From dd3d0ead31529442b32ea94bdc0e6935c3bfedad Mon Sep 17 00:00:00 2001 From: vados-dev Date: Fri, 15 May 2026 09:00:12 +0300 Subject: [PATCH] Backup for MikroMaster created successfully at May 15 09:00:12. --- .../20260515/20260515090001-Binary.backup | Bin 0 -> 129793 bytes .../20260515/20260515090001-Config.rsc | 1241 +++++++++++++++++ .../20260515/20260515090001-Diff-Config.rsc | 70 + 3 files changed, 1311 insertions(+) create mode 100644 MikroMaster/20260515/20260515090001-Binary.backup create mode 100644 MikroMaster/20260515/20260515090001-Config.rsc create mode 100644 MikroMaster/history/20260515/20260515090001-Diff-Config.rsc diff --git a/MikroMaster/20260515/20260515090001-Binary.backup b/MikroMaster/20260515/20260515090001-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..4a9693d830677c44132d2b0798890c90b80d32ed GIT binary patch literal 129793 zcmeEP349a9_kWwT>26zSx$ly4gS1W3gK~(Jaw;u_7LZFwle7fVBqS*;>6VbU;WYH7dkKz?s;)p~d(g{RD0@VqLR7V2UNfb|YVlWsCN>rCl zsZ^I9S7mj&8?YkOi9i~U*BZ%H^m(cSPIqNib$O*X%T`gDtkiY5k}>YXsmM}K$)XXy zMLt4HWB2sr@=9-p+YzYo_@?=hSAyM9VXbxr+E88BX7X3;3;u8Ql`1>Efs6{LE8y@= z5Qy3m(VI%9Mk0DjfzyfT4Fzt;J#Wvw4`N@Tywj10?pEMVM6_CgI}_2>3fzT=Y81FD z5jhpO8xc)X;B$zmRDrt_QI!H`5Yb2l&LpBy3YVC?fL3-IDK^@2SRaK ziKa&tmz7)*>QP)jp+u?^+7byb2_)Pu$b%ZaxC_Q)eT>Nt7>gY-?h-0Iz8b5~j>b

9X9T^uv5j&xX22XWB;SKEzY&M5CU>sTPaCU7(dDsOT}G?VVKpif=+zO$T%S$sA37$OL`x#NK_CH~7}P`~qli2u zLlo@HD5xWn;y}hO5oAnN3N^;*a}2Jw`s|=t;^>m%44H;C5oHm4#Qy!MvUJgwr7KsK zh-{sqY$JQ~E~Pg=8nrify$}pAjv)L<-GHC()eY^A3Y*7W(aTt2^#=mz-jhNZ$vt+H zKYxEo`)knk9d&k47CX$XBen`~9|Xhvlqgi!8=P$Li< zpR6;T!_cB8-8o8Cg-~*&VY4+W&paX#MZwtaj&C!Eq6KnQylj0 zK8MR1aM-(7yBTpD_K~N|ED>BpKu#IRDN~zMlTc1}pT}!-x@TBjPWz}3#%MGMku(!^ z7l1WOi?wkGt5W`MYkDGsR(OG9IxG)yK9MvR zeJM9I{PQAn>l~^Y8wggH%UI#_R2jz<6dT>1fN?-+S#d#`!`>&9KSx8x9w6GOqg&D; zyFApZ2Xd0d!?!)~ZGQOM^FsN)lc42vSO*~AM0}Rd&uu-!pZi0fV*T*RjJ#m5u5@FlyEbV?EVn)#Z-J<#Stp5nE+-SGpXR6Hzlv8_EI< z%lXAn6%etGwODzMXneql=u0?