From ccfce8097b16c0dcabe417e516a9d404d96d9ee2 Mon Sep 17 00:00:00 2001 From: vados-dev Date: Thu, 14 May 2026 13:40:12 +0300 Subject: [PATCH] Backup for MikroMaster created successfully at May 14 13:40:12. --- .../20260514/20260514134002-Binary.backup | Bin 0 -> 119317 bytes .../20260514/20260514134002-Config.rsc | 1246 +++++++++++++++++ .../20260514/20260514134002-Diff-Config.rsc | 7 + 3 files changed, 1253 insertions(+) create mode 100644 MikroMaster/20260514/20260514134002-Binary.backup create mode 100644 MikroMaster/20260514/20260514134002-Config.rsc create mode 100644 MikroMaster/history/20260514/20260514134002-Diff-Config.rsc diff --git a/MikroMaster/20260514/20260514134002-Binary.backup b/MikroMaster/20260514/20260514134002-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..fda8cbcd49c9d3c93bc2d50e4b5559454013d3e7 GIT binary patch literal 119317 zcmeFa34BvU*FS!4lBT&`XxaCYvV*iu(uJ}Jlu{O@r9c4@5Yi-V18EYHlok|OL>BiA zQ4s|dP&tKv5nV}z7A?_}Ag|D(BQg+?Mj#SmsaA-iS`w&Mq!_9- z1cSk#NVTbyOtq=HN~_adpOH{&0MZz|)=(;<&r=m}y2~@FO3S?&wzBdBxvazFjBy`E zg_cA)i-!0X`3NnH-BJ@u%e`rCN1)o{o8m`av35t9waOJ}O|@N`N?)-r_`lVYi|q6U z(#o8!fWtRlAZkNI@5-4PiRc9xP9>suWVkK&ydC#Gn0>SSP6r}-RE9ee(P|m)L`1jA zaAzW_mf`77>-ma5fRmmf;*C>Mg_FIXIVy`pVCH5RqSodlJzM8RlEhute~-(9()( zmlN5D7HU{N$ZLy0!dFCepFqNk@g%GeNcbR@s0k50CXld4YF}iaTKbSk*esB6kccJ_ z8FoKOD3c*BB?aZdJs3|U*6&Ot#>^oS4QMKDigaXXK%_y#GmaxlO&aWRJEnU*0pnn+ zZHmL!i6}M3>GoCy&}ti$x;(Zi#tP+~0YxLn5~aqM_^SK?hdpgT(a0D6=cN%MOGCGJ zsJK=4PX831?8uIQPK$qkp(Ch@0N&4DqOY^*L=>kTU!3-r zFHU4fC@LvdwWy+!;+sP)ifbnnN3}v5BH=ZGgr$PisnLo%qfgdDpKOo5*a7`6w#?(J zw)*U-{M3O~f1t!?wM{XWd3;8<$DKC1xX5VpxZMt0!0B=OQ;AZOM;8}OEb>eYz5Hm1 z2uZf^EZrx|5|F1f;cf9Gd_+Xg%CcmbEFVB38(catDFPBZf<(QiDj>^-c6m0N!y7P; zsB$?NjfzkxDk(OOboel2U&{-NqLSj(mmp8+WwNMK$YdN;dK<*uMa3MWw<9XHp)BD# zsij$Gt3)vfw7HxPcffD-xQ#B4&FV5*eGaQp9zbu4Aai3Tv43co5E3nj=x%`oNMdjk zl?)PjPKG$xiE&UvBIhl{AF+S`6fK?A zv~=NUiOAL&$~Lk!@0VNiGj+D+F4sT+>Ilk@*cJHsR^7nvD6@IoWj&2$R(~LX<~=c# zk*>OD zP-+BX{gXAOD;Qdoq#MVn$`DG9HEgtI^voeLfE4uYZumAWObvQ=T8Ia7%{%-7YpKiW zuW;DA`5Z25z+vxJ7HhFIqjoD80+Fe zh^6T$y8x^iYOIYySY`T$g&c7{mI&nxy9<`s1r9Ll;b$pLABT%i=<9x9&+S(}lyEYrdb@zrp13%_rk z2a$NQ!W0X>W-Wwbvep!b@;YBzReAP+c%W&2eE2Nhj{?^ws(l8$I7$v=JV1J|4ZudF-e&f&~BTI}uja@K67|N_R zN2$j%Wkz&a_Ee_8k-4VTnd{hLqe@2gFQ_x?*s-3flB!ZiKZ&ihy31XTc|_C{ z!-hNo!*qU;45MKwFotnuvf7e^TM^L$`Tf>J^a#uhM3h2A_sh>QNnR$ym?YmS!~A4# zxdAjNlRZc$2**7{^d>izLp>>q!!KH55{sY4L2lwV`m=J&#OfAude$ig2Z(WdoGvwdA zj{IW>R@tVExVi`}M}eU=>xw*M23?$xI*7P{DHjmY97MFJg9vem+aIu&`>d59Bm65w zNLX)=7(eRb#^niV0YX~VK}c*#wKEWK_!u{2_+LdtOAyhjE+XV!#E6jL5D^P5);9h* zPP76Mt?M8nBt<|)=tqc*N3=?pfyyRXNr>zW-V#r=HJ<3jc%p6bMBC#f`v@8`x;8o% zx;45mx-RTk=&J7#v2OYS5xq}D`-#xbATXKQ2W|3WBKm}gJ|&_M26%}FrSh*s}IzvzL>EO7pNbRXn`zi zokt`#?oVXsCJ^NliCVOxlmYm@fJoE~!gqs_3_)@glB zjHV(LBN;9~F2RpcNJb+WgX9_{lZeEi6VMw1iS(vGVsI*c`jAv3sR0$!0nI>iJ(3%c z%w))e!CCmB$Y$u~1oebMsw2(E&xI&Iv=zdvP%;%I07^tsADJ`&=a`VYf=IM?lkpdV z^+S;qAxR-hg;_S03X!x$l0;@{Fp(@LR9gZqcW@^XE3u3nphifp5Zgr z!H@Jpt8a=i!qfu2$Wdc+RoNYq;ux~GfHU#bzph$8DglezI5s1{Dn#OZ30Jk*&)d|zW<#LOG8dW93P@}Gs zVQ^WopF`emm7hb6QdA_!;LY-L$l`ls7;4lG8HQ|LBg4GvbT|eyDC59|c5=`dFBxc+qYFk<{mt~%uY`lnVod{(=|I6!h1g(s`f3K$K|R;75|`Rx^OBJA3w@Jj%djM^A5xb?jW@Z zn9)L!B%v81)6cjXZ)B~6eL8)b)$Z}9`>HAe0k5C+8%rMhOIYejgbycT|1M^w`m2PC z!_h8>he&RD0m)38<4D%Jy_K6I*jY@({{3xK6@#kc5LK-%po*z?996~$Mj8jgQseLi zO5tHDDJi}uf@E}L`~%4_^MP^r4FSW?O#VtM5SxJPCLyw0UqE&W*W-6YPy|<;;*L`& z`c|eARILnKhm<)Jp=~PeI5xVYffin4(4v9XM+3zVMei|8Dq&tj!#sIhVy!dSov!IjSH614fRStd)x@*jb$R01pbFxd!<*x7h|v@tctM7deYx~0f#lz1I1zXG9T+q=$8jq}I>M?U`HF zGuzrT*U{5#?P;@!bv`wa(0Puo(6Y%u3*j~=Xu7P-xP$SygXy?~fw&{m19vbHcQ6ol zFb{Vy4tFpOcQg&$ljS>L{A(cJ5p03qXj-^8mhX@`_zi^zcPKl!qsQZp@ep??IJiT( z!5xYX?oeuQheCsUqDad%q$gX2)#*0LcXNUWhd(aVb$p%g#Hrp%F(Aw&Rt{UCGqDN+ zTusRtvC<9g%EEAhAwk~}027|4(mBzn+51_85lJbW0* zG6NZAClEb?ACDqgj$|E>tT&M8-2iAKo;{7^T?2{2dw}*Ld0!%%J}{6N+=nOo4J2wm zMDme=#MlE!4&o1=Ao&!@Ataw6`P@JTm?jR(_b>7AE9CgKfy7zp$%kTy93&X}>50C< zpUX)w{AwWj7C(N#yFVg1f}ckXB&Hk#bR5agNWMezJ(3ehenIjplHZX0j^regQ%FuD zIfLXZlJf>K?E12tYVm_a5(O=ot`ntN)r;t=IaD8iX@I{pMAAqk(b5!9bCE<%3-$>F z&fq(*y`#m;29Z*8Dy_DjrkZS%DZ^BgW9nw~R!r|{s>#gE%<5*eX7@DJn7SFQ7U}MA zczvEqz>P&prJoFxN)H(*H6bfEcVKp2Zh<*3-|`He?u(_=7^cU)YzRp;Cg7y3_i_SG zdpQATsZ+q2>lAQi2srQmDFG*h1RMmLG<-p*g`Y#1NzaoQ1h}3^3$;wpL)hcrzd^{w zhlE`3Mv{;dR6_1wBia;^22rN{-zv%kh%({-C!%cQ3eP1(nfS+Fl4CE4BBjQfOg&Ae zbQ5HnNs?)hXd!_HDfUlDGjm9q#WHD@U0$a=dnro@D{MN*Gl3~=ZS_#t41WfL!H~|D z=m=Ced}d>sag^H;NG2gwYcginCE`kLb&0rA8&u5Ag_Z;zEtC{v^k*nE=*7QlNr0jZ z1@t#931_qzLy-J|>M&%FX+LD3eQoReMlho6)WiHh{wKUbmC7TIc`tnj@>2@7avMicv zWifS05fy|~(dtNy3k$3I5HgX%ipeP^qEwUX3*}TJ9f>uKfr1GuCi&QGhzT$zyJB>d zsw?+8Jz*iXJIvGFFL1n!11}RG=`-dEY-%1h1;q9DIql_+w4r%LP)TnT6f?S(NI+b} zEpog9g7EK@<0KqJLIsh40Q|{PkiFoM1LI+bgHXo=5<%@ViG&;F;CKzD>az)QpSkQ} zh{PlVk=V!%M@~7ypp!9gXozQ1;M;QHryJkRA%ceuA&sKOk0bzZR~3=rE(g&xBE!Qr zwm`tJ-$Zb~8Gg_bO(!yBC&&W@oNyXA;RFQUVbXdNyoU4SABd=$4X;~FS=cd_3`f~Q zqSS`%I}a%;DHt&@FTbEm&-R^14;j#95m9PF`_BDG3>h$}pfE4L%k39=@s7wB=OPDb zmJzPDm&-ZxO+2bC71fr|4>kc*XLpm7U|?qVm2&@&l5iNZuqetcf8w zyV?CuJUmEb*p&U&+K-9YQkPGO#FRt$%jZO5@589E^F&?Z3N6N9EqnDxRLfULK0K`|SS3|M_G1SDCEh0ZBH&&c9Z;(A2lCCV(ZcAD3XBJa3Nkp;w>fz3*h`Qo8{ zg9QR(0V`;j4}4KIbriKpp`~N6HZ^IQ*PZT{OOx)ax@fV#!1|1cm%$2y!ir5?o!3M8 z2i9d795V>TzDbb+=*di|F(YA&bp+3W#Nm8}9;aSi0|1F6vB zCK9H~OMAdONXRKzvV~^gfN3q3s0=?K>>xBn!HZ-vLY>T(%q-CFa@hUKLL}H2aiMGq z3_2AU%CrLGTLlJVV1LAQ2YZfHZM7mkNCk#eoy%c2Hc@Pu}1YcQ+cdaJr{`kTgtd&LXQnqeupp3<*j1np^N~pjnp#r06 zDC_(XT2stw6y^kc5zAs`U>DUwrX+-Z>JS93tdWZ$GOP>+gBXxlV7=3|OzJ3m=>UYJ3_sK7C#I^uWg)Mv?Tvv7pAMRpX1T3tueo>FS~nwskc= zof@B^E_`eOSxguomQq5^2`!wodfiHowaaymyIt;y@kBxrVaOu^S^~%rVb>QmOhEv- z=$)9r5}X=jMop(mtvdmsVorC!;d48flU}uu5&2^6rqdh9N%L8&@jDtvlHv`*0!W{= zIv_}fd}S3MjQR8Bq9DjKAj4P*>5^frgj6CSuo6;ACssl#`C=ucLMK*2mdWo& zu7s?RpJOGYQjKtjj+38bC8S%1u@X|@30yh~eyoJ_$?sq#r1E|*ZnY<>2aXb4-^F9) zq%uIk<-)J{K%5?&tMKQtIB4c6Wg!hLA}AvCrSSkPc8FNk=!YLNa;@Y1P?irzEapLF zPe3a~o~&cGfn%1fm<+`=)Db<@)KL@gS^eqdj)2!%?(lmZ4tu)IQ;Eo|i~TL|7pOqU zkF?V9QdHD)Io(w?>GrBAj&z5;3YkYda)t6lkRb18N5DDHaMmr=D;Mi1w-PK?*858PuSakGwgVZ-kV+*e!%w^&~8tq1_^=t#5| z=}%VxZMVyyH85VJmpU#W_99rN6>XQnDozi`4Q@h|#7fK8E`v5n;_o!4-QfWzqHTKV z;6%n{kjIz%1J;1k2E@_!L}~fjWe_)(sD_$s^SA>JH><^HrJ}S^hrHNl8oVB(U!u3Trw}0i@uWeNpvL{tcWbdMOvk_qV00{ z0rJ0^_30BOAQRxl|rN zo1o;6_UeujwX|mKa%@Vpc`ChWE{8i{l`CBRrxf~O%UT3sc5EYh>GA3Cv%zG4}{$I1)p263d=W2_#xh13Dv+0n5dhUFIyF{DI`0Kw{jVf@DNJ zFW+kg5@!dIjMb26*`bk|(M}B+md_Vxmxc@r8xp;wkv>bs>ebFfZMD+h+i9i0!AjBfD%Vc96KOhYB}yB^XtV(F1PhU%C0Z5%x>ZJa8-Co5JWXaX6>diWTVY_2vcI3X z+W$P}>i#_qHo4mAbHGogFn7}5-g0&SdCb-RdzjnMKizGs@Oj*xst|w2|Ly#Z`Oo9; zzp3#iRd@n^uO}oJO8*Yt3fxF$z}Whq$KIHKPxEcywM|W{^13`$yCNOze+P#(JcpsN z{Ga7;BXHR6sdn=`w*4JE=Jhca*7={u6so2G|XheBoPG=)vN@=`tQH090U@ zlN3KV%t{Ij^OE9!NAQi}`^KU`to+6WFSW8$Fct?Y&k>-b@Cu6r6&MQz6?$N*Qu0EK zfwI#v?-M^C2c9TqX+#z%VN5XcVAB)?x5TBSq_PP*>@sY(K1~N0RoWvFU?=u@{Gny- zEaoY^qu?cwP6Sd-2&q<$RAfj}8+eRDE|kcyE=%fq`Qu);@=R16`Fi$Lo21^!t|<3dQ|Bar$W5ycO? z3){)tuOXbTuHFJ7i*{n zgN_BZC5AB9Q)7;^yZz~s3ljBJe-QIgr`g?p4Vc^FvmSG`akNq;R5b5z|q z1u`colt;2UkEBYc%f)Tc!MbzdkfB2hMnoll82024_WEk(RYxTu7|Qw~ zlnvA<^%B7h-So@05RAAee}fRZhH7*z{SI4|&l#AW&YYNKF6h3fTbrj6c{I+4Z*!pZ z*i#`_ZWI~gqFS+GDC0(dL&oN?|CwvK0^iw0Q52DJqfo|;)fp$EbW^LW_8xGbqKwJ; z_!Vxub?2h$(u=)bFLG%d%B9I)&BYQ961iAe#_it0_N;0W%B86~mw30|oL=R21k$Tn zG`j&S@UVS;*elH8R+S(wC1p5D&@_a*nHqN-3x^+#t!uy}!%*yJUE~N1zigw6OG#k? zbt)oF}^AN%oYJ~9&;aG>u<*8;kqatz?aJC5HY^la6 z5n1Szl#%Gwo0cJjt<(s`(Rl-gjZ9OD9Tmn>kk~4Ov2~po|B`fR1dOdi7*o_3_2pKd zwVa7`ioUOyRMQF-ySg00GsA0>(@P!OsRgl2}Z_SQs?hS^=@p%+-pC3|le9 zmQ=Ax8%Sr)S4}h7>kQW`W*8!-79!>mA{?orrad6$;vlWkU4H?>%f6G?47HXHB9(sWDiO?wI5%n`}WG!;S{K9SV-k#^gnH@_x2jwv{aea*e#WM_Qzn z3h|xFnt`Fr>8peVAH~7q9e=emV5>;O`5;bq`WdeCES2u(snF6)kGK{cOA(xcZO+iB zF*JefWIYKht`t?#Ns^ojM ze4j4gZ@`-~k<3T30LelmFsABn0mR0YMS$26r_W;KB~BP*MWG&&0eWdzFVK@Htir3S zk*q_q9?1qI86FOF~Zewp>rxQnwJ7YH&S5eMhc9!roh;B zdJq*_8nVt@j|A4VVIhU8!YL?h%@@<8mvHbjlOP+5Ns4d(N8QIoAg!=&UTSd6-2OX3(?;^mf*X7g5|)@=?S z6CDs2vrxsd2>(_NpMxV-SwLCY4DS?L?qFMyx1ju@E9LW3((?1tvd#T1*#+6A?gLES z=MgXwLJVo=3Q1&|E5vE$3Ic5zQG89e=a0N_>q*l!_jX#4I%ux`wvWDFrAuC$ zx_Qalrx#4WYFOh_Kh@7V(6CFp?lGO4WVT&-IIjMm-qpQ7G$lO!KymuWqs?3WHo5iV z6-W2nyywNu*J<{ZO||zKka6pxL~Bg@RWZTw^*X$^a>cn_gWt^=dC#P`J~Q93F#oNIx>hs#&VHinH{ac{ zVgI;}^9SGc%;}pyIo;^vqvxmOzq{;*UFWV_>fLBD{!Z%-k+wl66mHqBXIW_t2r?0#DkM%Q38n>SmtHEw+ zkM}qAGbQP@qgpoE#bKw&$uj5r$rC!n6~Tdt6sl;-K{4w=Dz1PtjN)8*3L>1HoS1=nw5u^ zwOhAa7i@d-vVp4)qGzpZrsvGecu-+s97E1P~?H)ipY4Yp_M`6pie z)V)3K+qKK~!00)ib6r+9I{s7rwS)cVCv-HNeqiL+9ddFu2rrK_A4t0SgI6<8e%kx+ z;q9GkHf%cGGWVOB#24N_QFiq`8)j~c@7H6_Bj;zTclwDquNnrmwFF*Wh_~93hrOOY$$@zK3Y2m#y`{ySSnO5l@ z9rmDR-Hi_grtCMxxOzCM+c)1nT3oW^jhoNiY;^B^`Q<}dC0&jmq@LzSuUXu=*~Fi2 zOd5Gz=i&}yAH6?