*8(qauL($I(7wzteG_3yBJ<`AbNRhIACWjQedPNdK7}7IB&MBijJ^srTYC9f0My%VM$)$o`r2JL^8%`(WIp*5A&0( zE3+F63FzdZXa)1qw^t$HIL~CXbXCJ|Jd8wK*XM|Vo)q~65tn^5yW{~cCL-@mKT1}v z@9z)d;f=jsZ}rBlwUu7)<{*x*uf;2?EAi^;@OENy-Ql| zx(?erq;=9e`Hc&MU#Wdj)8>6)#%AUwBGMB1m<1^tEr}r{y@aqF5&Lkeiki zf2Rf6u;BPBD+~>*nO7>U+J>*;V%8~FPB62UXPE`Z$uxg>?8UJt8^EJv@UClbilC_f zf8`C5J`wM`uDmAhJCDU|j#;~tm0sg8v_0r}q8-MU&PiGw=F_S(C`R854t__$3>M4H?U#t z4DxAKZM1o&Hri=+9FNlBMq6fQqus?{-7I-s(T`yglKPzS!O~)5myQ$^o-(O;aPE^r)46M|Iw~XW$s5MOGTAJ~ zNm<4RNq?bhAS2s0Om;sveWQS3kc*3p8*pZ0a+;8aMM^I1{=Z-nTKL)s@tK9LsWA!~ z<@fRb#l?*q!19K5FA0GyE-rq^LFfO~2WtBG^J@Bdke_6*2bjU;(`%)98V`=*gQWD0 zAOAu0&&c@k^p}5!j30;^f$`&Kn~fj;%A6)){`lyFtLCFdC$oJ%!nD01{b26%M#@mA zT$LV~XZf^BiYGfV+odtK%olUO`NAu6)rc5`oV}0v>uybS|o!iFHQ~o3D|8Or$cBv*hUM>8k%wv4-!<` z91cxv#_6EQcOIBQTnsHBC+Shz)ouwMyjk9kvuQk9-{Ii*2Wfc(5KLY`>`f;oHqSP< zJ9ux7)7V^F9;W3HX$aNnB zO~lcMmzUG5N{an>kSw31`>A$KTTJPm4I*s-sBLg3ee{5^4m8;r$Jz2Y&fyN>eGwp!U9wWQL$@$izSj0?%Ymwrflwy477-TQb8U#S62a7w9=D%t=}# zqogd!&U3T($)`Uyc0x)M7euxbcv|v(BI+`k#08EyL|PT5CSpWg^ZXE&ptK}FBFyJW ze4MP>66P>2&0dmZW|$tQ!(<3rPO~aEL#i~Ww5@WT>vw)@kdGsRj@qNYJMkduqN*L{ z-Ttla$|{UYcF|S2QVV`!{8U93{(fFe$KirIPLq==pQMBCy}r6e_EwFn z!YSjlN(L2dUTN0<%0zK74oof$56axU?(e2%pXl}Nn_rw)$VB6GQtlf{D0mo@6FA*L&BOa8?C|-ngO_t@sQGfWzTDdB<>-sl{gN3KgqDE}6B95x}^T}zE9voI? zVX$acd%YW-)!yn&-tQTX_WxD&vD{^U5b6o{DJ^GOQVt9Tbtfn?Open*(g6)FF+FlS z;f|3uY_$keQY2C&1QDG*&W7c>)W%6P#swjh+AfO5g0qqf&fnpmQgdgznPpeT*wLYYO5o8oE~p0>>aNufyz3x(AU&Fc zQCOLNHr__aK&4(-jKk>QVXvh}&OK|s5q~B@%B#+!pW14NBG52LCQ>fMqv5zHYD{NrhH+3+@GsgD z6i)##$f`_ut6LoFL<74c@LqopMo$40)C&N)vaqnw26}hoTxI8O6gu?dY;c$tWwa=P z1Z9;BDV6|1i1s%(Z(N#j{JOu=W0vWiUmz93nD(I{J&P4&j!cLYNkX;yPTkO%6FZ1f* z!!xuf*&Z2Gi(Y|OM3KLMyyesGVT<)Zo33@4ye`wSQj&HfZMy~Hg(TO-_t|X^^Q626 zi$tvppzftoD>!CVI8Fs5nQ;Ni84?H=*F z$WBVc$QL8KY|;Z^=Pe05b*{haz$y=YR-Jj9)}* zqJ0|KI@vWy%ZBNM08yovm$6t90D=UQxfbIpAae5tQJ-`qLVBNz-(w- z9U=|Ow5D@s1^9~g1wQ!EhWCnMrUHt)KonmM>d=4U4m+!>-bV1%>RB6&*cjA?CBRz? zO%S_xz6FbqIMsI}&Wh!xz+Avo1Nve@51}V3lz=K+Mf6fS&8TXe-FeEOBFUbFT~OJ% zciN#%Flz?r=3MNDP+S!EwOap@U_OL;2IC$-*c=WCqcjuiCx%qJzIUT9*rY;TT%>U&W^0LoeA~^emShDJ1-_Y}eMm%OvkdxJWY>$Jk-3a-s?~8= zeh@SpsW%7Wh`TM}`0hZI_37ty!XE77c+_9(;V?oc!OZmAGDSi^&6?1bs3aBf00kG*7+pDZ!) zkiJ=rA|#!;qoC+_NUnZe>g1xTp~ALfs9o;xK+fQ z{$f52Zh--KOu)LGY?Z(U6c?we7$si5MpcqZJF6Z5p6!seBVt^dy`$O|ce;7AP;86xGS-+-pU^xwg)`mg=c#oVfX zJ?PgmG6@-67sI_AmzJ+6H{(jZbum}!4>{Gzx_OXim8tUS;E)&5D9w^9&NrbZ`wMzO z+%TRc@$l4Y=y2ZxT>cKDKY3F59D_Pk5lKS!Ta+B=0RhV)*!J)ZDGl(w#*QLYn3SyrtG1FuO)-S+;mXE3_V0pa99!#&4LCN73H9toaDv0J4}{wIl=OS zhxcB5(mkxkqpMW4!{>Mw(V?maqx|3i`HRVFfEc8*&mwY(d*gxi*^tJ;X~H@+uJQ$k z*99j*C0wpKb_KFm8+kz2D457zVStbBGaU~5B*~H@9zDi7&>~0 z`4KfWkU^AK)=!+;sU!)k>sr&oKF^PmY-?zu+iQ1vw{PBFTfM%%x%tW37sHjq{m-AR zZr_}IvU%{}2RHx1@!^x?`mf!&m7V636MvA}6cWs$rOryPw{~-FWvzFocXKV;Fju4N zH?CjrtzEx#uF1!U)54RJ}j8`TdmSzDYO8wx^D~rHzUQj9wvN4ri^9i6R zO*|UqCuoZ5l9itWPfAm!(_6u z-tOJv7c0Hnx9;4$eS4LH;GmCRMb#Utcdp;Mack{5VWYW!8Ah}ak4B3Dr72bcrC;jJ zVLndYv@ z$&wl6*+B=fFG~igM$+tH31pUx@(B*bxDn8CutX9Xn275G&#nlze9w|BIhpHOS64g? zC|3Ma!WgJ#y6S8@&tc|TJ!$$x>0ls5%~cLsA$|qoJYFkKJLTG-SkwGM(eTLwC#$cw{S`K^FC!Ai(x{mA}pb2CcE|mh9A< z*^mW31v@U8Nqq|Wtl<(W^5jsYM@Q#AN8CqTnkX-c#7{XGm&wPyLlm1?NHZG%MWzvw z>`!(WfNd0UU2K@P|7Bybi+#&glb2k^fspQ-_&82SAT`?ku)V$%&=FCL_}t}qze*4y zPBzbl^dQTNq%^;|pBICK(+mA3G0N~kM0-#M%o2+e|Hh+}__UM`wZA3o3^U@T`LvP_ zIV@jrWID~wHa2JSjJKLVnIoqM$uUm8Y-NMdbeL>CRc@f<#v`)ROW1W2;x8x<0nLqo z9+4`^L{F3QC@yZ0_#;w!^!%x&Ik)-v9gGaavp5^(;|G+X5pKs2LYLAhD)+0&`tma0 z{Nz$pa4x8TTLsymaNOCh^EvI)lA;6%-ElS@beXC-__z+yPLd7pr5U!dH73m6;yW+Y z`QP0(B0ZR2szHn9y{uuQ5dw3Kk}Xd5KpRN+O_uY%bQaa)&nWw-z>O*57YsS#PV)+B zMCDXUedtt}$~gZo8hOZ9%tuhfYbx&^z0FhGkA?D6$=A!DtZP@L)Qe2OoX%M^6|= zG!Ch-oTqMycJgsY&vy(Z7ZKFTxG3UNxWPF+5wSY2jTo6^Y0HHCH$(6DX|R~?##Wz)H9zF0&}ysHvg8L0j^&n87u!m^6RLPt`<`JUhuNsZ-{N%2`) zRwjz4734`it-3|JzvTUykA`@~s>fAB$Lg$AjigMRotgn9D|4H7@jix+^Skku&9|4c zx1G0Y9k%0j^5di!#ix;ZwFJxVd$sv>^rOZ`cXzwP2ri8$=;7am_ z=bvyFpT`BlaF;GH&{|D)<=I@q2nw!+n(*Lt7cBTgG_~_%aS`=EE4F+)-5f(71!ObM zc}DI0hTc-?l|qXIPnb6Lj5hkN^$0Wecs9%^+RcW^G0EY+Y0FR2>*{5mapFBGCV!!1 z!*rcRT>*y zATh$d6nRv=SE+kAXrTYLV;K#zIc`XVdK0@;%eu!5vX3?pvnz)7MBWM6W3JN?w2lxI=YZ zUbX9RKYjfUob&6*WlpcHDuhwYJAB|e;S!vL$G#;lGXpRVWH7w-1^knAMLD*Sia`Y` zQ$J`aG?#;FK1um-RSKJw`4!Rxm!M8012R?xUMo3>>RN`aIVC$B8A)%g-dWzizB;_V z78BD{0Jzxm%}-1;&5pACgtF3vUn$i@v^lLPT?4>@9x=(+jejI&$sCXc6R_=_a%2Ze zQyAMXX|)J+lc+cI#8={e_Cu7gF{y*=*K_1 z+0@L)AoHybbM~U~%x3r0oZq8S=!+D?C zdf{c%Wo9l0das~wXMdi1A9yDi*ae94u9}@RgAvnme(ato`;Wa7UCr?jpy4T)!O@8eLb$#&+-Fu1qsv-=$Ireaoo8k z-YZvpt0cddy!W6(+V?r1K1r&l)4eT>#WnOvQf(Hv`Z^s@ceSSK-&{pe^>9>4F*8h5 zt;50yy1}QtXUTD@xshdt>HSVpr19u6<$tL)xA%EcY{Co{v=(N_l{Mkj48PBQa5Vzp z?@iOu5L52ec=iO2MFl~@etL9({A^WRO?~7KrbUrt;%ju|>^fnw8n}akfd%v6sy!JE zXE55B-AUo|j8ooNK1nM6FoWuc15jx*>Fu;4O8?&DVZ zXgV65-p{j)^aiiqR{7xZ&NI3&D$NjFp$%@8#Ewogx?e{Ykb8MQMi^0J`DaO)RFA80 zK7NPX1O2??+IvoR*ndx1YcNqn~cB1>PdKFIwg@S+$!%m%#t6-MtW3a>d{3!mi! zUlPCysV*+BtnW{PT1GA`?>nmbWzP7t>VG4z)T6wZSC_uuJAIL*7?KdK4(oFy*@~-V z=QOKgpQdUd30{Xz@`5`YB>ouOx9#+Rqn^B)!m^&{A#Fe71YtwX3F6hjrh=k)YVV$8 z`qq)wBV14L>GUAM9Q#1g2UwOi50b3fsr<%JmNMD-6+FWsF-;J^2Y~lkb6GTh1+FFT zQSoj0jmL}J5VkS|SyZ3LK8Wt+vw(1kdDe6ChceZMbINWkElC>J4)MBRueuK7zSM+; z`!GjbxB{W@aqr`r#FhXqK8eMLOU!OtAeK|1{8#N1F3T%*OgbZmWXD+ML6J7ADb1l= zYG!zjn{5X}=hKupsoAbIf2Ch5syk2ESLDzKHtfheXLphzB$R7OAnAwwzBO_jY|S1A zyWyScfMtXFv6d@E6kK6Ef>N6{RlZ(>RpLMSFs~euW}n-cSQBi?VFt|#ubH|R+T2Fx zZX|<}6ozt3K@)+Pwo@#c=3StYLULkDdq&a-8HpMhNQZfPbby_v1a-kE*VHueH8^YF zh!B(^CYVD5>oZ7hP~6W@O{x6_yJrdKly`rf{k%XD=D12=D(C#1lNjMa_Jk~w{^G{L zX&EijZB6DPb3QxcyB<`sIxLtn7P36pmneml%$ip!EuC*x?GZFwf2p$-&gM{PD8Swc zp(z+Jy!8%~kK6}kO&vA7!NfQMzADY%1slqox!Y|Au*tCfcmBwQbzG4XW=J9*lx+$l zpIKNJ?b2}*oE*#dk;KT`kr+OwNA8&5u%0ZEurT;Ddv3y37%y_PV3yqw`WM0~NHLup z%N8qIJZGWnX;iYK(rHwm{SbEKP!{JaiWV(Pl4Db1wZ+LzcbkbjDi%xt%`!*aiVe8F z@pJOaYKpaep_3;*88H1wohAkp6!0iEcppp(e_m$%@bE}*6h?^L6<_eGeq>g7)k>+KWMCc}5)pDH;}JdsbT$!*L+*Jp z&ZD5lN+E}H@(~=`Yg^^Q1z5Ex0s!47{JHCIreK|>01Aldowye@8!VG^co(Z40OlM% zB}xS^Cr^;Q52?E2;`0_%$h`PYHvkEW4Xj75E#)o^wkJ@sJ2h4>FlVWU3nt)-GcDKw zDG;9F4V??)3nqpzX+QY}ou+Zu(r3t$-IM3Sr`Q7F83P758T7nY~>b7E=^pVS7{9y#SUFM<+B{^ zwsSWUMbB~@tt)yor5#08IwRN)Ta3(t9s|~DygMg1gP?}Tzg2o)Jho!%vCEv?3=&fg zEMa*K6Q!OxLzr^dqwh zC6e#a3p-Q2-K_y>UT*MXI`g~4<#7(AX8h*cKpsAZm0{MYSpbJ zVU^w*$aetxOw;tt8te4;KYbP<)JolS&81%7zUk}zUj7&X*G#I2=qf)bU?!2NEipajq;ikAMV^m27tsFTols4Q#HSGA-*if8D*q1GJ1X+CHcKN zeDQ&6DBS*8#PDc>HKGeo2ki6)56SMM?`N|GENua4O~TxVpQUYsxr%%7Bz8#s5T5KA3Q=KNM2b6`H7KU2uOo;)7eI>4;s5kW}?U3$?yjtt^ndW-_ ze9W&atBg|S3L<1_%&!wjZggfv{ro!Gk60qrri3o#lZXHjUFWytv?y)i!d0C)RI5to zXY@*oTN!Z3CFa)>itp^F#rPyHfMIJFsI&NnvZ{(sD*YfB&TIRPj( zJTq!%%f=HD-Pw3Tmg3+myRuBf23ycu*C?sNJVUIaIk1ahlJvuZ=JI%H+HS-q`ZO=; zE}h7obm92pAOT42CPmSp7upzN=Wc|p6#T&upoS8$*c_$EJmdF=gCJCNPVFwjnW>$w zHgZnql<$8)H&30@_kG+9FsQt){kjc3N1w*U5G-lEjtzfE&|65MLBp7(y5OWtSLd~W zpfs<6CMkNMc1Uu14XIQ`Wto+E2o=~p;W~p+++y8z!*oS4^Nhg@_fwb1Go95)2Y6ZFpYBVT`8)jKV5J-MU{(S%+@8q zn=el`ciE`q)4r5(dQulA0Uw`pxge;>bvwUT#Xvwl^Qc*1pHTs5UDfh7+diA{ex>ie z*IQdWdr&su#GBfB6Binl1u)bpd8;{ZFb&$FKbBb)@0`&*QjOFjjfOrz8=bo$XKd=L zaW*Y8kmN1p3{$8tAJ$B8Lp9~1N;zzgg7+IZaJ{yuOOYli$N3U@XI{aT#kyI|oaIMn z+32qZZG^P&=E4hKyDI6P;Ir+=PoDnk&vu@_`22^z{u_TG-Wv>){e#2w z%cIda%O}58l-2b3DJ*Kgdsb^8t*`sPCaY4Vz2SM^iDare2uAJ7f}1`=Sv zT0mH~804_Y3jqMk;B;EQXR7=R#9d##bN$ZETdQ|&kX@856goQZ#0vt)$Y^nx4D=9; zx_49yrmMx>j-tJyda(F;ydXqQ`^cmxC*lyCsK4vJC)I69>1E%X9y`QooThs}zRdUh zV~2cv%qHFB`%`H|Xuz4>K1XY|*f8()R`d?O<`J?6EM2 zFbHM=sr9p*@`%=YBp#;3bQV?3P(9r_N~))0M|P{K%g5X`w|kyyZKwo$AsNv`>35)Vecn9Oi!l^8s4s9X%m1khHACWGq z?YH6%-%&rzj(#oQLqI)<Fw6IFzJZWm4c6nZz6eGQ=C(0AYH-dy7*S=S|e$Mu;0VyxVk;Ua*5(Tk>H)BHt}3 zdmS&Ma{n|bI~p)N05;GuCmZZfkwqsiJ487K@x#Noie2`%uo$z4`(P{vG<^Zea*1;FEt^oHl7~{ z=H#6y;T)`3Qn2B`qCrg{an#z~c1z@y>A0v*687#}a3e@KiwYz6x`>bw5m4!6YZ>sE=m7A(`afb{-Ajt!@Qj{dE#CuJS z2Lg7)1`WK4KbzV@(*X2-1#OmCMWse%nZ0f3s0b0ybuvTY$zJXtolN zKBv9ehCEnQyOrKwu@We)pDSFwgIaZZ+Nr$IiaIe#gdPV@y+m+!VO~*yEo?XKRSE&J zLR6xxgf44z^>{k=i0-;ho=;*-EHs@wn~$es=vxxkO=v?iQ7_^VbLE0!$3!;)gcMX> zR3D-KqLH?Cs^Zlv-#WovXmFR`hv3+65=~KTdQrX7X|$wGAZ#fhGM4$z#qxed4%{e%7?wNTe~^p-ygyv@lMRKssKe1?|o;>_$+ ztgvz+z*BBj^A#&~{W~`|=$v5x&aDk|!r8|Ach)xea7zEqipn8vZ6VrSx%Uz~wl=lY zx!Ya=FB;P;`iTO)F&zW*$@{bX0P@RYn>4M_$6_T9zQ z{b+&nlD#4A^bH-Rd4nU5i@WV8xV^Dfxo;w>BKr_evuS^pA26;O>QD!M9Z7qCRvmy7 z8Qx)0KXfG1^`k40z6ti}>jpD?JK#t@3cnyRZ$Dyh#UrAFSxlV)CBOy*)Q1G;T4=(1 z5I66g)3sg|N3gsqV57?U{?@q*`9+DW0*ypj?z2c&3` zla_KXyg7_ZgJjwmjM*Q><)Pu>>`giKne{V9Dekr5OFI(Y8|5b%MYWGi7H}SUU1&xh=RQRqq{m67jXRTH5Tat`KgjQ0Zz}yJZqU8({kcloZ{9d` zn~PR&zCBm;vKsN6dv~r|^LlTtWeX0=HmG@KR%_jPcP!!Lx4WV@?8a(R-g@>AyL;?| zlf8TOuZifgysB%WYm~XurdQSz%+{9X-?F6qi2a?y??8}5O8)5G_#KsrjqDr3!`<2) zvGpUjd>Icilk%YHl5HHKgvr7~5}&X>7fW5UbC^#@L);mWA9+~vJUXN%@$f_{Bt`Xk zjQHQ+wqba#0?*PJ^UbQ4J!mN{cJ4;;5&5y`+D`C5UO%75;Wz(nNj3ag@+C$MMvod% zukSY`U9%}SIIn5B2qil&?muS9i!%s6NKR>2yHn)_%-L=vDH5ZTZMbtcy8l>?&|6_O zkGKbiahlQb`)0CEk(Gatk0+y~N|wwxE$ONSE^Oh$3UIS|4%ORQb7;Pq>St`j*iKxO zG|oW2M{XezdOp5cUBa>`rBTNX8Z;NtN!T^av9RU6xWpwROqopu>}B^s5f2vVzV;$F zZNkroL&CBCn;jHDOypVi7q!-m$gR(Kor;rT|-yn{^eA!GlWq@}$q3+?T zk>-?;1hs&H)O>QTX}YHx^MqM=lJJfpus{2@-}5cKh%W5Y4K!>hK1||aQgrsyWHjtA ze1#3$3@S|0k`@@+AjKEB}Osv!ntE=$`Clch%GeP1Iow zo#B=lb2qs%aeK#qJaJc3U)3P28dl>(o;`JLim!3fU?h($(<(1cuc*!6+AgcyjE{g1 zT$SOQ^n=4gy1d>^og%L1>GAWqvM)2Dt(|9|aOU@4U%^h2l*CXo#&hKx(bV{14z8La zB5kMXs7kXAT~))1cC=`|HWA&IMcXrrW_>Q$NVC?)&wJ@^4G2TDv@aX+5a*Cg6_QFw zlS~DyLT-_6P@{7pROZq9_ACWkdDY=_D@8$zc(fNk580<{D-LXvWUF zbDMBCIx`Ug-1Dws{(2$$QC*lsU%c#f?!5X4CM>ZP$~4p&zNboDaF0_~xRrC7*(K`c zVRm`43a^nN=uAS`JoUg=kl{lrF+vD_t76$MFN}p}q+E;mF zvK?2*ygO@hRvVNmE3Cn}-3(Njd1zSh0PVNAi@XRg47P9SS_J-c5zgqIXX{iq35|Y+ zzGjUyk$Ie(F@{tZ{rmYe8>&{;wBQ(%4K}=BkY~+BP!O6ugH7W@7>i;uV3)G3n>&Lu zfmpTqJJa72I%%x001TBpAl8DQ{YQZ(MjRdLDMWs=Esj-P0r#gS0FLh!@j_SNqdDJ~ z1!m6q66-^=Y`%dyd7co@MLgY=u!9u(MI)S^)9y&|iud9qNj||$*}h~x2t`^juxiw} zgwTzrs4Zwca%aKy)3~aV!aMuzP%VR(Oh2_ytF~6uc&`+PK!|LF=wGrE-P4(+ zOC+>Kb77cLt$jMhg1wb%%}h4p;7&GSdIr!n?Er^XK54+pI;kI=6tYsSTq`AtcbXLPjv z$@8ZVZ8k(?Dtnrr7>TU~-=j_g7Z<%*>8;lM#P?FrQxLbtMf+5E(L`zF;`?|}GU7fq zR4^nY{$^#iGAjwJXZyK~!k57WGlsCx#{a)3P1D%b1;)KD^C$HFG(QRV2;7Pd;boeY zzuQ|@i?Lkj`FOHI5drW@eb21)dT1WaO2>Z5RkP5h3d<6-SvG_zq=mVMZQQ8%!2;IRvk08sL#K3~yFz>zrq_{wzZ1#Ez;-4fub!6PH4 znF}3mkeT3s$e3LxeR>!0EhbmhTvT)hk=tTF1t&PfmUMYpxDihvzi$jWr5Y%2qGdhx zVXcHZ-)I%4ls*daWC&&8i$x{iYW4ZR#dUc zNsMyZHPO8c)|2qEy@W*8;59s2izij8SzOp=+{AWNOtRU5+hbxP+(ezo->nk=;SbSU z4vaAxwZOHsPwfn`3x{zb88QuRufXruJ0 z9ij@>G-sAqrc8a$=&+>sun^!Bc(A!{Z~nSj>0x2lnx`qK@~lh-Jd6qhTHv<3p%kOh zM7aM9D%~q)#(4NognyJ8?;)qK!Yc&o$eX*6Jay78lbL~@sjSOJ<}fZwM2U1?zS?as zEWY{PN8kVI?e4B7C-zkOKZdo*DiXsW3rpk^`8}|}7oy!=+Wj*nifI?0=TR%s15dAV zt_F&IsA=BoD948d`CL-gACsiXo1R9x$y)+U@BpwQ?O>W-gb&4xq$gRQgJic!Og9}u$ zD+_HN_17l)(ZU-rqBk@Q2{BsGSS2d8NIHZZ1_^{YA%WBE+u;jVXRvNhB+kLQot3#N zYYnIH^H5-*rCUq4msWaFt?>3XdezuW z?slO~O?2+AF1p`qi}ji$R*~77Ha^?i_B$;(Zt80~YO&nKe>igC;fF>GPBR1Vt)-Qf zrIn?%rRz&KExfik_q!kwqS5QuahB}G#iWQ&r`dEgJxC^lDnCvJn~xvf+kE!)+2(J& zc>LnC7oR+QdjI*8&mZ28E;wA%S%HjMRrQ!4ps{V=U0L-w>9$#DZ$oofb(+1%`~bZR z*kpWU+S`j}#jGj1lc%xqN(@*`1L|Hv!Ruw#f zYdoGQwPwtXTB)*}DRt8ry4#Gf$78he!eNwGi61R!RX$%BDV-9QR?T%p4C=e#5WLxc z^XaGcH{-Ec3u~37xoK|MvvV2>*&qmCQm@oLh#ft*heQ7N(@*)|@tFTDOKp*7cl``e z>AA`6>JUU(tC-dG9s7_XsO@w>n!Oq39PHu(eXdafv`QW@?}5M;RJ$9TvDxwD^4;UA z^95E23+pQKB&^Vh7Ob#4yuy3~6rabkM9|=TqHz!b32w;*$MdFH@7oN_IDXw&CkXuAR^Q44Mo(kdTs(fcy^Q=Q!KwlujHis^7XYgfAG#i3k z8Q1sBn&VG_N;YeI1o*JDD$sK&%!z&x?H+v+D54xU2Md@UrZzCx%2JY9Qpm*Z>VW~1 zu>0zv)Y72@a5Xq0g$?=pu@E6@#tpYs;|J-CD)b;NL<#f^vOI7>h@g_+%^pajTjk;Y z80yvU>n7@&wlplXE{i2C>XvZrU-~3@BgLA~I@^D@+l8@n0DDbRQcPj;IxVYN=Zjr2 zyifM~vgU4z>ehh-@|(I2UGna-dk)Icv5?lQu6c)-S%}>H3rMvqs7cCUC?Cs zHzPMdH#;#+VD8fyN{Rk|SQIM#8wi*wAY?yIHxv)}yDzwl(iheNla}(PfVS|mPFz|r zpe`-=$46dZ0Zd)emnAQp8L-qf$KMhS)AHy%(nG^Copz8R*#TW=QXD~fF2QN*??iFv zyAirsYHK1if@~h0(T#a^G9xpk)f#4a`h1N5!?XT6VR(86-#MXu@I-7MJs(f@oh#AC z6xOAPa{lMz$s?RiT*f5(QnwuCRllOf;MkI%!stZ?S=09;mO3lJ{z3|I%j7ub&W34; z``_Hbg`gHeb`Zq6(w)N$N?O|LOD4(Uy-}JSII04BqJhw-gv|1f`1B_pnn*mg$@IPv z-|_=(&HW;YDI^jNn|zf>JZPG!e4`7!QYYP)tp9#_{V8yr(c1Hy$IY z@+uy6#>qG@a7J|5tSP6gMHGcF`8--sJrh$hf4~jvh1Cm(QYS(zzGtw_3kvG3tdqKG z%T|8o?<9fg1uoU`X=P5kvm$vrrVGj}rxWRdMgx|O7j>512nq+6Q)Z)(g$Cfw0^)Ro zcvK|u@RU^pkC5h!2}rQE8Um?jkO-@<(;IZmrQ6C38WqAbX6zhJ4ALc*;EN7c(gB%J zM5v$I4?g`7g6h;)pDSV8G-eVgvn-oQP%-BS@EpFq`Rl~BnZQ=eUDH;hg0Ol%GHL(9 z9if`(YG}c#Q_N^|?VP#o>)a}7z4%yqaU;r5^38)n*TCWOcf62MO#F6I^{>t4*BDHNC zhp!5GfJr%Y>@;xa3UIS8jLao_AQo0k6Vg6OW3p!2z#e5MXEoIO+iO9eYEf}L&asdy zAaXsII2C3iVroX~_6p{=w+MoTp@$LD+!(Au!k88M+1BowUg@`X)l@iVd6E}LC7tO3 zI+8dul&z**GNZIgig;x5OiyfaQoqBbOiF)xYJJ)8a3A?%N|C_?m~1$!RA0k@(nf)H|xX1#aB~ONQ$u5#&mJani<|2<0op=rD`kEn)Gv?@yd|< zqr=yCpgt984fv|dli-Td^-ICH^5L_czVPBxF81>1Est6^WlsiSr54%=v zdAM#H+ptKn8a-!BnQa0D&;&&owq<(^TE-waIY&RD#mediVUhd8Tf!X;#V=3tc(ww) zb~V87z)yhj&Ru}9DCt0iBf1MP8_E(4iw+2$MHS=Rswchm=z=D_w(}r!a6cZ65}Z#D zNP}rWN#nPsDb6#y64oWhC4Lwel*i92ah|JGIF+Qn)l0o)>wX2;kxt==+}$01w7c8I zKMM=-XmS|8*-NVUO)+@0yW3sF`!};W5TKHVHlxQmI7>Q|`;wmQ=&h8ZBx|QurU+K+ zY8KPE-e5(*LnaBt;4?34U){#0;R@TCB+wwp86~$(ScVb|3F3dAv$uH;-g=fFRHmL| zm=?&%ylA3*xm`Xo5$9cH*Rt<@7Clw!lcu^5S7wyNWo3}YFx^iFMjMJpX?4123dT?A zkWaw?7Hv2ZXP%;sM6OnL(fYD>=FP`Eb47SR{S4*jL+{=K;4ic~BIbss z@am=nPNw&Ih2me>w_#ZWCB&3>g1EXm%m@V2(~c+tg!TlgF-znNLK34TO|WQX&=!Qx zS0?&#QsmKwiHHT@2e<(KEe275)Qk1j-ZBg5t&3k>bgU;(n5U`;WUilP6wYQZSLVUI zS_;oX3u3}(d~QHRI!g@3YM=31Tg@UzRbNA6q&qr|jWunOKTX>6N2d3Bf8UQDRUh$m zRHbks)4$8o`;6G}ns?$2yoY9hq18oM6M`tk^CQLP0=Py1p3w}=?s=`;IIopraBds7 zYHbL+QLc0Tbj%y1C=!S>CX6pG+VK)v&X^7+K_}L+&;p&+CGM`TXa3?zV~@G1z)q{} zSn>}yJ92I8oR=YBXg!I)gSSusM-H?O!fo`qbO`!&oU!% zIRVhQE8X$YjK-9#)XiBnYh5xDe=XnR3%Z?VD_>*+oW7(XPRC8lU0<`(Ro%pRM82dyuir)0qg_8seh*HiH<>=0)aZ%kI(U z&50253{uG*Ii2vZJm;Yz{Vd*nHpf(?y$8lZ8K%p%kvaNXQh$u+Vr{W5#cG|xYYLr! zHO+Knv-m;5)Q`QA2~_H0skyDKh%irlv8O~(%7+32UAJM6z9}+~>JDY6DJ{@WGmJEG zdqg=qQRi3;DH0a5DABes%m5a*5o4nPZNwhu3Jyn^_<*FP-v4`1Aeb`haNO;~Trdlu zzbYCKwT+BQ6$$^+REKe<&ih)L{UV2L6W+cx}59N{_&hy52jt$9s%XS*Wm%^kaY*A z!F)bCJmkw-xX3^tWP?;PbH{N3>J>JB=0qYt0&M?|H4BCbey2DCFgK)&wCol(XZ5Fr zEem;eRhLy<;Kan3mKT;)o(&Qh3B&?cb2T`c`PdQ_ZizsODeSC<$i#0>;*{bla0mwx z_VFgsJJiNIE$xp*(R*}yoFVX{Ce$v}8<#g}M zWKi|nD;s9a*@gS<)eSRBv!i}{ZNrr5D9NgR`?{eW7@M)Q(}y^1!$&?g44;CL10Zc= zOfHJxfXFN?s-(+G4aTc(7ZJezH$4d>dCye{>ubbUElR|w{Ljg zi(v<`ZJoXRwO8oY?(H>K=rAsj;(t&iG4lR-<<@p@->H>Lv*vQQUAa*{9SXR2Ztvb+ zabJqOMC4MTn7H#`_x64JIf;wv(Di=%{_gDu_Tzq9B<|at>${t7nERuAGCA!~7^0np zJFC0*+$JNqF06Xj^FBGdT`h|&PP>zkaWuQKKI6Fu>gR~fo{H7l5ZaR|T zqD3;CEq8tQ-gS#J@E{K%*LUwYx&lL`3s5>~cGQ_9G&-i=JJ)w_KeCM=g3N1VZTF6w zlySZX;+h=hnGfvR?mdT~$+SG2q<-^j{-l?Kv@G+2mJcT9{_gEn+jluA^3f>l-O)=q zPDjaUXA&0`uA1rW#{&|{NoozkGFU4ZMq)0&66}kL>M*6SgP{uVCpr0 z=k~4-$|Nq1Mu|5HZ|2KMk_-+zd+}(L=RP7HobrSRn9Hv!* zG=|5g9ZrAfFR}Yz2oPm&mrUE|X{`SUQ`?RYQaa#E-g&n@A-+YynRMXomAQ^%!ood; zAHsJPkMuBzPw1WA^-gcao4?K7d-p7^8z{bB;r4^w+ir52Dy;N6YhDkxANs7VzEB#P zzq1-?EW5WqTTo1OG&}#y)~6{r4LctaMlQh}X)oB)iP}Vx2zxSbGa=hki9q7bqP&9+ ztDH>|}qbAu{)%X;$=-Ci3jN9Pau}I@@m{MzzUaI!+ zn4sv8@tMLv$ofy{pzVaz^a7f2J4l1xAur9VFtL+Y5s(El@ghrKuRh4xtl|c|Ug-su zp4LL+A&6cSqlX#P9XDq@Nc9(bwH(?NapH$_+j;Hx9nQ?}X1j&CvKw99ZGZPyt}QHn z@1v#ljgR|xzyGT*cXwa?=r_N5^Y&{!M=zXWx>uU7O!VE}CLEC8?LDA>R(t%<3jedp z|E%#p*ZH3t{LfAP$BHp}qVKNW=J$8_A8vj19{+Wp{#oOfYy5IeUNQh{54ngHdeZE5 z2J8mcxxsaAaGe`m=O!1q#YJv$ky~8k)O^MCmCN&l%`@tQpG^0_Or)gx66UN2PEbId1q`ey`M_5B;PKA0q|8Tr4omMMMbOte z?m`$HCnky~X}3y7$w3j1kv}%f<}qW^(>Jo$b)0Uid^8=6PVeVgmJF~-}Z~3^s6_v7*0CK+OpcI1KjSNqtq*9``GC%;c`DbkIWrb5C_+{f4UW=5l9ikS z7y0o=xWAZ=U*HmwT2|#bvyOUuId;uZ*{JgC+czZ^!ow~b#emz#xsO^OuSGJV8!+?C zJbQkh^uYU{KI0ov1XeP5y}o_Zp*&pjLKC`VQY^B3I;1r=oj@b+5DkNggZKk8sHn5z z=zM9y>U{f<)9FEivvST`rAi20?mo{T#1a)3UCQI)5!B@>WysM? zc~`wM9Ki`fQ3*o!S@gy*i(HvWFduw<-!Kx5iVGT}#S$v`_k4#j%Yn4OQ2uX}?J%+r%N6{#EewYx}n>0z>AmrWV)0KM6xGq(B$vR`U z=cSSq)v#vC>AfNuP#SwtTIcW`4{kkbY8Gt&?n-t)pDm(Aar-w+ob$XlICE0+hG4*%($4wv(nI#0A7&YECmp7X}U3JQrMpXD|Jj4Q+Fc(Eo!PlgQ; zTLFBSpP1>y9UN6I7s$RE4elV#yC%kuuWaT6)y_h9w|S&if1#`>LOw*N^uH$Z(wS@80nPA#r^xe!NSL^j zJ{k?D66BLnz88;pk>Wa$fWzYokF>g1q{)8pzHW(8iV)E|PbuOyMBFY!FUq9oY#t<8 zwQjbNJ*!HO_`VbD>88aX>D-NulcG%X3>=RWi}@epVgQ@vpqdt(q~CKDN@*7-zf8z7 z3*;ZF4;#&IXu!TVY-YHNHB$?tYbz_Ocr@axSP1b=Zb8P4AQ;L(%{atJ;Zl#26ZFj& z{)*wnxbQcfv#l(}H6T-LyJ!iEHo$Oig_||*S?-Iu|Ln6z!Avq9?&sOQ1gQsKw{W9x zT7`EMLpI}#L0q}Z8G~A+(dyI}?uV7@cn>O~&V#hr%!bN$g3tB3JJbFBG`#Uh zO`Ji!nMD$OMY8VTMV+_>xs6KE?Af)TDLr4I=YN8aGhW#6D;WiAcGaMS9(dR}&8j#= zgAh@2?o9|KkX4B@0Fs>!GC-|*yJ+8}2rmP}R9CI-0> z^Qp~IL&~-n+sfdQuUJ=%S|*(7=_d_*;u}%<+y`Y~paEmmS=HMOp$_ z7_lKTIMh~ugTkg`!WIBa-Vbu}^Fe7rXk!aa9J@WsFmRrvnNPSGY*ep^Nzi2$0ILL8 zqz_Jukr2X*!iM^YLf}U5a^8_rs4!KYkCy35rVHFEW>swSE=soCDn^QHKCLFxsy{80 zqDcp``bu!R)!`&q)enmT+c032lwj6Uh(u||t?Pp}!|eJ{GMSA?WTF0b^rLV!;EbEM z%9$>?Macxlm$hn(q?t;OR{8R4ZDsq&#Mz$Z&ag%ksGL|s)}TFlWJ!(>*gj59gtP+| zb(jpNIJQZS9tWGe_Cqj{@$ERts;`lLcaPBMch9yVIM;Uf==KVS1qX??TStX@+eq=x(LcJAsYUn$2khb*3=p%gZebbmi7$R@?p9RzhTlIf^JH3m$;uh(#UXgso?lYhdq-NbtsxtRXW-6%cC@`7w{b(2;&GH+A3g(_eI7Z}Wv ziAy?HnUq!H-FSmX!eImRmO!oZVtEHENeyh08e+26!Z?$mTobxAp}C6;w@!cqpeEGX))@Qq-gnNJuXGhOS3-6vt!)bR26YnB1EM>9^Sz9 zHHV3ubsE86>x0bvfZ7EVc5HPj^y$!>EkZ>(9bcII=)xkTHXzcdCv=)KZk*8KPI5QkSc4=wz4SW)sSWR;}i&F-4=yGCC$K%s3ZuH9GQIhlr6i)bk zYp~|WsWwGAsr0acK<3TF#Rp}D*O@|3P|z%oJjU^jNG`I+P+}qlj@zBZ>|Day9Kse` z9VWWS$8k1|N2Am4o1LR{A|5um_52#EC4J}y*G!t}KG0ceX9&Wl4R$<))FWF(JicI( zEHRIhljae*W#Y-y$GLzzBUI-ytq}5aArwWO?0Yar@p2y&qx}G4OJBU&tjSB`y66J- zMwqZDH@7=(*P9-Y)Aszr2pW%qGaweH9y0s2maG=@=8cYk#x<|pEM+y$1Tz3ukZV1X zND_&`y<5Bg;1F@YUGp%5!5pUtlG1>^R=ELG;ba-(sm-2=u*vSD&pPhWA{*ws8RO?0 z7!ejGW{6tb%Ej_bxUC#fV!*1Oe17`bKo*$KFlpZCXImvEy zz)U^K&w^i)CUb_Ig>hOUg5H#e$zGftn7+BzmfzPFjqXyy&C$6FkEVLYGB{`Bp{kse zmm31xbhDwi78au2)it%+$!>ZbA(L+X*13}3B60B9_2A*vV@+^?l?hD#V4KcP$B1oQ z-KxK2bN!N-e5KP=cbuB zykb{y%uC4BM;}C_MC!3Ik)|nHkC1C?)#cXnzSfc(*~d|`hw+E6OFlUzuv}aw0I{^S zpEGotnK~~5iovSp)%gZ-V5N&Zjl%~o(2D!>Mvp|%YeTUA~K`erzrt+OZPHjwAx! zPF#qsoec!;OXit@kR7#VISC*`8YD^SFY;iVRB#%c=2Ms($=yh*dUp<&nkNKkMD^Ku zuni}mH3ZHAYnzPv0waHqMq-47= zm*pM#mG@dGc0`CU?LArBrTaZHCpY7$snQ1TMap_kx766*}z+k~PvpM^)kVMa^M_aPsOg}vh zwZ6vniwkz+hl;zq-Qk;YK3rVxHf-yF+`#+UWUddKWVF!fe>~)%_H1C9BWmYm<|-f~ z2`kVrRVHs7T-Vf%ezNw4U_KWb>h{J9au^R!NJ{3bVwxF?9Rz%&2OG#*;a&n|8+^_{ zjcRTPUc}?OjKMBLEC4d3)sg7-=@Nk=ZtJ^h!S#Yu{H=lmZALzaI2EnI$jM|sY|fJ6 zTqqEAROJl)45U84jk-qSfs&y?;)2mIDYS33tcj#x>X~Uy2L5paH2%OfAjQ?cPn&*? zCY$}fogOfKiS!Z)&DB2350EBPKe2B@En+YxNP#9XCZ%UMe$X;;eP$`42yCWmJT|*$ zy(M4#Qfp^X0YMKAF2>m^2fceXU6~HIgL{|ON(#I2WYd*M8}z4Hg9Y7e+1Y5ssCU9k zV;;N(AS6PUeOGzkYgHCc9mQ;Ib6xsv+P9s%ENIP-;3zSus>1PcoQ`mx%j}+|QR~HHC)k60hFBdCbJY_(b7;fW zK4S<%fK4RhQ8WSR8F&NeUH49yY)&S8G-Rv`ycvZ;@)p#v)A`HLUx>DHXxb6yi-Rs; z#;(%&$eF)7(aG%Hd3JVnwK1vt$B?%zt%c%Jlq7RP&!G1cah9(%C67Q<<5CJPgNkJEdLl+$^@(=c_B42Lu+VvVw{ z`Ms+x3nIMYRBUVSJXw#Elai>B8FOjkBB3LGHGZr+7;6l=I5n}=Z-(GD>Z(BirWxl5Dl0#{{Ejho z*lO{G;lc#$_QBu%coBBOC#`?ki`HkmmPVApPa(`+Fk2U$;ik{}!5~KK`d+h;3HK<= zU}d3u*pxDUZ_0#0xsolw4OSD=Y2% z($~5zv=MS2UM7bdoXjRKmbDnK7FSG8Gs@&X$sQu?&_p4E%~#=uZ~iXOyv5l_X-$pH z(Zl1UI5iLAQ?rv)3c|zeI4$yw4lR5h7b#RUx|z;jj_yQ=9he^{2_o*pX}gnDJhF$` zF^HC2ByRKLhNIDsHvD?FwpvHj{b8dq`)$P!<(s3UuYLMSCn|9D7Vm;)yF;+$+@4qi z*6z-N8X{(HGZtXZ?(vSWXvnDmBO`rxV6+{JEQW@OmCZ$J@vBaSN85*4>nUF%8nwTNfS+X>#o;!XzCrfQAejIZ@)TjfBx7V^=_vJQd5mBhPdBa`EHTkI`ap3W)9fhA zPqJu{+)Vt5j;paLn>|NX&5l&rA1255a5`U;DD7tIITDp>m>l1q7P_Y-(&YZjEk z2QH#}2>Gmks+hTIko_$lnUjRHD8idu)W>Lr1&*;Vwn$nZq)hxkUlChYt8}}Eo@;YL z?Xp|Z$xo$(3uz`FUjEtEA6@wcY1e8Lzx$o-)n9J?^S|@0)}LL=p zf7Gg4t=3Vi^}%2J!_6;8t=0#B^Sk%H{8sCaKKPwWt=72J`q}UNR;%^FKRWtW>!8)T z@>9n+3$x#9UHKDUGfAsu{`_~YUcTx_H{z^GABT=hL`Pc72rnlbTLc=qd-2io7zYWz z*o%+8D9ZR(S9;ww`fsJzolFsAZ%;Kx=M>$zeD(6xBG0StIGYZ-d-33CI!TJl-!Nde zS1t^g6y3OdHPGRl0axVt<*SYhQRJRwL9)`C&nUg~QI)wfq1|9k5H!1J&O4L>n5X65 zN;oILj2$e+S>jwE#{1yOr#Qog)-PXH(q?k?Xd)ttSzlf*^0G_B)-9&X)p)WTZP;3z z*Wj`$JFc7UIExRG;#bolNQqz(ypyE?SIS3d=(6Sx(AOK6FTX48wr#f_g)Z0@VLNvv zHfVLW{%T8COEHO8gd9;{Wg`|8|O%`1SAqtrRQqulOtR4+gE;O8gmVB5Ad* zd{+^xsUJSnq4HeO1;QKP6s<46t+4!Ag@tbSP44Ge6{lHJ_}t+y++mo$yZ5&VroSpM zeY=@E{Cuq`aEO2MEt!i!o>g0qOmv)7hm`cC^wy5_B$-b7{P$CH5Ld}be9C`+^24x$dqp}tNB|%I>O6QtnHoJHrAPp( zK4pHWI1#KlpPOp;5`=h#hGo@XhIm=-#^qswykPIt+vIT4 zO|$gO&a@2ml~e<~xV@^ciQ3(iojbs@y5cSb6BivyJef4MiT4C@Ji*EA3&F_hNHdK3 zjoOqyF50e6Zdo1<<&Q>~o61?Vm*t_~0O`XQ8dWuJ#t`09>&J0{KQ1~Nq~&S^pFY?Y z@z;i|xBgGfaQ1ONT;AO7Y&~Vp;4iuV_W%5!XvzIwzwkd3Xa8MUa^Lco+|SnQ(Ae|*XpF)j@kl^8HqNy+QJu>;h6^ce+7ov-NWz_y=-1FsL!~o;(!)m6N z+U{-Vw5*b`Jwob*AIjFpgBgyFv^0;OJU2TJpI64 zZCXNbZdu8VFw+l7bMJB(73$Ixrn`1hu|_@b+9C{8fd7Yrho=d6ZRBMqi zHuKVWU|t!XX7M;3`1*!|tj60~xU8=Uaq_@-ZxYT7HqS!4z4P7-y z7WdvtIXTY3Bg-$K?o`mf(Y*7-7GomYQaWHKiAe5BO_@J{;| z;GD1T-8ttZNYeP`>BtrHTsRfNv$a(xrW0iT%L?L#@!)aM-6o;;Qg+pOc)gXS@};iS)eK3H>o1RnT+oLO4U9BXuW)Y<+q zsyQw9#vq(^S0?NtJ>bijIPXQV4dq2G+9-<_-3rE0WWzf(e!B(g)a11N_u4Vfo=i8y zbrymo`hyFttS+JCktBnQSnkNE7-$WLzgsn%In|bB8w-8_Q+`Leo0`Y(hB03!PRi>jNhNLji|p}09CPaRO@XzujCaI%J6;V!FWwXdalEqonpy@2&s)_S z*lMV!RN2y*Kf5JXbNXtjj34E`p&YAYPV6Y*N=G`xB$i96mLV;1NaaJYVw%GisV6Tw zWix$n2H0%ZerdA+l9IRZ$t#C&vL^h%QV?TajU+pk0bsp=%FX%l&*mDGMtF)os+}h9 z!eNZfTno3gY`FEal+6`YpEZ2sS(OT3@%5}q1ug>6RZ)#%mAIGa)0I@uh}_ip?V=>| z3Ib!*L_w6zqnJ7x#NFbN&`EJf4Cw%|{OAk_PS~_461~x!SJ7{zBo(318ykU%vI(4l zBr$Bl3DcOI7UkhC^SD6_oAZDV-?o>}=O*EX?@2sT7#S&LDnC$tk!n3kb)0%Pvea`| z>5TU59S_pHSLixNdBA_q+mE-^O>?KFL0zl6ksEqW1FEq?4YKN8QQ$+OaoepD$YlF) zGosDOW3uQf?a^ISrB|jZ2kJe)n$H0+g~M4o6Wht2)u8zteJvc$5`~}j>S`4f9$EiL zB_$pex1Z{^C^)MjQ|>_&rKhW^PW?Rwpk^Q?7Vl5h-IVN2ZAGnz8u^C#twtyumf#{9buKp2D_pK1N2!W3 zS{iaY*^CFS(1daXOa+I{wYhm_F`7!Z}KRb6Q|1Ds-!3 zhc`lbW%D(l?atT0s{_sh^Uc^jpVHy{D%eDm^^Oz)y@XzLHV#@|%~(RSUtZX=G4@0# zhs%Cg+~FLhA4i)kv_VY7PuBZwZ0eV7bV_*$xPTI6btvkR({Fd4bP__o32t5 zSdz5OtzRzF~EsyzKIN!cA117k! zdt;X8S6zRi5xL0psOkU{q;w{71@>(Mcz8*&24;W;T*h{HY%S;djtUT@| zNu$H9&dWienPft>(JY;_!iTx*TrKOw(aA6G0bbWrcAbXc+EQy=$?0L?O0X^tLC$Ks19mC7xju`j-hqViLO3Sxm)sL zW5|Gl#45^ZUx2IOpra(AitIM+>w)j$t;mqGP|f4L3s zi|Y9T()m`xpzYU-B)tr48$JnIkqFQ}TXX)j6et0^Z(C;J+s@3m+_-aIe2`(oi&x>0 zF>WUozuQcJRrSD+;b4G$v&I%TX{1$hKm zT8vt&wFhnGSZ-ToODUtC3vu^}EHL+=9SikHcHGt$PPz@FcWjzdRXS||w-O(Vo2{Xsa`~ zOl`nY?=!`4CmC<4-gd#Y-W6m!CVSNjm=+NjZ(xRkSatk5ILEuOTy#se zuwAG+r)j$K!?G9@i~Vx9CHC2l9G%8nSW!cJZoxvPVG7_8MWaYZPh?5}*dY^P7=#B! zPJO4Zr)~yQP$lbO=^Hvh2N^}9drYmF@0IyP&+N=6GLLr4BLH|9XY#X@QS@?7#tPUWtsM|A0G5Xm=ZB$4gl8300$(i%V?Y`5JjmY|y;^j!iwp zXk-2ixfQ))8Nd_LR2R+B@m`%C99C8z0CxBrVI16I!xoJIN2M z5Hw*hN~MOa3gh&*Dbth+0m#7aAS586lUf?z;iPh+>5^*P2tWdEvlZjPRgiZih;+24 zpXnK*J&9>+Z?K%Y%yN-!z#+zQLScK4J9ij;7~vP5@qkyeHr;qNs8?G-6iWd~pY2m1 z%os)tnQ#!m0Nrr_vOIZ$*@R_?gTf^ZRtQA>y0ZiaEq-zR3x{))mNN~t1pSicH)eEo zXYq3#+3t+EiZapze6+}?PdZECcodRVy@LkX#7xhLz$wYiXZzx%5~gVrQx@dQ=N8msgu^~|1dTW+=V9EA?MjWdExv= zTff`$8bzmDr(2b52ls{MRB7_;E>YaLh7tvMTGt)CwM^Y(I?qu!Xec*wXC4lx{va=) zSG&qcRrCv-ah&QPLUv_nGi>WwNQst&1g;;W@gd1fb5V{RXill2K(8ERih6b7MZ^$I zX@hAal(oS3nBg?dS5ophIz8^)#-uwl&TuU_BT8nFISW8l+K2Zr1APJMb%7LSdF`f-nF=gDK|iN10xB;FSHWh!0ajKFuP_@@&nM2;ppck+KB%AbTv9QmmotGD z)h{%QgwAEi!nGaQ>OF8}CfwJ34#J=0tr8;JYB-*cPtU@`>*1d>@XsRrlZSu$;Gg^9 zpL6ifVLQ}7pKLEYx&i(vz&};^=U({d9{A@z_@@Z}?9-#Owx;X{0G#r~a0-RPIY6PQ zhbj9}8V~9+4@4%m<9z?D@4-!t+U$T2t6%3qR^ZDfA%bK*A9E*g`6$JjSDnzzqcv4b znbU$RU1dbmm{LIGv**s8T{j%J&)RWw^Ac{& z3^nx|0fIfum8+$xrV<<^BYWC(#Hrgf=;@ATp$FqG4FyG6Bk~bmHL5SX!34WWa^J9> zFDVFZAtE03E=Utw;zi37vbOyo28~V9teNj*yqdq~KC03z8DH4;;U;@CwN*Z%*w6K6 z&ssr`sbeCaJ%jtn5}A<9A%B3Kv1rDEItY~G20)?AwkQmH_U!dWJ_18>()H)sOLw_7 zr5DovvzGLvE9<#xFNzY$1XfM&O;rVMAX1ZQfNGCD@gQQ*q!W#tq zCDlgy3%ciqsJPtNZ9vIngGB(ZBz|KD(Q`}q0Efo*wz^9&CN#qCj50yj#;gEQv zzYq>WG!#tiV>YLgo@jhU6Dqk*hC;T3FNrw~7D+C#$kZp%fQV0?ye8U($fHC;me_9h zASo^p&P>@~M5Mr|@C@SAG5Buj6rE^PD{T?wqGf+&?KDT&56NkBH&!QoY#HcH4Ozsz z`8t*Oy&xf~c~KOEc%itF5oMx)NV0QxxQW<4xHot{3G}NenOnHqm?bth10uDlw8htBB5&kSFHnXUGCaL3q}y<545Y zCyOF`EgzFVYZ?^zQpX}hUc>d_=!Suc?6ny6G!8Y$F*=%ac$9p9*D}U*raS?rB#bqN zgmJ@NI@@wq+_NpJYK_U$*S4H6a?fH#w<#xFs|OqYtraGYRKElXfQQ!q($y2NYe#!( z3L-AD(rPc<$37cgorV)O3$;d2TT2LlB;WHQi}A6)I`aIQOUz9diNWr$)<_+)j2Er_jfzd$yRp}# zce7`)ECdw3UvfpT6a@`8hKn207$8qu(*~jiefn65UMhTy(>`&J;J8FJ$E3`w!Pi=I z9AY~1sKAaH$VRpwPA)|@$+?>EQdxuUNlT@J zDrYEHJ}5V2HCH(Zm-VhybA#%rQErH`d^9tY15WI;y!2r&y#0HR=Aap-N^v*y zZWJFBy#R9@pm4}mDxjU4V;emJyObO_4x%^|;E4nw3WgY71BYF~9gp%6Jh9zWxypS9 zwI^!uAk=eb|ECwPy5Xr%6LG?~z@zC(5%@wrSLSJ&W{UJws2b=OauG?nq6P3h>57oIs$dWascvdpF ztl-Pv*(bzzTVQLv(b_%lfyW9@f#ATFeGYT8#^0BR2zwCHH6i!Hj=2}7!G{g=@&FUQ z)d$XP=@F54R1i0o3!