-erwZ z26eFq?gZwzorqrLmU3t(RdD!8PmE*n%Q)~&{085|vJUOp;YYnZ%c5H}L%TKyg%iC# zhoVNnOp{pV@CS^3XTZS(u{iu(tXIopCt4&gL5arQbHYO20okX-LiD+|@y!b?k zF(AR#K{Luf|b)aK;LZ1=QP9j<+5ZxjW-6{~>CJ@~&5ZxgVYp>U!U=WCw3xu_oN@2QBAX+I9 ztrCb<3rtT#4+sQG(;9(jtw8jUK(tOES}zbiED${+5IrgoVNs3I^PoWVq`>3>h$6I6 zAbMI6O*RXJfl3glw+Teg2t>~cL^~3Qo)?H-5C}}3-cBHTSs>b#K(t*Trqp;{QKDFh z=u2fSiBSqg16qH097!jLxH*`5a*^a=mgs>seLkR`NO}{Ashy#fB56)vymcNHLL&s~ zM==?3GwAxMTIIUmUdMB?M|M9EYqB@81H zgF%A+OM)&+q7oz{l*eWGF$&3OBx8_Vh-5O66m$Z5MIeb@6-WwB$4?)U8YHzS#Y{l6 zkX(%95+t)3@?dZdeyCj@A`gMO--Vhku1ju>kTiBh4J#8nbU>6AibHpsu* z5v5ZR60Fz2LeinQN~gsd#(*J)ZlLORFm%+e7>y~Mzyw;LJzGW;3}u#vy8QubrO#T0 z+Jt|FDjDVokdRf5AajR*I6}A?{<}Cr%jg`T)ju48sq7;-0voYx?6OhJ#xon)+(>65 zpJxS824g~5jWZB%_!whR;Ltz}E07`6!l=cs6ipHAG0#|B0dO+z=x0NYz3tX=7iXmj@fjSbh5bjo&%NrV{M$I}0;kW|7r5%@|== zg%;FNYjaiG9kQA@WL;&;fCKs{cGs&kVl$`aQ&;s^#YfZYh>0S}sy&fTT-6(S{b_`D zFA2pimOXw#lXI~naDsv~iSzPtTLaLJ!t%3RR!}faX|)1FQ#y{*l&UT=n6x)4??6*} zvjSrhe@ua)5nQ6c(3EabU}y-}C@`-b{ZK?1RBhymt}rNL#6pNo>ObgZx0h&kV8cE= zNxA!xKts|Dy04~Kf;0mUHrV|Ex0M;;It>~=vTz{$S&U`Fjl+f)77Q~M4ZUFG@Uo#7 zu&1R1M~)sividBSuR)aZh1Iu8`No|Aw+E3_^=vGXm7<=-V(v^hJ(H}Ul11Y~Jqy(< ze6*m>j3!yZPYmi!RXq#U=sm)}%<2Cn$qMRNsAr*ig$)k6HmGNznuYG|dp*%XJ<$(( z+3)LTJ;5J>sbkNUB=uJ+VpU80nafWnYGA+BlOzjI-vL55W>OY3!Xe9LG&OA8DTSye zr{eDrq8e6N{nM)*KC9hf93VS1vXSif+1%DZENU5E;0oJdF;;jF4(I@&_6OH!0n~C~8Z!p+g4HRuSB;v9${BSD7=cc8@>PS3M;V@cP-D zVJTpLxjCZXBZ%0)vsG|u1bFg@P?1}mP-Ld4;uy5v?X7w&qEsc&uPgpxV0^rh7=!st z$tjhfR3)KOwLYO#OmoGR${0aN;~+R9IDCO}I8c_Al`M%UGKz_RASAq4P(-!ps=glv zz%%IuQd1PWX{gw3PAGO7*Zx}~N(4_+)!S4p(N{_-LC}?9=Lc3Y%oOOGs<$b#vY>+& zT`20&K^vfh;)iN~5+|22r&#fFJ=aUq&^r?`pxSb!!+>fq*6Ox9YBMnz53*J{T{D>) z@PeTOO4t0m3(rQ^=?mXhEj-h}aODq`G*aqnni7_}@)YN4cyvPoYOF{@xHr~%gERb^ zPi2#Kte>i~p4~CSX><7RP<+T$muVdoB5`u|5c75@Fm5@D2@8JoXe?YXVs%nr_{Xa- z{N0Bs&*7o}lma9BO8HYlk$+X-dblg^z+V5b^8D4taOW zg)`G3v-Ua?L{Hy1LVo&Ce(^OftJ`cMA-zFPey{wBUb)s@`Ho&@YcHEciuzO}q079u zBFn=fErM4#!Q#m3j5`RAJBW@u2#7m2GT;s(;tm4h4&vbs!r>00;f}6>d#Z8=jDHQ4 zJN6RbH@X(?O_V!$4t~Qe0(S`dxMRfQj`&QU1 zDORW3q}2K|szULe=k8+rS483 zsllEEl2YEsJ0B#F6#Nj-(F78AClLLfKoT9plgScEWJOYr#D*kJB#Gih8J8VTAQuUV zB1!fnkt9p9NYc$sMG_xtLeyM&v4!%xrAU&l6;QNB(gw*AAh{9AO-Pm^$;TghiE^** zEs~Vj2Vb6x$9<6$Ah|^(F(pWJt4N{%KM6d%1Ie8tiF1>Q?!u3|kt|2D7DyfvN%F1( zv>wkMLGq?ZlJFLw9Z24mi%su{Bn5Zk$u5y3{kurs6G=+gjbso0@Bxw!k?ckC5t5HZ z65$;3iE{r84?jnaUx*~l!ARa4Pvjs$>}MeQ5`V5FLHt=H`U*e3#k=1j*@vI|MUv7E z06K`|2P9u3`3A|4NPa@{Gm>AB{EFldlEX-jAo&f+Q6$Gj61RO;Np<)^5=nv{M30l? zRy9Z%s(I7^e`$!nG(yr?BFWMWPz#A9T}$=}7|xLE#$DU;IZ>kYyeg}$m#H?