+{}=Bx9P{Dwhvwd}Z`av^_{Xc-{JL!PV@s32v(3J-d5fGzpS?Of zZ*s@qi(Z&{YGCZ$_r`7dw%gPB>#m*g`0-v(t$!s$(`jS*7hg4)9rx+>_sdo`YdRz~ z$9-tSkk@Yi;n$W+hPUeV(tWE6JG{U2$?>b6In;aG@B3O@GcwMeVCrRGM{};SxAY{Q zn^HcX8r(hkH!)-6i#6`g_T>z|@l-G8+7#<|!+$c2H$OY$&OOP0{!p$f-tW1+bk5d< zwcqv_``ei_hT&hmz5mnA#rl3X-TcWLKcuaTf4}i~_n-$}Ju~X`z4!llOWvF&g{!ne z>F1tee~EMIj9<&|U3J|{g|pg}e^BY%I(FHH)+3)OeeU6RQ?@?&W!Le)bawPRQtwgQ z*cPo9zS!%Ff9%027Z|60* z>+!dX7tDENSbX}EH(7d>c6;W^E#H0lk0;JvS$}4ySMPp)T=JRyB@J?4{G);H?vT922@flC=3_LOYiMMN(4==p)jmNL^Cinj?b>gDD zJ9_jS(buILJ!JC-cYQf$*OZ56j%ls8?3!6w_EQII@rsgNv#)xv-YZ+OrUxtY))^j1 zdjG`7;?gT0xw+RLcP?rCsrBAQZHAtkTBdcTjr{KFU2gv~w^?@F@YI`g*PL4(xMzmj z+q%`h+=Isb1D^VA(o+lCUA5%!4MQ4i-F9~Ll8n(aduAWL?Wiqd(fLQ`JstDxH)}un z&ONPm|ED`%`t5hMW^!m=_yYDvV zzx!eGx8o1Lv1-w@#G|jQA4-$@*jEpJulTm>%J%=ccKi!Z?m6PG_v9zrpPW;2==GGT z-QJtK{h`wD+jvKg>afq3Jh5;5xX0R0ZPtDDF)qd- zuJ^;D<~wtLKd&iqe{jBPY4J0U{W0p)%I8+R?upqt?ct)ccda@4%)VCdJ=Xlk?QLEj z-8b;#tz9yM>B?*?Q+#Ovezdvis`O=iH zKR9)C{WH~_b~L>uIcDLv6Mnz`yH)SR+?rc3PJbwQP|bT;!mp=VZhQ9nq(k2XYoFhG za?in-xxajLVCOs8!mO+jJJa4xdGY7j?TniYH$1;{OXH@)Z~I}`N9PAkEeT$ItUUHe zhm30{eE#~KjmLM%dT{ZLUCwqJHFoZmcT5%f?rSf&?%JQbxSC3fx%H!KsJ~{jPQSTX=E%WsnS@v7s39B~#P_%Nx zE9D)V&Dn4w>+zrSw@=;hho5{k=8l%xMc8x2)ELu)`lh+US$TTUTfd_G>#nt(BDBY- zRQt{fj0*(kW#^(B+ zhL1W<+x33OF3Yc4`py31HzsD+{`T=}y%yYX=F8mgCePh-^Xg&k`*$&3f28I5;+f3@ zPt04r;i=rsuRoVP>yUZ%AGHfoPV^l3M%PgfJm0`&*|qSOXEP==$a%$?(IL3yhcjQD z`0|B=y&R7=I&jxhj@jF`T%CC3iaT<~jlA)zoFBJ!8nv-x;HO9X9~|&b!i0owN6K?P z$arO9ev`TSAI`3Cc2H0Czwz}>>U?FJoCTflZu*qHf66yiS3Wy$^3QGOZ$33^_}oET zbB}%9m(@gv6*1+9l zMS~H4ZW~jyqVa8Stl4&JzxxJ1J0f#J`+kl)(zm>l-R!G^4%>I1x$;!6tzUh0?Q7qp z9=)nE>DfO#^Xm&s9UnHo=6v%tJD+~7{QYt3yEZ=7F6Q)PcmC+shQ8a~iyLnHbWL#m zf~!6t+g)q&hFw=P;rYA{OM46+|H#fI=f9b@IY0N$dXLUt_UMPTgMaCwX>{cci}viS z`QgTOJNqVXD4YHE*LN0e-|}^qCv)h&rt$lBwVP+#a3p4aVcY|6{`%wZfBfUbOyd*N z4-|g?S<}XrLAmBn4}JOL@m9MYtw=g_VAD_i?-#E-kyzgq?2?h*?1ra5-~MxV&5)Iy zT8^6i{eq-HqkLODsrP)aa^Sa_rI(r~{I|>ex67z)C;#m--)5HH`CrZVznbrVHQ)bg zzW)m}UuM_H&dRcvnXt)TwDPTSunNlw&pLba!N0tYr>Mci1{E(1x)o zAWrRxg?rFmVe@9#Tuz5OFwx@;I6ZDZT%ErMgF(gXbTSwWB0>k(DYjR=biKm7RD~8e zcH!#~sMdh*;8wX3+Xgf+)s&UB@0>q$NI_A_!~vs*4CulfukbA-N_jf%6YW(_dtL+@ zWEnzJ-&A8VhtOcR-w+mqf~8jk0?-Kr37{jsedoc$aC~@S0rzQz2Zsq(I^ZZ}T)=jw zSYA<8>UIR++lABSF}bjO*gp zVkbz0TiW2%fIU1IJ&4EA`5abzc3s~fD#&nL{st$XhQ5iZ_BjI%IMC%*70!rlq){7` z!=^%C=*p^Gt{mwDMlo~hGT$e1Ib@S|-e~(U{G+wff(w1A)i$Nd3xBlN>&=j(#T0k` zyWoxN*8fO`pU@J$D->E9Gt<80e{IV`q7sP&tP{bBVc1I&`zT_+MV!c4Ew5w2hTJ%r z7aMyoln*!OH~79?-Yizx==*N@Bu;F7f}Yo34xhk@nFyl7<|epzm+w8n!QM#v$U8aX z&|Wmze)2jL<~wIzVI`_cl!CNaJX=#4j}o@lT>g#lH32(^AhQ(wXe0kUS)tFnQz9?s#m`KGgB z<3FQTA+oTG8^$nn-4${(fr!I)%(x)plyh!z-u4PAv?Mc+I<_QgCGRZG#0U$kz{Wd} zJ6N5k=|W`K-AQiWiu{wpm>NovLPnW4M$nN;WKJzu@r*Dxc1-p52OfTWOT#2C>V-;Zc}5d_DZMwj=BhxXFyt(np`9^Wz!+$n@a8gD3j--#L?)zZy^>2N@$*Y&BX&UoYLGyE) zTmJssgLB_H@XlUF4GUkx>7W;|D}owG-MZNYDJ}as4QXLRk<`leU+tO*{e-HB~p&B?)yFK%qTc;O<~pFjWff=&Als1eyZpNXZ`DHzyX zo^q#KsdXhb3bn4lsC5O#dx))qG&`R2wo`!@KZH0d>G_L$V-gI7G;>BMP>w)_tmTUn^zK?rW*g z(v%G?aYRpQsDXsefD0S<;|f31>7-{m1S+zXsBB9r1B*>EEES|JsjzwxN(iKH0!iBp zVaq8T4v!cqI|9cVp^_URlGomdr2TyhT4{%P-JN6@`gKaxp3~EQ|EJK!%hP z^6p7&i!8R%_KZL{UXDbZA)BhL$SdwA6j~ZlaG{2-)sSJXhV3EtB%%pf{jlPMVV%yc zVa#I7dZ%fKYBZ7nNs+>G*dE2GRP1+#;|lB=cH}XdiQ%4_e(x*9V~?+3FnES51PV10 z43A4msb!_OUPB_y(U7RUSwrlIG;HLgnV^vlg}e@bo~R+wi@}+0!Qbw{v)cf%Vlsvy zI`y8Ke*0!Wk;N_AUG_-Ma{35YaBJJzz9%OV0@;)(1xFq--lMLM5;rrQCda= z9p0CM9VYRJ*{pXs?d(c7C#=>8v1!1u-LZ`4R8S2O&hyP;`I6%arMdO%y z#P(B%A}+Nnw4FG#d2Dqjg(VuW0bm@{klNxIs{t?~4lJLIKz{?%KL18y*^cG^46!1J zjlU$Zv41zQY+=PeLo7RNS-d2%QZ(=1$k~6I*m!U@`I5xy8E2pR7qnRf`9|AblR;?x zOA;zYW@CYZJU#u}I@ezzw7xRSy(Fzt_&J0R%4L8QK^U&xG0o-lv#ERoA`Lc~#D#4k z6&O*|X{yk17O2jI1?(C44(1B&m^^9G>7`x=Mp4+B1g9v05v zf1UwbD+=1N;*I-f`Mlz3e+W`(9$+oD<-xH){2OG?vhk!=@6_Hn?Y&X{p2Na zfYkp14y;Wupomf6h`Cf*z?vva#oDp>-BNquUa(`_H;U3v7*&x{SV!d=y0< z>lL+Zy&}{W4Hh3^u~i*ha4+BJNw&%D_ad;JmA2q z^UTW{ocd#gedCd@R&}2Fy62WI*Dl<3)0NGVeyRWE+IPPCqf?LacCx|SZC~3tvOv4*?oB0) zUhP)=NXnx(_|KkBj=Q?eV_%IM|M)k(f=!#eTK>eSBMEz-SlZ*GV+Y5*&}mUz3yYu0ugoUJ)K|1~WA4UP>R-c0U0tLGPSFN~RV$9K)PcN^31(}qykGAZ(V$8uFGs~v5Isf~qMlr|MzxDi> z@j}hsX{R5#ZtO36O>@q4dt#N?LvOkN&0F_2b?nW%|B#^~DJ{YD&=Xr85;Z?vRXO(H ztcmU;Kit^j!}*=>9Ny|5e|)hj^G3^_hv!XsSZHLtXF=+3nWyjhysX{2yW4afHM0EG zmDf3{ZW=#s!45L)_+W`^{F*=OTRyOV`QoR( z{jtsJHbrAs4Bb^c^~V(xifaw2g|H{PqtD9_oDrb56;rs77bmH)V!K;r4Ec-W&T|ediJBwd^;iY??9OX}) z{nqghT0T7Ht8*~gwtxK4M_27H%N%6TOx~3>FXqP2PmSy0u-=|~tKs!)?yEU%T)fyH zTz)|BZ89qE<(t3k@X4(OMY?xWkGuEo81e1H>y`{IJaBT`st%2Zm#u!V_pGXoue7~) z(AWDG%$Yd7=%qC?7T#I=xz*>1{_QT-Rbx1`rglM7a!eCWLgj?H|!wX?;FpKE*H-{qTJEQy|-TR3y)@=0gD z{$b<&#ZSggHFwY~eqrnUZe6#EU)<8|n@%f#9XGM(y5`4j*?DNk$;$Z8`*n%67A|Vq zV#BsKp1*m-!u4@8cl`Q~xa+ojW!kvy_&2>LUUhVkcHQHTlx=Q#B)4IU@;8<~GGPAZ zr{8e?{&SCO2lqBN{r28dL+=`&G2x0U-hFb1snwYMib^-ti7dHZ{RLBL^%r|NwvLx$F(P8Mv^~vVS(*m3D)d>@xl&iCa|KpZdN`0| zHCkAaB<HIL#tbio}d}c~T_+@4$LFvM@_$#bFw#xvB z86r1E+=o!1WqUmIi)}0gA@XutVQW0mi}BKeSmYxSwI!ZX<1(aG?cS?P;K824iJ;et5|sJ0Ov* z0%evlMi%B2=t1Hhm~O!K46D_um@gG4A@1-W5W z_`7!=_4dzu=}k;dBx`wEMKz9GM46P+(eOQ%E#pE5&X-|y;3^qL2R2RsHb>ynY_l-7{T+B3f<+cfR%M>d z!tCtsIWh}P-E++f3(YDPHpq}4sZ>7T;0 z&|D?6P-)r8EW7}b130Kp;hwZUp64EuFjrw&Wl#2hdYx@=cz#}w+}!TQT$3f;Y_{5r zW8_`RjYWs_@G^OLmDOeQR8|`E0u>IQ#}Ait1Eo+n@X6=FzGWd^C-AH~5NfwMO!8-# zdb0o0HF)PdomUsrC&D`$E;L z1Eb%*)F=V}MM(Cr%IPN8`sL)0(P%U>UjC&I(70RiA^>PEUyxXtD2#?y8)w&mr5zXU zIAs~56^2r%0vP<*enzn7;RoC8f$24l0Cqf!++hMIo#Mj13l-w@US?*5L8AudJ=h$9 z4E9f$2Jstu3m03a=q+E%xN!eks)2Gx8yeg!&(dxqq6dkD zhlpq?5j`xQ0FD_Mw0xXKok?UEP@fP=#fsA#TOi2$HR8x9_Qyd)hV2PVQ)ho%K_oW0 zT7EcO{$iYb-w77speOVZC5)!E{5u6|rG_~VBX+H7C%@5NzSqe2nLu~F{G+pMCcQ!a z%}!R@&BZ!nLbR=%})pAw^b`HZT{P77Sk0W_3 z6j`zyYMt5AJ>8UUN;hAJKTg0O*}P~xewHG!hMtYU&!I%At({Zd=@yg8lxDJEd&_ib z*H!0~o*-#3UMob>4@qAnefXWtuEdibz~jCY9v0ix9q+O@u53U!%n#vZsSrr1@PfjN zz%DqVyQHUMOmo^C{tU0n8YuJlDl?eong+Er-2_$LoMBEg!*|UX2-h_OSkuOI!s+#T zJT9f5;&^9VxOXMV?#g03N5VJHdKU8zv(Mvz43ZBLwbE(}I9wMc{zAp1=f*R?;Ss0q2yFh5eyp=?g~=9#&X@`6d(laxkq=iYd+k3BLt{ z!2-GDxEF9yo-pR)@0fEA1HOiAQgV^7-#9s7xzcLGWY_8SJ8T)19=k&x0#T^Q`6&bi zq!tDX$?(GV)I)W#faC<9V=A)-;N${Koh7VZhr>6~>+^U$ek*GbF!C!iRopS#luQj$ z$N-be2%cdxZOG*s*ok5kj)sE?&~TV<4?)V(er&paXw9{uP)TGKrUOhw^aGfT3-?BB zbeAFm6<;Yv9r-Jd%W0cFkwyLDYlvrTcZdu3<}&dhg}E-37)`v)qkzE$UOUAp$CGgl zNsc5Xat?EUDIN?#hZ>Ae(zbu7WFTRN1(aDG!(2yESPzlt@LQekG7sp&mCxPtc$s&ah&>sq2~q}Zk>L#mF%LZ+m_k=h7tM$g7{emG|= zY|09RvgiX2m)j9Q^N~SpimGRUjfx$NRn6t_vM`~>A-vkMfEP${_sAH9P>2~HkiKdRF{N?$5LPJ+5sIO$uC8X;RaaL>m7Sv0UN$@CAKxImpg}jw&hM{a+4=ny<#qFm zMS_M+W|ycDJ*0B{V7ZmC23B2No#ywukc9$ARVq|fR7{LTp3T}uFwyFDvQk;S&Z=nY zENUjQXg-@!ot?hg=`QuuAV(RT6HTU}GDgo~5v6S&QQBCm*BN564Ez75b&1F=!#3&M zPE6M+HPPpo=J5F)X>5c>VI!Xq`Q4S?G?*Hy+|Gd05!$6saaiDvb8=g(t699LA}^Q8sBvG$hK%4s z3K@gh%Jb^4lIB%xLiY>puD72`pY{@mD{B!i$(62pW8FLf6wkYJqP6W%+K%H zf1rT^4qv6yZFR*^5H?>B#1O_)P+qVR6or;Z^b{0*u@p4aqgrZ8L9>3(xM>I9-W5kd zIo27+dhiN_q(5NS!zX1Dm8elj<4$t1kgGE1g=A)dv@#`1Xbq&a0;9MJ40fflIf z=p0^L@Zf`rgZdTFBD`2swNp;!3* z(P0l!v$S65y@V^<=Cg%$#vudRMp^=-cCGlaly(DlAp{H;v8}zq`#ox zhQS_xpvYS37%0smBt;G{Rx3($W~b1KuujmaL*zA3R|F;w=(ubPT19M3m1)6!Dho>^ z!_^uowja8P6cMX|g#i61wITD7`JJAA;bYt}TWAyB{=Rn|uk?XI_JZ@o!%8@OPZw-_ z+E1np_kL0}F#e$sOwYlPJzLrJ6e^Skv$RG`v0-XIBO8n6SpRle0$$EQgA41plsisT zKSV@(h-e=XeJCx8!->g;H8DguG#Pgsnhfpu9b|}8mIy&78wc@+m^ zI8&Yv<={dNF5+NVr^tjIT)UG1y2y=sPv_tn9DF?o-@w5$Irv5np2fklId~2S z&*k8oICvfh-^{`DId}mFFXZ4w9DEB0-^#(aaq#UNd%e(ld{2o4f=shM3a~*K3;aS(>kFh~PxSwTJum4GnX!vFl9@ zu?;S8y`>?zsMz(khS;73xZdINdY8lV9+&T44bfuhQ+i)RbiWLLpdnf$!}~Ph4L0_3 zbbhFj9DTSxl1_DC*8%RGgBn;er0Zjik@KX)J?ZvJ`8ltCV_%jW&in8l- z4Rac@>#&Ass|3;)8lu%Q{3Vy~R~n*u^7F4XL`5?E4foEs8loNY^Y1j_C5_*6Jo$lp z|3{AhM>Ir_$lo62XgH=JS}8yOiKF?rMskSa`dLGCm;BBN4*xG4{HuoOR{5RZG~pHU zziS9CMRuL!-an-wx=((7nrj1RxOdKS@E;nYN9Fg=apnD!d*?g{*K+lOBYza0!=|I0 z0Sl{=0wcnJZLy7z2JSf)Gb``JXxTRR?9yx5w)X6b<=!!Hu*ku2+HfC<*M|F7f;P;n zL~Xd;*3%N(uLD;ShbNhX>vK38Xv1x+A@>gEr3(EpzAJDO4u-K`dEQJLK1a8?Htc|C zp(Xfh+0{}TKDV|t_iYLXx8YzT2d8pyTMll=!ROStgEKf7p>zr!GY4BZIFp03I5?Ywb2zv=2j_Bd4-W3h!M!-RHwRzI!F@Qm zF9-MI;5-iQ&%yZ|Jb;4>ICvlj58~j#96W@Buj1gVId~`s7jkeB2M^=mVh+Y0M@n6c z;NX!QT*ASlICwM%kKy2JICv}vU(3PcICwk$&GQaL;FI!(-x& zT4~=3T(da(u~2@Alr7EChUda_wc&C0CQk0n(}wl8`P};pwBa#yA@_U{2j9ZMw{q}p z+OU8BcIKRwt~<2hL$&VKN_#!wx=$NEhx|cpI5Phsj?Sgp@LA{&bMP{4_#E{|wc+#C zS8(NejLUa5N6%B-w`;Xw{dT=Jtlw_rXxO9;>#qMduAMx`!OwH_yuiU* zxOcX4^t{Ny+qieOb9wFH;GJ96tlqd23PV{_brns?<5 z)es10z{&x{V_bJai>}B14s&{J$%s)SO9}=s8+imG=B(U0XkZbK2*y_)5&j+(qD|Rv zt>qEHa?2ya-=jsehDQXmZv>(>Q6hTtWgZc1#%e@wzI*|qt0S1rBY>e*)Cve}fL z$^JK+Olg+vY+%z}J!HVhy4cO?&0x@Bkrj);L%qRXt)N7`84Nn+28kW(sVb=|l}=iX zs5cprL4^p$ZZ#t8b5k1yqPB-sh+ruPqKR@#GPKT#PI5&XeCq8_(JIq>&OQdd8m$vmQdN#5urWWOKP z)eld!3ek_tqeIlc$+xO@1UEL1sDG1hqC`}t9@pRlS0O5klG**wPE=6@2f7N;*(gVm zfkw4*1n)bKXrM95E;6{Dy87X|=MfFA7iINdHB*fUet#a(RWqaHQN>a>Yuw$O%Z}actmseMTux( zlZ~oQi^vil(ZVKC*4n}*FQ^b9EJclIQ*_K;*kr2;5n@`@h_*zF=tUJG1jMKjy%-&$ zJI<+@jc6Jk(H(z8$?SXXQ&&Giae&Aw583zJ7bT(x^7g5UhBzJ`(F1u=&Ws<(JD@^@ zARslOkD}wz19_jS5Fvs{jp&nT5veEr2tQII`aD`h>RLnWk{Zz$(II-QMvVx8PduW> zYN8yD9y_>1#Un&bsSq8!FG`9&SNAo9T&WO!9%Wx!