}b?H3G#4tq&PHK90lmMD@@tT@Ycsfd3c~SG*Bs3hN0nY z?o#B%?ikvSP}z6Ii&xuA#ahrDSaRJ>cOBj`^#b7*V97*&3hFgR?a+lYzGBr`hr?V@ zM7SNgb%Ea)@aw=$r)31#RijnGmFTM){Ww{_-rnA!WhaFifn0cY^Xd|8BM+dhXV1cCc0c{ z6t7q6xVdIWf}sd~1A~={1c(f9G6bP;>t3w$U?ZbqZ`2R3xjypVc-4jM6Bk&mXtzWy z2t&6PH#VW$6Tt?&+K${Y`17dKXi({4c|iziB=IT~<$$VJU{|-C&}q7{8%EfuTm&_^ zKnac=G#%*X*4!P1lO54>S`EBL+lf0u3v-!D@Bp3h=NcU&%4EyqR5u(S&^^1 z%TBuyLs~EV&J=Zhs5k=?6uu zAL=%21Yx~D^1bEd{>b$s4@&#?he0#&ZIFNfU>%KNM~fmis@C8b_!N1rcRBt*sXS0V zFxq7qzyYaIHyy+-QPTCIlZ?Db>Mr$u+%sMTdjw4Q-cbcsRfZ(jqHb;R0u4IctifnVUK&SvK#VY@R{xeGtlT{fo zo{GM@9rTL(TJuejo!Vr3Kr=GjIS}O{g^&NWh-&xHNt4B%u=M4!0N) z{GeaN^at`)DE|cMspNc>+L;t6I-g3Jupqo;$Lc++Utrwo382vKTuUU~yE1^y-t~(e z-RnnZB=gbn0^pj9_Lx${=@Exy>Vi33RHOwE)O^Iq0$ zyk%nxyI2FcAAa9HhJuSVL1UTVw$gajZCb0;IbFQ4Kx2((-tDeT_;mIGOs%sI z^P)^>Cxh(7R62V}KqBL742oo$W;)UiV3ED(g|l(HQ)uMsGBnJ4b_tB^M3KneU?I9< zNQfKl5)hj*_XdR~XNE*EpIri@J2Ljgg}{WNj75kE=pD5un4qIByOM%_mPM{NQBlYY z2D0!5nsBrHromK!Z&A?*tJQTWXIX4rL`A|mn1L#rj1th!N~(gU>z0O-dx`(Vg+s%O z9!r4^;)NX1rgpWWoasi`YiBcN4h>e5^p?w_7N%0lb5fZ)<{W#)Njwp&Y-qH_PtB2s z7P6z2tFhw=1kiw0bv!Vq2ghxv-Hk*>z09~bgCwhaSISY~=ag-69eu5)~O z>W7ZJlD#1@lXkv2i5g_CDAhTipS;xLeqG}Qca(g7s!>nOFr|g5e5lF7u1b6N+G{mJ zs)CCRpYm&oU<}|tt-02D6jqr9ATlvEh_6!}@K3E3#Xu?)(0v??$&d`MBSdA23;rEJ z`?}B-j#vqTx>yP}_ldr~1%L9orf4{ApH7s44av1JJYNip$gKr_-7FrB7w8JOHrJMh zhBLs}8gT0_yeXrQxJp1DDx9}F3PD>mZGv=o8j^@Ot;cU{iUngK7W8K8a@gGFDT>IX zvmQf{z4~Cpjqf=p&&>z5e|4wxuR*vnf=ZWxSk9Cv*;bQ<%4QP&}bn2o2) zL0EI?72{X>VTOG+9S`PQtJ(xne_g&ClbRCLR=V!0rE3hNca^l)5w}f`W~WjiM1e!wcpLb$5LLTJ~~c3n%49q7}N!-gyPv+|-Q79$C}ud5k>6 z3=@QpG1M!Q^s_l=!H%sc4gf=<-gc3=xyoQs%s|eRD{8B5ZA~ zI-oT>&B93r?3&?S$WFoS%(1toOT{?tIA}VtSCgCUTBfIktXMDRZ2X}n=hl|DR3d?Iy=`r+L!G;xmo^1WhxUEFwj z`sn=Rsp&cRqqkS@HK?tLf}1JnAYCD2{iNTX@_Y|$dC;onVh68)&)89=@#geaT@|P7>WRzj9?Q(3X&>AwC;uxoVTSEzev=*bden?R*K~;{dXw4C`7N|!imW1chkXOv21sM zoI~y5bN~`g$aOa?tE@Xpk6CxaipWtGVz0o%yfrGQ&~)w!=(@J1=LhIIZ3VvT$6O`F z(P&Va>Mk4xuEkT(bP8KZ2-GX>^ff13zH>#pg zCe>eR2Jo^p<7qww^%*V$27Q$TwpRVodm-i^8L#meSlH_fsuIw8G106Z#1#c8_F;m` zAmGIDshp;qLj~?pkVn@*H>7tZ9M~bjTUnIzVkIb_qp3kHU$k4WDJ7P(B6KupwjdY> zD&rQb7c7gVAYPTrC&~ShJ!DMeIu{WzQ3k7`+rtW%43WTsA_MTtzonEzUp`&W4Hv1_ z*4nKI1vyO;Tt}g^2@rxe3k!eE1X1L{eXJ_u76XG67R39L;njW&Z9o}B_k0Y&rT}** z1ps9*N(bTkP^-f*p9)P;?FP^1JQDq~io1-_Jg_kbJ^&Vj1<=$;rHMq2W(cO`qP0=& z*W?yq^3jb9BShJIL}D-ksB3cP8b5=wCUS$w>4fMi`qh3+7yjz;Lo57om=(6BNG`L% zsA9zDfU{W$J16COzwrE4I|fmzk#-JMYp`m1!8Y;mK!PfHrM#452AROs<9i1;2Q0=Ds;(|Ykc50%BI1txyz>#gF>og?5yNvNf)_xOSM2HCyxg-^l1q#Ag z5gOqJ3TDr3Mj~r;UZh9Vr?pAoZOF*-R_q30R7-gq_F*LM;huSxYzjKp!5|{cL@i)&qUH#DG2QDzjsjXNR7b%GqzNgOCHYgod;lCRjj92q?5CEm zMv(bd5B#{``n7Pg6<0T1d0n3-H^R4d^R3pqw}9@#L6dW5Sq}xryLPlh$*He;b$45kB_~UvAm&U8K1h^+WLGJzH20DO z+%ZWo@_=DDqT$7H11)S$y<#2$8W2U?APFaSeLkSYUcm}q^Q-yQ8NBC#F3qNpA@#(2 zY0+|hrSA;9&D{h*MD1G5jUuX#2`mXyXh07|4UJmZGoRa3`!;2zIX|BHrZpfO!iK;v zrQy{3X^46NY%c))&x;I|po2whCz7N)k-UjpAd8lF2l!%EWGvWT@I}K(O4$x&_L#dz znLV2Fyml4jDdfKsMUL*n#Oxz&NE}3I z2sg%Y?gDUsw+>xHbHk(%=uiMy(a$^QEW0A>)SI6FoO;l7JRefzvm#5DhJaeE`mY*u znqpRDiRj8wg|e&=yL)AY@Va$4n3bl6c#(xN*mb~a89q7^)Hlfjv73w=ILQqm~`57hb<@09- zVmRH#$09(~H=HOgMCk4Ul@zYz3>xd6zf!3C5g9Stw(2CK2M1utPWga%7i#9T z>Qc-?6kNfPST2z#oQ{dy*7)m#1OG_f>ekuvLBWa|D0T_#<&)?H7nD{jdXZ(JEJcWr zZ0dn5a%L?h(rX-46ND-`RyBt`$gK-(i+{o`3yh2ZHnu83f~g{KD6DGg%U#w~rYH05 zL#Vsrl~zU0=fY?J7`^Lm2zdyEYI$5oV~_gZLg@73(&4({+-ZqmL~z-!@Ub&?e$0Rb$Cc-cb0&SClhm!~Np52-;wILe(1Xw|%nZT=YwG9(=Ql*L+X6*s9!`~jZp8b<^Szkvx2}s- zHw2?1glY_EH9PW>0N6laaZm_QM}?N!H2$qlIPZijZj4bPSWY8IWV}Sd$GOJxqwxvsBDrmQmwAp>K;_1C>H@bT0RSFq^Tg~?{&7`nFFIIsy2B>YUc4Gj1ov;tV~ z6?figL=W%06QhTyXigG7rF)co_g^NPY2e41QwMnhGmE6yuOxjpwj;<)i;M4>_C#R0^ z0gPf22{9==@!>_n5gS3c=HNAjxS3%)7!Idmxq@3dXw=-0WT%K&@&RQ_C_4$rovH-wcVDY z33_?Z7>~h-8)r{VZ8sBRjEg*-Ub#b{K$^9qNhYPG*MLAL!!S#-yxU7E31{oqh<#&j z-PSJ#5tiH8+>$~#`9p_I&Ml+?xI+#C#FR3h#;ydVTn=G`BrZYE^unM+uK&`6}OW9kLNouUC{&k4@EmC z$JkjjhyiaI85=>MR>F&DF_<@zv%jr#nlQc8Oe_PblSUfw67|j5qNwh6$<^tIB+#z2 zu(LZN&#d^)j`@?7tYtg2(2Rk`g)_ zbW%%32lbnD%F5`q?yh?^mr|wtI=ZFipEm69g$Q#aG1psujgm0atjewZ% z=x7{#N!(BOj?m*|_Jc|_X#n6l5#T9=c`H!Cqs-2g8O*ShCf+ebxhRNps^l}~%%KO7 z!Gp%&hS8;3#BS0bMSk54i_%Wu9J@ZT;OESQQA4jK2T3DXfjm<9WHBpF?*;XOF3-~B zbWAMJ0)wH0jpQf?r7c?6EH({4rg@dyl59HKJ|@)l_KL|FW&70K*u|?UrPDy(O~>7MroA-D7nhI#oM|sL zyxL?-ncgBNUz2BncFhE+PXlhQ+nXE<^DM~^pS0^cy5Olp7$eyaaNPTZFyt?=EW^Jp z#F?=;puEQ{X1$UMX}EN%qKwL_^^@s&LGNR?r>6UrwMaAG0Yw>`p5KmLL822~F`f^l zi_ueuL45Fnf_qLnV035$?i58;kCIS(#oYYFj3|$BL{|rN$%qFZqwj7gF++7Xbf67| zEV#KMQTh0r1|eyjlsGtX(T;-xYq)S7BPqV9pW|T+si(k0Zn!7W(Ol zDp{SCNg6s^Z=mJW)|?f0fZoFc>TIJ`?Y1%slN=lu+r(2+pcci^b{N7EYr969GlrGI zx}gE2aRXY~P2JYeGy(Kr5_5zPCO>qaE$;lnauD+71;;GjSzl;5D=;Tn240?tQ!aEH zZNx&%jwH7D2&DQOq=I?w!zct{cZuc=$DqKxfmskcwVGE&cG^wnFScb00~o}@RKBC@kyW%19Fo*a8_N|onm2#IhelJo!@EZW4uia zG{MZ$x=rC`ov(FaXV&zUY|!yVguH{z(W-BWHn{JDwwBBL{bXCB)JvE3<(d`pkx}#Ig3T5;(EIsW8f-91)w6pZPc%d z8%;@cM`MAZ>o|_w`98CrZbuvwTi&vOAyN%HTN``y(Ts@Vq!x45I*Z=jT$~T<>^YV@ zS8F{6f89Cz)ho>8>!oSn7I#WAW>ePEbl~1vrUtCg2VrhW4KduRLON8xSaNGlJ96P1 z06Ux?+R1guH*%F(+ZFF<#DFqEsi&}Hc+55II^zQ70P-JdC(>c}6z{vXA5}755}~X_ zq*y}sI>1)qEFHBMCn+?P+>2bX(P3j$Z9?<3Hq+`>hJuWlLf|NsP&&z7le#n_psFY^ zJ?adKEkfqJ#tTn>Yu4T2(l&FQr8}It7v$66RXz@6SH#y*SxQQw0h3;AU{1}3n?#fJ z2fz|DF)*~m4VjaqtyCu>czGU4Y8CW;y4J<3S9^{WAzU;e!5E7eaj?~gaU_U&vnZ0k0H@Lv0m253z!uP{Y z9zLPdbxTQK5L+?C8zL&^zvQ~UK}C&C*&Dh0@F;;iWdy!Jpk<}7B~zpn9#WZAid9NG zBYjqsSh?+_3@t#XVzMCOnI_hod4*bPQ(0A0V|Bwm1#IFQ3Ruv9MOnUtxwhIMHOH^H zxO>Q_O7&EDPix1joT8SrlH;ccr%sNqMIWg}Gst8?^u>YU@KxE(wns8{TV=+-z`&s7 z-WXVACT)Zou>q#BOV=Z$@2aCZNCBw%!qUpVw7(NlqOyGg-G7QVT0jtcvVNj#{-_v3 zTCbEzEN%BRnz|Un&e(J+2kqr!N%qVwj?1Hi%hR4S;?bBe{#~SXuzEmkalzLYdMgyu zYfP9IFcA09F_4sBdfmIg3$WV(k4jJQO@l=HU>787h-V>J2E+J0-PkV(|3&=qE^c#Ss(i zi7Pa~iW;-o;#4bfr=tzm@qszDTZ~{l55u)?06gO)tHHDAfGFp6Cr6cRirmu`K1-v` zk5qA#!bv$q#YGZjugaZAGjP}4a1-w|2Odt|K*JU@U0?lTC6J65Z#n2hKZ;qZ@sCeQ zI4PvtDh5SsLCFDn5>!n{GafHG+6db96G0Tab#n2f%o5*E%n9g*#Ukc6*PtJvGsgc3>Z7u@__f{A z1(NBYBYb2UhaE$aUIw{BX$-5^@Ulv$gzdnD(u~buoot2JiPn(tq?Bnnf4>7Jvt0?u@+oUt5d~9-A!_>oobgUD8apC{7zHT zBX5~L&N7$pnC8Ty%9zN{1W{Zd-K0;Pw%lh&PL0nVQ-U6oiDuirt^>Pm3Q=+kA@Z@7 zYic4eUiP>bV0iz^~Y|+zQZD?R?aSQPRNaT z6PNKjW9`NbS__#rZuZH3Nt8a8C`y8q(nz};9K+vcsGY1?dcJT(Gk}vT%s^nBA&3C1 zM*0aX{~rhS(4z)7Pyv-n@U=MJsY)Vswo0l#MaK$IryZ2KQ;L3;6mbjLEd(HFVY^hm z4vGb;AHeN~EuBqXA;wHPRR=qm-HEDYt+K=^trQ(9rQ|%w?;9NBqtWb@%~O2_CU0s( zH5mmOKUhGy_oD4ZsH=>w2HIe_LRBjzQW+8)cQGtby&L0IFRY`{(2pJ|*j6U7NzW?t z>DWF#Y#jwo&;aimR2os_OC6Q~PCFEQ2FssfNv3RfbxzksW%1bkRi*ja8qWm_=!9I} zjk+gG{-x`9bT_z>foI@PZSoyrkaaJGu5OAU>5-in+B25+b=Qj1^g$Y*^cn3LU?)a` z;1ValQ(eJxLDN-EfQ>NlSJ*%%+s;-cpj-?X$utgofa~Iv&W*uX6ugpHbe2v8F`579 z0*&3)pwx#t6=~WPiPuplkWO3L)ronFYBJ40OI=2SQOpH1Vr4BdEHL7^b<6!B<7Z<$ zaY%hj3<;-nDX%LnbCNAG%Q>i~t^JVdCvp_a=p2`4s*8fuvw>qUZ( zha+#g5Es3yVntYNUiy8to7VbSxr005HGGTPMbpgVW}MC3J+NkHL!cNl9jV&xm6E=t704%dHl?k-Pt~Ot?(}m70_?S+z zwY6-K$quOpndMH6sT58MycO|?WNQ#0u~n3*RFd{TqVpSpl=8yPO{O9{tVxomA7l7t zO&m%A14>{?w(3M&NKFRvp)5sG?d#H@U-kkHW8m;wk31(}ZE?fH$sG)ivGALa#pn)- zocc~*Pu&c~y6*~>=_iLoXKR?GMTHt^rmlljZEh1KmN?Oyh}0OX*oXPC_0ka=BlM#n5lk-ZR(t^XcJmsUS4ixlv z!&$f0aB5%;%10AX&1tze2H~u`G6AApJ~$mVCj44ZhnFwfQ7`~RUkt)tKyOQ53+s#}ax#4@3#Xiy;y1KCUH2zhDjl)a|AkX~_JN zJ?1;cfa*(5*asD-d!YK2h%0@u|X%8*pCnq!-1JxnJM)fq%vQS{?f~?$@8> z{d&2%Ums<+hmD)~3AXOJXZ7w2qZ(XFa;sAh@SX&v4Kmvhc2BVATqS|8)EpD?1b4si znwVP!EQ-@Wmc7v3fE(MnMo*yu^MPKJQY7-VK2a%^MhlfvWrQFRhmhes2mdXG?ZZ^t z6xwmM`$$3BFNJV*v{*g>udK##D;gUZ2!p67dl;w(wSnc00>D8)6r13SBP#;f@Tr?s z3Qy-HvXUuL4KOGZI}7I|w7Z8Mz$F9p0Q^Z%KsMYI_pmvVXbW~KZ~$@dy@H>q=JHve zcBg{`k&e!MmiponLV)mrAXJwfP)RHd-Gb{u+;MU zIE`)zAg*C=&z|0mPKOjTV-zBx9`i!%BcHWVT_1q-7Ilp---;e@qUp%8t|+nttRS0R zLS2D8<42DSX(Z-|Wb&BpCjGj59x4vj-Sfpp6qB{ZZ>XIG=b%ruV^N0d%9Job&F!cg z!W}hEBO(c;O@Daeq0H3>HmSLk@E#=Boq|h+bgLWPxVCztz2ZVGX;!xQ{S)n`;{)A5 z36|+LorRSTCzt0}U4MeW(A}L3R%SxarxJzo-Dx+Ta-ub^ip#z8k0TZ|gvygaZ4G}m zCV!*n*N?dkuW7naXq#XqGGOhI$d<~L!J*-i(ftRCV*}$yjvkx1@%V|!n{GZiHGOL4 zmf5-a)3@Gs`yJ19mTGl(d1ckRYpv1rgVyuHC~mKBoZq~=pzL2bvNDN2f@%rsj>@oI zSu7eb=$Kx-*>ZzrAXK{Q#{lb$AU2-QmC;4CO#U&xVG!0@e#cD;Ith}u^cvKGk9n~hRzdkD7E_PbMbLr-*9g8BTMfta6{kTjI}Q$nDe_34g~KI@NkhcI zQZdKiUx{r32`L_m?G=#_UD9jn!XIO}Y*yZ@x*d7UI3ZpH+DQ|__2Y1pX#ggnKsVjx zIJ*u{Fpo;cNH>yf?SAOgqm00501PB~$s`G|64d+v5ky)ye3-9oO>w)xirQ!eacWIQ zXp{y3aHaDnXs0krV)3XSkJsy5&slYG)Q@Lf@Hfc}B>grgyd)k>&a4k{i4r#w`Frk5 z3^O^iKC;zw;23QvYs)GNZhC_7m=il`zf1KeClw<8f%QHiw&b#sLtyWzJeIjEzOX|M zD>2`V%cc$5oyTssjZ(NQ$Q7_s__Ae1p>W&smi(3>m#apfZMm+ZZ1p8^biX@xaR=dJ zGZzB3l_Uj2f?s4zm~1;SaohL2-MGiN{+C-vS$0O`lG?CRcW|nUqFkyBQO@&`Ef;Gm z5W%H{`$LNoADsOiq6Ej>y%^!eCl=>Jow<{q?;3JMu?gPMO7)annjARL3NBkB2hu%R zpmc*(LeEke#8<)HB>gz|b!xgDd4B*PLqHoeibL$ul&7FmRPTxcAGovcip9d=Y|X2O z**=3m+c{^FU8gaAW(smxn1D6er2K>talNH5=E3zwW7*J=U&-8$6n2GS$w4Fl_lxYE zXG(0DDLEs{D6F`a$n!G7jhlARtr208Ij3VM%rWPF?noO44Ubgs_9(A ziB@40H_>5xF~?=;VT-qB8NjSf&zO+t~&*u zcOCAc3z)i@b0e1)SGYsOPk>!SGJe2o4M^AYfN4SvAg86H>Z`hc2|h`kSn42BQSV|sZKph=A-PK=1DY`(s|%vFExa90<#9EnT>~YI zN5ljkieaqacMC0sG-R&ashQi`c75dEVdHik^da85TeC%l@rQEjjy#N8w=0@=yLoqr zH;-DLoO-eHWtV5c0hN0!ByPSg)3p>$P z4CRJCta?;N>Hw5FV+mV)`$KhQ0`8-%$Dd(=wZ93+^!7i|0deqDXK3r?drtEWIPd=f)Nzr z@Q1+$vLa7O8l4VUV}~pKwojBxr4spJ`=FuKRiOZz80su`>k~QxrlESV+lvrH@^&3i zfTepEpmA;k1IJ>h4`L8-R8Z|~72Mxl)}~JHs>l%T&hw*|uapU4kCF*t&c;f?_1Dcz zuvg#loVy@n^EI3SmN7HHbjIdY+!QjtuDo)9Z^&~)I6M^TJqK^K!r=TS3?tUu&Fc7V z$IqUeoSUDRrd#x?*|Fi_((rJ$XP2GKPE4JepOBrDO9zVO(rB?fI$9h(u*WWMIx4$6 zuxoH`nwnHIDwlRYotvh{Z&#yNO1mC^uB=+`p>ahvE)S0Ee&|8jdT96ao*R;lE2Fy} z`GlJE&}e07aCCHNe*wSk9~s<3Zwd>erP2MR{e%0<1^jlPGQ4}7o={jRkCYCSM)wa7 zR|@p?z|eu+BkF`gR2j0QDhG!44;A?9=ummrxSLeCJG3N9=S!thxl}3-Rm$axGc;5= zd?*y<%3*xAzf`G|N~QfHgConML!-l^l@Yg69~|0Ws_ZY7N<;AO(Ba)fpzwVt6oZw+ zhvGf-p|E@?tc&spfKu5DEDF1a;=_l+ny8fa0L-wYWthaG{y=*h{6 z>3L(gGXq#`c-g7B0~=oGuC$%7j{XSa0O-a_L9z8k(ZXv`3Ty7>A{;2ltX?9e%#%$i zqXY!x%9`@#i_d+|U2sz1V?RuC=d~<%E=iX=kA9N1EUw&5)m&h%)pa*s)sqsgzmC?9ZU@q90fQ}2-v`gZs)r&Bg1Auk zLLN~+Xap;8g+O)FjYPECEJWVjZgpsik2?o`0nUiSQ&aX)(Idh)xr}3H<^HVdHA{FN zxk}>su?C(ig$;M9?JGK%CS~E7Fiik z7hcm@;hM*hv+jyjuL)*SJ6b|qXM6C{_km@|OBL;~QO$NsoL+N7z!igBsI7*uFj-NL z;O>QZ)m}h;4PNQ#A(+ZVd5;UMpI**vk0xV!1T=w*CKp;6rsY!cK=DAaGEf;3D^Bcg zIGggfvK*(P##suz`ihIG=+GtfW(_8v%i)$npehp_euFaF>vjH{U({1jfJzt!i()*A zycHkL1;FLf2nh_{l5;_jq`}SeD#N_go|f=1{)UQTdVGFNG@a;qZ5Qjjs+|SNq|3`* zjYg1B4dFX64pUooJii)+HTWS4YnTD=Mv)x11mik*T}xGWF9#kjikTpcAxG6&gfU)J%ov7c>f8NWxa6F_N6giTU}NIdLF4ncLhYae8uB zpvN@>bnI|4HT$3$0>AGSTE$=^0{-fil=A2s#-FUDvx7l0@ zPDYi%%5Y`0a$vChyq$IoHp;~Gv6)ko)AQVQxl|m)|0|cqhK2?uC7%o&D*8%XTWudG z!e@>KTfI{#89dF{q>4wGqK01;3q76EMm}pen{H?bqIzKS*a1_p@j_COGeZ=06Iyb{ zSR*_+J(_(YwkxE)pbtZTNXX8=47_`Vc@LCdQ} z_h%J?v#A}8-*%i}ffKj>iszq)JG!8BViu1(W}dF3=2H!+$tLPbP&nG~Tt7DTlj|-& ziu%c?3P;f{em9HHN2H6-$16Fly8}7;GgmUxJu_y1xF)ClBMcsqi zGtJg=l6|BZqg*OYiKr38)zE25q@lco1695o!?o;V*&d-~ z=0H-65h0<_D%7C9Q8TE!)o3*cV`$d`oeQ`>>Rw6$9jFw`Bm0ZxQYk5hsJ|X-OaiH1 zPi;SFiD$E866+SyYq*A1=QN>#q}1hkY382R4=)6OMt7_807b}M%l2T6O`JF?7^HMI zgSH<>S`#d+1fZcVdsbtEL8un>I*8LQD*m|5}0KLe(MHum0+6~JR;33 z$fBxRkKzH$pFVJ9nmN zIZ?C`g!O96jnr-phXw>FeEUoL z52WcpT0aCO%hmx6<}xT1LFj0|39IkK-nuJp^FsGHn8=054cFaJkZIhHESdRW(PpjM zs)ntOEQ9T7&9=Jm)6q(?JPP~J*6Ho$39->3ZJ>yAr>sHCy?BMRD4%4=#>&P@q3v@a z3sW$@GItCG;xCzw;@`O>gGc+Xn!?jsA)FC@3>bN4FCY)!e>onvLfi7R>>k!$Y5kx+ z;5#b%u+57gh_KR(j6s_=v`nsISmL(tyA4c0#q?!CYz)L9Tw=df4^x5f#X(pYzwLPC zw&ROdsu-r5aECjAX4}53eHyf^DQW&BHO9)u3Qq}+<%&_P5NpVFU=agNx4GnoX*1Lv z5>3hO3?MkVZ(>%rN`hgu!>B+?V>By(sR4nw{(2VSw*t|=6Q{Kd+Oc7kWfjD_2dR{# z3@de%ENrR@3b%p5l58sZKI$ZC&2ihJ5(VacWkU_BTIy}ya@{aW>qNc0Ti~~9m;yk` z^a=h1%9w1yO6k@Hy-<~nmEsNHsOe7nTlG=Rg3?+>&krCjW&hYrL30E#1Cb|vWGiE?+{5R_zFi&Qe@O8VVbe$J;UZYh_dPZ%l&dP@tV#Y(Ag3~fpF zoMsR9sE&_C@i8wHSyCE7t-`0&L4Wlf>`D8eZ2Gahluf3$vvBLN zInQ@Y9RIJwgyUb{8pq(}axt!ygPWH^)k{(E?b2|m z9M*+%!2u2$k~|8YJsmkK?wH!5RGba%O}?I3tFhoX&-UC0(;kP*x9N&^5ye61thkCm zosE@aU^Elo$@U=hM4s(v>Bi7?MF{|aQ%rPZL;idQ?Q0|aLGF0ewhOJm^J6k5vWsFl zbln6iQ%9X;cZWrZPC3&VF-SjDuz^hiXkf(Vv#0SK?&-NBW9V9^EQ-A9Ye1AsL;HtE zNASG0m^y+G^kw_t5WR34kz3_qbmc9cj27(h8>LDoUfLipu6{5{3cAHfI zRy3R?w^4;>Jcuf3KNuOmTzs0K4^1hZGWd-y^Z_5a!n{Ph4pif=U$l{QP|9WnkYP#_ zA}{NmM5ogMP+v-K_tBOs7lqQ>xvWo5La-_eM>AV(N|+isb7Bz%?XX6an@|G0X2LRn z-IZn-q`wFE#J56s{n+%J$YNW)vhw#cNp%&{uuVl*>8cDa>Z_R3k_CtH%>o9||n3BbR%oi>cs=4`7v*X7nwgn2XFyCy|L6jqcaL<{Lz&%MsFvgxs z;E{W{P@oZ&^HVd&CTF_?4wStkBg>#ZHv9I_vhGLNObN$I2?q%z4ALBJ)I^rtJo>gm^rxCLg>8|NT`tlX3qvD;}r3^ zlTOUgC>opP1I5wdVx_bn?M)`com#50@d4df8GK-Tr;(FwtJ?6Z#(ObW?XI-XYD+V*ghLN z{)!u&WmTvcMzz%Lcf+H%gyR0rnYG%DM%ti=s~ubDfY=l6v+zwqM6@zw+(ov-IipfN|h|ujyo3>mU7%b^55%9t`wI@f!E~K9uyGb0}ahU>FS+wUb&8E%M4h zt-GKk)3wW#%7t1vTt$L6Z#s>}W}k^Q%_e8v` zKxJ@XVsrY~N_*<|n{KbKte&h)4xZk;`}UcQaD4jKl@n1liyD^eW9~(@JTzJ^DbtaX zq!jK9D9FDCu&Ad=fK-NBb$97>pcF-`PUzNYGPBd`H;&GiYb(R?=IymRZt;&Dm>xbd z(He0prS)5Hx@CU7bbRWr&Gi$fOVzA!{W{u+GQq@LpK?h*#z@6*d4HuOoJJ$qaOHHOdr7rU>riC_?Ypw9V?V*5_)(>}Pdm0Fez;~M3p4N#X>)qtGr*)*zx#Q&av|c*0+k1M& za8Vqap6j_sy7WS418l)F(vSov3LBD(2jxrB28F_e>O^gXMKs3ZzzIWVQ{<>8s(-BJ>bcJh zFgRgtRYzPxmmHip5Ipi?7p;;4*tY1RArB#>lBhV1)rzkVG2X2Q@k|hjGhEFJnr4gS z@1f4XEhA(ddU%}AaT}_pMVo5f4Hu1GUB7Pjiham#!RkDtD!R~{R20l>uy2qyTWTi) zLcU}cf>*Zb`9UaP+xzXN0u#q83E8;;Skzu#_RgC=O6uWIRa7{3ApiNYhz!A%WVh#X-24(ioN(?~JCaG=Pwim}yTy`Rp^)lM!V@#}y6;Q%S^8(LaJy z4PAGRLYEkil(l^1T+_VoapF4Cv`KpcpkztPAe>D`O%DTd8oEicv`dCK^p9+2X6}oRoSQCxfZqp-WU;s6i$& zcnT5=&VGBiH9$BGyw!p9m57h?n*bR68crWTzK6Z9v?~r#Y-m-WyFgb4klIg^^tqYm z?hFOgJO{zQ>kQkRgh=Mp`T^-KR!Xgr{>MEiWpy3wk?PjYOpO2FXV$ct6 z-rF1xb!#ZBth7|fH9)BF?1_rH4P(?zt(oCHbbZKg;k;dgGH3{y-m8~eP=h+kD13=i zTIi-Md41wO{d@+JT0zQ<30rR$>z-ry!6`IZ1na?dVo@$(B18lo4YZ(-L~FUR3AS~o zQH4wff=Q3gIZa}E;`Vs~m*dXKJSY8*{)X4|h^Xb(;35)v1W?4QVbES##rw)sdM*Qu zDILjC1?4>nM?fkRBU8E_3F zyf#YC9Nt4!N%vF)r-0Gb6dw6XViEP^sC&n=N}bvc`Lphd7eT36o$AZK6v{<9BUJPP zJ#W-26EG9vk(K}#K@E@78hh%TKgV4=!hVB~nZi!D)j@c;ru?EsFB zm1O#o2@H5p503MX?IwjmBN0Ra@Q=z6FoUgAt#*+kktZygy{8l9!!!@T_HMzqpg-7S z`=fe#Y4`V{(FrR_XT!Bqi}oXltDfFO>n(W)YYOZjka`37K8sM^nT|pWi=t^Tel;D_ zJL|RUM7Vi3dSurz4W=xRZO~y?RSFwfrW0fA&1L~XnVQT(#4@9r33G=gOCUj4?L{)e#G9z#f zwuuS`9N4(jHFC4MyUu_1%mh&kMTN{h>TY9KecV(NRdJx_rltqoluN@sH#ME}@LQ$S zGgpQ$rJlJ8JR2P8nHv;UF*MvWHzcZ}GTL(jUP!4M*K-0|q$DQvoPZuuQw(}eK&Pq6 z0zH#3&PA%R)-wsPshD!lBtT?EhkGUg5*_F5nH=U8`w#c@oSAXmaIuH37$$-Vc2Qxh zXPh#WCTDG2Y=kRL!#13{3BLlisS5|>gpeV8d zcG%iV9y91MiI?(TU*J-gw>62r&HZFT`L)q zko0K-bWoE{0>p0k90<^4>Rc3kNofb}an8|CA8)rP)aGH4uTDi%mW!Ep)im;58m6Gs zE@(%0SKy454Gj0CVkU%9=1#wXwre_YiHaz?M-{O#;555P)8(Y2rT6x z0Kj=Qx>Jo=0)%uH406aW3sAaGce&-_N}aPStUy#7UOiqNqgarQMH2%6d%t1y;G2ed zszO2dK)P!Bi6sL|f;8eHvU=)DhLr4IRShltSvp~GY*~B-pRjUCPf#zzpY^yh=(OoZ z{heVa-1us2uTLXl2QkurM8fPc%(sUR%c0+LE#<~hP4^oAwmR|$9FHkO} zN?i~_4?8BrF4MDiHEi0TkU04e&K2`A)m-(rN>R+Yary}?s+7|9jkR&lgWd#$#Flb( zAv=aAtrm<*#q4kPEEp~(dJK zJ~+~4_!H1L#dX*1b?7a{q1Wy8K^Q#k(uQsgh7cDiw=#5TppOGp7j|_f(daL4F0elD z1Fygp#;L4Mm$Z;B^G1zLVtv=cz3asej(7;t z#t-ZE`rBYp1bvy@1RvYmyIpR+lxpMy&p}tBfx0Z8zCm{K;aiw<|N5Oyq{m zmGE4KKDYCKFUe#wH}UsNGnvdRf4@AF$xQKgXnmHyUzN#ZPV@I`jNf};1pfUKmu51z zXQnDwW-`B!$y}9rFw>KH5PG~Ob2a?algV83ghymD*IfBn`1A3Z%+=rj{`bFsN#?<8 z0ETOxbQ%17NhY)J%GhoAZv2?cgYxT5$$l^C+As8X3H0|w)!${yaSJ+w|IQ|R+8KnG zLXR`L$Bm5*>~UjbV`}F;0&JIGn#o-K?yEBy-B}c^VrNmbdN$b^P4o&t%~kME8Y-dN zE1}ynk2SizYGY%g5Je5>T7EyB?0#pnzY02ka@OelGNvFnavtvF7s0O1yf0);+LR8k}m)jaM&+g1=$p01ySJaabys z%a>&`e0AI{k38~|-+uHT z?Yn2?oiFNt?zKNVfAGEk`L)YeUh?O^`pw6Fb>R80d-ds)Z#(PNURsO`)KmGOJ z{luH^`qB6O*$4K&^7n85@YT0}=yh*@#m7I~^#1Jn(VzRybHoe!-f-e`zxUdoc>MqP ziH-gr`R5P3?7qwP|Iv4T{0W2EKmJ7j)Rhkk|K|6GfB(**C*Sg(%1Hh_udDZs4BhaH zXG*KyNB{JtpZVm;=`TI;CCfkMoV@hjZ@%%!H7|Zy=GvD$_rHGkU2ESy_rAB@cgt(v zKeG18?>_%y?bC1kpSh2GeQd&c@$}>V@kuXz;jjOvSAXqoFDu`E-&^05wlG(yg}KyR zn32YKZDek4dH8wz&oAF_{Dvb-(;EXf+;GgFy8YVNW`-~1)#@LzrM zfw%wTZ{73y7rt-sPycE3R}cNT_oy#DZeZ%ES6u!_PxP* z{>l@6@yJ{L{#E~S=O4_z_a#4cXtey`Yag-tBgLQo<_DXvKYG~%U-`wCZ+!L}f8zJN z|AVC$XCCpc+dlcRcV5x@+6N{FfA7wh{`6-HU;Km19`&Q|x%}$4{ch#$|Iqr^Uzpi& z7Y^M1h4t6}=8^R~3x&%*_fH4^`se;6|G{g2bMp&9@9B+?-*wgc<3Im5zy9nu{OZlQ zXa3H6uDJf*?7p?X`07V5ealDAe)&0ndCxbd-}nm$M*r>Rga56s{%;@p)GZ(S&u@Co zcmM49t5fBtyyxA8BR_NE-XDJF?_TpS&;IJAkN&|&@ix;gr5|8f@(&=0G8z2uKU_Xl zc|<1jV%l>ctuD)CfCu1i1AcfJENbQlVBb9w{(zU;ol6OzW?8za?SW-dLLQ;(5q&?_}Oa*3;+1F=f3relb`#wro4rtH}HzdH$LUh|K{p1 zy!e$*`~KNCTybjYLtp&y-^sn;bn$f$1f!q+Z=bI{@voYz;= z41D1$uR4D9&;Q-eUUlT>?tkEh{2fpK_T=ifmjBb^fAxEhs(tU5j{fTO6;D2U^V7b1 z>E*rk*|_hL6F>CZPp*9AWxw>Szq{?OCtmu=H#o%?zUs;UGxM3JU3LGjO}_jyRbXk( z8$NRHTTZ@r?9IdPee`(OXwxu5*(Gd^;#{@>sI6Sdxt|7h#{OXDB;yD#7S z_aFY>e{t`Ref8AF{@V5b<%1`ORzG#^=r2F|vQw3}y!D-rZN7QtE6!-@S|Pnwt#r?)%QY{$CGyA9-KT=F`4? z;!&UfU!VJ%zyG~QfAz?-zWBlifA7wN=dSq3`X~R#-#_KkpSrql_?aI%-v5nfwBP!* z=;gDE<`{29l;eAR=_2R=Udz}d;s?`02s?6+R{{Bu8c`o3>{=7!2u@3{M`wfQ^0 z8{PHgp6kamnam3_UmYwTYyaWOC;#z^KX|MAhG$FD^|Cc`h%@6#_&)qV5*LPm? zit*70-tm)v^yk0v`0tjl{Oiv@`hn%Y9DVNH8<)K6(4&eYuleY`tH1xOyT5nzw@>`} z{Tts6KG^ruw?9yN>X&}%bwA#I(Hq2@o-zILW3$gWI`GG>XFc=S*N1-dH6Qu%+dlNt z-fxY}JnqYvzVe-8|Mk8{fu+u=YQZk6VLhnH=kEI z@ZwKT-*)znwRr!NUi6qh9{Bv<)nD}GzkSO2pMA>9e(6(RxN&rO@YPTJ!> zh0n}jFyH-u?r!%@&+cM&4~_1|Z-Ba+yKMjsOz!}V-tNZC&hG6stE(QmYo@xYr>Ytl zESEe|=I0n;Nk@twNhVK}cvP${p2C);Bab}A@s5;^=9#i-+7`q7gvkhoOv(*OoL%OmaW-9YzLy>GtEe3|(&^ZlED{IS3P+h6=AUwPyFuYUBKzq zp&$6hAKU+Ytx$XSGwlmEfBldClm91Q{7&!d-~UI;C;!^#KK2X$@H4;gQhDc&;CzD{m$?IAIRq~ zow@ksU;6c{-}lrF{q5g*dh+3a_lti||EIrS{)ao|uYdPX!x)Tz_M7eETY3M-|N7Vd z@#v?1jePma*mKS||Ht1P`@*lkx%;KKap6&nq z&wTaU?8l93-+1Pu=D%K;`LR!roPGP3zx3)WpZ??@f8=YKS7v|f@>hQzBEl)9m_;pNq_vG+HRpo+m9{!xEDi?;Q*OaPK0Np?Vru*)N zMEfwVV|?5x?T5~`_Jg4Pq3HNWg7!zF?Vp%ycizfs`u>v` z!VXdz$H9+^#!-JsZQqW!|B$jV4VMAK;s98OK*ZeL-9?W9vFm+_uNr)R2`k+DEC`(U zK0AslfBZTt@V25TA6D-D(4PX8=m76dstD13;g#Z ziZZP7-#@7+%AB$>J*)tl4k^lKhhenCBZ@M7MtK*NNr2u%iZYB^$9l1XxL4qnh5(y~ zp`xP56`(_`aD!J+6BUMVRB|O48B`iW&rqBC*cFhCG&Kk$ZBZArgN&jm7x_#sD~j?0 z|6RuC8`DA+2E@+{Day$gKp}ylVZ$%Pid-I2l(83waJ_KGSPF0iy4U@#WArV0l~aJ| z7#0`64IiKm@f;RFP7Q$guLuk0{E&c!bGwqDPSH&YuM&c=zNntm2uyrP?dLwfSEy=6IjOey&izW_IrZLZg2>|_YGxZ`m_T0H;%Y7swkkx z4FPn<6lLh7q70p5NIZl(_*q36`>Dqj<-DStJoYefz(?WFWAF!-7S`b;0=?g}dtK4z zdEO^{pGV48z(xTph2(dqZ|b)_>O*;0F@u+fZ$sIbHWlTaVP%}v92v-Uhhv}hA^2kY(_BY(_FZRB9Fps z`3Ckyc)$U0iSID*waA~tqWmm0z!pb2%b&yGe}lJ)JPZnQUiO2$49w~4ye}Ba=Xn`W zLB7E2!a{$Iw+{<-kN<{^(&Oy_7g*xuA5j$LNBMKuP=AY;2Lk$W-q+)bqWl?u{)D0^ zU*>gzZ+wOSeo9f4w|P52o_l=mA5s+McX*i(D~j?1z+DwZ`G}$@mwEYT6h-+A|NX3@ zDF2H8CW@l`JfGtQMNz&8FFCJzj+X%zagqN9R`A2HCn<{ZywpDMGN4KLOel)-=e#_i z+#m4YFDi=iO_+qDC@;ZU@Ns@rQIyZ|xlbyJ(&xXk5 z#}q~R4&Dw3U;h_x=L*0M7FJP|Pbi8~yFh z`S1Vm?}rrS%*OOb(GYwI|4!iFM-=6qbISK98`Hq0hZW^Q1MW0dbGbJ(U8kN`uD+=* ze>)1#X`B8Yba8HJbLD2UUVgpQTrY2w z5x!$$xfZ2b>BF3ZHjXpwhW>)85wztq45uOXMaCk4#k_9hwXCN$Sva^!v8+;?A-IRwIER#5N=x%P zB&&nde9zBj!(u{NMFDAk2xJ+MIxi^7P)1RPKvn@61+;`? zT=2wWv5Uc>%j1eN_8;%vyY~cteNs`#L&w2Y1LBN1v#^}@xIsPLRY_4iTX))U^O6QB zTXv{LS`ak=u?xM9<2&S*(?@@?UD_gAuV;yD89lsf3FypIa}h+E(t5pdUGr(%aracX zFVpDjzPV%id*cS(*7}y8)m>^(+cz}}!=SsSt>Q*84*5P!oqFmx36>3h6Lt%k$`=?g zSpZEf%wqvK^w(@dC7<94wSwj4|4!gm?D?TEjMv#0&v+Tuuap{_O@xquU9T*uL~J9x zQt%E~xwLfg*J7){7-_MaV4)qy>US9g;ggLle+acfoC@3UI^CvczC~4%nVy^Pw%Al4 zwW8+wD(Tx6^}H-xW74C>I3a>}U}d~7P9+Dk2T_Z09IOl47+-K0I!H$9LSEH+CcaJs zChpQ|fGt?={f03i;jWil0YW0Oj*wYkHM^$G2N)?5uI9iZC}!~{WPwb~H`utD4`Ncn zvo`$Gwg+l2gn7E*W1pzW9-URPs;KvRKiOEqa5mMHEU;s%UAMWpi2(p-%ASDC}W)l8-AVNdXZiLDYvw%o8iTx)(r!M64 z2M~671v2z;rbP%Kw)7yu#Ta4&=d!oW_Ce(O_x_TvF|dOW@sSridTbCc7*%o-jUPkZ z2z0YEOU31DwNky&Tq!n+C=>%%1ZFNPc8_qF@h=Q`V@jo{&LYVp4anN-@tm&d9n_l7 zzP7T~TrMtOEj6!hGK)gc=Y%xKQHZQYt&=4IkF*_fqGJl!>_KT{vkLgoC`fn*aVb#! zpe`R@Q27`R_euU1hZ4LS@w>f`@;8s>AcQlAnZ?X@&ebi)4qG|S{vBn7|HTXJzy-d+ zip>;Fu15|jS5sNx3!xIz)?Dg$+SGB|6t^%~EQuKgz&tuH97*Ga^c!RdG zV2?3S8twOp=U9Dkct#FIcv@=Ylq|bBC^@?2^dVtA-uo)VSZ^@fN}aUCxOhwHiVo;d z9`*aZh?*ntJi@RJ2WDg)DWXP}1oQypbOp%_3xiM{ykoR-C55JfvQZkj!l);B%Lw8M z5C}d?a5_MJHQIX$^MgSlo~yC;{ccYU8i!I0kJU6}#{tCH_u|6hf{K5HTsBBL1i9$i z1H_;RlR%#M#gRcgQGqj-chEiIolym>w7?0*F|DAk8OB~f@#FZ< z!I&;F4x8OMXWH!ub6{{m+~x{P0%qxyhZT{s)ew=eD5EyR*vkQ$sDMAQ=V?@n6;fz7 zMsW*yP}c>uL07Z0GwST@%s8JQD)-zB#OB4gxur3tBLWmv;=6r{bgBOZtW$`1NUWER zABI?m4^%!baS}V9(|Wy}u32WwrP*ED3MlpjJks2~=-&JfxSH~}($$n}spRxRnv^T` zDecXtq{m06v}0-8b8nO_sMLd?H;w2P)qpg7>TYX1+^FR`yO8U7k^r?qx@y>%MOsk! zH(hd^+aAB1TC>B;ah4fCLmOJuDk-TOvgXDpC@T-}h~~<|^h}Ieg9VPz?BNy$sW3?S z(M*C7%z263KC$Pf5Gl|h$1^pKiK5qSvn?6k*ljZ^nSgVfW|#UJFog-uCF%ryUaY0?kFU%kVVe`N-#YVwk z3q4ZXSIOIaR2MJgTBe-?voC*QZj(321(Mw+@mc4B;TbLR=EoqiSqMFZP`%@j%o~wu zyct||1Q;pR=IP?uN5^{@y!F5^?rOVJ3=JVu0Ut76a&k+vss7gOzD%LHuIBj^50HQ- zL7|0!cu;aE%6>Bv7|&dXR701Nm1N z0pW73VAuyY8og>lG_q~t9-+POyajd$nQh`eu{cnu8&N(Y>5xMOP#{N_t6O*?KcaVB zkk3L}*Yv^$mRKp*uR%{x0z|x^#9Uz-&)!EiN*kg;C^il$LYN!JOIJ`<2=tyh(9yS&<7q)wN0Hg$iCA&>+K=VylxBVY|F3tWJ@kn4MH4l_UI?6zs&&2{{) zC7Xc)Y>(J|1*(5Od88hoI`~E;QT-$0{7N@%dk@7o_#p{V$MC_?asEV_`1G>CdFV`F z{f6ed=3SBWWZTjEATU9yk*?;N7N+;`OmNYeB-Em9&1UvmkLrDwhVoX79&ZTb%OB$FXesh(NKk6MPeg5EhK#_(CB+E9(ad3>UJ?L5q!z576a7mB0F+AO=Xw z))~?E>_C1$q{zN2XKrq8)tbwz&Bo@nQUy5s>Bd&2Qd(yZpw&}odfK+&j_8n)qp#yT z=xzJXkn&v|Gl!I?6&A!!vRT{7LWDl|kZ}99?9=e{e#Mjv5cvwRE2?yXLDY%D?;rkRGEu(}=A}GU~LT zKkqy6;&_47@EZe<{6^8@BZQYRu~z~ijES>u)}&+5EHjA6?ukR_uoavTo;siyKOmHg z$xev!a~Q&@>WyNvSgi_2Liv42iU(`=7x?CM3N0ovFR^2IJRMc*|C}%r8GNUh-0w%N z58)>5Nb*FEPPr%3D0h!r-KCBL$_>W?rnKvI0#AT5*|1AFHe|P8w{5VMo+Qlo)r9-A zWRgWw0Cf{qGsmEDdznFZsO9v!)b__s-LctWIrt(CR=HA)06y(P0xRl;s+Zm8N4(%< zWOm`KDZtUJ<+Poto(*nPDV|Ipx1A>Fd7!#~LKRpaU2v0g6%iU6JCvQaB$7`cwlE7h5Gnq8c@V2f+RYZslxC=S^e@ciI4J z0wWlF6PFXfXo!Enk_a1m?ZG2ioc|z8J9T1^TzXoWmh`a`Jb^i|lXJ_Pm6fe>qgh;8 zsg>%?=UR7cqi;qIFGs-e@jgEiGSbu5Q+vTh*0fqZDZX1Yp5Og9e_A zHn3V+DbbwigCs%;2co%5mA%73yG~tG$8wvpM4|405;{g?aZ4{ z{RvTBgafcMv<(-$f{DtdmWkIn>L6dT#b8H5aGtzJ-e9wMGp<3gMyFg) zk}mgAp;++<LXs@OnhV;xW4DX8QKz~~{krd(c6-aCM#HI_ZM)H-uhcgyH)yNj z+@|*I^voy`mFCCfVD|!C!@~QRq;kt_)egH#5kx|Q{Q5wzx?xlu1%*K}Y!-xMnXRtb z)hx@=v&`zalU%9adoq@Rax3v zT`koZd50BbDhxf@P}C1dFijt>pJSv4-zoa=%c+9KN5UO59I>WLf<-v6qZ8oiGy?pW zBm7WSKuS=c-v>WgtLvaRu_v-Co3`%|jgcRhDbQ!crCz^_;zqw`Ihx@Gw_t{++4i1I~)9%B5Vw+wEfYHFZnK|Hfw%X7eB9lx zp^}$)aR`*ayL7|)sTd9xg>QSmX%-lG$cd1He}15K;e_&{BqN6Y zhd#p?sOHsDjqNGLYE_ccL=TY7R5Ucf!&$1X<2!Fg8j;*~;-a zgh7C*F>G~y=JF!cKUpiSlz^46PmE9HK(&38U2n$pSC~YCIIk8aeJ} z9Bi%vHiMi#alqJERQCNB`^ml|c>0=@eLozse=&5mFrU?|o@wKO*|5<9`$V#)v~lpY z65rD9E#?B}X~`y@4m)S7aCvH4>iQTyJo>hOCT-jQJAB*cV-}nK2AHM6yZpAvUDotI zY_%FXor`-BNULvJ>|D#IS~u=n&fAQ6gC14dHlluKA*_-Mg)B2=j|~D)F*ub`l-S-x zk^>f-I^bn!KTgsiHk8=M}I0%dUy~mg$2Hz1y4BW~f z)zzO|WCh?mC@=<#LNG5jG`5n;uqAaZGA4C#YG$gCgbEzoCfUB^cy`-tX|@(tKh7Q; zo#&rT@8Xbmk7x(M$Qv+^Z9~`e|9N%R|7p{ zVsSd3SMiU)jX}O_7#S4$`9wMn4Js)-HBMOSf%J$oAh1vpNvT94xp6``T4CA5W+LMp z(;nV$6i5;V@~E#3^qXTrHiAcuF60+cAU$7NFKxh)*NxIrcnn1?Gzx@FBz^?+Q#=3x zz5{v>UFKF(iS+qU-q@kK@3>|+$9sa92U*4wkB=PXb1sc&i`+oUTNmV-;tYniQPTIc zmT8&(Ug(h^{%IRvd(q&A#cogYP4*&YhvEH9nKEGxKK|jw2jJK~AVZ`~C57nPssxrj zjbP!qihqOwW}gl9l?Mkf++_K@5rOaRgTQj2?zj+v9Sratt8A{6nx)EhXmFg~h2Rat z)pkP+9>OdGOiyxpehzlhCKzY6UKlbPY<)w4XXrPW3KR=!V_|EcwkG!?DF!wii1bs! zb7`bUNA>e*sICiC4?rQXUHCxnc1)kP9L+V*MC0A2J~&0UNk_AdECA0YmU){(9)Px+ z)J(#b_ft;5tSJ)qgf#}BcvwLCDT~mtZDuB4fbjbOXH!TZO9W)@aQ zm7Y$i)N{=p&6g|&{6W+n@WY(#e=eQvr{@-%3fX=*$lw=W-fXvT`6h_H0G5-%>!Xv! zLuq93k2qNb?F*{db}40noLLszG)d%xvRHa6q!=`w1HnLJ>@K}+$1*J-n3#t9lb+Z%UApbu1tln@6i;6x zO2KKBDD{*`jJCVGI~55#L6h!kxmH@;d=0MNg8_>cjN4LrF^TUi__+wPWAx4TT5Ya)k?wAG189G##aP9x|`To2DvaH=wiYg?*W{sBsEKN6;C@si|l^_C`bcbhd3B`SUT?0 zDW(f&9C$ou`g={M$7M%6@}WA2rfT2D(;%A~wI7CJc8SpjbH zUhzUEN#r0uI&jk-jvU*J!VK^f0DTDpr@w7Tk#ftClgf-tPXk?E7^~N>CJM@YV85g? zQ62!K4PJW@5(ky-ah|*3cOiGf?*`f&PtA~i$o?!i6}PC{26D*p35ajCfQcH!ypB%s zkEBuj-xpgrgPNfDRrb%MkBeotJN_<(zeEJ}!T#N*Q>3JMdvJ0oQagfLXF0p1t3eF9 zt=T%AB&JVp^*x^$4n~kra?5E=kvMl?-N(3t?1i4j9tK!qcw-SpaR9&vk+i@cl}t~w zLWFs;F#kHh$aGR=(lGqR_X#r1hXjcQfJ~>Sr&Z_%NX_{RUJyo=Y!#3ye`}y7DT~r_ zg1Bzqqy27hXm*_aJ1PO6n_yHlKmtyW6_ifIe9dlC+XqC%A;wN zVh5B0{Rl!4zO5az-N`b)R&LagEtU1<4RWc@V_?ZLW+Lmm?C5GE@EUoMunS@n!~h*; zJ-r*F2cd!;lak@028?z})?U)9Y&7|z# zviXRYWMrM)^&Rv$!mJZ0>hEZ->GUDj1hY*cZO3Ak_g`A9 zAqk%lI^W8Wiy|*MT$3%q!-HJY%%rSqmfp7*AJtmU&VY006hRq@>g|~Bavnu{UV#1bLwYj-Dcrlmr^`6SL5j5B)ElpmVpC{`<7W&N4#$tBFamtD!#C2;{Y%_2L4hDQ`56kb6H3&2?@Ue z7RT_-(b?VOY3y#B3o_WYV0LxMkA2N#K{?=fi5|3IuM5&h#iWy97Lpo&L_wW_0m&eG zCK&XQ4yiPXoyq4fCpF(`E>lmd9#318P^y`v9>Jo3Fa;l>zRpI1Zw8pNk?dYNJY2)| zM$G^6KttM)^15XF`e3Ufo;TwO+Ydx=tH2uP;{JcCE6zlwX{`Jagy9 zO0``E9r)3;a$~)?)U0i8HX?G%@wVw(S}PP=MikiEK`c2XW^8F;E;UXuA{EX#1~aD( zkde!cg4`J`1*Zb>QUG_R9EdC;OZ#LIN%wfW5Xz;jdH$8vsbo9j6FoXrJ&{ILzrlqF z*0CU~Hjt9jcXf&?Cpbd$(*y!RBS~7av{vi@=s;ouhN0dE7DU7VHrzC#Go3*|M68e7 z(D=O3O<3GqAQ`|@Hm)>8RLT8Jg?