_WXdwt z=9#)1y;ElPGSy~hXXkV`T624uYE9jZR*QUhIJ`bj72qZkrPKE!rPFO9r6=d)=MTy) z$RB7fD6~9^r#llUJ)X&N&xs+f#u%KO^$w1~=}*VtEKwPpIVyuQgTZle*u$A3Ng7pjb$b$Xqeo;hqb9J4XjN6|CN;q zU}eI82`gK_!gC5%CjEX!eC%0CqVxolsh7!=X#!6($vh1lEyU2k#r_00Gl#fY0^?@6 zl~MWGvpGUoV2cAk6PUo(&H#Z;{393)hGe#Sj=&U$&uq*vj&eH!sU)Q9O~%}4EUw%Z zjm4GQAYwjNWJ!*rMY3Rw@eF|mqxe@n2@sSafc~N<;Wy|&jw1OT$uT5<=t(jpKo%8| zWTL$M6xY{4vWyUxSDE;#3at&Xr?XWYNqWqI2NDQMC`m{IvO{{3bm2*6bC~IG#wsci z&dhSv(>R*NpPFU{Ml*{-temLCvPUJB{r?lOwuFhbr4vUTLoC$ER;ZI5l{${7)N%ZO zqR!SZb+)1_>4yz0=Bbnr3zc#dDn*qk$}6H$sp9_=m9~Ycw2e`zcvRsqt}lrkmFl0! zo#c_0t57NW($W--N;VUy^x3J{(lv2JsS0bVQ`pogSyT{QMIT2}VwhPq0F#MiR*X+E z7NuESpU9^g$B|Uq1SlA@Vw{hyh8P25yemGA(&H+AY#k!#po=t;~ zu?s)l_--B%Je{#)Pty631mJaCO(b6LAeuoW-eF_=-^E=ff*Z8>t)6Hmk(isTOcYSX z>);G6U|$)c30wy6?aP%P*f2B~-p}zBVV~nv_!loCN^jJm%h2Mofg=YM6b|g#t3#L3 zLkDzSOq8D7p-cafLkA2VSX5Bh^_r8scx~j1^O1wR$_O{xbCsO>CJD`!j%G{l2OS2l z!4X}SfH%YG#yX;Fry|QMvf(J=f-W?kl9VM5hM7U$2Kg(OO)|1+7d;z^Wi!w-v;_IA zJXt;;DV{;_5JH}H%Jzh>(0E@X`4-83B(D;QYvP&Bi{1ag!#zae!?~|L_&yPft_mJ$y)*&YQpqh0x zE;@Hcb`=~(m(th`>?F3dDa?h|1smTiYwhiMxIk%SUhU#$T8*CA%nd3S<{N$ zH96;ghYto0&l@|$YN;u$$v?;AGoR!14;pR>6#9prKWb|Jw1Q%*!(^ZCsw(mf8hWl0 ztE9ZbuEy_xwpUTHG97Ci6Wz z5KdM81zQkQKa5L&kW94mHIH-D$8nm+xvdo3@uA0Jwcp{(a5?Ot zpUYvN6!1AKD;+*oThtH+DO{+b3ZsT9j2fyiYN*2K8fq9DY;G!HEedr4zDQuZmY^5a zgQp~ie#T*svl;>>o=9973V9qT7wYZ$7ihx2(lty4N?PT{sN^c*uxl5 zULi4~-f~$WQ1O`$ks7R|d46HD&!k){v z`7%o>i(|knr4eplO$J~ue?-(CKkSf^p?nsEvb-ZARs|Y+B6=b6WCOD;46`gCP{^+V zR?djLn>lI&KC3^o(h=}lD;<8X!(q>~d8)7#=45{hoIxqz?j{HFIaMj@yPWRo+Dv=( zG)JbxUX9En9=Sq!Vw)y!XUBeOp5Sa)Y6J5`skiC}A1(gTlRC9wPxQ@=Wg{(SJZz+e zM-|!y8)M;B1s`~LQJu_F3!7-MffoMm@WX|77Cf`yb;WO*McZS8Y&7pHl`<#WBn$s_ zP!OABvDpScx9BNp_#v*VWDF1nj+`#<3(tJ%vM z-oeTSNi_edQ*T~nUgrP8?okx_&su|lV32<@$EZ{7O?&*G zUK`rd{TKJz_R)K7hySHsD|x16`l{7V8_#~7w$DEMPoMoy_1O;5`)tSmwmuu)9v?*t zs2AEvuXfyePIYfRc<^aE@J3yc<-`qhawy1uM1_B=sL(Nb2k!LW)PZ?V=g6&PtZza< zkODQ%s!DWMXo!-OJ?QAr5j`G)hq^`miGMine~R;Vir#TM|2K79zN8TD>mpfvTaku`%b^lXbw`=sS+wFg(>oPrXrN>k0a#+1ie~9sNz4^2<16FAA zdh8!