=kBDU2=Q7xqIK>lXOQbYR`UqK zUMfT%N7=I1omV45q?iiP`6v;se_4$PVP-s{^)E+@D5&nVh*47^3P!2=?S4c(??-?e zk7)NJt)i>`-J8`#gLOuQ=$R;s_R@=L+XzDIctkI~7^Q9G_4Z3u?FeysJfhdzKNMZj zUT^=f3K4?()QBFA647qI3K1d#fv8j#wXg4vvesTd{Id!X!U8!Jbj7eg}uBl~II^st^r{QW-t? zv)by1m{S#^pX-p>IP-@$9rK2M1ga_s*p@IBr#IbK#XJTj4u61o3?iKmustt3ae4!f z2vM#IB6tk&cVH2RxcvcZxzAd8QB>*K&rIP_AxM@-g}+CMYIE;bR8%3xmPduZM~Q0L ziFZ_}5TeVY!r!Ar)h1Cb{1M^HqiU1bjCGMHc-1CRJs=@KSdB`WXGei5t=|K%%dvkE2%e86tG~eS`HvMT7_z@ zBv7J2byf8+6|WFm&7-=idT6u-EZ5mos1TaXqbk=;iWb$J`RW29vYSUWXTGEhL{Y$H zC)B7A7|x?wCR^R2K(+o)brVHgIge`npHVl_&Aney@d{z-JgUvTB>@}-Ra<+j=O~D3 z=TU9#eK1KE=vadJxWylhrczCM}-9eJSzM>N>u-^yDyK9<0|vL+N{Nqv3Z!buJm3iQ}e&vUIa z4ubGd&&O?@k1u?MvlY&f@K9fgYpV_2dpQMh426XPJ*I-A50$^f+6t#wSSZkALLFat z{wx*>hhSJJ&|^X!K68h}Lg5Sz3k7;is2@GPqL+oj5gZl@^q5c^x({(?#|a)53iOyz z#}|Ib6$TstVxd5f33cZ^7jpgz=Z9D*&|^Y9edCWgC>%dxp+Jubb$sD@#KsTyjNtSV zpj6MdgB}~|8=S3h_=$)5MqFF%IQXrvvQpvf6bl7IT{dQ1gx*H?3m7tYMFP@uc1$s=V;|tGnQsKZKpb9~Cem1UD#}|IXLE*e05A~b)P`~A%aNLlG`fXgO z>;LmRT#JL#iYyf9F>NJI=ism-3*}Ge#28J8Q%pE3$wK*4OfjIortu>$9JOSjzNRh2 z9ZiVS-Z-hrLiy9)F{Bdb^l{LWh4Sb0V?c>3XgDXzLisCbF`&dHR2(y9q5LJ(7*N;$ z=U3m#);8PIA>5Cvf!gZQXzZ@3k5o)YCk-! zIgV=8T`Fb)5Oc%_z_N9>nYWY9v{ou2M0yR>)xrum7O-zDtK6(8LYMfESilC|1*#rZ zTyfp5Lsyg~g!^R|)B%SJSy>4Y{RD8DR||1*fC$%l{oWoI@p=J~MMCTp9|^jip-ooo zq^a7nw@}})-?&b(wXy`Wan$h;ScG9=VcT_MO09?J6T)Of92XYsjG|#zY`s#{>LGH} zgCQ~^Bn%7NX&Ul`Bh|yKlEebY+7fYPSir6+YB;~paF!%vA(9~|4GYxi0l8Zzc$~c< zI0$IN;&jXy6}_&4a zgeirPK`c~9AulUQFAg{l6P8nmHpIeo%SOpe=xVusu_hCOf#7TIxVEr|H58&2`IvBB zpu^N_rnRzSOxqPxksQ@V;8Cb~w)_8NNs}$ZHVO`m@y7xm79Ww2e0+GI3#KcHe4?y6 zNym~31x+qVWvQrIutqY3aZ+}4MNe{4fp=0-b!|$uW_Xd_5h4--GO;4{FAX|O%9kwy zbx(*mhzZ4tv&B*s%}V-)wp|-9(Oh-&>8&ABAQ}}bMPE@hlJEja#Yif)xkUaw;^!rk z&!8DW7L?8IeGk5zEjx&c<;#S!33^Boxk$1sX(lr;%*ib>o);Li3=w(@3@5!R-#Y{&B&4?=|(YOnaPq;V|vJ{lUs?%UUdmw~2;>EGN zw-oh!68znoFH24Xb^qMO6bSQzh*rl+a$!LoWPH2eJ;F?}p`Z@R*5coWRWroNW2K<> zkf&doJzgHFN|;kds6I}df|_P>xv{2UJrBYbm3M^{6@&_8Wl1Z>bXhkfC3c$}mTBu3 zM|*dOP>5N`3WeT9p@H5-YH{{VL1ImHe~46wp2$jdu45O}B{ra&*>CI#$<)e4S{KEt z@Mwr22;B%lbgwyEa^*%rXKVVmTps@O{GKI=J$q}2GJ{hhUk|LhpMnh zAqca|%R>S03lR;$G$C5a%e9wDBbgE8{d8v7Ywn|((9MhI25sW)issP%LfyQ1Pwoab zZxGPamxt!fdvZ6#$eV%Cyutk@iw)ioHPmN_yvYSExUR`++1AR%gfwZVrAhlGbTifm zU^R8>PeX)57*kfb!2rhXUlc5(>?np|HP*ElZCKY2hX{>$tE|vlZAY?_g`}c0C0lG` z>yNC$%KSwon|hdV;KxD)MKD-a&|X^Ss5>*Z1PD*uPnDg zw|EAP27f$6U_{bo1@?^UG-T9Qzcg*%79uC2{IYUxvK_-xQKAY;@>pJVa9<(rjEp&u z=wZKC>|-_c{OJ&35M~&{lszxJD+-JqJ9!PNJCct#>bYbo_$NXHM@(c^@blGFCNq>t zDz;qonvXc6#hpu$XAyntwJw`?U-fymbwSu>UtF{YMUPZW}bBTQh(in|EJH zw?Qv5m*>rwqy|G9>dy;muo@tQw$Bizyqx+5yKp*O;gIVJ)ng8N07lu4!{=im!XxH4 zgg3kjev#YM*tXuFXLQ?v#^?)3yP;+7$6OGG_r8!ag}CsnU>h-o z(s2J}Fiea^x@Tc610vP4(rryCr=zC!rFKQaelWy{2%^u5=^8QLV6DtGu4GtW1=0Ok zA=gQ%beguYgE7Zwkv8Hh;=>^p!}S8JFat%^m{P4!zs_}6LTW1(0-~@U3Xu)h9k8;U ztEL79M+TNObKM_923DVXjpfjSfBn=sA!cx$)^IAk-%*e8<~`#_ zSjM>L0gR7&tNWnGU_2U{n-7NM04|g88NyqxlTw-NlG=_-!W>aT<_qcvLPWt`7OW_j z2BTfs&~;UI(6H07y(+zwC4>tYxSC%7{|XTh7i_Qsu9H&PAxyr+Zf8fQHC>S7j>jJIrPa?pg6AqR!;u+YU!&OE#4a&6awM zH}Bqmie-#TU0BATM>5Vt%+0+&q&(o}7%;TFj_Alxcs?%DO$jX;5s+d1WL##$inmVI z6GdIlj}DBCriYV7St%!FBaC|{g8L#0)yu4*6DJHdvv9i(gtI-*4|-%~4M${FJ;s}N z@41*|jH`TD#-K+s&ZNT!hGA1=xG%_ONC$>-S2Gr|ZdiuJUMUId8skzUR^Sbe?at(? zWo3ygHdEy!Gi*|IGRQQ&R zH--2c+$7~QL`iy?t=LPb3V@1J5BI^UvXwGH`eDIH9$D~b0geo2HZpDOM@&2J%;6%-lh+oIPp(xmgCYh zmNDp&jE5tp@#=Y%p%c$=`|NSU8qfF{y3amz{%|;=7ZbMM3fH*#3{lqlC#N#Yx8EuX zDr_SNE|p^?!+xv5;p~z|t;wZn6E<$by>_fP+0(Gr)Dwjnw$lKY?Xd#-6JL$3F^xot zvPd^!HpH*t3P4uEbEQ;v7^@;nSXLj1l1m&5*ROStJL62k{RjIgWqp7D3GjBz6-%NX=%#trmD zhfaL`jVxnazsWKNJ(_XEOh`SAhfbW>$}+}XpFHCeTVpU@dcR=v?yH_)8RKG6mNDp& zj5F!*eK>~%mx+DY*L?HQKVuo=7E_in=wRHs-?)A+P6hA>5sCsN3x!KieJI+yv`dbe zEJ>Q4EV=vnh1K$a$7(U9B(QJ12{KR(*D;7NB#IpD&^^{Er9>SUqrQs}Br4 zYNP`f?zl=#ih5;j^Pa1?!@0N*7Hp=2x#Fwn;oOKGS$OZi9^>wPpPgp)!{xIqW6-0^ zT0~c{9^;`;e&Vw%W88GhG6p@8@o+>Tug7@vo~zDh8RJ@AmNDqjj3Y+2^%xJGc!Zmr z!5zLVW6+}+4}?$7)MGq0-(F@l#+_;`W6&cRXH(&G$@Lg_?|XX(%NVy4vy4HHWSnWJ zR6oGYmf|X8p78@QW=k6|_0WkET$CoW;|6-QWAp9YBrC432IFI%%LF}=aU)alWAp7Mt1<4% z78si`7%#mG*1hk3F2)%y=4Kg#9?3Y(zCF)sj9b9Lc&2LVd?e#+#QCgxg==iS zovTi`a$H~>U7fNG)Z?-F_6b&F+;1*0o`}}CfoZ_8`F53MjLXyo#%eU<#`0KZ8RO=5 zfw3He@zO`9WAp9YnR;9kFEFNO>O;Fe*@#U=ixe&{N*wN_7Z}qhaS@D{-sc*dZ!fZ@ zPS-LnMw_~U<)N|p_SG!o!CJ zxQ5j@D=-Eaor;9u*jm&A023jI#}O=s)mUmT^vCJapm%uZ?6p+*q?%U>R=} z7>~`j7a|#F8<+$dn{O|%j4!QaOb5Ubg{z@P;#QXNwpzxwMr+)_QpwnCUxj7-YLD@4 ze%EKVk6wHds&OOz>ap2At{z|JF}}UZIJzEZ8u47SeOz_Ayq0lvb&A?tUe|NY_HizA zdoAN=ml?IiWf8_l**xA+%lK$y;c8?KWNfz2VHxkNW$Z*VjyMvrh{jxpepfBy=nj1& z@?T5jWzXtk?~yH zwrEo~#`tcQ@zu4A?~Z2N$e?Ymjk^u!KrLf>8%}5sq>=sWW3zqS+D@GGM;ab z?(Ah7Sa%wm?c-*BZV(yI_C?S7G&p;!u%^CIWIW%lM4CF=zykW%T-%*2boe1A0K zMh51yecXKY%_8I3zUcYthL(Tk+PK!~h{$-ZExL7TXu4^x?Jm~Tx70GeE85hJv`({q z+`5w_GM?>=UU$kg(mKudaSkM3%Q)JBM1|+8>#Jw`Y}V9rEn_><)KME@>N1{dyN_k8 zc#Q9?danB-8At6A2s`PddJOOK_N8q$E0#PV+3HJ(dvjhDLx}itZ^(w1f*{FxYAQ95 zPK_p|CB&4tXi?Tto3qE}+PEuMii|ke*aLcuoCsfRJuK*t9YtevZQL~s6Sa)#H4KY% z$?C>!7@KS3t_;y?G3k{di(q<3Q5#ufn``54Z-D8r)P>^ZS&`n}5W%>Cj_qt8H&Z<+ zGM?>=o~e#H#u!$7b%r7KYxUCTCblx!NL-nh2Orl9DicI|}MBSg7(s9N4^EP!dxk z38}Eu1AbBQX~WJ*R0N^Yev6n;E0$rZFYVa-D}A(x?!li34IP^WQ=Wux_FUAKvYL=y zPmSlJCrV2Vn41bdjjLwZIf7|H#Ke+9RfSZJO*kGL1r~Ph^_VBwTRh{rA%S890$6&i zJwG&DGLY^xWR!5gEY z!mM?hAXx(8k{!t&NF!)6Jt&e4f+mZ->oB=43_$8eeh#zN?Ve2cctx&XHlrq6mtd_Z zsIcf@ZxAH&qJzbVK(+MRP$xQAG@p-#xWP9H!e8o#HVZA|OBehVUW7+GJZ5HCU+GPP zs7xTU#^PqW(Lp05T140PgxK^BLC}kxQo_^>eUc^rZiJh%Z^sI z9jk(0wJ~3Wi(Q&9wClR?LN0vXos4+s!hw#)A~=H5vj5thLR3E=h`Sg2u38{^FLnUb zF|JKo#{O$});oP8UM_UEfaYH=6rgqY_V(f`p#9r>dwYAsuG)Ds1BEWp%IRWqN>U8l zyL)EkVXI;z`15rK_TyYn*LAxNX=N!fWtIg4(y{S@YyYE@?K<4Uz{7x`!+`C~HAo~Z zeA>MX0OZ590`hYC{!MYf1T|^)KD~F(epb!<7%8D9=rwBA1Ny}9w?4`O-7f%v9vA2% zEYJhBKp%+-^vy4`Ko8acee=sTK(FJgIJJ>jXy57q-RsRP_=T41$ggz^u2z%JprVv)| z^jO{J^#RUww36y+Py@gJ@Bx@+rKbgw=6P(+=yL-0Sp!L{k~9rNPnI1sX;^f%DzK4< zex{H{aC97pd5^>Wp7dv>;&32Jh|up9A=7anYg2{scv$2y7>h?usvCJdxRQBX;L$Cc zN&ecg!0@#$``QrT_Y1)M9b_S(Va>}21kjabJ8tt5Ry`jTV1@(_i3OuGT^ntzN7Bl0AJjP?<9+KB9_$dlJx>GmufRac9alr$&A zOZ?C^EA3g&o#Xw4013JX*-^BlGOnzv2l(Y{w_U|*|49$<0k3@meNjNMB0<85)vX6v z!2c}(f-VA{acn{=*^X+#$n`;6IM7ekfVPB#)|+Gdb4%jf?WYA$&_zjC>W1wUG`*B` zrs`wf!eRbt4dyMOm|}H@MW5LD)L*g|eM-OtU6ixisyLP;PpTFgqI#$k=k&aiMg5F` z3VJwdJ^d%1J;?2Q`!f;s*@JZ78(ZX8>J@9UWLRp_F~oXKOVrsHaEDc&7BSDhfF4$5 zF;^%?C0UW`!9B6#G44R-X9YOWMa4b1dK&LIWnInM@pA$k=px+88KYtv79#G|E$&a3 zZ`#6Q{<(k&x`=rO01aKrqsv#X4n1AIX)_D@`C8D;p`c=;;g-!OxEQWq5I~>U`2>yO z%I3|PvZa+&t76+4y(F|A?!-BJPqM;(QNRUV6jsEoXM}gnpWw>pmjqnUMcgwyms~m1e%UD*N<~-42q8^`kUrx6X(ohh@_x54@7o9=gWmfUgpl>#?{+5rk7@exbTc9M zHIZ`&Asyrt=_03^n#ifnrY1sqTMCZ3DM+$gNYacXtxmx)`+_tp*Hf6LE^>+hriH?2 zmOSVsX(oTUmXNQmC6Kqt=ZH*Ly$ZUW>TIK**qXVXjHmqsAgrMLOp}%ARn0uVcACa= zY-}Wf>82$|o=6||?Djs-4zSzz8N1!;{ca_Me8~F^8{Xpmh7BL^e#3?Z@Ar3G2p#rs zBji5h@TsOV3F)M2G^zM?9wEKtd_1}c+0r$h?s@T4M^jT%(|WwaXys`}_Lz+fkxTk!F*>|dvVuUH)aU8ZRU z`1_)*5X^M2hH%R?CrP2cB<+h!^4c$bzB!QO6(Ko~u}lRw^-kN}p3|MyEVWpXEahC! zdt3(BO9(mj;)^ey<#~VuO@v(5G@f2)A&)ncGst-Qq8Cqfk{&$H_y5=X;wfNoe>z&p z<4xg7+Q})hg0>u|$RAorN0UWJYb)s_ZFu}!3+Y_-`xesKMg8@^w~$WqA9(zim$Z$X z>Uifpg`&$a}f3zJh^s% z?#dp$-nrOOvqz`)?pDpRJ+160mR_&lxb1}&vZZ-E4F^chBID^Ma;gJnZ9~(8+tbR9 znZTt;s%2m5nSY08KR9pyHyS zNE0Dj&K*y`;>A;S=7Q=XG>0J6%=OeoXbC~6ncAs~&>DhJGbM9*)ecR89op(3taI%k z&bOf$Tf_a9QE{|#(f>E$NO@gFX9bzycS!KB*L$FLUrSEWrm+KwP$*X%HZTZBgKC$x zLP51C1R>-LUe@8?FOc!{4+wdjw%Cso@(lg`WBU9%`ur>U{3(6@gg*a49eiR>c?jCxGkPGqu z4nqDKFTaP!Izl=TI<8Y`MiURTidi;GzG|yI)$s3XTJj0Xq1PQEgmzdIqv)s4c{E#zE6I?o2fhN?f-(xP?w48Q#4Ej|NaO#uys`{`1GkL+E!BYf-X^#Z zSiSj`WL!+s@khrl|2~qTzwFl5CNEi&2Nf(dAXzJttpZvTil3$0hCZcQ{RP9CmMlfJ zZ1hSY^p&2V5c+EGHw3(jQNaI=ayah2N732u{YFXmzh&FCL^JTIGLJWtE>i8e2EW~c z`v@(D)F9Lr@ZimKu$0$rGbuULwPGCKLO3YujjOQDM1*PvR12UwY~3iQla2wbmMbmk zs#>_FrU=Pe0M{D84f>+h!HN{E6<9Q09TjabDa%yN@do5-0~WpNqBC!&r`5bK7#3s& zn?)+Q0$}Y>vMX<=^Q!ImXpQ7RJKKfmFm0=3CpDXDTGMEwL!?Z|X208N_v@-;t7pTM zgpl8Qr41$ZH{NfQRR1@s+E2arD5?H?lvMv)lvMwH2lE~SJwHtslLoyA|2>?k{~PYm z$63X^Ka+V6=lmm29w_F23&*$4>jk26`oGU6v|XZq&{p`mtYdIqMhN+thq?9~V2-EH zqT|N9Xwg4P=zpktxt|cYGg_-K?tB9wRK7P7>ij#&TjA^A?1}2G=c@($r$~s`<#Yd? zz)M;!4g8w+ULV7MX5e8ya)F!h%^u~C2uYC#;WceMOhQt~144+7|38e!d-0%!;CB4F zjga28soYRDmo4OmrCe6cscKHjD)@Hn9j|%&$;W@Qtg23itJ-{eRb7+H6$WyOnk%Go zqp6&dOQ}@Tg=c;@+kN5kYI-PK)0We&=|C;Fqh3xP01b8|FZL*pL%)P zOe;0&#BvnlJ)*{)O+guMJ-zA@SGfyUuD|bX%bSg9Q7KwS1HIZ#uU>0XxuM*MoJ(bL zgPB}mI5#*#HEq3pUFJVWme&jI4cBzV>D6>?Dwi6_rIp-JDwmdX>4BV_rmC(^Y`>)E z%gdXo+rm|CKfS81p{izcaw?Zi<%UOd!v$BK-Ao`IHqu_5r$*IG+ zp;4Nte^V;G@T)79SJl^rt9r(1S9L_qW%Id|nv?Und^RWNsjA=Jv3kv(cP?