@*Ty zcFJvWk`}sHhl2b?HN69Y^rr8jWCl?^VOt_+ViU5DO$d`6oBot^cN25Ph-vy03;Fys zKV+K_ZDz>?&)Xk88uY+3SW&q27Co?nEl*#vKW zg?yZ0D}dtQFET4@7uXX4uSC*Vuaiq~^w0&5XGpXNmjO`YMc%|k)HP<*g}E8%lW7tu z95)MtNBX%k$F8q|Nyv0{1x69Jx&ku7X035$ftQCN;I%(*WU^U9^E&AAkeMVIh)d0| zNRWg~6|k$2Dii!jME0>4!4?v|{03}7*B&5ZGTwz~kG$*cea;?a2h#AOy{Fe!Ap&Eo zR&LznSM&*&Y-s#M+ts!;Te~btY+>ccla)#pR;l(inPxPXC$=>;Ir z7F3i00k`QY%5xzr;$4Vuxa^DPYnJDCbdK~?8b=bj2zlp%B}s08lE)_;GoW^&!NpgU z?3i9(v&^@cSs>)7D&0h}xKoPmWo;oqn*#abJ{U0})Tfs%~x+%a|$#s>+E=j%{leyU_9+^s!Z2hnzOz91}`I zB6lG!jmd+Ghp7eEW6FuRBKGR^5VfG5oNXu4Q!-L5s1vfLVJXf^3^T{VymCC|HegXF z_ycf11l{uB$gH5l=-JUP@5k7Nl`E+-7P-^c_F%UUhADoig{eY*Y6j2}K%ah48xhgi z<)vz2W@=W7i3&!0be8yZ8cRIE!=l7^1y5XdEK6%SaG111Nmp}kV=yQ+fP;wuXkn<< z!@^FS6^e%M`;ZAZZ1SQF;2vP79l#6&a+JU~hz-Ufp~OJBm=e4Vd83g2;w2!+DpEU@ z=i#V>EmjPaUoDDFhI&$XVV~CPMW%WXq79mC$Zo=0_U?yg@i}8N$a=zXs5p-j7UvlE zQ3*08sUeoqCCX&?OWMFmTn%t4#tg9O*p@VtFH8qJ5*FA;22_uZ^+4bOhr^BMcLpk~ zgO0Y-70W1l`UURX3EwFyAf)0-s(=^L9GKvoNAo<>^EDf_?X&PC8$3EXqxldpn)u}% zKPDJWq!Ynzt~y;B+`{3&Jsmu;bM!KRXyvG*CVSWSoi1|>d!G{uLU$po_D?C8&dQ>b ziBNecCr7%8%|8v_Cl(6RGb;WGf_f6{NSJxpH#Wn524VS9HUjpBo3ey{CFLaGt?(~i zu4&WVsXeW0u?m5HC$4qnR|R9&@X>oDYm@z(N`H;LkQc+eIh` z>qN46?~d6PZSetQ#v}O+qEluolgM(wMffHw%nFg%{gfoyy(k3MJ@K1BI*R7q=C(t6p6K-&iRe-y_0})p2rJ}spv0?DM zgUF?nkUap(o`8G{JgFZqw{N@R4p^yOSpk>RNj|nwT)tYal$z_MVy#lHtl=c2iV@Xg zCZ9*6WwKUmcycY4)aS`WM>jTW*Geo)AfFV-tO8ggg=x%(`0Rjs%|>~nw7De@6%Ii~ zb;-Y)drtE{1{C5>*u0Re4n&vvEDK3aS!p??2Fqf}il!{GTy#_(1CdrsPNg{t{`H7zylkv#IRI*;UdK!x=T?@Q^~PqcxK?U5ZdMV4#s%6IW@Uwp zg9ray&L|qe|8#{+swtyTq-IhjlWK)ZS$Mfw;>xizjMzDg1#cnH#7^Y! z67o=06UEqLarxmmm;+qRHECG#JZ~^~BZ6ZN*6vR7szxg+KY>di*sW4s14jlO0196s zwC=X4ZT7t!>p-@mvnQ=o5$qFT6TlF&V3!mKpcZDcEO1coIIfYOnwiRHdu{f}%TG;D zo(ovU+My+Kf1l^xXek7y*#>n_u(`}^2uW?tri1!kBjyCjm_GM5Nsq)stO^6SCAMdM7su8W+(O} z7+$<`q7WM0X zObvfxnV9N|aajn<*fI2i8&rtPZ_iV;de z2@2wu2OcfSR)%2(EX1%IKamqYNT$7Q_3s+3nUusLVxMI}s9>iLOZTjP+qA(QbhESaHvV@~YNHbwM{t7ANjrS4S5#&L# z`OHAF8Bro`A|fyHsp3{+ljrt_=1$zw^xM?;4+tyWzmy13<)uO)`(W38;h8!fW*rUA zLdL|sn^BVd3GTKJ-zg+{AAzHMyprrIrf_u1d?t-De~42i?@$nCv05heeh*MK^y1#u zb{r%(-*H{=XYgHEA~#NJQmW)v*cys&$x#GlNjdCWxS<0{iRmMXbHOpq!Yay1*M7vP zY_U+dtl}S$(Iaj1!+SpVlOHAAlq^RH*@auGxbPAXsK6FAL?wJTK-z%qZ0i12KqeR@ zzkfB5{DvY~x}FwipUI4Cpdf$fmD2k9&DC%*xC!-tFfO8n#KB=u~X9bV+b63q*m zT1^YOMKa(nTCpul)Q_F(F(vGMw!MqKk7RZil@BIgz8Xjj31Y&DvV4P)^tRbFGK-P@ z#6o@%HrGXIb4?-qeXu(`eM=#Y%zLl|UpNpCBFKr<{PX){#FfoW520(z%W#XSIfb!G zK*T4DD;wp?MzOpOEgxfVC6nVRy#wKxU0Rq%BPlBn+GbdOPby#U?y+Qv*b?5Ogule; zZRnN3N_7D}8@^q1&2$0a!hCuTvK;yS=gi))*LPBC9MLs%%MQPoVJGjhppX z*8>F{M~dT`lSXV7g_=d6K zA*&owU>QJZcm!Q~u`a3)Aom5*#yCF5I~icHq5R{q@^O`cO+3pVgK-sVoefkIgjCSM zDb@i#j7l^sobwjbIPdTPB}2+($Yz9pr&X<|=^Yj>flqe1jSU!mHY?0ZJh&^%^8uQ+ z?Z8b*?~dKOckkXX+zWMJS>?hbp)Agjb%A+^hy_!I#+7%6h@vQGly`?ND9TVqQHGvV z6y)~rq;gSFP7Vzz@17)SGStuTgIAoC;P%&m2ANq7vn{+3ae@Oy zhf7bPY6IbNP}Tz5o$E~!txatmbRn?XVTLu^q;Y8rdyVZ8hYT>58HFk_0XeLg+BwT< zn^Au`22)u&OMy4OPGP!H!c{rg@T`r$V@_~5G2kwdcY<z5~UF=9~`b8fO%MWfKZ3I6T6x@0BURm_*W1Lwiesh7V>yCEXx3b1yTSUuzT)o zC@(YCA*=|1QiZFW1oP)F1Ec0vZC&MSonvErFw7qN8L$XURj!ckVAfJLnkqk|O*3jqFi8UH$Mzu~sgwEH!Jz%F5#2F8Z$(Qkkr`&7YM02PCd|HD0S%LX%>j4aVV!ganD^)h?&3a{{+Fah;*x0I+ z8#fOPD#+X?NG0_0eI#i1Myc4iTB>antA}p#+oUE>y_B0HFR}k%ydO?!xLIGmT3Xp! zM~U`OK!J+}#h_2I8)TcBVK4!7eRHi@t~Re1Ylj{&+^;Lz3)bl@T+CLkRJR(?7AgjZ z8k|hNqtkQq8^{SZN*kNCo6Ys|M)~k~ye^Gvq%gezEuG)2GOn^w+6XS2Jk-F_u~8Td z57oq`G@x;Q(`k-5zMQU=it7OQ)!OF9p&>8(y`Ot6yDA)(;1|sHtZ4OWskm|x6n~OK!B@Ul zWstYYp&F9sAMQtI>!o_Vyji*59ZB}FVJ<=s*UKxV4T0&bhU}wr7TTCfsUpyhRgqnQMp_zT{23gKymPX$vbWjD z+yY)B%Z4F*g;+URXyNl?P1YO5TBEVfEF3sT`J90l9mC!urDVGaFZHk}#V*BMF0o5& zQwF;2I3c{m&dbWl5N1gAkU%Qf%Nn&}75CGVfrKQFgkL`w)VNt+-(0J#0TPZ0K`Jym z451S<7zAcfw1yn7V31+9wn-9n5j^0s82fi%Hb@CtTjlnGm(%P8CzQ)W%z1i9`7Q-@ zNP}dvOvBG&8rU9nvzRsLN`YjvaHW=;)isZ@hgood@vh{-$+V+E*cf%Q9`&5G35RF1RBf`ebOved2aYH#gzwY#}4@(1h|f2E%{ z9Mo+{x#?i@P8oIJ|nbn%mf`zq+1fS)6#J zw-j@ko&`^|8#7TI6snni?mqD5rjTM#_YW*K-)h3f(WKaD_EYm!AU$sHh#SiUG$XH> zy)5;W*gDk%)zopYn81Z?*fc+M9Y};&D1h>VBYkW)1zs`EqaG;tj6+6X+||r8=N9ZX?RnHCMz>40UZaMA|$FZ;T6^lI|+%2ekv&hwc;8LxXLkbgG*tkRRmsp zImvsFy=LlxN@6MmA6BRmszg#3`CHjY1Mdw};968%j=l>N*{I^J21v;eNsK_K>7hOy zja^GA5a`7!$w+Fn2yjUp;e%Zv0&;FGO7+8J-kSm?_$awsXgG)P`F&9pd_uF0O6CO; zgdX|HK^@K!^e|LFl9pCxW93#=+|mXRNo)&50Hja=3c$>h6j}>KeGV}u#4}&l1#ywR zkeXHEumfPi9tp`j{=Bg+3E1(MpsvK9F|N4nIFV5ZA6nAV1UlkKKz&i6bg0{m<7G(P zLOB3J0%w9BgJARlmmncof50W8R(Fn}-%>6?NNBwf7F-pQA#(x{-tt1p3`+~I@5G5t zl+Oqy5+|FGFFqio*p~XicFT^0rIV9G39;Yu?Un>2BJ41SBoJ}-^#O(8`2}D94+K(4 z@J!Y8{wh<5ux%cOM5O%%cNX+&Up%s%0^4th!@Dv_#7rwu?8I%68YoxxI=!s$XG=a#HWyOHV`be45W|I26g9TpHlf?Maz5 zd(sZ~C=a_87Nx-PakEElQfJv!>pe;h(x9F{MJf(iwKT6Y3BO*^b~OBPgSI>eLILn! zOMT1oI;I~_pdNNN*w6$90dWgoSU$pT4+TKvO!2U;ut9vCq9zFhQAr$su!e-*@Hvc| z>kM-TLf>}qYpFa~5XUeXY2@NS8i|HO0TROz!*S-j8yp(2JNOPq2qG)zAM;xb;5)_t zTTQj(KApalhUTJ!?Qsi#9v%5FrXl}-9w0yTBM^Tb|HYgEyM52pF`pB~`v%zkdDKPk zzb%j2)JJ!}CDU*4FbiKnF3C+{D5> zgiXPp!Rc4H>o@}jQd5$gfL=-uWMzO%I65JT{P5TypReQSF)I#SpAB3MMKC4LRh8?t zVS|HR<#=@s-0`4`VWTCV`JLXNhN-bjXz;8wp3Gp_XnjgL-YsOa)YcutwA)uEwi>Go z6L7+&XEC*yPp?cYiwAI(I{Xv*e>4aTEmz8om8E8}wuXnM!$wQ?JWq@!Jx#)}(UMO( z6Sa~l5@Iz@NvTL-eB;ZTmDTcEbES+&?)+>g+;d0K%MKXP!5IzCh-E-m>;0}23-hao ziBSU%$3s{|{MczUw6S>iFoNtjD!{Rj&gK11Plqw>OY+3(vCu{@#;+DGbA;JSWsP$p z#JH>7H5}JA?KX88wcu@@v42Qn1BdU?x#n|eTr)e$j-ZfU`3MB>l(8H*XxA~Q8>X)! zzQZ{vyJ@6x9l2-M*)b_@$(p-2Man)@m19U-lxUFD-O_Zt;~Uv;-LW;-og_64xX&cn z+@Y>VsXIxw>>h@?x!C$E5Vry^uw{?M$$6x4ePs#XH#Sz5u)!|%HK63lu+V0CWf==? z7W;mOOi$&pq}KO4)b>rC--%)yVU?=u>{^=Wn?=;c#UCl=F0!aH`1Xsw6W;f_OAQ!@ zW_iMUSW1n~Q>RL|PVLeb^AFEOq^p7FbP|dV6q7_KdMGbNX2JM*PznOh_j}J&rnC~s zSygfX7moKQ@j;c`H&4aZ5|W;P3NoJ116@2mD1~9lLD!Ke90wQMZx{0UnFEi&LME&d zi6y2_HewZoPblez+>}EdQaWgD>hUlz_K%awyX46sc||{93_=I~ANWoY&(qx{o(;Dxn>rpe%es=T4P%`heY1H! zZL|5CTtvr-h+U@0_mzF_zP@ccyA~uM=KBq1bO%0dJ3ja)VFvx4rTK7GSh&|fP!HbZ ztnWeECQrvZw@{?V+K$`SY@YKvA>{Wxio=Yhxjs0&$DmzDg+CFljBQ0^?*kSAsW7hS zGQa`hCiocZ02yk4I#@EsROY5<@+$t>r7aM|Kl_(u0f2fK+9BBt4NNgQtjHO{PAy+8 zR@O=zB_2Zg$VRzR-b_Ys9P664>B!EJV-Tza=g%O`o|CG4#H4JUte4)8)62l$@_2LQkd4saFj0p%C{VeTw`F(3~|3R#c$XucD1)0o787w!P{NajwVm#?W7A@0tZwHjiQtbLyb^w3cxtE@{1l0w_a(~ zxd;v~_($t82PW8~7vTaNSYxy{rILSaXHPMK#qe7VW{wRK`F$w;$v}aA2LyJZM*s4A zUB?jXkOBPpA26?)@Ysg&h}s^f^|@GI-Z6`yaMV0$Zk z2NXQoz2p1f0u7gd0_j4&y$A`9?+T+SzqCI6x(F$s9n~$f=h191d`as&89Y2XB~GMK z;-~oqHbMJ>8cS?6WJ3UxY`ofNkS_H+txZYGb#BvmzJ#EWxB(a|!JQDY{WmBbp{j5{ z90ZRvf+;L4%&7PW7KWoTQcNMB7-qs|yJ2GAWP}q8Nx0^~CkuDusM0&jVZt%XHIkN3 zIA{km=Q5Q8KECF*sjrd=sWsM0_+SbiuquPdOzJq^6@z6Wk*{TXKDDWffa2iMEX&z# zYPMtVb>S9LNCU)Q@vop3FdhD^2Wd)l#{&0I8KNY;JrFIPKNKzj*@tM3r2hv4Nq-cx zSPC;avk`m2mNW7OO*{fk z)V3;>Qmx)BRfgPI^^G*>s*c{mZ&lSPe?twEaXuzr-SMb&|+#~DL{?|@~6G6h%-lUA%JIOV}S zO($nB*z7N?3k>S$jOS7s$-iH~^iSIZTO7Oa4+hDJUOR{=B zCbPMO?a`zr3i<&0k&!cIuR!_)xeiT`9X~b7{L~q%&nOlbDrn*b`8I>wK}tBzE!_|%dEAk z?K>N*i?1@a7jq>CbQniJXC2a$$cGxE4YyBWxgJ~Itks*FweniI!Y|b*u46VGZV;C< z+C?KQ#2761?OnbY5~*DtV}tipQBB+@nx4c}Y27jzyK7Sy^h{D3%+|mD17{ zhLrK5a-yB{47FdzoI`LyDxS@-i$_FYU`h`x-8d^IRNVvdZ0*fOO6YvW1z(Xm3x4%^{HS2X5F%K-xqZ@haGP??dl5=adV)g2)>#{(? z%gZ=$Y+-&jk68*HySlkmFI_8@s*snzTxpbQ*NgI~BN<+!^D`{Deqy8 zB0Z&OIO>yZ)KTD>(gd%Fdx^E43D>8K`&RM(X-*zlh`Z|BroSiX#ibV2JeEP`p;~FZ zRIHa+G_tt zf9)>yJF~^L*EetMi zcVAo4=k~6xSB>3Wtud`lU-w?G*Jrwmd)L=?=NC7j+ed;{n#F3l+1R{R!mIlDG{GZC zpv-xe6VGtEnrVxW^>bl;OYIo153t z7+9#2oj9^X1DKTHXy;heFvVmaJb4rsO2kT>3#B7022=nIJ&d=@bI#4I0)bx0oge@a znDYgk2c$6hpaSy?3)5mJ%L56xe&|ARft|A9 z9qe}zh`E0ln9r~88*~lx!gT-dDFFNWeo>h3r3)p{&P^v8j16SNLb3n&{-(MBG5kl5 zH9yQ$kJQEfQ;C11CTtp7i zW4ZMq;x@uzg~rkF4eU*7?A`xoTtyBY;*C%_RDk!L>}Rp9oB7d<9~2y)&b+V(+=ChL;BaCgzc3xW zLM3HAQ>`Z|0qY938Qjm4jDzNx`C{}KiFi3AYW)jT~HDa))4DhVtR(YKO`A=Vna;^u_d8*VvJNwg!AbC#Ds)SS@W#|L?=kE`R`E~T^scX4P9GD)$Io$28ZDm6_WcdL zh?oey#%GUi&jZDd`7Hd2XSe%im@F9x=jO= z+<#!bm)5!a1bP_&MXV7hQcXv0}@w?&O1X7Yg5f}TnnYkta5aD+&Wh@*4pTfN&c z^$xs)i%dP{UCl3n^Qhi;DcSDZ7+mS0-2*a960f5{8oNmhz0_KctNG>*#rxtW(Gk1r zxHRs{Ay|FP{~A+OvN$C$p`^QY$kq=jU?zE)!UK+#IcPWFn{&(%!uPcJOJNI%z5c)) zGB|_gUnO%0R?|zXeewX$4qN7g!uRSkqE$0PhLkk`ZC|i{<-iQwO~p zq;5s_*+Uws2nmG?CebhwlNE}1iBMHbFBKC~!keqg)i;@gcS0Fp4ySOphS+dX5P$ny z$$UYi3q?;9=|49-$U93;HZY`wGDP2VF^UW(7@RFhGK2_x_`-fiK0^aymY$I|N=J8$ zR*rp1uF}WZlcR5zA5GgVUlQ($*sItnD^3=28HXFA-_d;H_gxzt6!&nEAy+FgZQmhU z%FgHYG(EBDVIQ#_55NgcMO>))6tUm2gVZzNf7^7a(FAx#&mdppj{fkS;x(IoAN>UxAr0zM16_2p zE|qh=oPcg!`W_O!Or{~_GXYX!>jEp+on4NWuG4n4ZWm6N;P{E|P}|QMuDL^P@S?SN zuyf+PiM1E=;+MQ=h2t$?9xpr)2~&ZRhKGfPg*^E1hnrXe4O!c?-1e(HcVo~3NyaB|cwn2J*uLIGX=C;60$S$zw^j*^HI5s5?UephCohr>iG%8_qX?^ypH5L zE}gJOklx=ObQ66NsEDHR7*2!);BIijhbxpu7&H0&oGjZV$RdVrEc`P>KWr0@iUKs_ zHb__uVAkIQzrNK=5uhHD+~y%kPVo7C?})y?Tu0ygG>e{q@05LDfCitI>&Skq)uuk% z!tm$OsR}|l#{T2Id-tB;w<4ZY6!LXJRoJ+os|x;$Gpyu$2MeZC1!%gs{dI!qxf z8(Kn#6mUvs-fy5jS!OF2j3wA! zC{-HGmCYL!xao==pY$}>H(HSx7`7yU@F$AZfc$t#IkaY^v{i#*XTV#(xx7`Yl`6~3 z@t8GRmmGg5y*rlaQ#F^%J%5|JHnpaDu5*j(e$z1B=aGDk7FY|W;DX_l`=@!MatuY_ zt$P-7p=~ubH_B_ZVuOVaurbI^;=>fZhflARR*PHfjpllh-O9v^%7Y48tOs}-*o8|-#K zUNU5MBMM9%nB8LtEnzFl^?R118Imh5e*nxFia#AK-s`t4Q)kD>0gpV*o;Gps7EJZg zXhppIwG~tuHd;}I1Sn^q?g|{uozkI8+B1 zpoO0eyVdx9cmrp~oHeO@2jNenY#{2FArZYwsNnwMv7l;|L@1xP8{u#&DQ(sGiwJ?M z0(rz32l8Gua4(X{UOY`Gb)2A?G8d}4>BZWn<3*tr# zTH+h;BbA`M%CHAFymtm}c*BuA&?A~<0n>eIwXqH<(3*zrHCfsM({67#1~VY`%#LGG z`NGkNp!q zaxRoT4ckk;dT3NpF2E~c^ZAi|SZsP`FUd;IhQ+@k+!g0@bnZHx#$CV8(@3($1$V7b zf7fwuXLn75lA=MDEJuf2U9q#?o|%PJnzE@cF+uJU55-e6B!1j>Fqaqj-hU#LLZ$Ow zc4Q-4Z`kk#aJ)2#CCTF=S*g@X72L1_+RDt$sB<$pU+<}g?TLGlvf_E)h&;bYR_M0Y zw|s7$a$MF8=!ltx{DLs~h<2joJ?wjmtTxuku4!4M4e34b5T1B&e(#xW5dL-Qa%&nL zzsN+|EXmBy&Zx7qIMlHDEgMWx)b@$rp`=A26N9}q%X@$@K zVwPm)FRSyHVWNXtwM<)T8ti_csW4kzyo*Ys%8y5-9tzVlYGHaN>?7r%^CGE33g=+= z0~?~I>yRT0W(L_FOxvgKwx&}^dF~UB`WS`*CPsv&OFdW_(}olESFnq)Icw!b91_X`} zujBMB12U?5)Q8zlXqF{95+h4+Mm19GB3Us#tz}V<*nW@bK%>Olvvp=%4R(5H9(+T< z!b(Za0c-1KotJmq@JXdnjlstDdrfGuiO}ECER{^;*)U_f-$k+tN&BelnI0|-#|?lH zKL-nBu&!fsn@S%%N+8n4w1iiCmP`nH3-xtQ+pNn0X9l>{JvoSFNm~K#Q(qaFoo-0! zNt)0`+d;tjKJ&}fb*FFpQ$35`o$_~bx}}+2DA1-pGk1$8x8bA)EaRHzQ)2q0LtQlE zk5|`AuQiv~i)FmsdK8)pccCV2*U1Z&6f9e#cQ=;qj(#cY{8b+O42 z>KVb&-MKLU~=y^-1HpH_2ZCF}9q$ym;4Xfyrk)Bl*XK%88lj*?eAQe+L^-5g=;J?O9MVx10{pGD5mg$pfXj zaS@#dljp3O!GT}jsxi%h-u0<#19!uWS|B=q-(L*Es+r2f(#N3f?PxKkNZkine{RQDa1?3#Xu7%ki` zJPnVNIpm0;d7YM{xdz!Wy}oAgB*JlakBB^2t#NuFwQz2cs^c&-Pg0K&kVjUS@c-Fw zdD2+(bbfA5g+HjN2p|EMWeit}IrQ-6AeBt;5lA@;;S;7gM4=1kFVG}XG#j?$=^fhD zrh0AfP9VAtXen9L^POI^?P@x0_NZ$*2D7RFDh&b-M>(8dO!~|cPL#}40)#G#-?6Yl ziqesl{VT7qIb&JS=K}XhU`hjDibIGi5e9{gc%5$3GvA^r$xP49cTp+iSU6yUY1EBP z#Wv)be11`#IpBijBAlOaOVk;oIj1E7mW}&L$yS5(F+{UFOW4fLReyz#dGmZ4BG0qBNkdiqu^o#n7yr8 zp3vLEDi!LlTF!2+TwN`{#)}VVpO3W(7_K5a;~k3^zS*Tso9;$N5O!6y`fbxjHQcmK zV9N0s^jHa%Ae$1?65nKn>!vV1OjhaG>=ZV&G4GDm1Wj5+KE)e>hek`~o09Yp^3|t2 zMzeyUf*B>0X~clUH=h{?8&{LXOa863+b(TuK2?dYwI_8;^SnvV)tg;SpENulzjrLn z#)q1R&oov9?Ez2*e?TQz0(^o$e7(1AX>D&3lgCc_jyDOoDxeE<_QCYfgxg+lFI?oK zf>$oxcB$9F)syb-M(~-C)O$}Q1rg#YJ#D&9-!`1>ZIyI8QhV5y3Kk*1xwF`OzWe;m z_}eDiVpQfa#Wyf{+ZiV$x?>F>jpbUY*eH<(q>&}%RZ`h(kkV`AdZQlcpIqW2V7q6V zEJ2>b1{SYut*?s{3zDCd3gQ|yO#{+%*De+2Urd&tAQN(puBJCVSBG!N8lO@=uLl1m zY8sw@gqnae+1(sFndiTu)~%I%g4d3;!t*DB@m`vrBon^QUM@_M3Cb%jVvFo~;qoMz=o|bWP^#O%i-VYkH!i*rL!8E% zo|E-^vsh*Z1`Uz#7W7Ll%|IQ4w>E>Njh>s;yFTk+7H8JmnU_X63v+^JSr@G6*v>4Q z+s=G;+tu3a5zNN*c6dY3QQKvu=NRaA=CiuH*OMVIC;H36wPx7P9Ds@0CE33bN|wjk zodXEqU;_Bh;WVIi+p+J;tDcNbw4&Y3PS3G_GU)Iw7O~9$3krEan4WE$Qlo`D6e?H2FC3dF z6c}XgW=&g+wNQYXJ1!qwp#YGwruotprm30&)Hxw00cq1Tww*tVa3|G8ZE%;=)VN@v3Li6E3L|JFA zM^&MYWJSR{mZSwrrP(2#3X`}iyxQU8xb3nb-1FF{?^+SL8b0FaC?-b3Cq=r34+~~~ z#dB;B?ZcVDM;z#>Boh(7#nC5xK(R~K^gIiW?NpL6*pZuDg|LlJ*DMNpfKZC0MG_k4 zerqH^Kf%?*P`h;8cGHXiYum95&@CpyLTp*2b2LJjl}cJ&5>`Yr&w=_eQ&gdoU@`-g z)&Yq3?ExxeG~0H3Jni!`s`P@840wNJRPshp7(QWD_Q|yRrsbFIj7kcEsKqA}B6F;5 zUKgN~QAvi+I1_JxkWAk+phPxH)|gG4WV6v#CgeNf^)l23Ehxj()5P13X$*V^j`z!s z<+#wR+iq#Ft4;&2n+CpLcrh`^446crbTI@ad4Uuy>iS-?w3u^Xw202;J0xho8T^)J zn4yM=idSNGnQarW{U+7iy05wZhGYAkj4G=-0O?+*;W(CW_F}IP(9#-aEYrRXNb$y- zAp|o$&88MU4F(rSiv5>8003X~bY7K&n}D)lZ35+E;0uQepUk#NEo0fSx6O763T8Md z#ZjN5r_S*pj`P?uFdkTSzXLk8V;O;;O8AM52J7j4&v&{hgTc3&WwwEqG7uw}00L`( zTGl37y3>b^g#?yiGtx?lPs+#$$(Xj+qdE}1;Fi%(O07&+>-9{#9Y+-Lk>L~NFX9tG zQfp!Eq~zMeC*%3F7stEsleR=yO{`(2?NVx|LKMsGXjUKAQzR~neo`h5pM!gKsc~?h zK}NUeM`i`$6S4&HiI++YHRJ41*M;;VNXrpqh!xJXUDK#KX?T?ZPBJqcB`-oUyBU>C z&n6zeL&I0zKTB-$nf*0--?^D;japN!YG!x z=(ymp3Uh^|0k?vhc39`)Z%MfU^MO^b++u7Bs??j=)4A%vdpF1)3Sp6<;74datpR`H{qMqhzUFuUe z4JX3Sp!(Q`*tD7LCS~N|C)lz?!lSC_KS@F26X$*6lR{zaljtP9?G(I%&!DM3P*4fn z`2bja%~C!xUKyVM0jN@7#6JP3guVO&U%37Tpwxwe%j}x4+0P}V`#8v=|Bf}6 z@l7Ai3Yj|k?U3vz$O;9=YP6ul@FbW86EUPYgq=toWO^=zP(&dHh5|>19hin9+^npo z`&vTz%J{Sk*S7=gqw91?qYg$q<5{~T-QYBuu%$DpMap%+k9nuCh(|tU-?&<;m3R#{ zdUAzKut2H_Qmm}Vt*w`@mB>V3mYw*Ny;)l+)yUFKsZ}9@ZBx+GlJaJNxomn8 z=0>S5R3;^fDFf$?akPWv7|@mN>}KaX5g=!LhrbCsiZ|CYA+Q4)jlY3YOsL*+on4Q* zQp+K+R+vYR{Equa09=v?}3hzfytnKlM@ zp))GxL)y_?6K-v;Ua#SWxKm;8UcU!olSf*P-ysdhbs?y$;c9@5EN*6t<%KD;A$n7! z48cyk7ms*U>sr+FtUcCa-LW;-og_8Q!0&aFeM1OEjp9S%Y;RN8HZcd2MSaRAjuB6uKI8syS0C58iWFPde&I2HG-dKu%u(dVoIA2QV0l+pJfw`gNh-t1490 z>qf&vn-(Q6cUQ7?Y*@A|F2^P<$&zU)#Fdtm9a>7OBSdjUF(fNQIlS`P;Rx?xTefvM zECG)1&!e*H)$0ow+hOYgQB|GCpP7ID|DS*Unfa$I`*24nM8)|+huFEh8#NQNQ>V&B zsJwAz{M`7t3Oza>q)45a7-07dGxuk7`X19Mgr^cdBsPC%mxE$Aw8IuJ&{|qxR;y0b zyj|ccLbWxq@eoIyUs#%$oSa>myCyFKU0b}mdTDl^-*ZkS%k1&t1;%g^xtHMvx*TKu zxRSd|yp_D|F`Ku2>7H}!0#AXrN`W(962wP^yF|QIf}ZB>C>j)neDNg?0&kU~7b!w{ zj^RV16uecEJ|xL+hd9TOql@0#PY=95K0P2?TN%+jLMQNWc=3NOOZ@-15dX4ZDgGCH z+Z7wyjb^J6IeA)bw>%sv3q!L`XT$<;(-x-+Cg!d!k_?@@wz49{c1p&{LeetMb73&- zcr3aO_jVO}CXPN!a0$t?2QIUO&*-`HW!!LHu7GHSE|ND&6vUr6!^ZW^JbXJ2!?)vb z1%0c6#}Gmfq6!rb0HXwElw$H?uV}`;`(3#~Y~YlQPO}r0*Lg>}%qF={TOT)rx*b&v zzVa>8rNQ&`oz9tR<+hj9VFmo7vZ%G#_xag4>~^I6wQX0|5c07h(hx5`9O_K)6-l>=>u>M%aEQ^hNU6D)cnyS(8pARXOZdNgpcZ1q{&%*S3?T@3CJ#fw|rN@?{?; zR=M)oz%{ zqN}k|F?Fq82SEZDhSza-?e;z?gsHRah zt<4rZRydgE(hOP5fGJgAH@(OfsnSw2L22nmYovx_CT1NTZOB7M-U{p*u5L9OA?O}C zEBuwBL&QiN5}CCf)8yGQkWI-#S1aAA&W+f1-4TNNAV zAupv*Rzt@^pWQGa4}gfrlC@aAGCSX1{F2s&r^2vNDHNQh=?~d==o~txgn;$FBrNIO zF1uUc7C_>qdwhI&7XaB^b4>#vDit=Pwo0YYygawEC~jqKZ>LVI-6Q8lQKzSqjiUV7 z6^gAKU3B>vd@ekb;d3E*BZ;~q9tc5}4^kHCXz#3{h}o?>?wzF9Jmv7AdwY93=@9c* zI(q2u?r?>~3-R>3;Zy@N*ipyLE2ZV#?+w$e%<0hW{aSp#0(1cQU0F62;>e1v_gv*AyD3TY*E5f>9t~ z0P~U4W>63Haz2p>_|F^PisYx;;IEruWYxLv*qB5~%#9a|iH74Rlee{oV%1M3qs^_x z^3>Ao;>y~^*{d@U2FB@{XSJ}*x(1Y;mWla+UP7$iAp9J@2PFx2Kh6FY<6DPbz2(>6 zx#ipSck0giJHA_g#|p!DZiVkSmiNw`X5*c0Z+)E}<=5H~WZ&_fzz&V!Vl7=Oe!Oq3 z;nlI2tjEfoN1uSPrF7t7A39V#i=au~CpvCp=wiAH`&Y%q#EXF!c^|733h_n76&d9P z(Z>qVSsz`VnOJ&j{?Zz`j$U25ih{-Et@=gH&k`4gwi(=U>jmL_l+N=3%99ex^32N0 z?EIzWwZ(~*%NnRy;q7KvYlHThG725rG8>!r4jrSEe#nmNr78{fq^L%ob2q%&1Kwja z;PX3#L<*JVxXc180oQ)zs^MSX&1%`j{uiNO=Ga*#YAD1+J|CJ}wlQ2ZN=6=*6^nNHy z_5E&P4-@4|#h1*D)=oaK>EsjLs=HxYo7gU9H0{VldTYa=ku0tCYBsM_b993j0Z1yc zcFhsn586h>Y{ZIzs@XK%TE#d>zfsP%!B9X*nZP;?S8{0SFp#I(F1nHmP7UQ_#j)|^ z1&JBjres>l`tcp0dx{RZflPu(@V!{VjB87tib+^xBT1wb{LF9q5@D19x|2-9F$ov& z2~MYU9ncC1JajPngXroLMUwFScO5rF^f3Lhk)A@-^dS-lrY5E?&#X<)lJQ_5YECQqak+m7;DL0gKo<;e>{1)a*vCmaR=YG8$eOrnj6S$g?A7(+-BLjTlFo=+w4m zXdZo4!wLzZs)7?zYCqkPEvd$_Xr;DZWXLHHX2k$K3uyp~P6Q}ks~F%vkt}AD14uU2 zIw9lQBzl~Hs~;8Jxi3j7Ne^Vb(-uB<5l^4|&rLI=Z>pM;$b0F@PKyd>$Y?30SYPNm zzU`3T+mmxQm#w@7;Tz?W7euz!joBy;L6>p+aoh?ds8E;{&;a=#GhYx#)fN` zSF1DU7E0R?TmqJ~Gw87N?PtctXv-_#Xua8Zd$F-SK7Hx-#O-43?%4XBH_zYouFc*C ztjBr1mKGLP5&$0&l{+iipx@f0x9cd+FYWfSP5RnOFKvvc!uW+MlM_={Ru|W}I}|>k za72|fOvJe!<+*^mwZ+w?ONlJHo8dUi0B)C=o|#;|q=VPna8zE%cqv-sVnto2E`DDEa*S%+zk_B@7gBY^C0kVRzr zkkCEKb^T*=6K}08%`C58U7>puWoPJD2KK_#NTTQI#iiNn6Du=hmRr8LyfQPlHa)w1 zMW;|4W09P9oN})5vt>l1i>s4YXQy_{uTLQ`J;4;>q*|FFDX3-=eYGl04dlIkvD11% z@G7NtRaH*SAtpM`A-Wh?rQJ&MOuPgs^ngmKG&C|qE0}VO&o;1Vo4KiS{F!$mZRR1d zfB1RFg{*nU^<#W(Q6NRmI&g8R+{$f+xK$_KaGP306ghE;rR6oV=K+~Zh}jz=CGJS= zZnLw(d;;TvWUIicwqoAypcfz0ROx#r_T#+2vph>Ms|3?8RlNIi8BsCV~%*QWjQME-lQ?UoxOQ8p|_F*JqX<3e}J{ ziU%&cfPOA}0MiaA^B9&%$JZmEUc>TMmiH7;@|XfNqM?|W0MaojML2 z=QetUC>8YYig8BHV`SeF7+tmB6_QN28!+76otTc{LP9ldJM++b9rD3gTv}M+RsqrA zLy6c7TU2sLN}HWz?1L1lkM}h3HLlK1E=?@STMJ$`RyLeay9Bac!$pkH9UW`)K}uHB z?21w6mrAs$UD9leH6)xkk@^spiJsq0i`M5wWFcML*D;ycvA_V88G4OC&15o;LOlI4 zKPiTHd=x@mT{xUMm3cCr$^gDL3+ch%ho6FcIBN>>yf`8T(E9u%&mAfoHts6*11Gfe zSVXfn3^+-FE4cJb#A^gYrf*ss_K+9oOAsZahJ(u``pfvqMEH>~p5p{V_q%>&HE zIgkXGWUkC{9D>MGQ@}H0|Sn=vD{0H zFY^Cyi7{jxv9~&Z#g6aEd zc>Ej~T|77>{oN-<5kgObLG+2 zyaLOchPV*P$gdj`ej)U2yS8aZ)<(<6mNOJOWQAM$uDrs5^D^D+Yr2u=hRrBZ7BF=@ zQTU;meIkq5KP{PEYhP*@(e}#K&BzIT+euVWN`|GDiviQ|YL3N^o8Z1F0&GB!68lij zs!b>Yjr_PO`Gj&@VG$0tZ2jn|ww(lfB^}Ea45wFHYE^BzTqa_P9gH;F(58CcyA|2@ zB4vUDk?zb`aSYqr`Cbz_N0cg_aX?}q7F>MTIBX*yVzYnKaqn3dt*OZM8Ewm#+RC-# zTG58%?zuHgrqkDJ_VR}Yw>lVDj~1|ryRf|DT8goI$$tUZx<~D_{ffaSHh3pgO)O=> z#n11p@&tIR1Se6qd}R6DH4WAkv(nOa!jDke+bzf9iLoS(#4j&#z<2{NC4Qpjgce-3 z@8qk2XVxq;jD!Q9gKRmInA67j0Tp<7_MZg%r|*luEw`M>LM1a}Ma6Mj@UBK9BNA)` zxTTVxD)0lZ9+*wqYZk}ZJauSP?P%M!T_f7|Fb{8H{~7KdYQZUWO1`MFQzy_+uI9}s zd)UriKvEzR!*ZtHDjTj(_A(ZS^0aB}g0^QYPrJtAkhTF>ng#ev7#ztOwTVH%QSM+Q(UxtPp|Nc@8h8h`)e1rcBEL8Z z5p9?eZDFn2IAzM`*`eK7C*2s!Sf-vFvv41-R;(T46@For6YZq8t;Ut7=|jy83)%!h z5OYUoV%dTwhMABw@dO}FpmkOj%fB=_JXWmG112ToWuOCvTAmwv4cmD2^2*Ahyjv}g z^p(+J&bV$U(hKECvA9SCVUeAvqtL<;xth59w-f)vzWIayB@;l3DM%E&w67^f7sKWx zh=RupHE-L6cjvHx5e!~El~U3#m0bG@(Ck!AOVbRbJK?ZVqEJC84d5f(w!GMUs~R>8^&^_N}Kf8g;+V2bEX%!_xyX9q$iZ%bMqQ?gEjLWTu+tT+y1 z)i^(saVP@DP;>F&pkE^zBKObilia0`BM(h9h*xIFh2ryt2aC4lf4?3u)#+!)l<)!CW(m5!jMwVk~KA(k|wO?w9* zo>sLHASPBDB<4CTpVpG$1z#oO6Qva6VTnY-Pp^Ip=Y6`u zBa;eJ=)haM;f)v}(^{f>T%*4W8j&g%QVBKck_lr%?3i3o(gj6tl(LQAIlWW_9Z{Oy zIQ5*uv+$_6zwQ7Fr^$%e_)8txShqiL<0~c|Cum=X>>ow;{Sa2zmMRUU{h~p!ouZGo zl-56DL&er_b3+B*i3x`^ezrscyj6lnc;oZrI?A;poY;l&b6X_FTO~d&64RD`&XSi8 z$da6WQ73pF#+zBJQ$+bMFe#);F(MZP~ z^7~-TgN%qmi0qGL6L`($4@p>j>$n83xK0q2EFF5=t%eevyn+|tT(=|9`iHD0a*zi2*bx6D=} z+BSol?P5B#W$VmxOp84{zszRwi!Jy?D?#$gglm`$TJ0yp9WI^{QM%dQiFOi$qSnR^+@+;R_CjaY(#~wBxMsLmJSPuGKu7%Ke{O`58mcvs_+Y>G zbLrFJ@xqp4;c5mGrj|}SWV)0g{WnkZ@d;k{EKjx_AP-k$~3Qj)Xg5!>jYb z=4)cG$+0n(=Mh8P*VaU>77Vp&{)NhDX~d9mt`pQ2kAa(Z;$HG9ky$U|(=38-W zGu+8XULKAf;gL#?5;#wCU4WY7?HW?Xk+X*HZQH?mtAX8(79A zEbW8kL|>Jp}B5%G-#52>tsy zddJh}Y`qM7O+e@ah0v};=ZPm{k8U}k9e8eD#>hpbqXihS!wpYMd`cyjQScG~$j1uN zMypwMO{WpVeoQ8h5mueEqFq-8jdzId|YPGBIN<eBOC_dVh(S;VR@b(*+D^+qp@V4Ec(zx;MFWnl=l@1=#l}KW2@#_etggH z+{TVEk1GZFZqzBUZ^gLoV42Mby>;lZ_KbYl)rblj-w2*bv!jVnOtMj{BsVwZ0Ig5M#>duxOVk@n4Fnw`#Fh&+lNE9#5DU{0!%NLH)F4B3__ zX0VF(-Ih#atBU?dTf)89{Km${#&9Lrm=blr|KB2=LN-fjKqC1o9jD_t_A$-+d=MW# z&o1AbySOlaa}DRN*Vd*N<|bz6m5sZ9+iWzq z@ZzfyZ`;)ZIaUa9r9s_}h5HfyHy69obnr{Nm=0ijZ(looDVDi$p`t;W#8r(vyvUu) z61l%2lpk4ShRihr+pOiCC=bnnZb5CxyNr@&StN{Qly(n}F# z^#M&9b?!m1uOcnt-!n%$Ie>eV>CUE(ZJPnVskcVgt>~_x22`BxL@5r%dK1!17dmmw z?&)#l7&VU5>t59ox2L3?O2t`pKRt0MssyiG6Vr3E^BD!5*F;yMpi?T7JocQdp?)>X zGx8FHJYNdQ!}T#7GobXN%QI6;Gb_@gT3j`~!d+!@RQAN1H&)hW-ddbpB8OvZmlsx- z$oEg2OUF#gA>6>ls}svtAWM@~)sY|jn>)r+E01$=5xS?Z7jU4hQYer~7%R{TuhVGX z@rz3f^D8s+)6yH;p#i~5g>+w=Y=Q1ls;f+%P*1>j1$Q&CHb;KA;&OG&#-XTe+bv0o zqEojdsc<5o#f9aSOG`7$ih%Tdy63JW38`#43F%qm1=lY20Wnye;D?@CKJ9x`>rZ_m z0CzcIOxyd0nG^Ez4B8x&9M3+xi+d$3OSg|_uc*B%W*C~TbElwCRA`!xK8uKvH<1bI z`FLoQRjiaoHD}m5iVi<6&S#B_zud$95vj_{f$;|4N+gFsT2YE12(b!Gsolu2`R(Om zr=a=uf5{u~iz1j%+|I)m3?E>95jeN%ae5>3-y8W5V}4ph-#e3zAZl zQ=+_xBmsVb{FSN#b&-5wR|&4N=)!kjSzb0S;@GAj3k4@3mM@gKm*1?*N76mtLFa+% z3N2}Z-glEDRG~H^mhy%~V(hC+2H)nFbWz?6s!ra1q-v$wuH=0OB31F(bf!(R%cJMy z9J>QvpbLKF0fkm_kR>(o_c~7Vx*0A_mz$p2kEb2kwyTlncSt1MmWxEXZ}THJC?Cez z-j&%E?n+jqi^oTOLlT!LYGl-ohs3K|Uln@*zm(nsh+!5RDSkd{liDo7fWN;r(k)- zglv%g)gzszh5byQHw#g#Bqg8j@ z3*>Wd&81x^Ytl`FzMemNNC-^7`%$?bEe@R<8p*H2@vR`F4t{N7^*|ApE}yyl(&Y02 z9e6Be$>%>2r}b2cQbc1LGwz3ucd5zkY}ntpZC67l64Q$+_HCpl6bjzKjc}P0h>n** zW}#V#T5*rgnM3s^Kcn9!N^6`jV^u76VAw(N=_K4Uy$vR$3gtA~e9bDS_rRIHyhk<`IB=KOS2QxlS!|_ zXrc5#-MRWF;jfc?LaN%6l4J*{zHawZUh}mqvhrFMIG2;d!VfgagyyaEv=O%7l3@$f{ci$3D=INFYNik@v22Q_1dS4jqH0*0I zaYtN6yHaDnmLVQ0PZIgSe)b$4v*lP3uQj5T+E7hREsjzMEyP1FK)$Dyt3i>s>D5{d zZT;v3&m)3ixkR?d)7fmzzXm6`yzN@j2-s;LKT@k=cNC1zfciXnK!x8!Q5myg2NAz` zF*Y4OE=D>%66ah2;r(d{_8sm&Dh=c*0VEYK&5=*1;iS=WQsfum&=ome;KNmGfsPl^ zg+Pp4%6m4QJ`5WL3yoHt_NXW+3>$fhfx~>1^-NaYO?xNK`iPbl5i;ldvT}xDW6g>W zqMgw4T59RBy}oYKj{;NM9HQzgW8_|vC(@-hooZayV-lfGHI(~c9_3dohK&Mu!&p{G zp_wgV1BT%EbOQXMburfe-RX0oIAMx;^5hww0B^P7q?c%1ZV;UkN$^%lgnET}bPvPD z4ecgn?c(tSALa=<1PL!^GBfvJJh;j`abw*j->N#}y4cNLq}4XYBx@jXi;GoNAb1Xe{7Pfn~21Shg{5 zN84VoY0SkNK9dG)4y*GHHaR2EZXK@}6Sbz}Rzx*`Lb-udb_{7fVuBwdtwZ-w;*42* z<`7%ib8sPW8TzN#Z7Tf7O7)WyK!*w^ds(NIPIXQW?G;1mEtG+~>gGc~cghS8-y(_+ zuhPkQMfNhcLnp`H%ANyuA{*BOMR)1&Qdc7ErT9?Zlr9SgT~KC|4!ZKj8E9U`3V#xx zOXpo8u0(OA3dd@PS%W~iKA=_7!cvbEt;5BWIJuD?#M<(v2Dx;0F^08e6XEIP7{1cA zv)%Y!bWtfaUbQ7wV_X_CvS6Ib%z=ok43?RhoDXMh8RVeUo=3){vtU4KON~HS^6gF* z{3K7MB`1}UAq)QN=PScV&1%|(hn7IPbT5u_$79<6nsh!#_h+liBr@bl2;^qBCeHFe z#YpK_qQsOnPxq9IQ9C)10oQ^Eoe1{k8D5tK@UZ0s0Q=)f4}T=ClEyPf7-@{sr66bTYetB>o~1oP#|Y-d%c174 zt$SJ5c_?$1^1AD-wL&|Tf2FbUbLT4jDGylgCbHjpuMh*$qs}F=`{KUHZg1ZJu}pqd zxCO*JCP~wG-Y@K6uZaYB#|hL$0$9s#r`e}tBS+8*qxDd{NK51)hbPw6EMlD$#L9t7 za=q--H}bw6&~`-^r#$(~@0 zIeutcn1tBYdi^+KEXNotG5*6Fi#*sQbc`|f2x9|XxF{lb0vk1s;sKz?1N(N%4x>EI z$~~^2`nDac`GMzqq1gcJql~eS3D|h!kPcw?F_!DWB^0=p;*-~M>@w%_xkw4)s9s_wL`n|AZ(W?L^c@4+fS*r(L%SY}m#@MqWH{S5vi^`)aU3$StED9zN&oIXB-@nhQ zBC}qNEyh@t&6S_$ryJRGXiXnu1NVVzG!wOAPvMVe@R0QcL9nM80+YWdGr}?&3N(sZ zh9))*<8SKVo zvH;CMOK#)~GiCU?AiEI}4@^&r?{4k8NBi#8zF*HVhW+(D0*R;_QAiHNaRj1~7zh=6 z?dV+DxPPzz=!-92gAu-i6f??1VJ|Na}|doqW-bLFoy_AX<;M$cbi?9+^W zgR$JNGM4)qV*~fVb@yP0=*5w-9TIKTAa8EhF$38(b3dvC&cZthVqh|GYIXbS#5@*f zc87w-01DnoD1B9eQi2E5-C^Jg9>4%Hlu@O-VY*mN&CJRK22@tyPG#-qzPZc>*lyja zH%+(T)X+r`>q`Q~cw-S6;#{Kjy%B=Y|3Nyg6Sux1Y`dz7(HL+G$SzJLEe-0x@iXrwzvBi%7E z_7Jf{yj>__JjegBp`!7s)d~XJjT$=!ww~4PnsIr@w}bq3W6KGmmf0|_Uz#vp4eYIo zQGD$+5bA?L7+`GhNb%0-@aS+q|16D^M!K=|zFWy%j14|H=U9P<1M9|=7x*4O0CAGB z!DmrP&CL=vu?AkFVbfuw<9d@{QfQNiB3awjhNuaZ>wGq%#>&IzOB0iYnaRT3q_H?V z`__mtyDX7a;>db%C<0;UOQoVf*jRDw91yl=4S=*$vuigG^3a2I3f{7~_e z*%<0>!_dbShKku38W|~0zEybpt-|zMm}8emMuyej1%}HU z!w&(B!eL1=wWQI(J?qdJOGo%{mPF9`q2XbLpi?CI-o4M*kKboWhVE@cm(Gf%{i17j zdPZO?gP{)xB}P^$MR1uNrq`e|u1+AC^4^$6S?Qa!!3%>$Lh2pSk<^9ZVQjck#J?>3 zTo)t4)O2BKVa_llVup$ar=&w?Ch@-;cr?6!E?kc=K}GBOL_Iq+tgpRc)U4ebHtmF) zv}(`CJFQ`d&75dh7WnptiK4FN=E{#T_HK?n%W6)zS>WNNyg*YP&@lezST_r6)kMGc zw>AG}Xhvoxy-KtL-r3mNR)C4SW5M|kQ+!yfl1lL2LGMLh3snTjd`7RX-cJcc9>>%k zWYSB`#zY;sq$zxw2L^Opb%O_BJaNp%Sb4MveMkFK!PUYZsH2YRg%bn5cc?^L-aF_I zrK27Qm&g7Lmpaiu5H64Z87_5PE9{dM;T)At@8kX6xO$io8WbAt?gqH2E zS>_sDB7_YcUR-(LC{E->zRZo*#u0&niiX7Dd>^081FMR)vF^F50aU4m*Q&`RXpz+n zaMQiDUYDVdAe0}rDug>Bc9fue{7z}_Q*5sMhdIXnD96|z`cb{M^hfBJj;G8qS-Va%qXu$XDpVb}=D3P9uwbG`^MlATGpIw4ZP;e07&Z-=qgGYt=~P}Gy%ySW=cFO< zDk=!+x`nN(YpWhl$8Onf%~QMr&Vcr=#0VkH2{(lgOf0-W20ssTrdZqh6d4g2`)n`5 zv8r?LUB=#KjQy{Sv7cg$eVnJvS^OS$!p~QQki5$ndxbIfZH%!`F~+`wF@`0R?_`Yq zb;fc(z!>`*j4{|&VNnOaz=XR9yD4M+)2A5wE~BKRs8Y&c>FarIr(<{xr2vG+1@1> zH4VfMA?=n~^TN*~+2`>1TL`0N-*@4yRqY4;?-2PhMAosS`K|b~iifGfmhk6Q90hi6 zyF<8zHD4^_T*6S(*$lkM*{sm4=`zyI;qe9@AHn0pG!I9z6=(ATLdF5e-4)On(w)cS z93G>1oWbK;@OTZ64`|JOnz6x84Gm#}iQRgItMhLy-&|gqs}zg;dvbLd->_sAi^UOq z&n;hE!ELtqUbjcikB^QH=g*hMs`(MCZ0E;@*U#t2*6mTNd~T$)UbPEwyj3hjW>B{y z(#GWcx=?L+)+T1Q&j4eDiKo;T$)8Vk9gsKJA$f!C#T!Q-DsK!Nc@dN>CG~$2u3$-) z=nl;0E)4O1{{iIMd&UsYcVvjbZ0?^Op6|#Gf!RC+Ghmf`5R2%99wI@E(={(D-4Wxx z5IlSgq;RN#G87u1SWdG%*R?GbgHb`mV4H!=0PrFhyHC`Rr-hUII+-47o=6|iH3Tw3 zgCDdSDj0CAW?(hksNlFs)z)eTZDF`P8}~y?u+XVwSUy0E(g1mhbk}wmrCZdn^C2DA zQo|yYhPoO0fd_aJKE~F1VEVWko>T&I$R=YkY$s!@-klgERIX&S<+qx4Q)X|E->}U_ zw9z@x-V6MMC*8hnyE-4BYU#^j0DLFKu=FL3G@N?;Jz1e zV6v^~NEt!ewWB&xk4klq9u)>#h?M|ASrVW=K|-ZvI9!F=HQc6BvsI_+8Mo_>ny8>G zYJYy)3G8~y3{(xF9Xj=HsYw}x*}^RWR8y=8cGKQ z>+;<=P7QuSBBj`3{g}sW+A0vF$pg`ND4R6lkR?OebAsFQPc&fDsfpE6G2qHbG(d~g zkqI7alp|j#tTG2y!y9%@l?IeH>{=mR3(9Usq3v41j;{z0t#6u^uW9F~L({Y(yP@Vz zvM@BiX@?uMTTKQ6glk5A(^uR^AgG7hKwz%v+EGF58qMQw6bT7(LB_?iC4!F}fuav| zCW7p0luyi$(Q`6l-NCIw5;oc|W89eWP*VguesnICBN5d!-FhslfMk_RgO&&n%xzh? ztgqvDs4pUT5dfj@_JZKa*o%dIZL$ie!C|s#6_mZwFn8?WydQXxr}|gM@r!GdQb#t7 zLZiS|g#47KUbyW<)<)j68hP7|0w%jkgQ)b@%ep2dh)_tGAYJRL#p5{o38ld3Sr{!k>1t*ShA) z&~)CvXxjmu1EN{S91ZH&-vKSg@m$z!umwqMf*k0Dbqt&Ha8^^&JSfuJ^5q3rDje+W z`zCI3kV$!vUocH&k^*)3zF&aE6Ame5YVf%4`yL!s^0P%U2J!