%?q94H>lVHDp7TG{d!@=s@07rw>bM*J>A3$XwtG(Wj@$izsN;%ELdb+KY+d?4 z3|9#;`!|<#yGQT08UI85R+<^$m0@QhDQx?P;r^!>ZbtNuoB2P~aZ_YDcZSpM@cb!x zVQk1lLh%h@L8wpk3(15>Mix`hMPD#N>Q1Wk2dn|74JEO~h*&=P;WUVw$kl`kp3UP9 zINVG)3Po8fY} z16HNMwNFlPhB`^3$OlB6F1J*FRlu8BWp%nT!_9xf!xK8%NxE}Bh}ZLUc^WD`GnA?+ zpf5%W%EwQf4u6WTM}B67-|x)~XB7GDgf=@#jd1#e)cbTf*0Xw@nfCGwrx*PJ9Yp&i zd;rs_J9uw3R@><^OhtwPhs%MW?3o@P>y#%vj0`A}rk+o!_kIFl}PADB*5_!{$+5M zgwrFO9eWcAI0+GFWA;@}KkP>&6c7pUEgwvT(*tmL06QzQgh(*K?bVDO5;(*Hr*q{g zZt6J7AOS}iuq{QxI3m$h&Ac($eG2~K#9kVK?c0&&PQ#Bl=ASCrtCSrx*lmL-0v;mq z%Z}_cN2wpS-lSpIjsC3^IOB@6gWcok?G%#q*xB=|z_xa>J3Gbmy~~(SHFn_`6x<2Q z9T@OjQtpY$J&8yx8N?!Xu)o(M5-0Ct5j#X2E15zhJ&MBz;O8#E`%_AL1xYLTd$uML zn>S~1HdvU1H}UpccyR|xOr$e{cCTVj$!iK7UdJ8o@VFZZZnF~nWhI=3i6&>)2o4^| z!2>wBkSNvuHfA=W{zR#L6>r+%MCp2$)m_BBJB)*ea_|ri?!v*HIk*D{x94E>=$7f# zj%r6>rq|)GRrU>(!L?rTs-LL9@Tyl~_{dLIp2NQ#=a%C7Js1p@EAX*kFlbj`Y!tRB z@bO?U=u%*~>8dz4*CQ$uiY!;^v3cql9nk_k(RF&F>-BP2kq&wiZqSo(lb-opO7Tks z68FUu9m3HThXs->M*#gMkcfzP%;)qK;Xphe;r*v00Ey zyA&^6p%3@Irtlt6PN1E5)@iEypQULk+pq0*1aOKRj`uzL#MS@(h#U9UblB7yr_X^s zcq(xxpY@&__xB^N{;wf!BmYddZHmw1_Ed-HJK?O;H~#NO-@mByrcCh!{9aFpF_fPT z+6vrECSq>=`;j;Puj#%Gy|(EY)n1p!YFD{~{cKQJ$5R**%l|Be8-v1jPmP27{S%VTRr9Hx4bCkz=&Pl849wOVkhLk#c5vm}45wY2Z02p*&Kxd8AZ1T`n&C zKO4?PLx&9;I5H;w!?34@us6_RPn0ob3>(PK$fcM#1Vh;%gtDO)r9mz*8zeJN+e0wp zqW%p-=o)F!wemY`)jnrnW+pRYR=6PhqHUF3P)!P9+Z-f6_DoS4H-?OHQJvH%lyT#; zkg+*zf986wzz;S_k|bo@IFxY{ZN~LbyXn7{=P9 zXssW06tq=yVa6V9MkgHzk)~oq#v-5B4>K*+8SL~0BDT&@VXQM$80!ob#yUfV3m7aP zxd4jB)#HA|^FIvyj|BdQh((5~SNHln6;2mB%mUY^itLX2r&MHV%EDhE#vxcbRtZ=g zAXpP33}GdLz)GS4NdgvOEW{EE+m1L(%+!j742#Cd!Zor*8;Z`1ue#=n)fuK&tS}@j zEhMZXBp6a9T?atS$lD&P05}7L&uy0nOPO<813a#eq#hE)Zo=9t9Sfm!P+X2yrrN*Q zV8z7utbqWb!j$Et2STd?GT2g%nO}R;V$D_ydB1=cMsKsB90%Lr@hmnh;td!-I9G^;H93&oNjKw94{16#N{ZMzB4^iru@p**W- zi^`<9xQGu&YwDMEt4?8q*}US%N-!KC9uAGhdcwA$?s`z5w1R(GYtehGTd42Rv= zjS&F6&Og&1a8#kU;6lhZT)+)g6E3KPRAnGkWM(R|K(*BnPDb5W+(`*9%T76%Ytrit ztoC`lj;tb&-{z@lPDPgbM2MECNMA)(oTHXZMV9VF;*RIyry>Ktvucvx5ePWlm3}ot zRriKF7P;yHK48btqd{+nisK+7##Y%hhVX;>dMFYYa;*|LP!0f@4)&eSx`9~X^i@HF zkLn;Wpuff$uuaLZdE6DwO0@{b6*}O4oQf>X4NUdPQaGpJ2qkoCOilPE)j&dufrJ7B