-Fy*XUf z?$fL4npAFhAScVYLN=Ej&W&br64ms;xBu{#cXussrd|`S>8jJK>Dp9I9m=J$xlBGc zoXrgm&#|KZ%p8-_l*yqS7sxTaNG>&u9>nNKPI7B1dF46V-}B)g zc^%%SW$WyYi`sTJ2c5#zr&m?Cv-_8K{i5ZH)yrF2uMm~uJG*C{UcK1fLN<-QQNim1 zW;fh*=kM1wxnu5^l7}5D$bq}rq4yDJ+=QX`Lnqp9U5&XwWMeDF-D?bYczy&!@81qJ zkz<5(WIxz;YcTr$S`(oYnN7jayJP&&p2I!E$pH+(JFnZm>*_;^{nzfKWAXbw{?l7V z4`VF8HkHd}bCQ}WAO{qGuI3n;XvOMlv}i3kRJqgjl5}EwzdZ z_sp_RTHF#|EzUl@)nbKqV8ST76BYYr|8>=dQGfXUQfdM}1GP`ou(LJrX6Kw<^;*ZZ z!`IQQ>#;uk{h`eAyXp&Tlxqu=TX%Yub6xd9<#iVxIr_6@Z-W$Hu}(~ScCHGvdRd^= zGildtUHm823fd|7EIM82m9n^#hAT9>9!>M@nQ`mi*S{ZAv)CKbZ>tX07j1tL>{Z^p zDgJ$xw+M#0WGv}o@v9jNNe^Azj7j2-H~q~|ad3<-BoW1MQpfsBlM)t$3Yxo0iPfdLBz6G*u;o^rkdCLCT5qMSN`!Q_93`Y%EyA^PZ ziNR0_>G@!5uITQTaW~Bzas|59(t9@gTZb&8x;MRlW=!C3`j|^U`F031_*E7YkGnIaG0NRseQ*7;achg{v&bB8Klj=<1F&~B7B!vF^Xw!I_Zd}0PKT=~qN(*)| zxEoNr2G`2lGoXKVM?Q-VOp~CRd?6JbddoSLR-#^`d@x{B!<2UR)aNYFOF?sv; zLSg2BBn@qAC8YP9z;!Wh3)f%tb_SFtEOj*#GVn48)eccDTf$BZ+9zsiA`jpH%U@3Y z@bjHEb!mz;a^?>-^D`d457?up-j?Y8+lKQ;Kwe~oez~T9 ze0^K%56}DS$@Opg{vF?W_Sv7jqjSgW|MBdP?s)89|M(9#|KOTWK6v+~BdJsGSvm2R zYj+0y*Zmhb-KM<1I0_QH?LU7!B!zl=0^`GAN6JwnNLH2*c0Nvp3D#*}JVnxgt-wD2BzN|(yE{~k?i z-cfC|n)DBfQ{I{AhfDU~VVTzZ*fcChE<2X))3CJ5(9~lA5*CR)N6y2s>RWK7 zJrcQ!e4hW#mR0kJEFEzysccKKqZw8Ct6do+G91(A1BKl_4hR+s9Q^}bs_)%Jbf1PL zSb3sglmi`L9(vf)PXh7fk|jB+Efta^Wo*SNt8zerjXa8}R!cbGz1K8)ix0%Sr>@<9k7DPgx6~4o z-3-1}(K#HsWXXEj=|_|SABUFvlEuAqA#^oSl5o_^PwI-Is|mMX7FY%rC`z{1?eU`M2g^l2WwPGrGo4eFnZHWob3)OI_jck+N#{IDTuM*1TF~eo=cfj zgO}K@q*>UcL;pa+NllTBvSS%~zoJfQav%mIWQeS_U<_SVf)TEdhsvd^j;)quYsL(U z4CF3JvdMTrNLNzr3HX)ZbEGRvj#)B;%7FTZvqO@iSXEz46XLBE4(0G#Go1|k-shm10tYmD_&}FtRBObv495sm@@ckKGIf=& z2RsV@Fd2F}>pgpZQ@EUj9HkvB*&bxfDa{Zo!=1{~q^uA!T-nf;O!m=zM3rrEEj=^l64QiJS<#ZA*R zRJ!+FV_Xw*6Cc@JdPrI)tOg-i#YLfQWO{z;)QLRlZi084db|&lR zMS;x=w498sp`c|>2EA~>ikhw2HI_!dmVxlnII4v<(zldgYEvuOC9anspm+%ia>6N@ zfeWvTlDDnEUkes-QRJ%6s!O-4bks3M7uhfaM~*g{Ar+*uBiR8JRmB?aFP6;2twyzD z0*AwVRBcNIyZaNDzPSWBLUPQ~OwNu%o>Q`5MS(YxNR>rvFvw!X@x-GZAYU}6Og)g? zvoIy;iYpsiFFlJ;I#;R158cvSHKmvL0kBIqDuEMZ-4f-@mOqim^?pSnRoBl7FW&>c zeE%4J-uH!UkCgq2`bbV1v{C+7lXf~tOey`Q zr53bfzR=Xl^u0F??GrE%v5b-tutV!ZU$Em1z}l*%NqT}C-$6E8wH!I<1mJVKl(#1& ztJ+qgd9h1*^j`ucz}POA%%HCZ8({Lpw6rP7QMuNW0vPh7trfT$X4^H55w?KiEU~X3 zG{^rjcB5+nJ^@yAEU8e?jcEk$ENH>t5TXPm2fnu2LxKmSG)+#p9ZJWrgzq=jO+#CG zC*i0iQ^)w)7X$}tYY{DJdeJX@88{Ja$5N$IfQouwi^_HO0t;wz!dsH?WkQBm%9^YT z!_n${_aM2S9vM_Ii|l_NT0q|_w2lPtVQOZaSCZr)7oY<} z;%1fo5pAhrYce-#LT=zImvYpw6Gh9Y1b)XKS60c2Et`pw6r|vxE6mI?Pbn=*u@jX|9Y+oBpa^qz z@MS)U!SdC_7bVH06~Q->UnG56by5yB+6Qxvm8#{AZhT*6dL%>X2#SRv3AQ-qG$yXewS`Of0_&2mc zGi@Oqc-u2}I-%sPpfLNsj(vwLhD%dSlgeZ}mSiThav^YfC?U)`2gWqj)~m*2n{0Oj zy}rOHQ%_nml!TtlOq8FM@Q|ii+f5e6;qKfDMp8#CDe&L4#i}0XSEtONhzKKWI%UGH z5TJMk>qkNt9a-noBwdpNe*(f5~ literal 0 HcmV?d00001 diff --git a/MikroMaster/20260514/20260514134002-Config.rsc b/MikroMaster/20260514/20260514134002-Config.rsc new file mode 100644 index 0000000..6d3e3f9 --- /dev/null +++ b/MikroMaster/20260514/20260514134002-Config.rsc @@ -0,0 +1,1246 @@ +# 2026-05-14 13:40:03 by RouterOS 7.23beta5 +# software id = A8L5-07YF +# +# model = RB952Ui-5ac2nD +# serial number = D3D50CEDCD38 +/interface bridge +add name=Bridge-LAN +/interface ethernet +set [ find default-name=ether1 ] comment="WAN - Unet" name="ether1 - Unet" +set [ find default-name=ether3 ] comment=LEN +set [ find default-name=ether4 ] comment=NUC +/interface l2tp-server +add comment=Server disabled=yes name=l2tp-in1 user=vados +/interface l2tp-client +add comment="Starless 2 MikroSPb" connect-to=176.53.203.171 name=l2tp-EoIP \ + user=vados +add allow=mschap2 allow-fast-path=yes comment=Starless connect-to=\ + vpn.starless.ru max-mru=1280 name=l2tp-vpn use-ipsec=yes use-peer-dns=yes \ + user=vados +/interface wireless +# managed by CAPsMAN +# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding +set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \ + ssid=vados wireless-protocol=802.11 +# managed by CAPsMAN +# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding +set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \ + ssid=vados5g wireless-protocol=802.11 +/interface wireguard +add listen-port=13231 mtu=1280 name=WG +/interface list +add name=WAN +add name=LAN +/interface wireless security-profiles +set [ find default=yes ] supplicant-identity=MikroTik +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=HP1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +add name=VADOS-LEN options=HostName +add name=VADOS-NUC options=HostName +add name=MikroNUC options=HostName +add name=master options=HostName +add name=MikroYellow options=HostName +add name="=\"Client ID\"" options=HostName +/ip dns forwarders +add dns-servers=1.1.1.1,1.0.0.1 name=blsp.at verify-doh-cert=no +add comment=Kra dns-servers=1.0.0.1,1.1.1.1 name=slon2.to verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no +add dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=no +add dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no +/ip ipsec proposal +set [ find default=yes ] disabled=yes +/ip pool +add name=dhcp ranges=10.30.30.83-10.30.30.254 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \ + name=masterDHCP server-address=10.30.30.81 +/ip smb users +set [ find default=yes ] disabled=yes +add disabled=yes name=vados +/ppp profile +set *FFFFFFFE use-upnp=no +/routing bgp template +set default disabled=no output.network=bgp-networks +/routing table +add disabled=no fib name=To-VPN +/system logging action +add email-start-tls=yes email-to=vados@vados.ru name=email target=email +/system script +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\ + \n\r\ + \n#:local Script AM-setup\ + \n;\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n\ + \n\r\ + \n#\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n\r\ + \n#\r\ + \n\ + \n#root.mnuc.backuper\ + \n\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ + .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ + \n\ + \n#:local Script AM-GlobalConfig;\ + \n\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\r\ + \n\r\ + \n#\ + \n:global MkDir;\ + \n\r\ + \n\ + \n#:local FetchFile Binary.backup\ + \n:local localDir \"\";\ + \n\ + \n\r\ + \n#\$MkDir \$localDir;\r\ + \n\ + \n#\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\r\ + \n" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +/certificate settings +set builtin-trust-store="ipsec,wpa-eap,capsman,fetch,sstp,ovpn,radius,userman,\ + openflow,tr069,dot1x,www,api,reverse-proxy,logging" crl-store=system +/interface bridge port +add bridge=Bridge-LAN interface=ether5 +add bridge=Bridge-LAN interface=ether2 +add bridge=Bridge-LAN interface=ether4 +add bridge=Bridge-LAN interface=ether3 +add bridge=Bridge-LAN interface=wlan2 +add bridge=Bridge-LAN interface=wlan1 +/ip firewall connection tracking +set udp-timeout=10s +/ip neighbor discovery-settings +set discover-interface-list=LAN +/ip settings +set max-neighbor-entries=8192 secure-redirects=no +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes \ + forward=no max-neighbor-entries=8192 +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=WAN lan-interface-list=\ + LAN wan-interface-list=WAN +/interface l2tp-server server +set authentication=mschap2 use-ipsec=yes +/interface list member +add interface=Bridge-LAN list=LAN +add interface="ether1 - Unet" list=WAN +/interface wireguard peers +add allowed-address=0.0.0.0/0,::/0 client-allowed-address=::/0 \ + endpoint-address=89.110.101.17 endpoint-port=29185 interface=WG name=\ + MikroVados persistent-keepalive=10s public-key=\ + "64Y25EUZQQt8EIeAJYD8qWt+te8qvGEepnswdBgmzlY=" +/interface wireless cap +# +set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \ + caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\ + CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\ + wlan1,wlan2 lock-to-caps-man=yes +/ip address +add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.8.0.2/24 interface=WG network=10.8.0.0 +/ip dhcp-client +add interface="ether1 - Unet" name=client1 +/ip dhcp-server config +set accounting=no +/ip dhcp-server lease +add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ + 48:8F:5A:8E:EE:A8 server=masterDHCP +add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ + F0:DE:F1:91:0D:1E server=masterDHCP +add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ + 00:80:77:EC:43:86 server=masterDHCP +add address=10.30.30.70 dhcp-option=domain-search-list,HostName \ + dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP +add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ + 04:7C:16:36:F5:37 server=masterDHCP +add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ + 10:2D:41:2C:20:C2 server=masterDHCP +add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ + 10:08:C1:81:59:5F server=masterDHCP +add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ + 10:38:1F:D2:5F:13 server=masterDHCP +add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ + 10:B1:DF:E9:D0:D5 server=masterDHCP +add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ + FE:02:52:BE:3F:16 server=masterDHCP +add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ + D4:6D:6D:FD:E5:49 server=masterDHCP +add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ + CC:42:10:12:46:94 server=masterDHCP +add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ + 50:CC:F8:85:96:0A server=masterDHCP +add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ + E4:18:6B:58:34:AB server=masterDHCP +add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ + 00:27:15:41:97:A9 server=masterDHCP +add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ + mac-address=C4:82:E1:03:49:10 server=masterDHCP +add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ + 10:38:1F:82:81:F2 server=masterDHCP +add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \ + dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP +add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \ + dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP +add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ + server=masterDHCP +add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ + MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP +add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \ + mac-address=F0:75:5D:1E:5F:71 server=masterDHCP +add address=10.30.30.100 client-id=iVados dhcp-option=HostName \ + dhcp-option-set="=\"Client ID\"" mac-address=DE:4D:72:F3:1A:9F server=\ + masterDHCP +/ip dhcp-server network +add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\ + domain-search-list dhcp-option-set=domain-search-set dns-server=\ + 10.30.30.81 domain=WORKGROUP gateway=10.30.30.81 netmask=24 ntp-server=\ + 10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +/ip dns +set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=8.8.8.8,8.8.4.4 verify-doh-cert=yes +/ip dns static +add address=10.30.30.33 name=ros.vados.ru type=A +add address=10.30.30.95 name=vados-nuc type=A +add address=10.30.30.33 name=amster-nuc type=A +add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A +add address=10.30.30.33 name=amster type=A +add address=10.30.30.33 name=amster-reg type=A +add address=10.30.30.33 name=mng.vados.ru type=A +add address=10.30.30.33 name=mgr.vados.ru type=A +add address=10.30.30.33 name=prt.vados.ru type=A +add address=10.30.30.33 name=reg.vados.ru type=A +add address=10.30.30.33 match-subdomain=yes name=mikrots.vados.ru type=A +add address=10.30.30.33 name=oxidized.vados.ru type=A +add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A +add address=8.8.8.8 comment="Google-dns IPv4 1" name=dns.google type=A +add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A +add address=10.30.30.30 name=MILLER-LEN type=A +add address=10.30.30.30 name=miller type=A +add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" name=\ + security.cloudflare-dns.com type=A +add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" name=\ + security.cloudflare-dns.com type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=149.112.112.112 comment="Cuad9-dns IPv4 2" name=dns.quad9.net \ + type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +add address=10.30.30.81 comment=LocalNet name=MikroVados type=A +add address=10.30.30.10 name=MikroNUC type=A +add address=10.30.30.86 name=MikroYellow type=A +add address=10.30.30.85 name=MikroMic type=A +add address=10.30.30.95 name=VADOS-NUC type=A +add address=10.30.30.98 name=VADOS-LEN type=A +add address=10.30.30.20 name=garage type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +/ip firewall address-list +add address=91.215.120.206 list=TRUSTED +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=10.30.30.100-255 list=KIDS +add address=8.8.4.0/24 list=YouTube +add address=8.8.8.0/24 list=YouTube +add address=8.34.208.0/20 list=YouTube +add address=8.35.192.0/20 list=YouTube +add address=23.236.48.0/20 list=YouTube +add address=23.251.128.0/19 list=YouTube +add address=34.0.0.0/15 list=YouTube +add address=34.2.0.0/16 list=YouTube +add address=34.3.0.0/23 list=YouTube +add address=34.3.3.0/24 list=YouTube +add address=34.3.4.0/24 list=YouTube +add address=34.3.8.0/21 list=YouTube +add address=34.3.16.0/20 list=YouTube +add address=34.3.32.0/19 list=YouTube +add address=34.3.64.0/18 list=YouTube +add address=34.4.0.0/14 list=YouTube +add address=34.8.0.0/13 list=YouTube +add address=34.16.0.0/12 list=YouTube +add address=34.32.0.0/11 list=YouTube +add address=34.64.0.0/10 list=YouTube +add address=34.128.0.0/10 list=YouTube +add address=35.184.0.0/13 list=YouTube +add address=35.192.0.0/14 list=YouTube +add address=35.196.0.0/15 list=YouTube +add address=35.198.0.0/16 list=YouTube +add address=35.199.0.0/17 list=YouTube +add address=35.199.128.0/18 list=YouTube +add address=35.200.0.0/13 list=YouTube +add address=35.208.0.0/12 list=YouTube +add address=35.224.0.0/12 list=YouTube +add address=35.240.0.0/13 list=YouTube +add address=57.140.192.0/18 list=YouTube +add address=64.15.112.0/20 list=YouTube +add address=64.233.160.0/19 list=YouTube +add address=66.22.228.0/23 list=YouTube +add address=66.102.0.0/20 list=YouTube +add address=66.249.64.0/19 list=YouTube +add address=70.32.128.0/19 list=YouTube +add address=72.14.192.0/18 list=YouTube +add address=74.125.0.0/16 list=YouTube +add address=104.154.0.0/15 list=YouTube +add address=104.196.0.0/14 list=YouTube +add address=104.237.160.0/19 list=YouTube +add address=107.167.160.0/19 list=YouTube +add address=107.178.192.0/18 list=YouTube +add address=108.59.80.0/20 list=YouTube +add address=108.170.192.0/18 list=YouTube +add address=108.177.0.0/17 list=YouTube +add address=130.211.0.0/16 list=YouTube +add address=136.22.160.0/20 list=YouTube +add address=136.22.176.0/21 list=YouTube +add address=136.22.184.0/23 list=YouTube +add address=136.22.186.0/24 list=YouTube +add address=142.250.0.0/15 list=YouTube +add address=146.148.0.0/17 list=YouTube +add address=152.65.208.0/22 list=YouTube +add address=152.65.214.0/23 list=YouTube +add address=152.65.218.0/23 list=YouTube +add address=152.65.222.0/23 list=YouTube +add address=152.65.224.0/19 list=YouTube +add address=162.120.128.0/17 list=YouTube +add address=162.216.148.0/22 list=YouTube +add address=162.222.176.0/21 list=YouTube +add address=172.110.32.0/21 list=YouTube +add address=172.217.0.0/16 list=YouTube +add address=172.253.0.0/16 list=YouTube +add address=173.194.0.0/16 list=YouTube +add address=173.255.112.0/20 list=YouTube +add address=192.158.28.0/22 list=YouTube +add address=192.178.0.0/15 list=YouTube +add address=193.186.4.0/24 list=YouTube +add address=199.36.154.0/23 list=YouTube +add address=199.36.156.0/24 list=YouTube +add address=199.192.112.0/22 list=YouTube +add address=199.223.232.0/21 list=YouTube +add address=207.223.160.0/20 list=YouTube +add address=208.65.152.0/22 list=YouTube +add address=208.68.108.0/22 list=YouTube +add address=208.81.188.0/22 list=YouTube +add address=208.117.224.0/19 list=YouTube +add address=209.85.128.0/17 list=YouTube +add address=216.58.192.0/19 list=YouTube +add address=216.73.80.0/20 list=YouTube +add address=216.239.32.0/19 list=YouTube +add address=2ip.ru list=Test +add address=157.240.247.174 list=Instagram +add address=46.53.178.107 list=Instagram +add address=179.60.195.174 list=Instagram +add address=157.240.205.174 list=Instagram +add address=31.13.24.0/21 list=Instagram +add address=31.13.64.0/18 list=Instagram +add address=45.64.40.0/22 list=Instagram +add address=66.220.144.0/20 list=Instagram +add address=69.63.176.0/20 list=Instagram +add address=69.171.224.0/19 list=Instagram +add address=74.119.76.0/22 list=Instagram +add address=103.4.96.0/22 list=Instagram +add address=129.134.0.0/16 list=Instagram +add address=157.240.0.0/16 list=Instagram +add address=173.252.64.0/18 list=Instagram +add address=179.60.192.0/22 list=Instagram +add address=185.60.216.0/22 list=Instagram +add address=204.15.20.0/22 list=Instagram +add address=157.240.200.63 list=Instagram +add address=185.60.219.63 list=Instagram +add address=129.134.31.12 list=Instagram +add address=66.81.203.132 list=Instagram +add address=185.89.218.12 list=Instagram +add address=31.13.66.63 list=Instagram +add address=84.15.65.162 list=Instagram +add address=68.66.224.28 list=Instagram +add address=157.240.253.63 list=Instagram +add address=83.174.11.224 list=Instagram +add address=157.240.9.52 list=Instagram +add address=157.240.252.174 list=Instagram +add address=157.240.195.63 list=Instagram +add address=31.13.71.52 list=Instagram +add address=57.144.110.192 list=Instagram +add address=157.240.252.17 list=Instagram +add address=84.15.66.97 list=Instagram +add address=217.168.6.33 list=Instagram +add address=31.13.83.52 list=Instagram +add address=157.240.241.63 list=Instagram +add address=129.134.30.12 list=Instagram +add address=185.89.219.12 list=Instagram +add address=157.240.252.10 list=Instagram +add address=157.240.201.63 list=Instagram +add address=66.81.203.197 list=Instagram +add address=179.60.195.52 list=Instagram +add address=66.81.203.7 list=Instagram +add address=216.40.34.41 list=Instagram +add address=157.240.202.63 list=Instagram +add address=157.240.229.63 list=Instagram +add address=157.240.252.63 list=Instagram +add address=31.13.72.53 list=Instagram +add address=124.108.16.224 list=Instagram +add address=157.240.205.63 list=Instagram +add address=92.46.37.96 list=Instagram +add address=157.240.247.63 list=Instagram +add address=157.240.234.63 list=Instagram +add address=157.240.235.63 list=Instagram +add address=87.245.208.97 list=Instagram +add address=216.58.192.0/19 list=Instagram +add address=209.85.128.0/17 list=Instagram +add address=198.105.240.0/20 list=Instagram +add address=173.194.0.0/16 list=Instagram +add address=172.217.0.0/16 list=Instagram +add address=142.250.0.0/15 list=Instagram +add address=108.177.0.0/17 list=Instagram +add address=87.245.197.140 list=Instagram +add address=74.125.0.0/16 list=Instagram +add address=64.233.160.0/19 list=Instagram +add address=157.240.0.1 list=Instagram +add address=157.240.238.63 list=Instagram +add address=157.240.238.174 list=Instagram +add address=157.240.0.63 list=Instagram +add address=157.240.224.63 list=Instagram +add address=157.240.224.174 list=Instagram +add address=157.240.251.36 list=Instagram +add address=157.240.253.12 list=Instagram +add address=157.240.253.35 list=Instagram +add address=157.240.238.13 list=Instagram +add address=157.240.238.56 list=Instagram +add address=157.240.238.175 list=Instagram +add address=57.144.112.141 list=Instagram +add address=157.240.251.60 list=Instagram +add address=157.240.251.128 list=Instagram +add address=157.240.238.5 list=Instagram +add address=157.240.253.13 list=Instagram +add address=157.240.253.5 list=Instagram +add address=157.240.238.2 list=Instagram +add address=157.240.238.37 list=Instagram +add address=157.240.251.5 list=Instagram +add address=157.240.251.34 list=Instagram +add address=57.144.112.1 list=Instagram +add address=157.240.238.54 list=Instagram +add address=129.134.26.123 list=Instagram +add address=157.240.252.3 list=Instagram +add address=31.13.84.4 list=Instagram +add address=157.240.224.12 list=Instagram +add address=157.240.238.4 list=Instagram +add address=157.240.0.13 list=Instagram +add address=3.33.139.32 list=Instagram +add address=157.240.0.35 list=Instagram +add address=157.240.238.14 list=Instagram +add address=157.240.238.60 list=Instagram +add address=57.144.112.145 list=Instagram +add address=157.240.251.35 list=Instagram +add address=151.101.84.159 list=Twitter +add address=pbs.twimg.com list=Twitter +add address=89.110.101.17 comment=VDSIna list=TRUSTED +add address=10.8.0.0/24 comment="WG VDSIna" list=TRUSTED +add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina +add address=love.ru comment=love.ru list=NoVdsina +add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina +add address=pochta.ru comment=pochta.ru list=NoVdsina +add address=vdsina.com list=NoVdsina +add address=vdsina.ru list=NoVdsina +add address=youla.ru list=NoVdsina +add address=kupiprodai.ru list=NoVdsina +add address=myip.ru list=Test +add address=geoip.co list=NoVdsina +add address=x.com list=Twitter +add address=facebook.com list=facebook +add address=fbcd.net list=facebook +add address=comp-lenta.ru list=NoVdsina +add address=128.85.102.70 comment=update.microsoft.com list=\ + windowsupdateslist +add address=wu-b-net.trafficmanager.net. comment=\ + ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ + ctldl.windowsupdate.com list=windowsupdateslist +add address=redir.update.msft.com.trafficmanager.net. comment=\ + update.microsoft.com list=windowsupdateslist +add address=geo.prod.do.dsp.trafficmanager.net. comment=\ + geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12437.d.akamaiedge.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ + comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ + list=windowsupdateslist +add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ + sls.update.microsoft.com list=windowsupdateslist +add address=fe3.delivery.mp.microsoft.com. comment=\ + fe3cr.delivery.mp.microsoft.com list=windowsupdateslist +add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ + fe3.delivery.mp.microsoft.com list=windowsupdateslist +add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ + fe2cr.update.microsoft.com list=windowsupdateslist +add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ + download.windowsupdate.com list=windowsupdateslist +add address=wu-f-net.trafficmanager.net. comment=\ + download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=tsfe.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ + comment=9.au.download.windowsupdate.com list=windowsupdateslist +add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dspw65.akamai.net. comment=\ + download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ + comment=licensing.mp.microsoft.com list=windowsupdateslist +add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-nlu-net.trafficmanager.net. comment=\ + star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-tlu-net.trafficmanager.net. comment=\ + star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=storeedgefd.xbetservices.akadns.net. comment=\ + storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ + comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ + windowsupdateslist +add address=e16646.dscg.akamaiedge.net. comment=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ + windowsupdateslist +add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=bg.microsoft.map.fastly.net. comment=\ + 3.au.download.windowsupdate.com list=windowsupdateslist +add list=windowsupdateslist +add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ + star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a2033.dscd.akamai.net. comment=\ + star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-nlu-net.trafficmanager.net. comment=\ + dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-b-tlu-net.trafficmanager.net. comment=\ + 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a122.dscg3.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist +add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e10370.d.akamaiedge.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=a1683.dscd.akamai.net. comment=\ + dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ + comment=collections.mp.microsoft.com list=windowsupdateslist +add address=a1847.dscd.akamai.net. comment=\ + wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=au.download.windowsupdate.com.edgesuite.net. comment=\ + 2.au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dscg3.akamai.net. comment=\ + au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + 4.au.download.windowsupdate.com list=windowsupdateslist +add address=cl-glcb907925.gcdn.co. comment=\ + 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ + comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=ts-frontend.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ + list=windowsupdateslist +add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ + windowsupdateslist +add address=e12671.dscd.akamaiedge.net. comment=\ + download.microsoft.com.edgekey.net list=windowsupdateslist +add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12358.d.akamaiedge.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-tlu-net.trafficmanager.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a1856.dspw65.