=$_(232ipu$spHR-I zM1;l0F));mu%!J9WEPATntmfJ1mTun@Xc6jfVm+UEd*W*62HJDP9fB_F7U6G#0&lP zf*HgXJ&cj*_{6{kifv2ah7mSE%O+-}ac!r*QH_lgSp@~ATUS6*HEmVvK54G9kmr&W z5sihZuH|Y&`aIF_m;MGid|!!}i3f>WSiGt7mp!tm}P&fm%Z)8W{MS%2u4h zq7ynHDaAUbVSv>@h%}KMKwFfUN}<|!nqf1cUZZK1k6EMW=coRc|DL>o{3J281-ziKdbC zsMh^0zoCSc=pBk`)Og)=N)y6dtx^qVsPgtgKaRfj{K-~zurl*R-kP*7h`g%NWp$4HHM3z!aX+vwX8g7_D ztm$9?3Y%3Z^Qx+t6ok#Hr0*M|SiEoWWw=jsT?d=ZQ8Xaa5eIp&0o$0ky%8HEj(jw1 zc+tnOTjLlF+L5!lJU59A8b{`qFE7l^ph0kUpk`9QZ5VFk{lM8WBRes8QkbFT~6U17_ zmYO9Z1s(FJd5RK1Jy81_b{Lusr>@u!xRVhnHq`TkuIDLk1b=QvzE%N@ToQ_9si78% zqY736jp`@rB3n;k4a?cqfKvI~9${LR9je4Yjfk*JYeS(>%fOeuWN-heC45dhs}dM;{*jcnsii6pv$g z;NT7LWIN-$rVMS9hE5|hpFec%X!NL znaF+s4)MdA_A&f4`r&u^0$L8DnDR8WEa_!sux9U7Wn5`%(692y7{YyN1y<3)w$?IvK_O76XttuB*`W^#J2C`EW0^3r%GEl8*6s(8&uvHa@6=mTV0_*XlADu)H zy;`*uQV+_MWRFARcvNUB6#jHs+vXO~xI=CiWmJfh6HjI1Y1#qpt1 z@%&Kf{Q05t;|j#m%-q7tOcn^~6dR?lQ0aV&1hV#{;&ThrnHiIaZh9>@qHQQ(9?9-_ z*F_!wPq`)IIrw>ex&yv&a?2>t8mWMpfz+&aB&(Agd45dv9Nuu6J)C2?a*ho?AqwIr zz`1=eEalkX>6*0}todfNW{%&qZY`PP&S>@0&Bny&#GB!qf9tKW^7(7U92@L6n^+Ta z8-*Oht)V}sArB?Xm2A+YOk0kM-W#rIyH%TbMKaLd#8CrLh!;#(a3OE!tD zmx`3RqT>2c-Y`I(7EOc_BEK)wH=TKxTWR>?4aqw&{S*H z?6&zWq@G1>0Cr35c%tV>gDd zf$5s2ZfeB?h^5dP=`kuCQWW9BjN3k}YLQLTQn*LIXijiew4=K)j3tW5jigf|k1} zqa>|L+G#jeT(e~BsZ;_Sr%3jjh|GhMGKlE5$2Am3^{A{EVp1!o7_m`jL}{>OGes~l ziEN7`Nf{R}jY7&uV9}jsOm})Ie!RRX(__F_p=9)e=1ol*Bb0CU)4@n1m!XWS?={69;l((QkzJ;b{|H&=d#v3I-JlT1@WhG@s%P|zwc>^yw8i@h&1x-wcU77Neo zac%kw@B+E@=dlX{=hqp_Z8Dbo6l1whFh=eq{sMm=y#-AJ)91bhX32MP@LFhiP#Ov~ zZ`-Ad6z^dE?8C~ZMY{-e7#ln*n_~KYsCE`&n_SnA4&oahd6!`g^7LHRLGVc#* z-#@H<{~hi7M>RbBUG4h|+V|hnzJEgd{zdKAvra4#`A8Qz0g&IyE*OQhaJ_(_DHz|5vMQN&Y_p77Dp9`!7u zuw8ae@>>STEX$hz*7{SDE$nIFuHgVDhm|>*DM3y zpD2RD3kd%Kguf<>pm5y3JMh`|@G*qrXlq9 z2>&9&FC^exLij&u55J7?UuX}XMfksHhkpg({~y9<6Y$~FWZ+zT`gw$pA^d70{bvwv zQTi8kLi#MiZG?ZO2cB3;iCmvU?EBkG`8>kWaRZ-Ar2ip=pGNrS6X8FM@c*$L&fh`! zcOv|U6NK@jAdE)@?IolBE}|Y2Q9qi<^#w%zPa-Opi28eoS`?J_g+$a(AnH3st}oz< z2{^eTBKb)~{bdpL6NI1PMBXnV!9U8(`%{Se$0F*Bl((G7`_o8pL?lSo_DhI@VgtJwdPI`mHE|mR~`l?~{oVRrqRq70Ssf{Hk7suktFK(W~$^y$Y0|PuOY_mH0Ki z5?@VJ;_K~|7*1B=*Y!$#omT=^=qWsWL$3rSIO4UUG$MXOufx|9b@)w0{a*q{Kb6%N z{}3sDSETsOj5_=l68sZA!I3bqTr=4jzl~J?RHjPQ;hXJsNOi{V=ymvJMjgOzst%Ok zNG*)gbpYq7I(!o zpOA-^@|&&~(SkBsmEPAxo84$X$C|d+6jKSU()yZ*oOfd0AR0jWKIWYWqiLfaA!oH_ z!!ecJ066gd_6-Oy9t8H59fURvTX%M7tC7kEWb&;b={Yi{lYDa0a%-x5Om}%G+2Ypo Kv\"name\") ];\r\ + \n#[/system/script get \$expScript name];\r\ + \n:delay 2s;\r\ + \n\r\ + \n:set expSrc [/system/script print where name=\$expName];\r\ + \n/system/script print where name=\$expName;\r\ + \n#[:put [/system/script get \$expScript source]];\r\ + \n:put [\$expSrc];\r\ + \n:delay 2s;\r\ + \n:set FileName \$expName;\r\ + \n:set FilePath (\$DirPath . \$FileName);\r\ + \n\r\ + \n#:log warning \"\\n----------------------\\n\\\$expSrc = \$expSrc\\n____\ + ______________________________\";\r\ + \n:log info \"\\n\\\$FileName = '\$FileName'\";\r\ + \n:log info \"\\n\\\$FilePath = \$FilePath\";\r\ + \n#:log warning {/system/script/get source=[/system/script/get \$expScript\ + \_source];};\r\ + \n\r\ + \n#\$[/system script get [/system script find name=\"\$FileName\"] source]\ + \r\ + \n\r\ + \n#:local gettingScript \"\$FileName\";\r\ + \n#:execute script=\"[[:parse \\\"[:parse { :put (\"\$[/system script get \ + [/system script find name=\$FileName] source]\"); } \\\"]]\"; \\\r\ + \n\r\ + \n#:execute script={:put \"[:parse \\\"[:parse [/system/script get [/syste\ + m/script find name=\$gettingScript] source];\\\"]]\";} \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n:do {\r\ + \n:local fName (\$FilePath . \".rsc\");\r\ + \n#:delay 3s;\r\ + \n#/file add name=\$fName;\r\ + \n:put [:tostr [\$expSrc]];\r\ + \n/file set \$fName contents=[:put [\$expSrc]];\r\ + \n:delay 3s;\r\ + \n\$WaitForFile \$fName;\r\ + \n(\$FilePath . \".rsc\");\r\ + \n#:delay 2s;\r\ + \n\r\ + \n} on-error={\r\ + \n:log error \"\\nERROR \\\$FilePath = \$FilePath\";\r\ + \n}\r\ + \n#\$WaitForFile (\$FilePath . \".rsc\");\r\ + \n#:execute script={ :put [/system/script get [:put \$FileName] source]; }\ + ;\r\ + \n#/system/script export \$Sscript file=\$FilePath;\r\ + \n#/system/script/export [:put [/system/script/get \$expScript source]] fi\ + le=\$FilePath;\r\ + \n#:execute script={ :put [/system/script/get \$expScript source]; } \\\r\ + \n\r\ + \n#:log warning \"\\n\\\$expScript = \$expScript\";\r\ + \n# \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n#script={:put [/system/script/get \$FileName source];} file=(\$FilePath\ + \_. \".rsc\\00\");\r\ + \n#/system script export \$src file=(\$FilePath . \$FileName);\r\ + \n}\r\ + \n\r\ + \n:log warning \"\\nComplete!\";\r\ + \n\r\ + \n # :execute script={ :put [ /system/script/get Amster-GlobalConfig sou\ + rce ]; } \\\r\ + \n # file=(\$FilePath . \".conf\\00\");\r\ + \n # \$WaitForFile (\$FilePath . \".conf\");\r\ + \n # :onerror Err {\r\ + \n # /tool/fetch upload=yes url=(\$BackupUploadUrl . \"/\" . \$FileName\ + \_. \".conf\") \\\r\ + \n # user=\$BackupUploadUser password=\$BackupUploadPass src-path=(\ + \$FilePath . \".conf\");\r\ + \n # :set ConfigFile [ /file/get (\$FilePath . \".conf\") ];\r\ + \n # :set (\$ConfigFile->\"name\") (\$FileName . \".conf\");\r\ + \n " +add dont-require-permissions=no name=test1 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n#:local runningVer [:find [/system/resource/get version] \"(\"];\r\ + \n\r\ + \n:local runningChannel;\r\ + \n:local runningVersion;\r\ + \n:local ParseCustom;\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n \r\ + \n:global runningChannel [\$ParseCustom [/system/resource/get version] \"(\ + \" \")\" 1];\r\ + \n:log warning [\$runningChannel];\r\ + \n:set runningVersion [\$ParseCustom [/system/resource/get version] \" \" \ + \")\" 2];\r\ + \n:log warning [\$runningVersion];\r\ + \n\r\ + \n\r\ + \n\r\ + \n# :if ([:len \$open] = 0) do={\r\ + \n# :log error \"\$SMP Could not extract installed OS channel from vers\ + ion string: `\$runningOsAndChannel`.\";\r\ + \n# :error \"\$SMP error, check logs\";\r\ + \n# }\r\ + \n# :local rest [:pick \$runningOsAndChannel (\$open+1) [:len \$runningOs\ + AndChannel]];\r\ + \n# :local close [:find \$rest \")\"];\r\ + \n# :local channel [:pick \$rest 0 \$close];\r\ + \n# :return \$channel;\r\ + \n#}" +add dont-require-permissions=no name=01-Amster-Init-Script owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# Amster Initial Script\r\ + \n#\r\ + \n#:global GlobalEnvRemove true; /system/script {run Amster-GlobalEnvRemov\ + e; };\r\ + \n#:delay 1s;\r\ + \n:#global ReloadGlobal true; \r\ + \n\r\ + \n:global AmScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global defOwner \"vados\";\r\ + \n:global AmFirstRun;\r\ + \n\r\ + \n:set AmFirstRun do={\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n #:global ParseKeyValueStore;\r\ + \n #:local AmUpdCRLF true;\r\ + \n #:local IfThenElse;\r\ + \n #:set IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1\ + \_] = true) do={:return \$2}; :return \$3}\r\ + \n #/certificate/settings/set builtin-trust-store=fetch;\r\ + \n #/tool/fetch \"\$scriptsUrl/certs/Root-YE.pem\" dst-path=\"root-ye.p\ + em\";\r\ + \n #/certificate/import file-name=\"root-ye.pem\" passphrase=\"\";\r\ + \n # For basic verification we rename the certificate and print it by f\ + ingerprint. Make sure exactly this one certificate (\"Root-YE\") is shown.\ + \r\ + \n #/certificate/set name=\"Root-YE\" [ find where common-name=\"Root Y\ + E\" ];\r\ + \n #/certificate/print proplist=name,fingerprint where fingerprint=\"e1\ + 4ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666\";\r\ + \n #:log info \"\\nAmScriptsUrl = \$AmScriptsUrl\";\r\ + \n :local Scripts {\r\ + \n \"Amster-GlobalConfig\"\r\ + \n \"Amster-GlobalFunc\";\r\ + \n# \"Amster-SFTP-backup\"\r\ + \n# \"Amster-BkpEmail-and-upd\";\r\ + \n };\r\ + \n# /system/script/set owner=(\$ScriptVal->\"name\") \\\r\ + \n# source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRLF \$S\ + ourceNew ] \$Script;\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n /system/script { run Amster-GlobalConfig; run Amster-GlobalFunc; }\r\ + \n}\r\ + \n:global AmUpdRun;\r\ + \n:set AmUpdRun do={\r\ + \n #:local UpdScript [ :tostr \$1 ];\r\ + \n #:global ParseKeyValueStore;\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n :local Scripts {\r\ + \n# \"Amster-GlobalConfig\"\r\ + \n# \"Amster-GlobalFunc\"\r\ + \n# \"Amster-GlobalRemove\"\r\ + \n \"Amster-backup-SFTP\"\r\ + \n \"Amster-SFTP-backup\"\r\ + \n \"Amster-BkpEmail-and-upd\"\r\ + \n \"Amster-TG-Bot\"\r\ + \n \"Amster-TG-Notification\";\r\ + \n };\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"updating \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n# /system/script/add name=\$Script owner=\$AmOwner source=([ /tool/fe\ + tch check-certificate=yes-without-crl (\"\$AmScriptsUrl\" . \$Script . \".\ + rsc\") output=user as-value ]->\"data\"); };\r\ + \n}\r\ + \n\r\ + \n\$AmFirstRun;\r\ + \n#\$AmUpdRun;\r\ + \n\r\ + \n#\$setUpdExist;\r\ + \n#:global setUpdExist;\r\ + \n#:global ParseKeyValueStore;\r\ + \n#:set setUpdExist do={\r\ + \n#:do {\r\ + \n#:global ParseKeyValueStore;\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\\r\?\\n#comment=*\" ] do={\r\ + \n# :local ScriptVal [ /system/script/get \$Script ];\r\ + \n# :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"#comment\"\ + ) ];\r\ + \n# :local scriptName (\$ScriptVal->\"name\");\r\ + \n#:log warning (\"\\n\\\$scriptName = \". \$scriptName);\r\ + \n#: log warning (\"\\n\\\$ScriptInfo = \". \$ScriptInfo);\r\ + \n# }\r\ + \n#} on-error={}\r\ + \n#}\r\ + \n#\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run\ + -count;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;\r\ + \n#;(evl / (evl /docommand=;(evl / (evl /foreachcounter=\$Script;do=;(evl \ + / (evl /localname=\$ScriptVal;value=(evl (evl /system/script/getnumber=\$S\ + cript))) (evl /localname=\$ScriptInfo;value=(evl (<%% \$ParseKeyValueStore\ + \_(> \$ParseKeyValueStore);(-> \$ScriptVal comment)))) (evl /localname=\$s\ + criptName) (evl /setname=\$scriptName;value=(-> #\$ScriptVal name)) (evl /\ + log/errormessage=(. \r\ + \n# \$ ScriptInfo = \$ScriptInfo)));in=(evl (evl /system/script/findwhere\ + =\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run-c\ + ount;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;(~ \$so\ + urce (. ^#!rsc by Vados \r\ + \n# \? \r\ + \n#));5))));on-error=;(evl /)))\r\ + \n" +add dont-require-permissions=no name="Download cAP's Packages" owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# +------------------------------+\r\ + \n# | |\r\ + \n# | Mikrotik RouterOS Scripts |\r\ + \n# | _Download cAP's Packages_ |\r\ + \n# | |\r\ + \n# +------------------------------+\r\ + \n# https://github.com/sebastian13/mikrotik-routeros-scripts\r\ + \n#\r\ + \n\r\ + \n# Set a directory path providing the required space\r\ + \n# Add a microSD card https://wiki.mikrotik.com/wiki/Manual:System/Disks\ + \r\ + \n# or setup a RAM-Disk via '/disk/add type=tmpfs tmpfs-max-size=20M slot=\ + ram'\r\ + \n:local dir \"/tmpfs/capsman-packages\";\r\ + \n\r\ + \n\r\ + \n# Set Package Path if required, set policy to none if using 'upgrade-cap\ + s' script\r\ + \n/interface/wifi/capsman/set package-path=\$dir upgrade-policy=none;\r\ + \n/caps-man/manager/set package-path=\$dir upgrade-policy=none;\r\ + \n#require-same-version;\r\ + \n\r\ + \n:local installed [/system package get value-name=version [find where nam\ + e=\"routeros\"]]\r\ + \n\r\ + \n# Delete old downloads\r\ + \n# /file/remove [ find type=package name~\"capsman*\" ]\r\ + \n\r\ + \n# Starting from RouterOS version 7.13, drivers for older wireless and 60\ + GHz interfaces are\r\ + \n# part of the separate \"wireless\" package. The existing \"wifiwave2\" \ + package has been divided\r\ + \n# into distinct packages: \"wifi-qcom\" and \"wifi-qcom-ac\".\r\ + \n# RouterOS >=7.12 is required to upgrade to 7.13.\r\ + \n# https://forum.mikrotik.com/viewtopic.php\?t=202423\r\ + \n\r\ + \n:foreach architecture in={ \"arm\";\r\ + \n# \"arm64\";\r\ + \n \"x86_64\";\r\ + \n \"mipsbe\"} do={\r\ + \n :foreach package in={ \"routeros\";\r\ + \n# \"wifi-qcom-ac\";\r\ + \n# \"wifi-qcom\";\r\ + \n \"container\";\r\ + \n \"wireless\"} do={ :do {\r\ + \n :put \"\"\r\ + \n :put \"Download \$package \$installed for \$architecture\"\r\ + \n /tool fetch mode=https \\\r\ + \n url=\"https://download.mikrotik.com/routeros/\$installed/\$packa\ + ge-\$installed-\$architecture.npk\" \\\r\ + \n dst-path=\"\$dir/\$package-\$installed-\$architecture.npk\"\r\ + \n } on-error={ :put \"Error downloading the file. On a 404, note t\ + hat the package may not exist for the specified architecture!\" }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Script for setup routeros script system" \ + dont-require-permissions=no name=AM-setup owner=AM-setup policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-setup\r\ + \n# Script comment: Script for setup routeros script system\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:global NewScript \"script_name\"; \r\ + \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\ + tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n#:global NewScript (a);\r\ + \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n#\r\ + \n# For run from terminal:\r\ + \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ + eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ + ut=user as-value ]->\"data\");\r\ + \n#\r\ + \n\r\ + \n:global ScriptUpdatesCRLF \"LF\";\r\ + \n#:if (\$ScriptUpdatesCRLF != false) do={\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\" ] do={\r\ + \n# if (\$ScriptUpdatesCRLF = true) do={\r\ + \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\ + cript;\r\ + \n# } else={\r\ + \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\ + ipt;\r\ + \n# }\r\ + \n# }\r\ + \n#}\r\ + \n\r\ + \n# /import verbose=no \$ScriptName\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global SetupScript [ :jobname ];\r\ + \n:global RemoveMe true;\r\ + \n:global RunOnce (a);\r\ + \n:global InitSetup true;\r\ + \n:global tmpfs false;\r\ + \n\r\ + \n{\r\ + \n :local RmMe [:tobool \$1];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SetupScript;\r\ + \n :global RemoveMe;\r\ + \n :global InitSetup;\r\ + \n :global tmpfs;\r\ + \n\r\ + \n :local UrlSuffix \$Identity;\r\ + \n :local UrlDir \"certs/\";\r\ + \n :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \ + \r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :if (\$SetupScript = false) do={\r\ + \n :global SetupScript \"AM-setup\";\r\ + \n }\r\ + \n :if (\$RemoveMe != false) do={\r\ + \n :set RemoveMe true;\r\ + \n }\r\ + \n\r\ + \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n \r\ + \n\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\ + \_\\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\ + \_as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\ + t YE\" ];\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n\r\ + \n:local MkTmpfs do={\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\"Try to removing directory 'tmpfs'.\");\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/remove tmpfs;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n# \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\ + et total-memory ] / 3);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get tmpfs;\r\ + \n :return true;\r\ + \n } delay=222ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n}\r\ + \n:if (\$tmpfs = true) do={\r\ + \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\ + \";\r\ + \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\ + \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ + \n :return \$true;\r\ + \n } else={\r\ + \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\ + \n :return false;\r\ + \n } else={\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get /tmpfs/scripts;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n# [ /file/get \$FileName ]\r\ + \n }\r\ + \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\ + \_global variable tmpfs!\");\r\ + \n# :global tmpfs (a);\r\ + \n# return false;\r\ + \n }\r\ + \n}\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n \r\ + \n /system/script run \$Script;\r\ + \n :delay 2s;\r\ + \n };\r\ + \n\r\ + \n :local Script \"mod/AM-Certs-By-Ident\";\r\ + \n \r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \ + check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\ + rsc\") output=user as-value ]->\"data\");\r\ + \n /system/script run \$Script;\r\ + \n :global tmpAddCerts;\r\ + \n :while ([ \$tmpAddCerts ] = true) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n :delay 1s;\r\ + \n :put \"Removing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :if (\$RemoveMe = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ + where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ + \"_RemoveSetup\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ + \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ + \";\r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ + time=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ + . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :put \"Normal removing temporary global environment variables.\";\ + \r\ + \n :global SetupScript (a);\r\ + \n :global InitSetup (a);\r\ + \n :global RemoveMe (a);\r\ + \n } on-error={\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$0 . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/729/f42d43ae\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 00:05:03 01.07.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n#\ + \n#root.mnuc.backuper\ + \n\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\ + \n#:local Script AM-GlobalConfig;\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\ + \n:global MkDir;\ + \n\ + \n:local FetchFile Manager@id_rsa.pub\ + \n:local localDir \"/\";\ + \n\ + \n\$MkDir \$localDir;\ + \n\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\ + \n" +add dont-require-permissions=yes name=MkTmpfs owner=vados policy=\ + ftp,read,write,policy,test,sniff,sensitive source=\ + ":global MkDir;\r\ + \n\r\ + \n\$MkDir /usb1/tmpfs;" +add dont-require-permissions=no name=CreateContainer owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local contIF \"veth1\";\r\ + \n:local contIP \"10.10.10.10/24\";\r\ + \n:local contGW \"10.10.10.1\";\r\ + \n#/interface/veth/add name=\$contIF address=\$contIP gateway=\$contGW;\r\ + \n:local contBridgeIF \"Bridge-DOC\";\r\ + \n:local contBridgeIP \"10.10.10.1/24\";\r\ + \n/interface/bridge/add name=\$contBridgeIF;\r\ + \n/ip/address/add address=\$contBridgeIP interface=\$contBridgeIF;\r\ + \n/interface/bridge/port/add bridge=\$contBridgeIF interface=\$contIF;\r\ + \n/container/config/set ram-high=768M registry-url=https://registry-1.dock\ + er.io tmpdir=sata1/tmp\r\ + \n" +add dont-require-permissions=no name=carkeeperbot owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/mounts/add list=carkeeper_configs/.profile src=sata1/carkeeper/c\ + onfigs/.profile dst=/root/.ashrc;\r\ + \n/container/mounts/add list=carkeeper_configs/php.ini src=sata1/carkeeper\ + /configs/php.ini dst=/etc/php82/php.ini;\r\ + \n#/container/mounts/add list=carkeeper_configs src=sata1/carkeeper/config\ + s dst=/configs;\r\ + \n/container/mounts/add list=carkeeper_app src=sata1/carkeeper/app dst=/ap\ + p;\r\ + \n/container/mounts/add list=carkeeper_scripts src=sata1/carkeeper/scripts\ + \_dst=/scripts;\r\ + \n/container/mounts/add list=carkeeper_configs/sshd_config src=sata1/carke\ + eper/configs/sshd_config dst=/etc/ssh/sshd_config;\r\ + \n\r\ + \n/container/mounts/add list=carkeeper_tmp src=sata1/carkeeper/tmp dst=/va\ + r/tmp;\r\ + \n/container/mounts/add list=carkeeper_sync src=sata1/carkeeper/sync dst=/\ + var/sync;\r\ + \n" +add comment="Enable or disable ip addresses based on bridge port state" \ + dont-require-permissions=no name=mod/AM-IPbridge owner=mod/AM-IPbridge \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-IPbridge\r\ + \n# Script comment: Enable or disable ip addresses based on bridge port st\ + ate\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n# Add this Script scheduler\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n:log warning (\"SystemScheduler for script: \" . \$ScriptName . \" is NO\ + T SET! Fix It Now!\");\r\ + \n:local OnEvent \"/system/script/run \$ScriptName;\";\r\ + \n:local Comment \"Every Day Check For Fake Bridges\";\r\ + \n/system/scheduler/add name=\$ScriptName comment=\$Comment start-time=sta\ + rtup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:foreach Bridge in=[ /interface/bridge/find ] do={\r\ + \n :local BrName [ /interface/bridge/get \$Bridge name ];\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName ] ] > \ + 0) do={\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName and \ + inactive=no ] ] = 0) do={\r\ + \n /ip/address/disable [ find where !dynamic interface=\$BrName ];\r\ + \n } else={\r\ + \n /ip/address/enable [ find where !dynamic interface=\$BrName ];\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Use Telegram to chat with your Router and send commands" \ + dont-require-permissions=no name=mod/AM-TG-Bot owner=mod/AM-TG-Bot \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Bot\r\ + \n# Script comment: Use Telegram to chat with your Router and send command\ + s\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global Identity;\r\ + \n :global TelegramChatActive;\r\ + \n :global TelegramChatGroups;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdsTrusted;\r\ + \n :global TelegramChatOffset;\r\ + \n :global TelegramChatRunTime;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramRandomDelay;\r\ + \n :global TelegramTokenId;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global EscapeForRegEx;\r\ + \n :global FileExists;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global LogPrintVerbose;\r\ + \n :global MAX;\r\ + \n :global MIN;\r\ + \n :global MkDir;\r\ + \n :global RandomDelay;\r\ + \n :global RmDir;\r\ + \n :global ScriptLock;\r\ + \n :global SendTelegram2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global WaitForFile;\r\ + \n :global WaitFullyConnected;\r\ + \n\r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$WaitFullyConnected;\r\ + \n\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) \ + do={\r\ + \n /system/scheduler/add start-time=startup interval=30s name=\$ScriptN\ + ame on-event=\"/system/script/run \$ScriptName;\" comment=\"Telegram Chat \ + Bot\";\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramChatOffset ] != \"array\") do={\r\ + \n :set TelegramChatOffset { 0; 0; 0 };\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramRandomDelay ] != \"num\") do={\r\ + \n :set TelegramRandomDelay 0;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Downloading required certificate \ + failed.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$RandomDelay \$TelegramRandomDelay;\r\ + \n\r\ + \n :local Data false;\r\ + \n :for I from=1 to=4 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl outpu\ + t=user \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/get\ + Updates\?offset=\" . \\\r\ + \n \$TelegramChatOffset->0 . \"&allowed_updates=%5B%22message%22%\ + 5D\") as-value ]->\"data\");\r\ + \n :set TelegramRandomDelay [ \$MAX 0 (\$TelegramRandomDelay - 1) ]\ + ;\r\ + \n } do={\r\ + \n :if (\$I < 4) do={\r\ + \n \$LogPrint debug \$ScriptName (\"Fetch failed, \" . \$I . \". \ + try: \" . \$Err);\r\ + \n :set TelegramRandomDelay [ \$MIN 15 (\$TelegramRandomDelay + 5\ + ) ];\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Failed getting updates.