z355otK?Zh4qHv#qsGWhRy@7<42BHlHl4v86=a8`J)o+k%QLWr-l>1EOehJ>3jbs6m zg-8}5fil%_B_KAhEC$5FCw>&KgipjID+%?H3^2&k`alCo!YaJF8p&ED4g}$vHDLSkFTUi=<7i1`Xqqryw!fiiO)`WJywbLWa#-jaIige2jH~UCcofD=hpg z#eEKjST#6nRdc*kWVx1b@=Hr9EIzlepu}HPP@GX%kdbTdZ^<2)Yw9t;)Z=oZ`-w%a zOePYboxY3+p;u&?6_G^6IqT}?RKn=M4lt{e1VjUGY9)5&W>rV@a`X}%oce?-h{Waa zLjy$?;t9HSvy)_xcyAcYrewWozFsuV7k*r>*9khE*yM|nl0}2hyTMe?Aaz?XWWkYo zf{+wXrgmndDb1iC6{k-=8B$YPvwA&DCbP+G!et)UtX_7$$!yLyWt($MJ;ud^W4_Ri z&svBl{d^&XO!I|A-F!iy4I@h~?Ed7wr>;6=y70!%3)2VBH(dSRH>=`OA54F2+3QCZ z&OCp3lf&OP$l2YfYx^GYU7BXMTlq<1gFn2h`@CyPe&m*t%+mcWTK_V&&An6hZ@*&u z(~n)G+gUN)-giLORg3Fc<2$U14^C+C@z7tg?`!H$xmSF5TWyma!veltgFCeHA0It= zf2wKJA#;rQs``zo0c->z?}U!j*gPY`^xI zxL~_OhqgRYC|rJ}uH6FzTKu@@!e4tPCLX^1*~V#c2VM;vy6i|ndZ1yO-wZX!uiNud zY2S&vJ)qGVA-&}beI~6wG^D2_ z|MI}%XBRYYlrwls@UA=WKbYTVN5749{GQ`)_uu@-n={Iig#YjKJ;OqPd?e) zrFPxJM_T27SzGU^w|}g-V9C1Ko09tVoOjpp*|op*YGacYYGFZ1M)+L5{)H(-rd4rw z55HBn_R`w|({`EST|FH&9a?N2EiGI2$`!}1FuHd<_uSr`vaSdBP%rb{7cTA6eA4%q zrj%aPrKIE7yKgSs_30ap#=N`yw)vOr+;((e(!JGff4+0{J-4TRZJT>(iz8MyxGw7 zJonypLtnb)+n-x48_~M=vp20O>iG8U_fJ^$=-xh?e%;yf!qP;0vZ=RyEzLXM-pW(& z*tE(8)bNI>zeri7PuIFX+L<@x(!;%-52jha9`U_6!Tk8F>$a!<@oi;X$u7?|gb0*LQvRSc#$EWmkOg%C{M7liqGJ!9Dnv7k?Xd_?@ zy#C(TOBT+%Yj{%T{g+vKmv?{k+znrU_QHKf&uuWf^NTk;IX?BbU1bgPpZls|{g)?A zbeRoznsU|-E*SmLy31CiZ_zc|_S33qeI{f*vNdqu%==!iT|T1dx>xSK$eY^#>-0&B z3$E?iYvg&ZxY0u&d*}Mk=53pH$Luj}43=%Pt17E zmXx=Dd|$f#+`F#m{rh#xntW)zv2ojB$EH{4of)NHU$D*XfAnh0mP;OZb^e-T%L7Yh zxxH;#@66w0+%@2VUnW1Wu>JYVKDlIQ!;PDcj$W2EdUmhePp;l?%UXQ=?#myEfBee_ zKls``qi)xSTb}*!$m*gu=e_vUmD{d*<-oqSFYSN5u>PmlJ-PIkNnLgsJGIVsCg0Za z>xQi^9h)_)<(5^+!&`sQc>35?Ro0P*AL#Z_ZShMh8`yd;`RVY2S7yW={9^ybT`Hfs z!Cd&}yQyDI_~eyUi)Yl^|NKM4XmVfs>LG8HTzyf+u0I}}@YMa=_xbDJ|H0<_=aub! zIc<9Px8`rYt^Av|-qKMWcluH%otHHJo(|KS_gHTBx4w}p%*h$KHRH{+r+=8+-uSS1$&*_*G-)>C>Tid?cYN^lvfu>= zDiii~%o;cG`d#_UK5VghX4ls*n~+<6 zsdN9^qpn==W=h7gMAx*Uoi*<_3J$w;^~eXGzjxEh`{!Of>MgPPoxa|s6~CM}an<^7 zi&w6DzOqyEdFy`6x%Y>{&C}Q2KdiC&#T6?@wMg+C-qAPz((DTlJoxka;jX%aZ(QqM z)i9~)s!INgvmt z!D-VPEyj5crY2Y(G%(EDdCrUnI`%_d^Xm65T2sC9f=H^08> z(mtgrm%P_$##6g%U$J_4hyGoS7w>EJ zP|55Tf%`6Bz3zeh$6kIScg|k(>fh@Yrv2D!