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=82.202.162.184 comment=comp-lenta.ru list=NoWG +add address=smtp.mail.me.com.akadns.net. comment=smtp.mail.me.com list=NoWG +add address=17.57.155.37 comment=smtp.mail.me.com.akadns.net list=NoWG +add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina +add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ + purchase.mp.microsoft.com list=windowsupdateslist +add address=e110219.a.akamaiedge.net. comment=\ + purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.141 list=windowsupdateslist +add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=storesdk.xbetservices.akadns.net. comment=\ + storesdk.dsx.mp.microsoft.com list=windowsupdateslist +add address=e16646.g.akamaiedge.net. comment=\ + storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ + software-download.microsoft.com list=windowsupdateslist +add address=download.prss.microsoft.com.akamaized.net. comment=\ + software-download.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina +add address=87.250.250.50 comment=YandexDisk list=NoVdsina +add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ + purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ + purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ + cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=a1996.dscd.akamai.net. comment=\ + wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ + tas02.sls.update.microsoft.com list=windowsupdateslist +add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ + star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ + paymentinstruments.mp.microsoft.com list=windowsupdateslist +add address=10.30.30.33 comment=NUC disabled=yes list=NoWG +add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG +add address=89.110.101.17 comment=!!!VDSINA!!!! list=NoWG +add address=wg.vados.ru comment=VDSina-vpn list=Trusted-VPN +add address=80.85.244.9 list=TRUSTED +add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=89.110.101.17 comment="!!!VDSina Server!!!" disabled=yes list=\ + NoVdsina +add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS +add address=dns.google comment=Google-dns list=Trusted-DNS +add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\ + Trusted-DNS +add address=time.google.com comment=Google-time list=Trusted-NTP +add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP +add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=cp.vdsina.com comment=VDSina-vpn list=Trusted-VPN +add address=vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=ns.vados.ru comment=VDSina-vpn list=Trusted-VPN +add address=vdsina.com comment=VDSina-vpn list=Trusted-VPN +add address=cp.vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=ns1.vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=ghcr.io comment=GitHub list=Trusted-VPN +add address=github.com comment=GitHub list=Trusted-VPN +add address=149.154.164.13 comment=telegra.ph list=FuckRKN +add address=109.70.26.37 comment=grani.ru list=FuckRKN +add address=194.85.61.76 comment=grani.ru list=FuckRKN +add address=104.16.4.81 comment=xhamster.com list=FuckRKN +add address=104.16.3.81 comment=xhamster.com list=FuckRKN +add address=188.114.97.1 comment=lostfilm.tv list=FuckRKN +add address=188.114.96.1 comment=lostfilm.tv list=FuckRKN +add address=172.67.182.196 comment=rutracker.org list=FuckRKN +add address=104.21.32.39 comment=rutracker.org list=FuckRKN +add address=104.247.81.99 comment=lurkmore.to list=FuckRKN +add address=104.20.28.254 comment=dou.ua list=FuckRKN +add address=172.66.164.200 comment=dou.ua list=FuckRKN +add address=66.254.114.79 comment=youporn.com list=FuckRKN +add address=185.110.92.41 comment=pornolab.net list=FuckRKN +add address=185.110.92.40 comment=pornolab.net list=FuckRKN +add address=172.67.172.95 comment=crimerussia.com list=FuckRKN +add address=104.21.71.238 comment=crimerussia.com list=FuckRKN +add address=149.154.167.99 comment=telegram.org list=FuckRKN +add address=149.154.166.110 comment=api.telegram.org list=FuckRKN +add address=github.io comment=github.io list=Trusted-VPN +/ip firewall filter +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=12h chain=input comment="block honeypot DNS" \ + connection-state=new dst-port=53 in-interface-list=WAN protocol=udp \ + src-address=!10.30.30.0/24 src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \ + in-interface-list=WAN protocol=tcp src-address=!10.30.30.0/24 \ + src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment=\ + "block honeypot ssh rdp winbox" connection-state=new dst-port=\ + 22,8291,2222 in-interface-list=WAN protocol=tcp src-address-list=!TRUSTED +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ + connection-state=new dst-port=5060 in-interface-list=WAN protocol=udp \ + src-address-list=!TRUSTED +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=5d chain=input comment="block honeypot NTP" \ + connection-state=new dst-port=123 in-interface-list=WAN protocol=udp \ + src-address=!10.30.30.0/24 src-address-list=!Trusted-NTP +add action=fasttrack-connection chain=forward comment=\ + "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \ + connection-state=established,related,new disabled=yes +add action=accept chain=output comment="Accept Rule for Trusted-NTP Servers" \ + dst-address-list=Trusted-NTP dst-port=123 out-interface-list=WAN \ + protocol=udp +add action=accept chain=input comment=\ + "accept NTP clients on local area network" disabled=yes dst-port=123 \ + in-interface-list=LAN protocol=udp src-address=10.30.30.0/24 +add action=accept chain=output comment="accept WireGuard" disabled=yes \ + dst-address-list=VPN-Server dst-port=13231 out-interface="ether1 - Unet" \ + protocol=udp +add action=accept chain=output disabled=yes dst-address-list=VPN-Server \ + dst-port=29185 out-interface="ether1 - Unet" protocol=udp +add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ + connection-state=established,related,new disabled=yes routing-mark=\ + !To-VPN +add action=accept chain=input disabled=yes dst-port=443 in-interface=\ + "ether1 - Unet" protocol=tcp +add action=accept chain=output disabled=yes protocol=tcp src-port=443 +add action=accept chain=input comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=input comment="defconf: drop invalid" connection-state=\ + invalid +add action=accept chain=input comment="defconf: accept ICMP" disabled=yes \ + protocol=icmp +add action=accept chain=input comment=\ + "defconf: accept to local loopback (for CAPsMAN)" disabled=yes \ + dst-address=127.0.0.1 +add action=accept chain=output disabled=yes src-address=127.0.0.1 +add action=accept chain=forward comment="defconf: accept in ipsec policy" \ + ipsec-policy=in,ipsec +add action=accept chain=forward comment="defconf: accept out ipsec policy" \ + ipsec-policy=out,ipsec +add action=accept chain=forward comment=\ + "defconf: accept established,related, untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid +add action=drop chain=forward comment=\ + "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ + connection-state=new in-interface="ether1 - Unet" +add action=accept chain=input connection-state=established disabled=yes +add action=accept chain=input connection-state=related disabled=yes +add action=drop chain=input disabled=yes in-interface-list=!LAN +add action=drop chain=forward comment=\ + "Filter Rule to block FB address LIST : )" disabled=yes dst-address-list=\ + facebook +add action=drop chain=forward comment=\ + "Filter Rule to block YOUTUBE address LIST : )" disabled=yes \ + dst-address-list=YouTube +/ip firewall mangle +add action=mark-routing chain=prerouting comment="Test sites" disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=Test new-routing-mark=To-VPN \ + src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \ + dst-address-list=FuckRKN new-routing-mark=To-VPN passthrough=no \ + src-address=10.30.30.0/24 src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=Instagram dst-address-list=\ + Instagram new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=Twitter dst-address-list=\ + Twitter new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=YouTube dst-address-list=\ + YouTube new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=facebook dst-address-list=\ + facebook new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment="VDSIna for All sites" \ + dst-address=!10.30.30.0/24 dst-address-list=!Trusted-VPN log-prefix=\ + VPN-all new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24 +add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \ + out-interface=WG