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local UpdateID 0;\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :foreach Update in=(\$JSON->\"result\") do={\r\ + \n :set UpdateID (\$Update->\"update_id\");\r\ + \n \$LogPrintVerbose debug \$ScriptName (\"Update \" . \$UpdateID . \":\ + \_\" . [ :serialize to=json \$Update ]);\r\ + \n\r\ + \n :local Message (\$Update->\"message\");\r\ + \n :local IsAnyReply ([ :typeof (\$Message->\"reply_to_message\") ] = \ + \"array\");\r\ + \n :local IsMyReply (\$TelegramMessageIDs->[ :tostr (\$Message->\"reply\ + _to_message\"->\"message_id\") ]);\r\ + \n :if ((\$IsMyReply = 1 || \$TelegramChatOffset->0 > 0 || \$Uptime > 5\ + m) && \$UpdateID >= \$TelegramChatOffset->2) do={\r\ + \n :local Trusted false;\r\ + \n :local Chat (\$Message->\"chat\");\r\ + \n :local From (\$Message->\"from\");\r\ + \n :local Command (\$Message->\"text\");\r\ + \n :local ThreadId [ \$IfThenElse (\$Message->\"is_topic_message\") (\ + \$Message->\"message_thread_id\") \"\" ];\r\ + \n\r\ + \n :foreach IdsTrusted in=(\$TelegramChatId, \$TelegramChatIdsTrusted\ + ) do={\r\ + \n :if (\$From->\"id\" = \$IdsTrusted || \\\r\ + \n \$From->\"username\" = \$IdsTrusted || \\\r\ + \n \$Chat->\"id\" = \$IdsTrusted) do={\r\ + \n :set Trusted true;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Trusted = true) do={\r\ + \n :local Done false;\r\ + \n :if (\$Command = \"\?\") do={\r\ + \n \$LogPrint info \$ScriptName (\"Sending notice for update \" .\ + \_\$UpdateID . \".\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=([ \$IfThenElse ([ :len (\$From->\"first_name\") ] >\ + \_0) (\"Hello \" . (\$From->\"first_name\") . \"!\\n\\n\") ] . \\\r\ + \n \"Online\" . [ \$IfThenElse \$TelegramChatActive \" (and a\ + ctive!)\" ] . \", awaiting your commands!\") });\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && [ :pick \$Command 0 1 ] = \"!\") do={\r\ + \n :if (\$Command ~ (\"^! *(\" . [ \$EscapeForRegEx \$Identity ] \ + . \"|@\" . \$TelegramChatGroups . \")\\\$\")) do={\r\ + \n :set TelegramChatActive true;\r\ + \n } else={\r\ + \n :set TelegramChatActive false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Now \" . [ \$IfThenElse \$Tele\ + gramChatActive \"active\" \"passive\" ] . \\\r\ + \n \" from update \" . \$UpdateID . \"!\");\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && (\$IsMyReply = 1 || (\$IsAnyReply = false\ + \_&& \\\r\ + \n \$TelegramChatActive = true)) && [ :len \$Command ] > 0) do\ + ={\r\ + \n :if ([ \$ValidateSyntax \$Command ] = true) do={\r\ + \n :local State \"\";\r\ + \n :local File (\"tmpfs/telegram-chat/\" . [ \$GetRandom20CharA\ + lNum 6 ]);\r\ + \n :if ([ \$MkDir \"tmpfs/telegram-chat\" ] = false) do={\r\ + \n \$LogPrint error \$ScriptName (\"Failed creating directory\ + !\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Running command from update \ + \" . \$UpdateID . \": \" . \$Command);\r\ + \n :execute script=(\":do {\\n\" . \$Command . \"\\n} on-error=\ + { /file/add name=\\\"\" . \$File . \".failed\\\" };\" . \\\r\ + \n \"/file/add name=\\\"\" . \$File . \".done\\\"\") file=(\$\ + File . \"\\00\");\r\ + \n :if ([ \$WaitForFile (\$File . \".done\") [ \$EitherOr \$Tel\ + egramChatRunTime 20s ] ] = false) do={\r\ + \n :set State ([ \$SymbolForNotification \"warning-sign\" ] .\ + \_\"The command did not finish, still running in background.\\n\\n\");\r\ + \n }\r\ + \n :if ([ \$FileExists (\$File . \".failed\") ] = true) do={\r\ + \n :set State ([ \$SymbolForNotification \"cross-mark\" ] . \ + \"The command failed with an error!\\n\\n\");\r\ + \n }\r\ + \n :local Content ([ /file/read chunk-size=32768 file=\$File as\ + -value ]->\"data\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n \$State . [ \$IfThenElse ([ :len \$Content ] > 0) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"Output:\\n\" .\ + \_\$Content) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"No output.\") \ + ]) });\r\ + \n \$RmDir \"tmpfs/telegram-chat\";\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName (\"The command from update \" .\ + \_\$UpdateID . \" failed syntax validation!\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n [ \$SymbolForNotification \"cross-mark\" ] . \"The comma\ + nd failed syntax validation!\") });\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n :local MessageText (\"Received a message from untrusted contact \ + \" . \\\r\ + \n [ \$IfThenElse ([ :len (\$From->\"username\") ] = 0) \"without\ + \_username\" (\"'\" . \$From->\"username\" . \"'\") ] . \\\r\ + \n \" (ID \" . \$From->\"id\" . \") in update \" . \$UpdateID . \ + \"!\");\r\ + \n :if (\$Command ~ (\"^! *\" . [ \$EscapeForRegEx \$Identity ] . \ + \"\\\$\")) do={\r\ + \n \$LogPrint warning \$ScriptName \$MessageText;\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=(\"You are not trusted.\") });\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName \$MessageText;\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint debug \$ScriptName (\"Already handled update \" . \$Upd\ + ateID . \".\");\r\ + \n }\r\ + \n }\r\ + \n :set TelegramChatOffset ([ :pick \$TelegramChatOffset 1 3 ], \\\r\ + \n [ \$IfThenElse (\$UpdateID >= \$TelegramChatOffset->2) (\$UpdateID +\ + \_1) (\$TelegramChatOffset->2) ]);\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add comment="Script send Notifications in Telegram" dont-require-permissions=\ + no name=mod/AM-TG-Notifications owner=mod/AM-TG-Notifications policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Notifications\r\ + \n# Script comment: Script send Notifications in Telegram\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:global FlushTelegramQueue;\r\ + \n:global GetTelegramChatId;\r\ + \n:global NotificationFunctions;\r\ + \n:global PurgeTelegramQueue;\r\ + \n:global SendTelegram;\r\ + \n:global SendTelegram2;\r\ + \n# flush telegram queue\r\ + \n:set FlushTelegramQueue do={ :onerror Err {\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global CertificateAvailable;\r\ + \n :global IsFullyConnected;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$IsFullyConnected ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"System is not fully connected, not flushing.\ + \");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local AllDone true;\r\ + \n :local QueueLen [ :len \$TelegramQueue ];\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueue\ + \" ] ] > 0 && \$QueueLen = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Flushing Telegram messages from scheduler,\ + \_but queue is empty.\");\r\ + \n }\r\ + \n :foreach Id,Message in=\$TelegramQueue do={\r\ + \n :if ([ :typeof \$Message ] = \"array\" ) do={\r\ + \n :onerror Err {\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl out\ + put=user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . (\$Message->\"tokenid\") .\ + \_\"/sendMessage\") \\\r\ + \n http-data=(\$Message->\"http-data\") as-value ]->\"data\");\r\ + \n :set (\$TelegramQueue->\$Id);\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json v\ + alue=\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Sending queued Telegram message failed: \ + \" . \$Err);\r\ + \n :set AllDone false;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$AllDone = true && \$QueueLen = [ :len \$TelegramQueue ]) do={\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ]\ + ;\r\ + \n :set TelegramQueue;\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# get the chat id\r\ + \n:set GetTelegramChatId do={ :onerror Err {\r\ + \n :global TelegramTokenId;\r\ + \n :global CertificateAvailable;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local Data;\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl output=us\ + er \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/getUpd\ + ates\?offset=0\" . \\\r\ + \n \"&allowed_updates=%5B%22message%22%5D\") as-value ]->\"data\");\ + \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Fetching data failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local Count [ :len (\$JSON->\"result\") ];\r\ + \n :if (\$Count = 0) do={\r\ + \n \$LogPrint info \$0 (\"No message received.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local Message (\$JSON->\"result\"->(\$Count - 1)->\"message\");\r\ + \n \$LogPrint info \$0 (\"The chat id is: \" . (\$Message->\"chat\"->\"id\ + \"));\r\ + \n :if ((\$Message->\"is_topic_message\") = true) do={\r\ + \n \$LogPrint info \$0 (\"The thread id is: \" . (\$Message->\"message_\ + thread_id\"));\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set (\$NotificationFunctions->\"telegram\") do={\r\ + \n :local Notification \$1;\r\ + \n :global Identity;\r\ + \n :global IdentityExtra;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdOverride;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramThreadId;\r\ + \n :global TelegramThreadIdOverride;\r\ + \n :global TelegramTokenId;\r\ + \n :global TelegramTokenIdOverride;\r\ + \n :global CertificateAvailable;\r\ + \n :global CharacterReplace;\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ProtocolStrip;\r\ + \n :global SymbolForNotification;\r\ + \n :global UrlEncode;\r\ + \n :local EscapeMD do={\r\ + \n :local Text [ :tostr \$1 ];\r\ + \n :local Mode [ :tostr \$2 ];\r\ + \n :local Excl [ :tostr \$3 ];\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :local Chars {\r\ + \n \"body\"={ \"\\\\\"; \"`\" };\r\ + \n \"plain\"={ \"_\"; \"*\"; \"[\"; \"]\"; \"(\"; \")\"; \"~\"; \"`\"\ + ; \">\";\r\ + \n \"#\"; \"+\"; \"-\"; \"=\"; \"|\"; \"{\"; \"}\"; \".\"; \ + \"!\" };\r\ + \n }\r\ + \n :foreach Char in=(\$Chars->\$Mode) do={\r\ + \n :if ([ :typeof [ :find \$Excl \$Char ] ] = \"nil\") do={\r\ + \n :set Text [ \$CharacterReplace \$Text \$Char (\"\\\\\" . \$Char)\ + \_];\r\ + \n }\r\ + \n }\r\ + \n :if (\$Mode = \"body\") do={:return (\"```\\n\" . \$Text . \"\\n```\ + \")}\r\ + \n :return \$Text;\r\ + \n }\r\ + \n :local ChatId [ \$EitherOr (\$Notification->\"chatid\") \\\r\ + \n [ \$EitherOr (\$TelegramChatIdOverride->(\$Notification->\"origin\")\ + ) \$TelegramChatId ] ];\r\ + \n :local ThreadId [ \$EitherOr (\$Notification->\"threadid\") \\\r\ + \n [ \$EitherOr (\$TelegramThreadIdOverride->(\$Notification->\"origin\ + \")) \\\r\ + \n [ \$IfThenElse ([ :len (\$TelegramChatIdOverride->(\$Notification->\ + \"origin\")) ] = 0) \$TelegramThreadId ] ] ];\r\ + \n :local TokenId [ \$EitherOr (\$TelegramTokenIdOverride->(\$Notificatio\ + n->\"origin\")) \$TelegramTokenId ];\r\ + \n :if ([ :len \$TokenId ] = 0 || [ :len \$ChatId ] = 0) do={:return fals\ + e}\r\ + \n :if ([ :typeof \$TelegramMessageIDs ] = \"nothing\") do={:set Telegram\ + MessageIDs ({})}\r\ + \n :local Truncated false;\r\ + \n :local Text (\"*__\" . [ \$EscapeMD (\"[\" . \$IdentityExtra . \$Ident\ + ity . \"] \" . \\\r\ + \n (\$Notification->\"subject\")) \"plain\" ] . \"__*\\n\\n\");\r\ + \n :local LenSubject [ :len \$Text ];\r\ + \n :local LenMessage [ :len (\$Notification->\"message\") ];\r\ + \n :local LenLink ([ :len (\$Notification->\"link\") ] * 2);\r\ + \n :local LenSum (\$LenSubject + \$LenMessage + \$LenLink);\r\ + \n :if (\$LenSum > 3968) do={\r\ + \n :set Text (\$Text . [ \$EscapeMD ([ :pick (\$Notification->\"message\ + \") 0 (3840 - \$LenSubject - \$LenLink) ] . \"...\") \"body\" ]);\r\ + \n :set Truncated true;\r\ + \n } else={:set Text (\$Text . [ \$EscapeMD (\$Notification->\"message\")\ + \_\"body\" ])}\r\ + \n :if (\$LenLink > 0) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"link\" ] .\ + \_\\\r\ + \n \"[\" . [ \$EscapeMD [ \$ProtocolStrip (\$Notification->\"link\") \ + ] \"plain\" ] . \"]\" . \\\r\ + \n \"(\" . [ \$EscapeMD (\$Notification->\"link\") \"plain\" ] . \")\ + \");\r\ + \n }\r\ + \n :if (\$Truncated = true) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"scissors\"\ + \_] . \\\r\ + \n [ \$EscapeMD (\"The message was too long and has been truncated, c\ + ut off _\" . \\\r\ + \n ((\$LenSum - [ :len \$Text ]) * 100 / \$LenSum) . \"%_!\") \"plain\ + \" \"_\" ]);\r\ + \n }\r\ + \n :local HTTPData (\"chat_id=\" . \$ChatId . \"&disable_notification=\" \ + . (\$Notification->\"silent\") . \\\r\ + \n \"&reply_to_message_id=\" . (\$Notification->\"replyto\") . \"&mes\ + sage_thread_id=\" . \$ThreadId . \\\r\ + \n \"&disable_web_page_preview=true&parse_mode=MarkdownV2\");\r\ + \n :onerror Err {\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority \ + - G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\ + \");\r\ + \n :error false;\r\ + \n }\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl output=\ + user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TokenId . \"/sendMessage\") \ + \\\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) as-va\ + lue ]->\"data\");\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json value\ + =\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint info \$0 (\"Failed sending Telegram notification: \" . \$\ + Err . \" - Queuing...\");\r\ + \n :if ([ :typeof \$TelegramQueue ] = \"nothing\") do={:set TelegramQue\ + ue ({})}\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"alarm-cloc\ + k\" ] . \\\r\ + \n [ \$EscapeMD (\"This message was queued since _\" . [ /system/cloc\ + k/get date ] . \\\r\ + \n \" \" . [ /system/clock/get time ] . \"_ and may be obsolete.\") \ + \"plain\" \"_\" ]);\r\ + \n :set (\$TelegramQueue->[ :len \$TelegramQueue ]) { tokenid=\$TokenId\ + ;\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) };\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueu\ + e\" ] ] = 0) do={\r\ + \n /system/scheduler/add name=\"_FlushTelegramQueue\" interval=1m sta\ + rt-time=startup \\\r\ + \n on-event=(\":global FlushTelegramQueue; \\\$FlushTelegramQueue;\ + \");\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n# purge the Telegram queue\r\ + \n:set PurgeTelegramQueue do={\r\ + \n :global TelegramQueue;\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ];\ + \r\ + \n :set TelegramQueue;\r\ + \n}\r\ + \n# send notification via telegram - expects at least two string arguments\ + \r\ + \n:set SendTelegram do={ :onerror Err {\r\ + \n :global SendTelegram2;\r\ + \n \$SendTelegram2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3; sil\ + ent=\$4 });\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set SendTelegram2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n (\$NotificationFunctions->\"telegram\") (\"\\\$NotificationFunctions->\ + \\\"telegram\\\"\") \$Notification;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=testIfThenElseAndEitherOr owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source=":local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local ExitError;\r\ + \n#:local IfThenElse;\r\ + \n#:local EitherOr;\r\ + \n\r\ + \n:local one 11;\r\ + \n:local two 8;\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n:local Test; # [ :totime \"22s\" ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n\r\ + \n:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set Test [ \$EitherOr \$Test \"\" ];\r\ + \n:log warning (\"\\\$ Test = \" . \$Test);\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :local IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set ExitOK true;\r\ + \n\$ExitError \$ExitOK \$ScriptName \"Err test custom\";" +add comment="Update and Backup send notification to EMail" \ + dont-require-permissions=no name=AM-Backup-UpdateEmail owner=\ + AM-Backup-UpdateEmail policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-Backup-UpdateEmail\r\ + \n# Script comment: Update and Backup send notification to EMail\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version>=6.43.7\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Updated: 15/04/2025\r\ + \n# Website: https://github.com/beeyev\r\ + \n# Notification e-mail (Make sure you have configured Email settings in T\ + ools -> Email)\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n:local ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :if (\$ExitOK = \"false\") do={:log error (\$Name [ \$IfThenElse ([ :p\ + ick \$Name 0 1 ] = \"\\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);}\r\ + \n}\r\ + \n\r\ + \n:global LogPrint;\r\ + \n:global EditSchedulers;\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n:local SchedInterval \"7d\";\r\ + \n:local SchedStartTime \"03:41:27\";\r\ + \n:local SchedComment \"Every 7 Day Check For Update and Backup send notif\ + ication to EMail.\";\r\ + \n\r\ + \n# Function to add or edit schedulers for scripts, to ensure they are set\ + \_up correctly\r\ + \n# How to use:\r\ + \n# Call this function with the following parameters:\r\ + \n# 1. \$1 - Scheduler name (usually same as script name) [*]\r\ + \n# 2. \$2 - Interval (e.g. \"1d\" (default is \"1d\")) [**]\r\ + \n# 3. \$3 - Start Time (e.g. \"00:00:00\", default is current time) [**]\ + \r\ + \n# 4. \$4 - Comment (optional, default: \"Scheduler for script: \")\ + \_[**]\r\ + \n# 5. \$5 - On Event command (e.g. \"/system/script { run ; }\" (de\ + fault is \"/system/script { run \$SchedName; }\")) [**]\r\ + \n# 6. \$6 - Policy (e.g. \"ftp,reboot,read,write,policy,test,password,sni\ + ff,sensitive,romon\" (default is the same)) [**]\r\ + \n# 7. \$7 - Start Date (e.g. \"jan/01/1970\", default is current date) [*\ + *]\r\ + \n# Notes:\r\ + \n# * - Scheduler name is required, and is used to identify the scheduler\ + \_to create or edit. It is usually the same as the script name (\$ScriptNa\ + me).\r\ + \n# ** - If optional parameters are not provided, default values will be u\ + sed.\r\ + \n# This allows for quick setup with minimal parameters, while still \ + providing flexibility for customization.\r\ + \n# Example usage:\r\ + \n# :if ([ \$EditSchedulers \"my-script\" ] = false) do={:set ExitOK false\ + ; :error true;}\r\ + \n# :if ([ \$EditSchedulers \"my-script\" \"1d\" \"03:41:27\" \"My custom \ + scheduler comment\" false false \"jan/01/1970\" ] = false) do={:set ExitOK\ + \_false; :error true;}\r\ + \n\r\ + \n:set EditSchedulers do={\r\ + \n :local SchedName [ :tostr \$1 ];\r\ + \n :if ([ :len \$SchedName ] = 0) do={ :return false; }\r\ + \n :local Interval [ :tostr \$2 ];\r\ + \n :if ([ :len \$Interval ] = 0) do={ :set Interval \"1d\"; }\r\ + \n :local StartTime [ :tostr \$3 ];\r\ + \n :if ([ :len \$StartTime ] = 0) do={ :set StartTime [/system/clock/get \ + time]; }\r\ + \n :local Comment [ :tostr \$4 ];\r\ + \n :if ([ :len \$Comment ] = 0) do={ :set Comment \"Scheduler for script:\ + \_\$SchedName\"; }\r\ + \n :local OnEvent [ :tostr \$5 ];\r\ + \n :if ([ :len \$OnEvent ] = 0) do={ :set OnEvent \"/system/script { run \ + \$SchedName; }\"; }\r\ + \n :local Policy [ :tostr \$6 ];\r\ + \n :if ([ :len \$Policy ] = 0) do={ :set Policy \"ftp,reboot,read,write,p\ + olicy,test,password,sniff,sensitive,romon\"; }\r\ + \n :local StartDate [ :tostr \$7 ];\r\ + \n :if ([ :len \$StartDate ] = 0) do={ :set StartDate [/system/clock/get \ + date]; }\r\ + \n\r\ + \n :onerror Err {\r\ + \n # Check if scheduler exists, if not - create it\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$SchedName ] ] = 0)\ + \_do={\r\ + \n :log warning (\$SchedName . \"System Scheduler for script: \" . \$\ + SchedName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add comment=\$Comment interval=\$Interval name=\ + \$SchedName on-event=\$OnEvent policy=\$Policy start-date=\$StartDate star\ + t-time=\$StartTime;\r\ + \n }\r\ + \n # Check if scheduler parameters are correct, if not - fix them\r\ + \n :if ([ /system/scheduler/get \$SchedName comment ] != \$Comment) do=\ + {\r\ + \n /system/scheduler/set \$SchedName comment=\$Comment;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName interval ] != \$Interval) d\ + o={\r\ + \n /system/scheduler/set \$SchedName interval=\$Interval;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName on-event ] != \$OnEvent) do\ + ={\r\ + \n /system/scheduler/set \$SchedName on-event=\$OnEvent;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName policy ] != \$Policy) do={\ + \r\ + \n /system/scheduler/set \$SchedName policy=\$Policy;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-date ] != \$StartDate\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-date=\$StartDate;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-time ] != \$StartTime\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-time=\$StartTime;\r\ + \n }\r\ + \n } do={:log error (\$SchedName . \"Failed to add/modify scheduler for '\ + \" . \$SchedName . \"' failed: \" . \$Err); :return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:if ([ \$EditSchedulers \$ScriptName \$SchedInterval \$SchedStartTime \$\ + SchedComment ] = false) do={\r\ + \n :log error (\$ScriptName . \"Failed to add/modify scheduler for \" . \ + \$ScriptName . \"!\");\r\ + \n :set ExitOK true;\r\ + \n :error true;\r\ + \n}\r\ + \n\r\ + \n# Local Function CheckOSUpdateMode\r\ + \n:local CheckOSUpdateMode;\r\ + \n:set CheckOSUpdateMode do={\r\ + \n :local NewMode [ :tostr \$1 ];\r\ + \n :if ([ :len \$NewMode ] = 0) do={\r\ + \n :log error (\$0 . \"/nFunction /\$CheckOSUpdateMode received empty v\ + alue!\");\r\ + \n :return false;\r\ + \n :error true;\r\ + \n }\r\ + \n\r\ + \n :global BackupAndUpdateMode;\r\ + \n :global OldMode [ :tostr \$BackupAndUpdateMode ];\r\ + \n :if (\$NewMode != \$BackupAndUpdateMode && \$NewMode = \"updateOnce\")\ + \_do={\r\ + \n :set BackupAndUpdateMode [ :tostr \$NewMode ];\r\ + \n :log info (\$0 . \"/nOk. /\$BackupAndUpdateMode set to: '\" . \$NewM\ + ode . \"'.\\nYou're a good boy! ))\\nI'm launching the update in 5 seconds\ + .\");\r\ + \n :delay 5;\r\ + \n /system/script { run \$ScriptName; };\r\ + \n } else={\r\ + \n :log warning (\$0 . \"/nFunction /\$CheckOSUpdateMode received value: \ + '\" . \$NewMode . \"', but is may be only \\\"updateOnce\\\"!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n :error false;\r\ + \n}\r\ + \n\r\ + \n# :if ([ :len [ /system/scheduler/find where name=\"running-from-backup\ + -partition\" ] ] > 0) do={\r\ + \n# \$LogPrint warning \$ScriptName (\"Running from backup partition, r\ + efusing to act.\");\r\ + \n# :set ExitOK true;\r\ + \n# :error false;\r\ + \n# }\r\ + \n\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n:global forceBackup;\r\ + \n:global BackupPassword;\r\ + \n:global BackupSens;\r\ + \n:global updateChannel;\r\ + \n\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n# Installs patch updates only (BackupAndUpdateMode = \"osupdate\").\r\ + \n# Works for `stable` and `long-term` channels.\r\ + \n# Updates only if MAJOR.MINOR match (e.g. 6.43.2 > 6.43.6 allowed, 6.44.\ + 1 skipped).\r\ + \n# Sends info if a newer (non-patch) version is found.\r\ + \n:local installOnlyPatchUpdates false;\r\ + \n:local scriptVersion \"26.04.30\";\r\ + \n:local copyrightUrl \"https://www.github.com/vados-dev/\";\r\ + \n#Script messages prefix\r\ + \n:local SMP \"BkpAndUpdate:\";\r\ + \n\r\ + \n:local exitErrorMessage \"\$SMP script stopped due to an error. Please c\ + heck logs for more details.\";\r\ + \n:log info \"\\n\\n\$SMP Script \\\"Mikrotik RouterOS automatic backup & \ + update\\\" v.\$scriptVersion started.