&@0_W-ST8Zmu1_cpB~Se*f8&TXI97H zhHroS{KwCp+SA){cjMjHKj4_VX~PBe&RubB-uTi>KhOJaQ|D3Z%LaY8zyF>AZzNAl z?!K=w@13mYClxlGZ}|4;L(TUXsKJ-MJ}F(!ZJW2S%MHyQu=h{)45Tn;fR)I z(ogq>?xrgmj{IZOnBo;pu6||BrmOnhH01G-*%LeTb6lIb;rZO=pAYP~`I+C&J=}Za z=bw*z>C5!}=U1gX{<~*E1L1bZyDcs}-eS$xM_#IYd;CM)njB~!e`Kn=aC95-yv^>V zjW&I_Ciu|8^WP!c^=k@-UsOBs$%2lz_Z%|euC2?Ce>vl^!u&t#-#z!vyWg!F@>5q` z<8v=rynSo!x0kNndS1PC6?0$z;=1C^8@|Z#WDncfENSPq_Ltk%?TcSflz7XlKY#b@ z?=So~+j!s1-9_Jg)U1hRaK8D&y`Oz|u=TdPr=;xN{qXnwZ7lYfTHSJ~y){UiDQ zBl-R#`TisM{y&g>nO-9|C&yl4%IVR=QemzzSu7Ttz1(c+Y07ov^{g=Enagt=**$Wz zd*!%R#@x~OMXQK(`!VNxS-dFDrqrYN4CwBXEo>baAaGo6%I=e z=sHf2hH>B+AshnCgZ3#lZhc1P~h7K$)n>1k5&;ebU;T5)pdUBpl`y_j{ z(_RpP23dyCG%(eg%po*5Ni>8-RI&7qK!9=rK{Cpb)S=6e;iYB81w{k7Pp5eN0k^fv z0YfRH0**?=_KNCqw<7@CE)=-;D3#^i{vTt{;jV;J^kmyMpv1Ja#3UkEpVQJt;8(o* zYf@rbT6vuM)(CwF!pTT5*}{7XHX#^V(JqMo5DW%k;E_*^V+SrKrllc2_7^n@2qT6F zi>(2EF=K|0ykPLi;iF1UaMpt5vC`+M_TmUL)D6)#aG?e`nhY0A{Hl!`jf!K+aN)G5 zoG_8)ljmSz#3^&4TRuEdL<|pB9{A(L`5abzZnSUU6(k;1zJZ=R^i6z?&lzyQfUfka za7HYUMqN;Gn+kmqS5fV9<;fqg5;LPNvwb3$y*4@WM!P#;AFY!&To}r&wrSN~*rUB( zZG(q)k}gsH`rhB6H6@I@GjB?^884RBl;GUR@SokLY^d&sbGU83 znQYqld$cN87NWRe4#Uu0p>z|lI2`qg3oH(!3)iy(-YK%AGK)Gw617%NEoN+lxm6(W z4)_js=jpl+Ba_ zGV5bk-{ox%-nZtP%j-OA;1X(1{V?ve>lP0`Jp6gFzBw>(7|zg4kGI;ZobGF*6;S4L zF%%HYR`Ii9rAgX%EVu8g>(5Wz)Zb(nxHd&!lqeG)!zR zPo>kXwz}$=gjQE!w7Lr8J@{6En;p!1-KoM$Z;P9%!nb{Dm>MY>Xx*N$Ll774Y4QQO ztpBB^u(K{@44JC!jMY!Y73tf4*6>?^B!mgL3BV{vZ`u znz5-Rk?4LMHI&hbxNs;quJE(CIQdx|92MD4R2Gs-WWGt_?SdSV3cD8}gn;`d!v`&a zdGd;>omt2!$qvV{#%Scm@Z_~OCOJM3^NDN<#*Y)CabX(97AVHX;Vv`1+G(5ScLdN3 zxYTWyaEI#0O}?sQ3{HiF|2#I*V!I}M7IFG5Xp3>mwqIbBssa=94yEJPODY5SW%k{;5BaJ@k3`Y8n^{e&V*V+t${8s{yfU zGJ?T7bxCc%owIb5PBl78Pi4b8x3aU}IJny35BP2P%N06GPf-3cL8qP|e-1inVa)yXEcn%`?Av`wpFVVbQ2=%wiOV6u7whV4w5!D{;E9)n| z`Og$qLSd6mS=fZLU0AlU;?EQ|5rvgbSyGiCvO2EK#3LO-TJ-gJ7Zmw}kQJWP2R@&i|pj4DS}xxil9C8nhXA^ftw#I_z{@?di;W^$+?Foj^QWf^I{6^VUYAAGYu zTZFT3MPf_-L{VOhhrR{B_T^^zJk{`NXLkqY3V~?u0Hv(;IJiCsr*Lp82R9&^s|J{8 zNHkXs&rv534N&UY2s^drL7q>LWq>+31JA7|P}k%lOS@p5RIhEYPJ-Wa*OVel$6%e* z975AG_n#66iuy0$z}^HARg3{g{Hf{!(!