passthrough=no protocol=tcp routing-mark=To-VPN \ + tcp-flags=syn tcp-mss=1381-65535 +add action=mark-connection chain=prerouting comment=\ + "Mark VPN connections to exclude from FastTrack" disabled=yes \ + in-interface=WG log-prefix=Mark-VPN-FT new-connection-mark=\ + VPN_No_FastTrack passthrough=no +add action=mark-routing chain=prerouting comment="VPN Network" dst-address=\ + 10.8.0.0/24 log-prefix=VPN-Net new-routing-mark=To-VPN passthrough=no \ + src-address=10.30.30.0/24 +/ip firewall nat +add action=redirect chain=dstnat comment=\ + "FORCE DNS TO LOCAL MIKROTIK DNS SERVER" dst-port=53 protocol=tcp \ + src-address=10.30.30.0/24 to-ports=53 +add action=redirect chain=dstnat dst-port=53 protocol=udp src-address=\ + 10.30.30.0/24 to-ports=53 +add action=masquerade chain=srcnat comment="masquerade Default" ipsec-policy=\ + out,none out-interface="ether1 - Unet" +add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \ + log-prefix=WG-nat out-interface=WG +add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \ + in-interface="ether1 - Unet" log-prefix=2Amster protocol=tcp \ + routing-mark=!To-VPN to-addresses=10.30.30.33 to-ports=443 +add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\ + 10.30.30.33 to-ports=81 +add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \ + dst-port=80 in-interface="ether1 - Unet" protocol=tcp routing-mark=\ + !To-VPN to-addresses=10.30.30.33 to-ports=80 +add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\ + 10.30.30.33 to-ports=22 +add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \ + dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \ + time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\ + Bridge-LAN protocol=tcp src-address-list=KIDS time=\ + 6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +/ip firewall raw +add action=drop chain=prerouting comment="Drop Honeypot Hackers" \ + in-interface="ether1 - Unet" src-address-list="Honeypot Hacker" +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \ + content=linux.duke.edu disabled=yes +add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \ + in-interface-list=WAN src-address-list=Trusted-DNS +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=vk.com \ + content=vk.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=ok.ru content=\ + ok.ru +add action=add-dst-to-address-list address-list=Instagram \ + address-list-timeout=none-dynamic chain=prerouting comment=Instagram \ + content=instagram.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting comment=Twitter content=twimg.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting content=x.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting content=twitter.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting comment=YouTube content=youtube.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googleapis.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=ggpht.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=youtu.be +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=ytimg.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googlevideo.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=gstatic.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googleusercontent.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=nhacmp3youtube.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \ + content=rutube.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=me.com \ + content=me.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=icloud.com \ + content=icloud.com +add action=add-dst-to-address-list address-list=facebook \ + address-list-timeout=none-dynamic chain=prerouting comment=facebook \ + content=fbcd.net +add action=add-dst-to-address-list address-list=facebook \ + address-list-timeout=none-dynamic chain=prerouting content=facebook.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=comp-lenta.ru \ + content=comp-lenta.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + smtp.mail.me.com content=smtp.mail.me.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=gov.ru \ + content=gov.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + r78.fssp.gov.ru content=r78.fssp.gov.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=api.db-ip.com \ + content=api.db-ip.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + api.telegram.org content=api.telegram.org +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set irc disabled=no +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip ipsec settings +set accounting=no +/ip ipsec policy +set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0 +/ip ipsec profile +set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 +/ip proxy +set cache-administrator="" max-cache-size=none port=80,443 src-address=\ + 0.0.0.0 +/ip route +add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn +add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn +add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn +add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn +add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=WG routing-table=\ + To-VPN scope=30 target-scope=10 +add disabled=no distance=2 dst-address=0.0.0.0/0 gateway=146.120.64.209 \ + routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set reverse-proxy disabled=yes +set ssh address=10.30.30.0/24 port=2222 +set winbox address=10.30.30.0/24 +set api address=10.30.30.0/24 disabled=yes +set api-ssl address=10.30.30.0/24 disabled=yes +set www-ssl port=18443 +set www address=10.30.30.0/24 disabled=yes port=18880 +/ip service webserver +set graphs-plain=no rest-plain=no webfig-plain=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=Bridge-LAN type=internal +add interface="ether1 - Unet" type=external +add disabled=yes forced-ip=89.110.101.17 interface=WG type=external +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system clock manual +set time-zone=+03:00 +/system identity +set name=MikroMaster +/system logging +add action=email disabled=yes regex="* added|changed|removed *" topics=\ + system,info +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes use-local-clock=yes +/system ntp client servers +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +add address=time.google.com disabled=yes +/system watchdog +set watchdog-timer=no +/tool e-mail +set certificate-verification=no from=MikroVados port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool mac-server +set allowed-interface-list=LAN +/tool mac-server mac-winbox +set allowed-interface-list=LAN +/tool netwatch +add comment="doh, doh-url=https://security.cloudflare-dns.com/dns-query, notif\ + y, name=CloudFlare-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 \ + http-codes="" test-script="" type=simple up-script="" +add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\ + flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\ + oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \ + port=443 test-script="" type=simple up-script="" +add comment="dns-fallback, notify, name=Google-DNS IPv4" disabled=yes \ + down-script="" host=8.8.8.8 http-codes="" test-script="" type=simple \ + up-script="" +add comment="doh-fallback, doh-url=https://dns.google/dns-query, doh-cert=GTS \ + Root R1, notify, name=Google-DOH IPv4" disabled=yes down-script="" host=\ + 8.8.4.4 http-codes="" test-script="" type=simple up-script="" +add comment="dns, notify, name=Cuad9-DOH IPv4" disabled=yes down-script="" \ + host=9.9.9.9 http-codes="" test-script="" type=simple up-script="" +add comment="doh-fallback, doh-url=https://dns.quad9.net/dns-query, name=Cuad9\ + -DOH IPv4" disabled=yes down-script="" host=149.112.112.112 http-codes="" \ + test-script="" type=simple up-script="" +add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \ + down-script="" host=91.192.189.2 http-codes="" test-script="" type=simple \ + up-script="" +/user aaa +set accounting=no diff --git a/MikroMaster/history/20260514/20260514134002-Diff-Config.rsc b/MikroMaster/history/20260514/20260514134002-Diff-Config.rsc new file mode 100644 index 0000000..b491f24 --- /dev/null +++ b/MikroMaster/history/20260514/20260514134002-Diff-Config.rsc @@ -0,0 +1,7 @@ +1033,1034c1033,1035 +< dst-address=!10.30.30.0/24 dst-address-list=!Trusted-VPN log-prefix=\ +< VPN-all new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24 +--- +> disabled=yes dst-address=!10.30.30.0/24 dst-address-list=!Trusted-VPN \ +> log-prefix=VPN-all new-routing-mark=To-VPN passthrough=no src-address=\ +> 10.30.30.0/24 -- 2.52.0