\";\r\ + \n:log info \"\$SMP Script Mode: `\$BackupAndUpdateMode`, Update channel: \ + `\$updateChannel`, Force backup: `\$forceBackup`, Install only patch updat\ + es: `\$installOnlyPatchUpdates`\";\r\ + \n\r\ + \n## vv FUNCTIONS vv ##\r\ + \n:global WaitCheckUpdates; \$WaitCheckUpdates;\r\ + \n:global MiniDateTimeStamp;\r\ + \n:local MDTSFix [\$MiniDateTimeStamp];\r\ + \n:global Identity;\r\ + \n:global IdentityShort;\r\ + \n:global devBoardName;\r\ + \n:global runningVersion;\r\ + \n:global runningChannel;\r\ + \n:global devModel;\r\ + \n:global devRbSerialNumber;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n\r\ + \n# Checks if two RouterOS version strings differ only by the patch versio\ + n\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.2.4\"] # Output: true\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.3.1\"] # Output: false\r\ + \n:local FuncIsPatchUpdateOnly do={\r\ + \n :local ver1 \$1;\r\ + \n :local ver2 \$2;\r\ + \n # Extract the major and minor components from a version\r\ + \n :local extractMajorMinor do={\r\ + \n :local ver \$1;\r\ + \n :local dot1 [:find \$ver \".\"];\r\ + \n :if (\$dot1 = -1) do={:return \$ver}\r\ + \n :local major [:pick \$ver 0 \$dot1];\r\ + \n :local rest [:pick \$ver (\$dot1 + 1) [:len \$ver]];\r\ + \n :local dot2 [:find \$rest \".\"];\r\ + \n :local minor \$rest;\r\ + \n :if (\$dot2 >= 0) do={:set minor [:pick \$rest 0 \$dot2]}\r\ + \n :return (\$major . \".\" . \$minor);\r\ + \n }\r\ + \n\r\ + \n# Compare the major and minor components of both version strings\r\ + \n:if ([\$extractMajorMinor \$ver1] = [\$extractMajorMinor \$ver2]) do={:r\ + eturn true}\r\ + \n :return false;\r\ + \n}\r\ + \n# Creates backups and returns array of names\r\ + \n# Possible arguments:\r\ + \n# \$1 - file name, without extension\r\ + \n# \$2 - password (optional)\r\ + \n# \$3 - sensitive data in config (optional, default: false)\r\ + \n# Example:\r\ + \n#:put [\$FuncCreateBackups \$backupName]\r\ + \n:local FuncCreateBackups do={\r\ + \n :local backupName [ :tostr \$1 ];\r\ + \n :local BackPass \$2;\r\ + \n :local BackSens \$3;\r\ + \n\r\ + \n #Script messages prefix\r\ + \n :local SMP \"BkpAndUpdate:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` started, input:\ + \_`\$backupName`\");\r\ + \n\r\ + \n # validate required parameter: backupName\r\ + \n :if ([:typeof \$backupName] != \"str\" or [:len \$backupName] = 0) do=\ + {\r\ + \n :log error \"\$SMP parameter 'backupName' is required and must be a \ + non-empty string\";\r\ + \n# :log warning \"\$SMP parameter '\\\$backupName' is required and mus\ + t be a non-empty string.\\nI set '\\\$backupName' to 'default-backup'\";\r\ + \n# :set \$backupName \"default-backup\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n\r\ + \n :local backupFileSys \"\$backupName.backup\";\r\ + \n :local backupFileConfig \"\$backupName.rsc\";\r\ + \n :local backupNames {\$backupFileSys;\$backupFileConfig};\r\ + \n\r\ + \n ## Perform system backup\r\ + \n :if ([:len \$BackPass] = 0) do={\r\ + \n :log info (\"\$SMP starting backup without password, backup name: `\ + \$backupName`\");\r\ + \n /system backup save dont-encrypt=yes name=\$backupName;\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting backup with password, backup name: `\$ba\ + ckupName`\");\r\ + \n /system backup save password=\$BackPass name=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP system backup created: `\$backupFileSys`\");\r\ + \n ## Export config file\r\ + \n :if (\$BackSens = true) do={\r\ + \n :log info (\"\$SMP starting export config with sensitive data, backu\ + p name: `\$backupName`\");\r\ + \n # Since RouterOS v7 it needs to be explicitly set that we want to ex\ + port sensitive data\r\ + \n :if ([:pick [/system resource get version] 0 1] < 7) do={\r\ + \n :execute \"/export compact terse file=\$backupName\";\r\ + \n } else={\r\ + \n :execute \"/export compact show-sensitive terse file=\$backupName\ + \";\r\ + \n }\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting export config without sensitive data, ba\ + ckup name: `\$backupName`\");\r\ + \n /export compact hide-sensitive terse file=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP Config export complete: `\$backupFileConfig`\");\r\ + \n :log info (\"\$SMP Waiting a little to ensure backup files are written\ + \");\r\ + \n :delay 20;\r\ + \n :if ([:len [/file find name=\$backupFileSys]] > 0) do={\r\ + \n :log info (\"\$SMP system backup file successfully saved to the file\ + \_system: `\$backupFileSys`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP system backup was not created, file does not exi\ + st: `\$backupFileSys`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :if ([:len [/file find name=\$backupFileConfig]] > 0) do={\r\ + \n :log info (\"\$SMP config backup file successfully saved to the file\ + \_system: `\$backupFileConfig`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP config backup was not created, file does not exi\ + st: `\$backupFileConfig`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` finished. Creat\ + ed backups, system: `\$backupFileSys`, config: `\$backupFileConfig`\")\r\ + \n :return \$backupNames;\r\ + \n}\r\ + \n# Sends an email\r\ + \n# Parameters:\r\ + \n# \$1 - to (email address)\r\ + \n# \$2 - subject\r\ + \n# \$3 - body\r\ + \n# \$4 - file attachments (optional; pass \"\" if not needed)\r\ + \n#\r\ + \n# Example:\r\ + \n# \$FuncSendEmailSafe \"admin@domain.com\" \"Backup Done\" \"Backup comp\ + lete.\" \"backup1.backup\"\r\ + \n:local FuncSendEmailSafe do={\r\ + \n :global EmailGeneralTo;\r\ + \n :local emailSubject \$2;\r\ + \n :local emailBody \$3;\r\ + \n :local emailAttachments \$4;\r\ + \n :local SMP \"Bkp&Upd:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info \"\$SMP Attempting to send email to `\$EmailGeneralTo`\";\r\ + \n # SAFETY: wait for any previously queued email to finish\r\ + \n :local waitTimeoutPre 60;\r\ + \n :local waitCounterPre 0;\r\ + \n :while (([/tool e-mail get last-status] = \"resolving-dns\" or [/tool \ + e-mail get last-status] = \"in-progress\")) do={\r\ + \n :if (\$waitCounterPre >= \$waitTimeoutPre) do={\r\ + \n :log error \"\$SMP Email send aborted: previous send did not compl\ + ete after \$waitTimeoutPre seconds\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info \"\$SMP Waiting for previous email to finish (status: \$[/\ + tool e-mail get last-status])...\";\r\ + \n :delay 1; \r\ + \n :set waitCounterPre (\$waitCounterPre + 1);\r\ + \n }\r\ + \n # Send the email\r\ + \n :do {\r\ + \n /tool e-mail send to=\$EmailGeneralTo subject=\$emailSubject body=\$\ + emailBody file=\$emailAttachments;\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Email send command failed to execute. Check logs \ + and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n # Wait for send status to change from \"in-progress\" / \"resolving-dn\ + s\"\r\ + \n :local waitTimeout 60;\r\ + \n :local waitCounter 0;\r\ + \n :local emailStatus \"\";\r\ + \n :log info \"\$SMP Waiting for email to be sent, timeout in `\$waitTime\ + out` seconds...\";\r\ + \n :while (\$waitCounter < \$waitTimeout) do={\r\ + \n :set emailStatus [/tool e-mail get last-status];\r\ + \n :if (\$emailStatus != \"in-progress\" and \$emailStatus != \"resolvi\ + ng-dns\") do={\r\ + \n :log info \"\$SMP Email send status received: \$emailStatus\";\r\ + \n # exit loop\r\ + \n :set waitCounter \$waitTimeout;\r\ + \n } else={:delay 1; :set waitCounter (\$waitCounter + 1)}\r\ + \n }\r\ + \n # Final decision based on last status\r\ + \n :if (\$emailStatus = \"succeeded\") do={\r\ + \n :log info \"\$SMP Email successfully sent to `\$EmailGeneralTo`\";\ + \r\ + \n } else={\r\ + \n :log error \"\$SMP Email failed to send. Status: `\$emailStatus`. Ch\ + eck logs for more details and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n# Global variable to track current update step\r\ + \n# They need to be initialized here first to be available in the script\r\ + \n:global buGlobalVarTargetOsVersion;\r\ + \n:global buGlobalVarScriptStep;\r\ + \n:local scriptStep \$buGlobalVarScriptStep;\r\ + \n:do {\r\ + \n /system/script/environment remove buGlobalVarScriptStep;\r\ + \n} on-error={}\r\ + \n:if ([:len \$scriptStep] = 0) do={\r\ + \n :set scriptStep 1;\r\ + \n}\r\ + \n## ^^ FUNCTIONS ^^ ##\r\ + \n#\r\ + \n# Initial validation\r\ + \n## Check email settings\r\ + \n:if ([:len \$EmailGeneralTo] < 3) do={\r\ + \n :log error (\"\$SMP Parameter `\\\$EmailGeneralTo` is not set, or cont\ + ains invalid value. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Values will be defined later in the script\r\ + \n:local emailServer \"\";\r\ + \n:local emailFromAddress [/tool e-mail get from];\r\ + \n:log info \"\$SMP Validating email settings...\";\r\ + \n:do {\r\ + \n :set emailServer [/tool e-mail get server];\r\ + \n} on-error={\r\ + \n # This is a workaround for the RouterOS v7.12 and older versions\r\ + \n :set emailServer [/tool e-mail get address];\r\ + \n}\r\ + \n:if (\$emailServer = \"0.0.0.0\") do={\r\ + \n :log error (\"\$SMP Email server address is not correct: `\$emailServe\ + r`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n:if ([:len \$emailFromAddress] < 3) do={\r\ + \n :log error (\"\$SMP Email configuration FROM address is not correct: `\ + \$emailFromAddress`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Script mode validation\r\ + \n:if (\$BackupAndUpdateMode != \"backup\" and \$BackupAndUpdateMode != \"\ + osupdate\" and \$BackupAndUpdateMode != \"updateOnce\" and \$BackupAndUpda\ + teMode != \"osnotify\") do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$BackupAndUpdateMode` is not \ + set, or contains invalid value: `\$BackupAndUpdateMode`. Script stopped.\"\ + );\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Update channel validation\r\ + \n:if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\" \ + and \$updateChannel != \"testing\" and \$updateChannel != \"development\")\ + \_do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$updateChannel` is not set, o\ + r contains invalid value: `\$updateChannel`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Verify if script is set to install patch updates and if the update cha\ + nnel is valid\r\ + \n:if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \"\ + updateOnce\") and \$installOnlyPatchUpdates = true) do={\r\ + \n :if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\ + \") do={\r\ + \n :log error (\"\$SMP Patch-only updates enabled, but update channel `\ + \$updateChannel` is invalid. Only `stable` and `long-term` are supported. \ + Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n \r\ + \n :if (\$runningChannel != \"stable\" and \$runningChannel != \"long-ter\ + m\") do={\r\ + \n :log error (\"\$SMP Script is set to install only patch updates, but\ + \_the installed RouterOS version is not from `stable` or `long-term` chann\ + el: `\$runningChannel`. Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n#\r\ + \n\r\ + \n:local rawTime [/system clock get time];\r\ + \n:local rawDate [/system clock get date];\r\ + \n\r\ + \n:local deviceOsVerAndChannelRunning [/system/resource/get version];\r\ + \n\r\ + \n:local backupNameTemplate (\"backup_v\" . \$runningVersion . \"_\" .\ + \_\$runningChannel . \"_\" . \$MDTSFix);\r\ + \n:local backupNameBeforeUpdate (\$backupNameTemplate . \"_before_update\"\ + );\r\ + \n:local backupNameAfterUpdate (\$backupNameTemplate . \"_after_update\")\ + ;\r\ + \n\r\ + \n## Email body template\r\ + \n:local mailSubjectPrefix \"\$SMP Device - `\$IdentityShort`\";\r\ + \n:local mailBodyCopyright \"Mikrotik RouterOS automatic backup & update \ + (ver. \$scriptVersion) \\n\$copyrightUrl\";\r\ + \n:local changelogUrl \"Check RouterOS changelog: https://mikrotik.com\ + /download/changelogs/\";\r\ + \n:local mailBodyDeviceInfo \"\";\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"Device information:\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\n-------------------\ + --\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nName: \$Identity\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nModel: \$devModel\"\ + );\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBoard: \$devBoardNa\ + me\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nSerial number: \$de\ + vRbSerialNumber\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterOS version: v\ + \$deviceOsVerAndChannelRunning\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBuild time: \$[/sys\ + tem/resource/get build-time]\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterboard FW Avai\ + lable: \$ROsVerAvail\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nDevice date-time: \ + \$rawDate \$rawTime (\$[/system/clock/get time-zone-name ])\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nUptime: \$[/system/\ + resource/get uptime]\");\r\ + \n## IP address detection\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local PublicIpAddress [ \$GetPubIp ];\r\ + \n :set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nPublic IP address\ + : \" . \$PublicIpAddress . \".\");\r\ + \n :log info \"\$SMP Public IP address detected: \$PublicIpAddress\";\r\ + \n} \r\ + \n\r\ + \n:local mailAttachments [:toarray \"\"];\r\ + \n:if (\$scriptStep = 1 or \$scriptStep = 3) do={\r\ + \n :if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP Waiting for one minute before continuing to the f\ + inal step.\");\r\ + \n :delay 1m;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n## STEP 1: Create backups, check for new RouterOS, and send email\r\ + \n## Steps 2\C3\A23 run only if auto-update is enabled and a new version i\ + s available\r\ + \n:if (\$scriptStep = 1) do={\r\ + \n :global BackupPassword;\r\ + \n :global BackupSens;\r\ + \n :local isNewOsUpdateAvailable false;\r\ + \n :local isLatestOsAlreadyInstalled true;\r\ + \n :local isOsNeedsToBeUpdated false;\r\ + \n :local isUpdateCheckSucceeded false;\r\ + \n :local isEmailNeedsToBeSent false;\r\ + \n :local mailSubjectPartAction \"\";\r\ + \n :local mailPtBodyAction \"\";\r\ + \n :local mailPtSubjectBackup \"\";\r\ + \n :local mailPtBodyBackup \"\";\r\ + \n # Checking for new version\r\ + \n :if (\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"osnotify\" or \$BackupAndUpdateMode = \"updateOnce\") do={\r\ + \n :log info (\"\$SMP Setting update channel to `\$updateChannel`\");\r\ + \n /system/package/update/set channel=\$updateChannel;\r\ + \n :log info (\"\$SMP Checking for new RouterOS version. Current instal\ + led version is: `\$runningVersion`\");\r\ + \n \$LogPrint debug \$ScriptName (\"Checking for updates...\");\r\ + \n \r\ + \n# /system/package/update/check-for-updates without-paging as-value;\ + \r\ + \n# /system/package/update check-for-updates;\r\ + \n :delay 5s;\r\ + \n :set PkgUpdStatus [ /system/package/update/get status ];\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :set ROsVerAvail [/system/package/update/get latest-version];\r\ + \n }\r\ + \n\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :log info (\"\$SMP New RouterOS version is available: `\$ROsVerAva\ + il`\");\r\ + \n :set isNewOsUpdateAvailable true;\r\ + \n :set isLatestOsAlreadyInstalled false;\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"New RouterOS available\";\r\ + \n :set mailPtBodyAction \"New RouterOS version is available, curren\ + t version: v\$runningVersion, new version: v\$ROsVerAvail. \\n\$changelogU\ + rl\";\r\ + \n } else={\r\ + \n :if (\$PkgUpdStatus = \"System is already up to date\") do={\r\ + \n :log info (\"\$SMP No new RouterOS version is available, the lat\ + est version is already installed: `v\$runningVersion`\");\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set mailSubjectPartAction \"No os update available\";\r\ + \n :set mailPtBodyAction \"No new RouterOS version is available, t\ + he latest version is already installed: `v\$runningVersion`\";\r\ + \n } else={\r\ + \n :log error (\"\$SMP Failed to check for new RouterOS version. Pa\ + ckage check status: `\$PkgUpdStatus`\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"Error unable to check new os versio\ + n\";\r\ + \n :set mailPtBodyAction \"An error occurred while checking for a \ + new RouterOS version.\\nStatus returned: `\$PkgUpdStatus`\\n\\nPlease revi\ + ew the logs on the device for more details and verify internet connectivit\ + y.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n # Checking if the script needs to install new os version\r\ + \n :if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"updateOnce\") and \$isNewOsUpdateAvailable = true) do={\r\ + \n :if (\$installOnlyPatchUpdates = true) do={\r\ + \n :if ([\$FuncIsPatchUpdateOnly \$runningVersion \$ROsVerAvail] = tr\ + ue) do={\r\ + \n :log info \"\$SMP New RouterOS version is available, and it is a\ + \_patch update. Current version: v\$runningVersion, new version: v\$ROsVer\ + Avail\";\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n } else={\r\ + \n :log info \"\$SMP The script will not install this update, becau\ + se it is not a patch update. Current version: v\$runningVersion, new versi\ + on: v\$ROsVerAvail\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThis update wil\ + l not be installed, because the script is set to install only patch update\ + s.\");\r\ + \n }\r\ + \n } else={\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n }\r\ + \n }\r\ + \n # Checking If the script needs to create a backup\r\ + \n :if (\$forceBackup = true or \$BackupAndUpdateMode = \"backup\" or \$i\ + sOsNeedsToBeUpdated = true) do={\r\ + \n :log info (\"\$SMP Starting backup process.\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :local backupName \$backupNameTemplate;\r\ + \n # This means it's the first step where we create a backup before the\ + \_update process\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :set backupName \$backupNameBeforeUpdate;\r\ + \n #Email body if the purpose of the script is to update the device\r\ + \n :set mailSubjectPartAction \"Update preparation\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThe update proces\ + s for device '\$Identity' is scheduled to upgrade RouterOS from version v.\ + \$runningVersion to version v.\$ROsVerAvail (Update channel: \$updateChann\ + el)\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nPlease note: The \ + update will proceed only after a successful backup.\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nA final report wi\ + th detailed information will be sent once the update process is completed.\ + \");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nIf you do not rec\ + eive a second email within the next 10 minutes, there may be an issue. Ple\ + ase check your device logs for further information.\");\r\ + \n }\r\ + \n :do {\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupName \$BackupPas\ + sword \$BackupSens];\r\ + \n :set mailPtSubjectBackup \"Backup created\";\r\ + \n :set mailPtBodyBackup \"System backups have been successfully crea\ + ted and attached to this email.\";\r\ + \n } on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :set mailPtSubjectBackup \"Backup failed\";\r\ + \n :set mailPtBodyBackup \"The script failed to create backups. Pleas\ + e check device logs for more details.\";\r\ + \n :log warning \"\$SMP Backup creation failed. Update process will b\ + e canceled if automatic update is enabled\";\r\ + \n }\r\ + \n }\r\ + \n :if (\$isEmailNeedsToBeSent = true) do={\r\ + \n :log info \"\$SMP Preparing to send email...\";\r\ + \n :local mailStep1Subject \$mailSubjectPrefix;\r\ + \n :local mailStep1Body \"\";\r\ + \n # subject\r\ + \n :if (\$mailSubjectPartAction != \"\") do={:set mailStep1Subject (\$\ + mailStep1Subject . \" - \" . \$mailSubjectPartAction)}\r\ + \n :if (\$mailPtSubjectBackup != \"\") do={:set mailStep1Subject (\$ma\ + ilStep1Subject . \" - \" . \$mailPtSubjectBackup)}\r\ + \n # body\r\ + \n :if (\$mailPtBodyAction != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyAction . \"\\n\\n\")}\r\ + \n :if (\$mailPtBodyBackup != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyBackup . \"\\n\\n\")}\r\ + \n :set mailStep1Body (\$mailStep1Body . \$mailBodyDeviceInfo . \"\\n__\ + ________\\n\" . \$mailBodyCopyright);\r\ + \n :set mailStep1Body (\$mailStep1Body . \"\\n[*** TEST START ***]\\n\\\ + \$DeviceInfo: \" . [ \$DeviceInfo ] . \"\\n[*** TEST END ***]\\n\");\r\ + \n # Send email with backups\r\ + \n :do {\$FuncSendEmailSafe \$EmailGeneralTo \$mailStep1Subject \$mailS\ + tep1Body \$mailAttachments} on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :log error \"\$SMP The script will not proceed with the update pro\ + cess, because the email was not sent.\";\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2s;\r\ + \n }\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :global OldMode;\r\ + \n :log info \"\$SMP everything is ready to install new RouterOS, going\ + \_to start the update process and reboot the device.\";\r\ + \n :do {\r\ + \n :local nextStep 2;\r\ + \n :if (\$isCloudHostedRouter = true) do={\r\ + \n :log info \"\$SMP The device is a cloud hosted router, the secon\ + d step updating the Routerboard firmware will be skipped.\";\r\ + \n :set nextStep 3;\r\ + \n }\r\ + \n :local scheduledCommand (\":delay 5s; /system/scheduler remove BKP\ + UPD-NEXT-BOOT-TASK; \\\r\ + \n :global buGlobalVarScriptStep \$nextStep; :global buGlobalVarTarg\ + etOsVersion \\\"\$ROsVerAvail\\\"; \\\r\ + \n :delay 10s; /system/script { run \$ScriptName; }\");\r\ + \n /system/scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\$schedu\ + ledCommand start-time=startup interval=0;\r\ + \n /system/package/update install;\r\ + \n } on-error={\r\ + \n # Failed to install new os version, remove the task and variables\ + \r\ + \n :do {\r\ + \n /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\r\ + \n :set BackupAndUpdateMode \$OldMode;\r\ + \n :delay 2;\r\ + \n :do {\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \"ERROR Remove\ + \_global variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n# :if ([ :len \$OldMode ] > 0) do={\r\ + \n# :do {\r\ + \n# :global OldMode (a);\r\ + \n# } on-error={\r\ + \n# :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Re\ + move global variable \\\$OldMode failed!\");\r\ + \n# }\r\ + \n# }\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Pleas\ + e check device logs for more details. \\\r\ + \n \\nAnd Failed to remove task and variables! Check it!\";\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove \ + task and global variables!\");\r\ + \n }\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Please \ + check device logs for more details.\";\r\ + \n :local mailUpdateErrorSubject (\$mailSubjectPrefix . \" - Update f\ + ailed\");\r\ + \n :local mailUpdateErrorBody \"The script was unable to install new \ + RouterOS version. Please check device logs for more details.\";\r\ + \n # Send email with error\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailUpdateErrorSubject \$ma\ + ilUpdateErrorBody \"\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n## STEP 2: (Post-reboot) Upgrade RouterBOARD firmware\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und\r\ + \n:if (\$scriptStep = 2) do={\r\ + \n :log info \"\$SMP The script is in the second step, updating Routerboa\ + rd firmware.\";\r\ + \n :log info \"\$SMP Upgrading routerboard firmware from v.\$deviceRbCurr\ + entFw to v.\$deviceRbUpgradeFw\";\r\ + \n /system routerboard upgrade;\r\ + \n :delay 2;\r\ + \n :log info \"\$SMP routerboard upgrade process was completed, going to \ + reboot in a moment!