_w{WOZTX07+xO5zit^psOYeB&7|=px!B2>~5Bto1`wPL`=m#$cVqqNqs9ab7A~?6u=@ViyQ{yNr|dM6{L$4{}N@ zvY_Q4Z9%@Q33zQ4p`8m*#^Azz5fxcP=6cvHI*zcc`>KVAv9|`wwwN z7U&w~vS4f@A61aYenmao=mD`shm8$7=nM3TM5af9CIMOa{5U)vKEcd~{gqoc4n0tG zbnaJsR<<6obinQxFE`)W@bK>=?d$h_zN*XYmpxZ@9k*!PW#=|e`KiHY55DpF@11*A zroQ5PJdk+w>fMuP&MjNzT`={n+FNf=ed4vE72D6#XMgj2llYtN8k3Z^ZTObs!w)rl zz1>S&O9$$=-SBW(;}^S^+?96sCH|vFQWGy|d(Y?NC*1pG?_jg0FIL_+YG3k>`)=>~ z-hn;ipX$6gv8Bg!V~Z|*4>$Pc(t9=;HZ|_~NVAL%3)^mN_1HP%M|`nqNULv0%|0-B z$2B*6^iA394dZ(1j*NcD@$!`Qzm#0p)$V(JyYSgZL&iw!iZ&;X-IRCW(7fCSH$6Gl zF0Fa6(~w-<(FGrwue@tkmi3+ej0o4vxZvnTBk$O5CBJRf`uApkOr?99IoEzN;`nO? z=l1z{_L_?iRjl1xwEO61vv-cKwd2@Pwn)uY1$=80}d~^3P{oX%% z{mY|&$!j!r$gv&An-80uRNQ%x`2yE#FV39W>(fuSE?gwO@m9ZnZ@#x-+c{(Q^qgHW zt?lt&4>yiK@X%{dj+r3T?wE1pu8YS0w8J#-x9<0?l6o2}H@|w-j%JP>1vl>%r=(;g zn{K;r!)=o8`}3>D?wK>mz3!+o;mY7gt{7sJ?8%_=Q_Y-15#c*Mv2HY)&1&bz@fJ`xd540-`drxa>9JRp?@W7Zx;W>@4|_Bk{fBYY!zo|PpL6{i7Q?R>*4#OLn10ct z{+UN;sqeO|frpz8y!NhVZk<^;Zejbf7FPRZ?(h67@7UI=&ttAT?>3bGw(q+02l-2% z-SzY4Zci*9)W34+17CgDc6Hn0u`7mcE1CY?iisuH411du;*+PwWp$|DKDX20H9wE2 zyK_?WoE{@zSd=;>Fko?~KUUToGH1_*^~TILhx>UujcDDZeZ7X}PZy_Nc5w0KSKZJx z=i{3f&FjB?%Y&Wo3@rR@>iTYRIgj^$e$s-~O&@z8Z+Ye?H!s=y<0rd^tUeg9?0R_Y zL(^`)uH?n1o?UYPD1Z9g*ABkZ>W(p=AA{1i!@YaoJAYS2_Fz#rbz9Em@t1ylczjQX z^_u*v#FsC;srHC*=~91i`EG-^>8Ql#uK29u2UiU&j(aoxpnJ!bkzd`hcG-}k-G?@< z>eysN#p+x8%&A`ge7hS5f3b7nyh$^QpItL+(RFqAFI{q=!EbYq4&J`y*zGND+3K7* zr{Aaf>sIzm>6vsS7Xgdrj^BLiuXla_<-e?3yxPCXl62Xo z)JN7@fuXp8xK<4=*=vzHeOX&#%m%bFpXd z!=LVar)=B6zO6dfOSD;=^zzKw+J4%;QT-RawXFBEQwOd*blY3E9GLw`8)wTEKh*WP zx$Bqt*b+TAzi9T><&%H=;@kB%m)xH)-P}>P^r?*tx_8?seR^g0FFUXNdHkeaYg-(+ za_inLhpLi3?$eff=AR=#rkT>}<8_Q)&FUw`O1Zb%<)!_nB!oX zVSAe)j>HJt3_geWg3U`E7lX?uphsyqW~ zRmihwbG5C|<|?d;^e`YPVzjU#MULDeZ*X0n!ZwlDrN>u7-yxSpmieKiSpiJ~=*)zQ z@XJgYg4%`4;-6ymu_yy5%uuB>;y#p$ESr-cS8QS_3ZiVc6*eXjJB1wuL_Tt%HY8Dc zVwSwC-CJGG))C(7a&&y3)jq?X<-}NZ!W5vRn0wYM;4%H3Fo@KRKRrRH6B*Y!|I+!};vY|29 zj#C!jzySSi;d@j2H0X8nh&Qj>@9kgk?5kLu$lCIZDK$fsI!#pSgzvF!85ag{p#oz7 zS1T|E@NNah0DfKh_GbgpL@Kg0RAcZhXNnyx7UZ6Xp^EiK5Hb;4<0kqYKBv`{Z^<=* z=-f{hZvkpq?pZHEMvlA_nY5Tf<<Ov}P@gkr>L9t(pqV875;F zTeZ*Ua0gs7jb2xEWu?Pz9N9m|WHJsMQaH4`(d+Zz+#SCW3)!rQOuC}1|2h`LQ!ton zO(qj$Uw~$NUOD#v#v3h}CKL98>vQr=h&3Vk%5zMnN!9*x?2S$g7Zo=4#>1TM>RMxN zW?p8t(J{s5oHWG-Rkv(#)tfU+g{P&QB}6&&Km7?rD>P@AqY^6cUgo z$|y~5&NRubFRJ7VHE$dU{rah93D_?