\";\r\ + \n ## Set task to send final report on the next boot\r\ + \n /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\":delay 2; \ + :global buGlobalVarScriptStep 3; \\\r\ + \n :global buGlobalVarTargetOsVersion \\\"\$buGlobalVarTargetOsVersion\\\ + \"; :delay 10s; /system/script { run \$ScriptName; }; \\ \r\ + \n :delay 5s; /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\" start-ti\ + me=startup interval=0;\r\ + \n :delay 2;\r\ + \n /system reboot;\r\ + \n}\r\ + \n\r\ + \n## STEP 3: Final report (after second reboot, with delay).\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und.\r\ + \n:if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP The script is in the third step, sending final repo\ + rt.\");\r\ + \n :local targetOsVersion \$buGlobalVarTargetOsVersion;\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"buGlobalVarTargetOsV\ + ersion\"];\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove glob\ + al variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$OldMode ] != 0) do={\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"OldMode\"];\r\ + \n :global OldMode (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR! Remove\ + \_global variable \\\$OldMode failed!\");\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$targetOsVersion] = 0) do={\r\ + \n :log warning \"\$SMP Something is wrong, the script was unable to ge\ + t the target updated OS version from the global variable.\";\r\ + \n }\r\ + \n :local mailStep3Subject \$mailSubjectPrefix;\r\ + \n :local mailStep3Body \"\";\r\ + \n :if (\$targetOsVersion = \$runningVersion) do={\r\ + \n :log info \"\$SMP Successfully verified new RouterOS version: target\ + : `\$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update completed - \ + Backup created\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"RouterOS and routerboard upg\ + rade process was completed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\nNew RouterOS version: v.\ + \$targetOsVersion, routerboard firmware: v.\$deviceRbCurrentFw\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\n\$changelogUrl\\nBackups \ + of the upgraded system are in the attachment of this email.\\n\\n\$mailBod\ + yDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupNameAfterUpdate \$\ + BackupPassword \$BackupSens];\r\ + \n } else={\r\ + \n :log error \"\$SMP Failed to verify new RouterOS version: target: `\ + \$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update failed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"The script was unable to ver\ + ify that the new RouterOS version was installed, target version: `\$target\ + OsVersion`, current version: `\$runningVersion`\\nCheck device logs for mo\ + re details.\\n\\n\$mailBodyDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n }\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailStep3Subject \$mailStep3Bod\ + y \$mailAttachments;\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2;\r\ + \n }\r\ + \n :log info (\"\$SMP Final report email sent successfully, and the scrip\ + t has finished.\");\r\ + \n}\r\ + \n:log info (\"\$SMP the script has finished, script step: `\$scriptStep` \ + \\n\\n\");\r\ + \n\r\ + \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n" +add dont-require-permissions=no name=testGetPubIP owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global DevInfoIncludeIP;\r\ + \n:global CharacterReplace;\r\ + \n:global EscapeForRegEx;\r\ + \n:global UrlEncode;\r\ + \n\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local Char (\"\\n\\r\");\r\ + \n :local PublicIpAddress [\$GetPubIp];\r\ + \n# :if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 2) ] = \ + \"\\n\") do={:error true}; :set error falseon-error={:set PublicIpAddress \ + (\$PublicIpAddress . Char)};\r\ + \n#:if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 1) ] = \"/\ + n\") do={\r\ + \n#:log warning \"N is = //n\"; \r\ + \n# :set PublicIpAddress [ \$CharacterReplace \$PublicIpAddress \$Char \"\ + \" ];\r\ + \n#}\r\ + \n# :set PublicIpAddress [ \$UrlEncode \$PublicIpAddress ];\r\ + \n#:local IpLen ([ :len \$PublicIpAddress ] -1);\r\ + \n#:set PublicIpAddress [:pick \$PublicIpAddress 0 \$IpLen];\r\ + \n :log warning \"Public IP address detected: \$PublicIpAddress , len = \ + \$IpLen\";\r\ + \n}\r\ + \n" +add comment="download, import and update firewall address-lists" \ + dont-require-permissions=no name=AM-FwAddrLists owner=AM-FwAddrLists \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-FwAddrLists\r\ + \n# Script comment: download, import and update firewall address-lists\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# https://ros.vados.ru/doc/fw-addr-lists.md\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ListsDirName (\"fw-addr-lists.d/\" . [ /system identity get nam\ + e ] . \"/\");\r\ + \n :local ListsUrl (\$GlobalScriptsUrl . \$ListsDirName);\r\ + \n :local ListsIndex \"index.lst\";\r\ + \n :local AddrListsTimeOut 1d;\r\ + \n :local CheckCerts false;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global FetchHugeFiles;\r\ + \n :global HumanReadableNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global NetMask4;\r\ + \n :global NetMask6;\r\ + \n :global ScriptLock;\r\ + \n \r\ + \n :local FindDelim do={\r\ + \n :local ValidChars \"0123456789.:/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghi\ + jklmnopqrstuvwxyz-\";\r\ + \n :for I from=0 to=[ :len \$1 ] do={\r\ + \n :if ([ :typeof [ :find \$ValidChars [ :pick (\$1 . \" \") \$I ] ] \ + ] != \"num\") do={\r\ + \n :return \$I;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local GetBranch do={\r\ + \n :global EitherOr;\r\ + \n :return [ :pick [ :convert transform=md5 to=hex [ :pick \$1 0 [ \$Ei\ + therOr [ :find \$1 \"/\" ] [ :len \$1 ] ] ] ] 0 2 ];\r\ + \n }\r\ + \n \r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local ListComment (\"managed by \" . \$ScriptName);\r\ + \n :local Url (\$ListsUrl . \$ListsIndex);\r\ + \n :local tmpIndex false;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :set tmpIndex [ :tolf [ \$FetchHugeFiles \$ScriptName \$Url \$Chec\ + kCerts ] ];\r\ + \n :if (\$tmpIndex = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list \ + index, \" . \$I . \". try from: \" . \$Url);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list inde\ + x from: \" . \$Url);\r\ + \n :set tmpIndex \"\";\r\ + \n }\r\ + \n\r\ + \n :foreach List in=[ :deserialize \$tmpIndex delimiter=\"\\n\" from=dsv \ + options=dsv.plain ] do={\r\ + \n# :set List (\$List->0);\r\ + \n :local ListName;\r\ + \n :local Delim [ \$FindDelim \$List ];\r\ + \n :if (\$Delim = 0) do={ :set List \"\"; };\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$List);\r\ + \n :if ([ :len \$List ] = 0) do={\r\ + \n :log error (\$ScriptName . \" Failed parsing address-list index en\ + try: \" . \$List);\r\ + \n } else={\r\ + \n :set ListName [ :pick \$List 0 \$Delim ];\r\ + \n }\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$ListName . \" - Ok.\");\r\ + \n :local ListUrl (\$ListsUrl . \$ListName);\r\ + \n :local CntAdd 0;\r\ + \n :local CntRenew 0;\r\ + \n :local CntRemove 0;\r\ + \n :local IPv4Addresses ({});\r\ + \n :local IPv6Addresses ({});\r\ + \n :local Failure false;\r\ + \n :local Data false;\r\ + \n :local TimeOut \$AddrListTimeOut;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data [ :tolf [ \$FetchHugeFiles \$ScriptName \$ListUrl \$Ch\ + eckCerts ] ];\r\ + \n :if (\$Data = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\ + \" . \$ListName . \"', \" . \$I . \". try from: \" . \$ListUrl);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data \"\";\r\ + \n :set Failure true;\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\" . \ + \$ListName . \"' from: \" . \$ListUrl);\r\ + \n } else={\r\ + \n :log warning (\$ScriptName . \" Downloaded \" . [ \$HumanReadableN\ + um [ :len \$Data ] 1024 ] . \"B for list '\" . \$ListName . \"' from: \" .\ + \_\$ListUrl);\r\ + \n }\r\ + \n\r\ + \n :foreach Line in=[ :deserialize \$Data delimiter=\"\\n\" from=dsv op\ + tions=dsv.plain ] do={\r\ + \n :set Line (\$Line->0);\r\ + \n :local Address;\r\ + \n :if ([ :pick \$Line 0 1 ] = \"{\" && [ :pick \$Line ([ :len \$Line\ + \_] - 1) ] = \"}\") do={\r\ + \n :do {\r\ + \n :set Address [ :tostr ([ :deserialize from=json \$Line ]->\"ci\ + dr\") ];\r\ + \n } on-error={ }\r\ + \n } else={\r\ + \n :set Address ([ :pick \$Line 0 [ \$FindDelim \$Line ] ] . (\$L\ + ist->\"cidr\"));\r\ + \n }\r\ + \n :do {\r\ + \n :local Branch;\r\ + \n :if (\$Address ~ \"^[0-9]{1,3}\\\\.[0-9]{1,3}\\\\.[0-9]{1,3}\\\\\ + .[0-9]{1,3}(/[0-9]{1,2})\?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 32;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n :set Address [ :tostr (([ :toip \$Net ] & [ \$NetMask4 \$CID\ + R ]) . [ \$IfThenElse (\$CIDR < 32) (\"/\" . \$CIDR) ]) ];\r\ + \n }\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[0-9a-zA-Z]*:[0-9a-zA-Z:\\\\.]+(/[0-9]{1,3})\ + \?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 128;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip6 [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n }\r\ + \n :set Address (([ :toip6 \$Net ] & [ \$NetMask6 \$CIDR ]) . \"/\ + \" . \$CIDR);\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[\\\\.a-zA-Z0-9-]+\\\\.[a-zA-Z]{2,}\\\$\") d\ + o={\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n \r\ + \n\r\ + \n :foreach Entry in=[ /ip/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ip/firewall/address-list/get \$Entry address ];\ + \r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv4 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ip/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv4 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ip/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach Entry in=[ /ipv6/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ipv6/firewall/address-list/get \$Entry address ]\ + ;\r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv6 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ipv6/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv6 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ipv6/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv4Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv4 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ip/firewall/address-list/add list=\$ListName comment=\$ListCo\ + mment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv4 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv6Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv6 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ipv6/firewall/address-list/add list=\$ListName comment=\$List\ + Comment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv6 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :log info (\$ScriptName . \" list: \" . \$ListName . \\\r\ + \n \" (\" . [ \$HumanReadableNum (\$CntAdd + \$CntRenew) 1000 ] . \ + \")\" . \\\r\ + \n \" -- added: \" . [ \$HumanReadableNum \$CntAdd 1000 ] . \\\r\ + \n \" - renewed: \" . [ \$HumanReadableNum \$CntRenew 1000 ] . \\\r\ + \n \" - removed: \" . [ \$HumanReadableNum \$CntRemove 1000 ]);\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=awg-env owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/envs/add list=awg-proxy-env key=AWG_LISTEN value=\":55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_REMOTE value=\"109.107.17\ + 7.79:55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H1 value=\"472437748-4724\ + 38637\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H2 value=\"707808381-7078\ + 09250\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H3 value=\"1609078552-160\ + 9079495\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H4 value=\"1012329484-101\ + 2329741\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I5 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_SERVER_PUB value=\"o5IgCl\ + 1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_CLIENT_PUB value=[/interf\ + ace/wireguard/get [find name=wg-awg-proxy] public-key]" +add dont-require-permissions=no name=awg-container-add owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/add file=sata1/tmp/awg-proxy-amd64.tar.gz interface=veth-awg-pro\ + xy envlist=awg-proxy-env \\\ + \n hostname=awg-proxy root-dir=sata1/awg-proxy logging=yes shm-size=4M \ + start-on-boot=yes\ + \n/container/start [find where tag~\"awg-proxy\"]" +add dont-require-permissions=yes name=awg2-webui owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + put \"Download image, and save him to usb1/tmp\"\ + \n/tool/fetch url=\"https://ros.vados.ru/docker/awg2-webui-chr.tar\" dst-p\ + ath=sata1/tmp/awg2-webui.tar\ + \n\ + \n:put \"1. Create veth interface\"\ + \n/interface veth add name=veth-awg address=10.9.9.2/24 gateway=10.9.9.1\ + \n\ + \n:put \"2. Create bridge and add veth\"\ + \n/interface bridge add name=br-awg\ + \n/interface bridge port add bridge=br-awg interface=veth-awg\ + \n\ + \n:put \"3. Assign IP to bridge\"\ + \n/ip address add address=10.9.9.1/24 interface=br-awg\ + \n\ + \n:put \"4. NAT: masquerade container traffic\"\ + \n/ip firewall nat add chain=srcnat src-address=10.9.9.0/24 action=masquer\ + ade\ + \n\ + \n:put \"5. Port forward: UDP 443 \? container (AmneziaWG QUIC mimicry)\"\ + \n/ip firewall nat add chain=dstnat protocol=udp dst-port=443 action=dst-n\ + at to-addresses=10.9.9.2 to-ports=55055 in-interface=ether1\ + \n\ + \n:put \"6. Port forward: HTTPS 9443 \? container Web UI\"\ + \n/ip firewall nat add chain=dstnat protocol=tcp dst-port=9443 action=dst-\ + nat to-addresses=10.9.9.2 to-ports=443 in-interface=ether1\ + \n\ + \n:put \"Create environment list..\"\ + \n/container envs add list=awgui-env key=WEB_USER value=vados\ + \n/container envs add list=awgui-env key=WEB_PASS value=zoomzoomrulezz\ + \n/container envs add list=awgui-env key=SECRET_KEY value=RanDomSecret32Sy\ + mboLs2325272931q\ + \n/container envs add list=awgui-env key=AWG_ENDPOINT value=10.30.30.10:44\ + 3\ + \n\ + \n:put \"Load and start container...\"\ + \n/container add file=sata1/tmp/awg2-webui.tar interface=veth-awg hostname\ + =awg2-webui \\\ + \nroot-dir=sata1/awg2-webui layer-dir=sata1/docker/awg2-webu/ envlist=awgu\ + i-env start-on-boot=yes logging=yes shm-size=4M\ + \n\ + \n:put \"Start...\"\ + \n/container start 0\ + \n\ + \n:put \"Verify...\"\ + \n/container print\ + \n\ + \n:put \"Should show: status=running\"\ + \n\ + \n/log print where topics~\"container\"\ + \n\ + \n:put \"Should show: AWG started, nginx running\"\ + \n" +add dont-require-permissions=no name=awg-proxy-go-Client owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:put \"[::::::::::::::: START :::::::::::::::]\"\ + \n:put \"\"\ + \n:put \"Add ram disk tmpfs\"\ + \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ + \n\ + \n:put \"veth and network:\"\ + \n /interface/bridge add name=docker port-cost-mode=short\ + \n /ip/address/add address=192.168.100.1/24 interface=docker\ + \n\ + \n /interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\ + =awg-proxy-go-client\ + \n /interface/bridge/port add bridge=docker interface=awg-proxy-go-client\ + \n\ + \n:put \"add config-client.json\"\ + \n/file/add name=sata1/mounts/awg-proxy-go/config-client.json\ + \n/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json d\ + st=/app/config.json list=awgcfg-client\ + \n\ + \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\ + d64.tar.gz\"\ + \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\ + 4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\ + \n\ + \n:put \"Add container\"\ + \n/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interface\ + =awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-proxy\ + -client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pro\ + xy-go-client\" mountlists=awgcfg-client\ + \n\ + \n:put \"Start container\"\ + \n#/container/start awg-proxy-go-client\ + \n\ + \n:put \"Add user:\"\ + \n /user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ + peskar55\ + \n\ + \n:put \"Add forwarding port web-ui\"\ + \n /ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ + face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ + \n\ + \n:put \"Add native WireGuard-server wg-awg, add address.\"\ + \n /interface/wireguard/add name=wg-awg-client\ + \n /ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ + \n\ + \n:put \"\"\ + \n:put \"[::::::::::::::: END :::::::::::::::]\"\ + \n" +add comment=awg2wg dont-require-permissions=no name=awg2wg-uninstall owner=\ + Manager policy=ftp,read,write,policy source="\r\ + \n :put \"Uninstalling AmneziaWG...\"\r\ + \n :log info \"Uninstalling AmneziaWG...\"\r\ + \n /ip/route/remove [find where comment=awg2wg-tunnel]\r\ + \n :do { /tool/netwatch/remove [find where comment=Monitor-AWG2WG] } on-e\ + rror={}\r\ + \n :do { /ip/route/remove [find where comment=Monitor-AWG2WG] } on-error=\ + {}\r\ + \n /container/stop [find where interface=veth-awg2wg]\r\ + \n :delay 7s\r\ + \n /interface/list/member/remove [find where interface=wg-awg2wg]\r\ + \n /container/remove [find where interface=veth-awg2wg]\r\ + \n /container/envs/remove [find where list=\"awg2wg-env\"]\r\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg2wg\"]\r\ + \n /ip/address/remove [find where address=\"172.20.0.1/30\"]\r\ + \n /interface/veth/remove [find where name=\"veth-awg2wg\"]\r\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg2wg\"]\ + \r\ + \n /ip/address/remove [find where interface=\"wg-awg2wg\"]\r\ + \n /interface/wireguard/remove [find where name=\"wg-awg2wg\"]\r\ + \n :do { /file/remove [find where name~\"awg2wg.+tar\"] } on-error={}\r\ + \n :do { /file/remove [find where name=\"disk1/awg2wg\"] } on-error={}\r\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n /system/script/remove [find where name=awg2wg-uninstall]\r\ + \n" +add dont-require-permissions=no name=amneziawg-mikrotik-c owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\ + \n:global imagesPath \"amneziawg/img/\";\ + \n:local Image \"awg-proxy-amd64-7.20-Docker.tar.gz\";\ + \n\ + \n:global DstDir \"sata1/dst/\";\ + \n\ + \n:local Url=(\$GlobalScriptsUrl . \$ImagesPath . \$Image);\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n" +add comment=Generator dont-require-permissions=no name=awg-VDSina owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# ============================================================\ + \n# AWG Proxy -- MikroTik RouterOS (protocol: v2)\ + \n# 2026-06-30 22:08:12\ + \n# ============================================================\ + \n\ + \n# 0. Check prerequisites\ + \n:if ([:len [/system/package/find where name=\"container\" disabled=no]] \ + = 0) do={\ + \n :put \"Container package is not installed or disabled. Install it and \ + reboot.\"\ + \n :error \"Usage: /system/device-mode/update container=yes\"\ + \n}\ + \n\ + \n# Auto-detect storage\ + \n:global awgDisk \"disk1\"\ + \n{\ + \n :local usbFree 0\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] free] \ + } on-error={}\ + \n :if (\$usbFree > 0) do={\ + \n :set awgDisk \"usb1\"\ + \n :put (\"Using USB: usb1 (\" . (\$usbFree / 1048576) . \" MB free)\")\ + \n } else={\ + \n :if ([:len [/disk/find where slot=\"usb1\"]] > 0) do={\ + \n :put \"USB found but not mounted. Format as ext4\?\"\ + \n :put \"Press 'y' to confirm:\"\ + \n :local key [/terminal/inkey timeout=30]\ + \n :if (\$key = 121 || \$key = 89) do={\ + \n /disk/format-drive usb1 file-system=ext4 label=usb1\ + \n :delay 3s\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] \ + free] } on-error={}\ + \n :if (\$usbFree > 0) do={\ + \n :set awgDisk \"usb1\"\ + \n } else={ :put \"Format failed, using disk1\" }\ + \n } else={ :put \"Using disk1\" }\ + \n } else={ :put \"No USB, using disk1\" }\ + \n }\ + \n}\ + \n\ + \n# 1. Uninstall script\ + \n/system/script/add name=awg-VDSina-uninstall comment=awg-VDSina source={\ + \n :put \"Uninstallimg AmneziaWG...\"\ + \n :log info \"Uninstallimg AmneziaWG...\"\ + \n :local prevDNS \"\"\ + \n :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\ + env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\ + \n :local storageDisk \"disk1\"\ + \n :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\ + ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\ + \n :local prevTmpdir \"\"\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\ + Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\ + \n }\ + \n /ip/route/remove [find where comment=awg-VDSina-tunnel]\ + \n /ip/route/remove [find where comment=awg-VDSina-dns]\ + \n /container/stop [find where interface=veth-awg-VDSina]\ + \n :delay 7s\ + \n /container/remove [find where interface=veth-awg-VDSina]\ + \n /container/envs/remove [find where list=\"awg-VDSina-env\"]\ + \n :if (\$prevDNS != \"\") do={\ + \n :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\ + \n :put (\"DNS restored to: \$prevDNS\")\ + \n }\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n /container/config set tmpdir=\$prevTmpdir\ + \n :put (\"Container tmpdir restored to: \$prevTmpdir\")\ + \n }\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\ + \n /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\ + \n /ip/address/remove [find where address=\"172.19.75.209/30\"]\ + \n /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\ + a\"]\ + \n /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\ + \n /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\ + \n :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\ + \_} on-error={}\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\ + out.rsc\")] } on-error={}\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\ + n-error={}\ + \n }\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\ + \n /system/script/remove [find where name=awg-VDSina-uninstall]\ + \n}\ + \n\ + \n# 2. Network infrastructure\ + \n/interface/veth/add name=veth-awg-VDSina address=172.19.75.210/30 gatewa\ + y=172.19.75.209\ + \n/ip/address/add address=172.19.75.209/30 interface=veth-awg-VDSina\ + \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.19.7\ + 5.208/30\ + \n\ + \n# 3. WireGuard interface (MikroTik derives the public key automatically)\ + \n/interface/wireguard/add name=wg-awg-VDSina private-key=\"4CHyNhbOs923/E\ + yNDguMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=14710 disabled=yes\ + \n/interface/wireguard/peers/add interface=wg-awg-VDSina public-key=\"o5Ig\ + Cl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcY\ + QnD9N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=172.19.75.210 endpoint-po\ + rt=51820 allowed-address=0.0.0.0/0 persistent-keepalive=10\ + \n/ip/address/add address=10.9.0.3/32 interface=wg-awg-VDSina\ + \n\ + \n# 4. Container environment variables\ + \n/container/envs/add list=awg-VDSina-env key=AWG_LISTEN value=\":51820\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_REMOTE value=\"109.107.1\ + 77.79:55055\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H1 value=\"472437748-472\ + 438637\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H2 value=\"707808381-707\ + 809250\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H3 value=\"1609078552-16\ + 09079495\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H4 value=\"1012329484-10\ + 12329741\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_SERVER_PUB value=\"o5IgC\ + l1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_CLIENT_PUB value=[/inter\ + face/wireguard/get [find name=wg-awg-VDSina] public-key]\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I5 value=\"\"\ + \n\ + \n# 5. DNS\ + \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\ + n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\ + \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /container/envs/add list=aw\ + g-VDSina-env key=AWG_PREV_DNS value=\"\$prevDNS\" }\ + \n# NOTE: replaces existing DNS configuration\ + \n/ip/dns/set servers=109.107.177.79\ + \n/ip/route/add dst-address=109.107.177.79/32 gateway=wg-awg-VDSina distan\ + ce=1 comment=awg-VDSina-dns\ + \n\ + \n# 6. Download, create and start container\ + \n/container/envs/add list=awg-VDSina-env key=AWG_STORAGE value=\$awgDisk\ + \n:if (\$awgDisk != \"disk1\") do={\ + \n :local tmpPath (\$awgDisk . \"/pull\")\ + \n /container/envs/add list=awg-VDSina-env key=AWG_PREV_TMPDIR value=[/co\ + ntainer/config/get tmpdir]\ + \n /container/config set tmpdir=\$tmpPath memory-high=200M\ + \n}\ + \n{\ + \n :local arch [/system/resource/get architecture-name]\ + \n :local ver [/system/resource/get version]\ + \n :local dotPos [:find \$ver \".\"]\ + \n :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\ + \n :local endPos [:find \$rest \".\"]\ + \n :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \" \ + \"] }\ + \n :local minor [:tonum [:pick \$rest 0 \$endPos]]\ + \n :local suffix \"\"\ + \n :if (\$minor <= 20) do={ :set suffix \"-7.20-Docker\" }\ + \n :local file \"\"\ + \n :if (\$arch = \"arm64\") do={ :set file (\"awg-proxy-arm64\" . \$suffi\ + x . \".tar.gz\") }\ + \n :if (\$arch = \"arm\") do={ :set file (\"awg-proxy-arm\" . \$suffix . \ + \".tar.gz\") }\ + \n :if (\$arch ~ \"x86\") do={ :set file (\"awg-proxy-amd64\" . \$suffix \ + . \".tar.gz\") }\ + \n :if (\$file = \"\") do={ :error \"Unsupported architecture: \$arch\" }\ + \n :local url \"https://github.com/timbrs/amneziawg-mikrotik-c/releases/l\ + atest/download/\$file\"\ + \n :local filePath \$file\ + \n :if (\$awgDisk != \"disk1\") do={\ + \n :set filePath (\$awgDisk . \"/pull/\" . \$file)\ + \n :do { /file/make-directory (\$awgDisk . \"/pull\") } on-error={}\ + \n }\ + \n :if ([:len [/file/find where name=\$filePath]] = 0) do={\ + \n :local freeStorage 0\ + \n :if (\$awgDisk = \"disk1\") do={\ + \n :set freeStorage [/system/resource/get free-hdd-space]\ + \n } else={\ + \n :do { :set freeStorage [/disk/get [find where mount-point=\$awgDis\ + k] free] } on-error={}\ + \n }\ + \n :if (\$freeStorage < 262144) do={\ + \n :put (\"WARNING: Low disk space (\" . (\$freeStorage / 1024) . \"K\ + B free). Need at least 256KB.\")\ + \n :put \"See: https://github.com/timbrs/amneziawg-mikrotik-c#insuffi\ + cient-disk-space\"\ + \n :error \"Insufficient disk space\"\ + \n }\ + \n :put (\"Fetching: \$url -> \" . \$filePath)\ + \n /tool/fetch url=\$url dst-path=\$filePath http-max-redirect-count=10\ + \n } else={\ + \n :put (\"File already exists: \" . \$filePath)\ + \n }\ + \n :local rootDir (\$awgDisk . \"/awg-VDSina\")\ + \n /container/add file=\$filePath interface=veth-awg-VDSina envlist=awg-V\ + DSina-env hostname=awg-VDSina root-dir=\$rootDir logging=no start-on-boot=\ + yes comment=awg-VDSina\ + \n :if (\$minor > 20) do={ [:parse \"/container/set [find where interface\ + =veth-awg-VDSina] shm-size=4M\"] }\ + \n /file/remove \$filePath\ + \n :local freeMem [/system/resource/get free-memory]\ + \n :if (\$freeMem < 16777216) do={\ + \n :put (\"WARNING: Low memory (\" . (\$freeMem / 1048576) . \"MB free)\ + . 16MB+ recommended.\")\ + \n }\ + \n /container/start [find where interface=veth-awg-VDSina]\ + \n :do { /file/remove [find where name=\"console-dump.txt\"] } on-error={\ + }\ + \n :put \"Waiting for container to start...\"\ + \n :delay 5s\ + \n /interface/wireguard/enable wg-awg-VDSina\ + \n :put \"WireGuard interface enabled\"\ + \n :put \"Installation complete!\"\ + \n :put \"Ping test: 109.107.177.79 via AmneziaWG tunnel. repeat 10 times\ + \"\ + \n /ping 109.107.177.79 count=10 interval=1\ + \n :put \"\"\ + \n :put \"======= NEXT STEPS =======\"\ + \n :put \"\"\ + \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\ + \n :put \"\"\ + \n :put \" Route a single host:\"\ + \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-awg-VDSina \ + comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Route a subnet:\"\ + \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-awg-VDSina\ + \_comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Remove a route:\"\ + \n :put \" /ip/route/remove [find where comment=awg-VDSina-tunnel dst-\ + address=8.8.8.8/32]\"\ + \n :put \"\"\ + \n :put \" Show all tunnel routes:\"\ + \n :put \" /ip/route/print where comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Uninstall:\"\ + \n :put \" /system/script/run awg-VDSina-uninstall\"\ + \n :put \"=========================\"\ + \n}\ + \n\ + \n# 7. Verification\ + \n# /container/print\ + \n# /interface/wireguard/print\ + \n# /interface/wireguard/peers/print\ + \n" +add comment="wg2awg GH repo in client mode" dont-require-permissions=no name=\ + "wg2awg client" owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:local Arch \"amd64\";\ + \n:local Version \"v0.0.1\";\ + \n:local Name wg2awg;\ + \n:local WorkDisk \"sata1\";\ + \n:local WorkDir (\$WorkDisk . \"/\" . \$Name);\ + \n:local Bridge (\"Bridge-\" . \$Name);\ + \n:local VetchMTU \"1280\";\ + \n:local Vetch (\"vetch-\" . \$Name);\ + \n:local VetchNet \"10.9.0.0\";\ + \n:local VetchGate \"10.9.0.1\";\ + \n:local VetchAddr \"10.9.0.3/32\";\ + \n:local Env (\$Name . \"-env\");\ + \n:local ConfDir (\"/etc/\" . \$Name . \"/\");\ + \n:local ConfFile (\$Name . \".conf\");\ + \n:local Mounts (\$WorkDisk . \"/mounts/\" . \$Name . \"/\");\ + \n:local RootDir (\$WorkDisk . \"/\" . \$Name);\ + \n:local Registry \"https://registry-1.docker.io\";\ + \n:local FetchFile (\$Name . \"-\" . \$Arch . \"-oci.tar\");\ + \n:local FetchUrl (\"https://github.com/vados-dev/wg2awg/releases/download\ + /\" . \$Version . \"/\" . \$FetchFile);\ + \n:local FetchDir (\$WorkDisk . \"/dst/\");\ + \n:local AwgListen \":44044\";\ + \n:local AwgRemote \"109.107.177.79\";\ + \n\ + \n#:put \"\"\ + \n#put \"Add ram disk tmpfs\"\ + \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ + \n\ + \n\ + \n:log warning \"[::::::::::::::: START :::::::::::::::]\"\ + \n:log warning \"Add veth and nat...\";\ + \n\ + \n/interface/veth/add name=\$Vetch address=\$VetchAddr gateway=\$VetchGate\ + ;\ + \n\ + \n:do {\ + \n:log warning (\"Remove interface: name=\" . \$Vetch . \", address=\" . \ + \$VetchAddr . \", gateway=\" . \$VetchGate);\ + \n/interface/veth/remove [find name=\$Vetch];\ + \n:log warning (\"Add interface: name=\" . \$Vetch . \", address=\" . \$Ve\ + tchAddr . \", gateway=\" . \$VetchGate);\ + \n/interface/veth/add name=\$Vetch address=\$VetchAddr gateway=\$VetchGate\ + ;\ + \n:log warning (\"Remove ip address: address=\" . \$VetchGate . \", interf\ + ace=\" . \$Vetch);\ + \n/ip/address/remove [find address=\$VetchGate interface=\$Vetch];\ + \n:log warning (\"Add ip address: address=\" . \$VetchGate . \", interface\ + =\" . \$Vetch);\ + \n/ip/address/add address=\$VetchGate interface=\$Vetch;\ + \n:log warning (\"Remove firewall nat rule: chain=srcnat action=masquerade\ + \_src-address=\" . \$VetchNet . \"/24\");\ + \n/ip/firewall/nat/remove [find chain=srcnat action=masquerade src-address\ + =(\$VetchNet . \"/24\")];\ + \n:log warning (\"Add firewall nat rule: chain=srcnat action=masquerade sr\ + c-address=\" . \$VetchNet . \"/24\");\ + \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=(\$VethN\ + et . \"/24\");\ + \n} on-error={}\ + \n\ + \n#:do {\ + \n#/file add type=directory name=\$Mounts\ + \n#} on-error={}\ + \n\ + \n\ + \n:do {\ + \n:log warning (\"Remove WorkDir: \" . \$WorkDir . \"...\");\ + \n/file remove [find name=\$WorkDir];\ + \n:log warning (\"Add WorkDir: \" . \$WorkDir . \"...\");\ + \n/file add type=directory name=\$WorkDir;\ + \n:log warning (\"Remove config file \" . \$Mounts . \$ConfFile . \"...\")\ + ;\ + \n/file remove [find name=(\$Mounts . \$ConfFile)];\ + \n:log warning (\"Add config file \" . \$Mounts . \$ConfFile . \"...\");\ + \n/file add type=file name=(\$Mounts . \$ConfFile) contents=\"[Interface]\ + \nPrivateKey = 4CHyNhbOs923/EyNDguMXJXdghL2I3UyzXPwrANVgHs=\ + \nAddress = \$VetchAddr\ + \nMTU = \$VetchMTU\ + \nDNS = 109.107.177.79\ + \nPreUp = ip route add 109.107.177.79/32 via \$VetchGate dev \$Vetch\ + \nPostDown = ip route del 109.107.177.79/32 via \$VetchGate dev \$Vetch\ + \nJc = 9\ + \nJmin = 105\ + \nJmax = 920\ + \nS1 = 90\ + \nS2 = 136\ + \nS3 = 45\ + \nS4 = 27\ + \nH1 = 472437748-472438637\ + \nH2 = 707808381-707809250\ + \nH3 = 1609078552-1609079495\ + \nH4 = 1012329484-1012329741\ + \nI1 = <\ + r 4>\ + \nI2 = \ + \nI3 = \ + \nI4 = \ + \nI5 = \ + \n\ + \n[Peer]\ + \nPublicKey = o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\ + \nAllowedIPs = 0.0.0.0/0\ + \nEndpoint = \$AwgRemote\ + \nPersistentKeepalive = 10\ + \nPresharedKey = RNvF7T1cg5tyXcYQnD9N5BEp6e20vVJQTv0GMjyvHU0=\";\ + \n} on-error={}\ + \n\ + \n\ + \n:do {\ + \n:log warning (\"Remove mounts list \$Env...\");\ + \n/container/mounts/remove [find list=\$Env];\ + \n:log warning (\"Add mounts list \$Env...\");\ + \n/container/mounts/add src=(\$Mounts . \$ConfFile) dst=(\$ConfDir . \$Con\ + fFile) list=\$Env mode=ro;\ + \n:log warning (\"Remove Environment keys.\");\ + \n/container/envs/remove [find list=\$Env];\ + \n:log warning (\"Add Environment keys.\");\ + \n/container/envs/add list=\$Env key=AWG_CONFIG value=(\$ConfDir . \$ConfF\ + ile);\ + \n/container/envs/add list=\$Env key=AWG_LISTEN value=\$AwgListen\ + \n/container/envs/add list=\$Env key=AWG_REMOTE value=\$AwgRemote\ + \n/container/envs/add list=\$Env key=AWG_MODE value=client\ + \n} on-error={}\ + \n\ + \n:do {\ + \n:log warning (\"Remove \" . \$WorkDisk . \"/tmp\");\ + \n/file remove [find name=(\$WorkDisk . \"/tmp\")];\ + \n:log warning (\"Add \" . \$WorkDisk . \"/tmp\");\ + \n/file add type=directory name=(\$WorkDisk . \"/tmp\");\ + \n:log warning (\"Container add tmpdir \" . \$WorkDisk . \"/tmp\");\ + \n/container config set tmpdir=(\$WorkDisk . \"/tmp\");\ + \n} on-error={}\ + \n\ + \n:do {\ + \n:log warning (\"Remove \" . \$FetchDir . \$FetchFile . \".\");\ + \n/file remove [find name=(\$FetchDir . \$FetchFile)];\ + \n:log warning (\"Download image from \" . \$FetchUrl . \" and save him to\ + \_\" . \$FetchDir . \$FetchFile . \".\");\ + \n/tool/fetch url=\$FetchUrl dst-path=(\$FetchDir . \$FetchFile);\ + \n} on-error={}\ + \n\ + \n#:log warning (\"Container set registry \" . \$Registry . \" tmpdir= \" \ + . \$WorkDisk . \"/tmp\");\ + \n#/container/config/set registry-url=\$Registry tmpdir=(\$WorkDisk . \"/t\ + mp\");\ + \n\ + \n#:do {\ + \n:log warning (\"Container add width: file=\" . \$FetchDir . \$FetchFile \ + . \", interface=\" . \$Vetch . \", hostname=\" . \$Name . \", mountlists=\ + \" . \$Env . \", envlist=\" . \$Env . \", root-dir=\" . \$RootDir . \", wo\ + rkdir=\" . \$WorkDir . \", name=\" . \$Name . \", logging=yes, start-on-bo\ + ot=yes\");\ + \n/container/add file=(\$FetchDir . \$FetchFile) interface=\$Vetch hostnam\ + e=\$Name mountlists=\$Env envlist=\$Env root-dir=\$RootDir workdir=\$WorkD\ + ir name=\$Name logging=yes start-on-boot=yes;\ + \n#} on-error={}\ + \n\ + \n\ + \n#/container/start [find where interface=\$Vetch];\ + \n\ + \n#/interface/bridge add name=\$Bridge port-cost-mode=short;\ + \n#/ip/address/add address=192.168.100.1/24 interface=\$Bridge;\ + \n\ + \n#/interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\ + =awg-proxy-go-client\ + \n#/interface/bridge/port add bridge=docker interface=awg-proxy-go-client\ + \n\ + \n#:put \"add config-client.json\"\ + \n#/file/add name=sata1/mounts/awg-proxy-go/config-client.json\ + \n#/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json \ + dst=/app/config.json list=awgcfg-client\ + \n\ + \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\ + d64.tar.gz\"\ + \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\ + 4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\ + \n\ + \n#:put \"Add container\"\ + \n#/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interfac\ + e=awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-prox\ + y-client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pr\ + oxy-go-client\" mountlists=awgcfg-client\ + \n\ + \n#:put \"Start container\"\ + \n#/container/start awg-proxy-go-client\ + \n\ + \n#:put \"Add user:\"\ + \n#/user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ + peskar55\ + \n\ + \n#:put \"Add forwarding port web-ui\"\ + \n#/ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ + face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ + \n\ + \n#:put \"Add native WireGuard-server wg-awg, add address.\"\ + \n#/interface/wireguard/add name=wg-awg-client\ + \n#/ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ + \n\ + \n:put \"\"\ + \n:put \"[::::::::::::::: END :::::::::::::::]\"\ + \n" +add dont-require-permissions=no name=tmp_print owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDguMX\ + JXdghL2I3UyzXPwrANVgHs=\" listen-port=21641 \ + \n :put \"======= AWG PROXY SETUP =======\"\ + \n :put \"\"\ + \n :put \"Run awg-proxy on your external device (10.30.30.33).\"\ + \n :put \"\"\ + \n :put \"1. Download the binary for your platform:\"\ + \n :put \" Linux arm64: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-arm64\"\ + \n :put \" Linux arm: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-arm\"\ + \n :put \" Linux amd64: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-amd64\"\ + \n :put \"\"\ + \n :put \"2. Set environment variables and run:\"\ + \n :put \"export AWG_LISTEN=\\\":51820\\\"\"\ + \n :put \"export AWG_REMOTE=\\\"109.107.177.79:55055\\\"\"\ + \n :put \"export AWG_JC=\\\"9\\\"\"\ + \n :put \"export AWG_JMIN=\\\"105\\\"\"\ + \n :put \"export AWG_JMAX=\\\"920\\\"\"\ + \n :put \"export AWG_S1=\\\"90\\\"\"\ + \n :put \"export AWG_S2=\\\"136\\\"\"\ + \n :put \"export AWG_H1=\\\"472437748-472438637\\\"\"\ + \n :put \"export AWG_H2=\\\"707808381-707809250\\\"\"\ + \n :put \"export AWG_H3=\\\"1609078552-1609079495\\\"\"\ + \n :put \"export AWG_H4=\\\"1012329484-1012329741\\\"\"\ + \n :put \"export AWG_SERVER_PUB=\\\"o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+\ + v0b9jU=\\\"\"\ + \n :put (\"export AWG_CLIENT_PUB=\\\"\" . [/interface/wireguard/get [find\ + \_name=wg-VDSina] public-key] . \"\\\"\")\ + \n :put \"export AWG_S3=\\\"45\\\"\"\ + \n :put \"export AWG_S4=\\\"27\\\"\"\ + \n :put \"export AWG_I1=\\\"\\\"\"\ + \n :put \"export AWG_I2=\\\"\\\"\"\ + \n :put \"export AWG_I3=\\\"\\\"\"\ + \n :put \"export AWG_I4=\\\"\\\"\"\ + \n :put \"export AWG_I5=\\\"\\\"\"\ + \n :put \"\"\ + \n :put \"chmod +x awg-proxy-linux-* && ./awg-proxy-linux-\"\ + \n :put \"\"\ + \n :put \"3. (Optional) Create a systemd service for auto-start.\"\ + \n :put \"\"\ + \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\ + \n :put \"\"\ + \n :put \" Route a single host:\"\ + \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-VDSina comm\ + ent=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Route a subnet:\"\ + \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-VDSina com\ + ment=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Remove a route:\"\ + \n :put \" /ip/route/remove [find where comment=VDSina-tunnel dst-addr\ + ess=8.8.8.8/32]\"\ + \n :put \"\"\ + \n :put \" Show all tunnel routes:\"\ + \n :put \" /ip/route/print where comment=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Uninstall:\"\ + \n :put \" /system/script/run VDSina-uninstall\"\ + \n :put \"================================\"" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +add name=manager policy="local,ssh,ftp,read,write,policy,api,rest-api,!telnet,\ + !reboot,!test,!winbox,!password,!web,!sniff,!sensitive,!romon" +/app +set cinny firewall-redirects=8094:80:tcp:web +set goaway container-command-lines=goaway:none:docker.io/pommee/goaway:latest +set home-assistant container-command-lines=\ + home-assistant:none:lscr.io/linuxserver/homeassistant +set n8n firewall-redirects=5678:5678:tcp:web +set nextcloud container-command-lines="db:none:docker.io/postgres:17,redis:non\ + e:docker.io/valkey/valkey:/bin/sh -c 'valkey-server --port 6379 --appendon\ + ly yes --requirepass \$VALKEY_PASSWORD',server:none:docker.io/nextcloud:ap\ + ache" +set pihole environment="pihole:FTLCONF_dns_listeningMode=all,pihole:FTLCONF_we\ + bserver_api_password=password" +set redlib firewall-redirects=8087:8080:tcp:web +set solr container-command-lines=solr:none:docker.io/solr:latest +set uptime-kuma container-command-lines=\ + uptime-kuma:none:docker.io/louislam/uptime-kuma:1 +/app settings +set auto-update=yes disk=*7 lan-bridge=*3 registry-mirrors="https://reg.vados.\ + ru:5000/:https://reg.vados.ru/,https://registry-1.docker.io" +/caps-man aaa +set called-format=ssid +/caps-man access-list +add action=reject allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-120..-80 ssid-regexp="" +add action=accept allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-79..120 ssid-regexp="" +/caps-man configuration +add channel.band=2ghz-b/g/n country=no_country_set datapath=xs-DataPath mode=\ + ap name=xs-2G rx-chains=0,1,2,3 security=xs-Sec ssid=vados tx-chains=\ + 0,1,2,3 +add channel.band=5ghz-a/n/ac country=no_country_set datapath=xs-DataPath \ + installation=any mode=ap name=xs-5G rx-chains=0,1,2,3 security=xs-Sec \ + ssid=vados5g tx-chains=0,1,2,3 +add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ + XX .frequency=2422,2442,2462 .reselect-interval=20m country=belarus \ + datapath=DataPath datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes hw-protection-mode=rts-cts installation=any name=2G \ + rx-chains=0,1,2,3 security=WPA2 ssid=vados tx-chains=0,1,2,3 +add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ + XXXX .frequency=5180,5200,5220,5240,5260 .reselect-interval=20m \ + .skip-dfs-channels=yes country=belarus datapath=DataPath \ + datapath.client-to-client-forwarding=yes .local-forwarding=yes \ + hw-protection-mode=rts-cts installation=any name=5G security=WPA2 ssid=\ + vados5g +/caps-man datapath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + xs-DataPath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + DataPath +/caps-man manager +set ca-certificate=CAPsMAN-CA-51B25E507D07 certificate=CAPsMAN-51B25E507D07 \ + enabled=yes require-peer-certificate=yes +/caps-man manager interface +set [ find default=yes ] forbid=yes +add disabled=no interface=Bridge-LAN +/caps-man provisioning +add action=create-dynamic-enabled hw-supported-modes=g,gn,b \ + master-configuration=2G name-format=prefix-identity name-prefix=2G +add action=create-dynamic-enabled hw-supported-modes=an,ac,a \ + master-configuration=5G name-format=prefix-identity name-prefix=5G +add action=create-dynamic-enabled disabled=yes hw-supported-modes=ac,an,a \ + master-configuration=2G name-format=prefix-identity name-prefix=5ghz-ac +add action=create-dynamic-enabled disabled=yes hw-supported-modes=an \ + master-configuration=5G name-format=prefix-identity name-prefix=5ghz-an +/certificate settings +set crl-store=system +/container config +set layer-dir=/sata1/docker/layers memory-high=200.0MiB memory-max=4096.0MiB \ + registry-url=https://registry-1.docker.io tmpdir=/sata1/tmp username=\ + amsternl +/container envs +add key=AWG_CONFIG list=wg2awg-env value=/etc/wg2awg/wg2awg.conf +add key=AWG_LISTEN list=wg2awg-env value=:44044 +add key=AWG_MODE list=wg2awg-env value=client +add key=AWG_REMOTE list=wg2awg-env value=109.107.177.79 +/container mounts +add dst=/etc/wg2awg/wg2awg.conf list=wg2awg-env mode=ro src=\ + /sata1/mounts/wg2awg/wg2awg.conf +/ip smb +set enabled=no +/interface bridge port +add bridge=Bridge-LAN interface=*136 +add bridge=Bridge-LAN interface=ether1 +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN wan-interface-list=WAN +/interface list member +add interface=ether1 list=WAN +add interface=Bridge-LAN list=LAN +/interface wifi cap +set discovery-interfaces=*DF +/interface wifi capsman +set package-path=/tmpfs/capsman-packages upgrade-policy=none +/interface wireguard peers +add allowed-address=0.0.0.0/0 client-allowed-address=::/0 comment=\ + "Peer for MikroMaster connection" endpoint-address=10.30.30.81 \ + endpoint-port=33033 interface=MASTER name=MASTER persistent-keepalive=10s \ + public-key="zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4=" +/ip address +add address=10.30.30.10/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.10.0.2 interface=MASTER network=10.10.0.0 +/ip dhcp-client +add disabled=yes interface=ether1 name=client1 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set disabled=yes interface=*3 lease-script=\ + lease-script lease-time=10m name=nucDHCP server-address=10.30.30.10 +/ip dns +set allow-remote-requests=yes doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=10.30.30.33,109.107.177.79 \ + verify-doh-cert=yes +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip route +add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ + 10.30.30.81 routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set reverse-proxy disabled=yes +set ssh port=2222 +set www-ssl port=4443 +set api-ssl disabled=yes +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \ + webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=*3 type=external +add interface=*B5 type=internal +/ipv6 firewall address-list +add address=2400:cb00::/32 list=CLOUDFLARE-IP-Address +add address=2606:4700::/32 list=CLOUDFLARE-IP-Address +add address=2803:f800::/32 list=CLOUDFLARE-IP-Address +add address=2405:b500::/32 list=CLOUDFLARE-IP-Address +add address=2405:8100::/32 list=CLOUDFLARE-IP-Address +add address=2a06:98c0::/29 list=CLOUDFLARE-IP-Address +add address=2c0f:f248::/32 list=CLOUDFLARE-IP-Address +/special-login +add port=serial0 +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system gps +set set-system-time=yes +/system identity +set name=MikroNUC +/system note +set show-at-login=no +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes +/system ntp client servers +add address=10.30.30.81 +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +/system scheduler +add comment="Every Day Set Global Environment Variables" disabled=yes name=\ + AM-SetGlobalEnv on-event=\ + "/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" disabled=yes interval=1d \ + name=AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Fake Bridges" disabled=yes interval=1d name=\ + mod/AM-IPbridge on-event="/system/script/run mod/AM-IPbridge;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Telegram Chat Bot" disabled=yes interval=30s name=mod/AM-TG-Bot \ + on-event="/system/script/run mod/AM-TG-Bot;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment=\ + "Every 7 Day Check For Update and Backup send notification to EMail." \ + disabled=yes interval=1w name=AM-Backup-UpdateEmail on-event=\ + "/system/script { run AM-Backup-UpdateEmail; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-06-25 start-time=03:41:27 +/tool e-mail +set certificate-verification=no from=MikroNUC port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/user aaa +set accounting=no diff --git a/MikroNUC/history/20260710/20260710112001-Diff-Config.rsc b/MikroNUC/history/20260710/20260710112001-Diff-Config.rsc new file mode 100644 index 0000000..9c68ef9 --- /dev/null +++ b/MikroNUC/history/20260710/20260710112001-Diff-Config.rsc @@ -0,0 +1,3 @@ +5476,5477d5475 +< /system gps +< set set-system-time=yes -- 2.52.0