}44XAhccs-&$A64Qqmj|_j6Oi;Zq2g*pgDa- z5|lz=HniF}y#_SxxNz?z+ho{O3Q+))AB$%MZ61EGXb()TaRdYZ5%Lflh`U=I8g~?XHUU!(#aEMQ0FXK$eF~U?L7Wd6XB-Z<-Se9#Wvd{Qu zw&Xo>XruvIb}>_lv0fnt?(3<@lE#FVri$$f)ovv_BZTZ!5b>ZYhJ*^+A;dZeb5N{G z2p^(YJ;OH6MoJ?yi7pg_L~Myy)xcD&7a;VK9-)`u>YylkN3b|kV9$wFEFj5%A%!JO zDrU{=^iSg=fj}bKz-A-)9zH1;68Ymq^aRe*k>w@<2LM4xg=Ozm#q9!aQs}Ysm4F6U zD66!qiRe}$;Wi?=orvxrVv2IC$RI?Q5W$~F9MFK^O2w+v2O$uYc#SwRiv4jgk+?aT zN$Tv6D~P0~7bp)$C|`_M?pr}39Q1@SqPo$vQGTaEtkf~%VMNrb_R1R_lzXjmpAB>u zD?hp@YSK%T-|S?iXE?v7Z5+H6-3fzK@3&iT#*bx4Zh?y(IN9a+H4}-OeYKo*D?5i_ z75;c1l6#Td6Y?xs4zbQ`>5*y5G-aAE!XGE%k8E8u0YA%;SVPZ7;^#1;^fu1v?o5lx zWXdpE5Z*FVj=Jic)(b@%g4c?W^h0tUlD;@-kA)U2b51)KPkI86`&4+CZ&wez%lx=< z0pTz|xR<4aA*I6#3M&G;V2JLTnTa{gX><6qye?~?!sDyTVv=hH#L`R?M0InPIl~Ow zH6tKQ*9>4?8_Nl&*X!}P)N$HPL63VklJ&04$Fmf+c{Z}x&|{w`0vR|TIBJ#E7I3&u z;HW^13wQXNfTMzWvQNA|PwmXpexmYQH82m%JUCDW1~1iTld*h%Rk@m-Y6-y|fy%LD zlh;sjN{Di-%h;+#aY(>Kq4WmKo`&&$mnSe0vy~hqGT@w6TGSshmZ7M0$nc_pSZ^}6 zuQ=2CWS`mkHf2?V>@vXkGMs1FN*jE+7K-?Im7-y10(2Z^+k=y`9FHxoA9{0L$W;=V zh06gV!utV4#)W%hHoMCnfvT+(vySqW$K|xmoW#6-@io{p!X4tmy@gVE6or{CRUb{f z%%gz91y(!ND90D$LXr(hs^=Wm{<3!(oDOxEpX9KAXk;K^iUrhJ>%$zSDr|(vG8;(`WIea_S-%5#jYc?yhH^(*kpdZG(u-=_ORqK-^LCZs{V z*cg4rz~*#*I%gzo#wvum7y=HL+YvzbQ9uMmH896URS(9R=5%+A=l4&kj7~4+2^vUFYOS-sBcSlTRRA~J72n^Bvcp~mSh_tYXs1)LX4rlC5 zBC-Pe|JAmH=a#rhKDQIgbxN=2bIfq~{EiGZL!+{hPl){PDsKi<4b^UE!08A@=~E3B zxZ|AMR&1ryO7`27AoGL6YA#GF>d_&PbeT#qd^iYO&9Y#yST`HI)#WZFx-!^KO-&8+ z7ghP?oeFB)?_^U(a1o}1;G#Ifb`Y>Fu)2=SfibvTN1Y+OWK{VpyU2~(wHNb6?pK)K zE4P2I9(lb6qRx+)BEWh!{UrByuO(kcwW0d_E4AgTH-q!0LW;=*c1T`JetAto;Kg+;Hz z%{z=03@I_^nsVKpPk2W*I^dne(ty<$80M^Sn3W|whf4O&!fTRz$i)E1jPw(b$w4yl zR$P&@Y&5)v!Vy3*=gY2hctMGTf8r~$!y0=<&gsNgWN$(CiX8DeGn5e;2^q=Wk9ehl z-BV?Cx-lR|`2!h8=KSbXAJveO4}hJ%534CRd8jGU7~xI%%_Ppm<5 z=p}=^(Cu;po_e8I`1t71hiFM!KlEPmx$O$s#yaEB0qr6+0dl`q?O1BR0lDA;h6_@J zqHd9U55y+6pG}ruP;qgH#~&!RRyhXAs|Z<;!;3Yl5S`sQv?HuDWa?1y8fqH?3kM8b z7J^n~8`G7t;69zXrIC1nPWJ7GEFycv>YyROI7)BCY-E0?r(gIOcdQoLhQr_YiSkNc zC}dAKPdqGy!}fGS;M0Ce*>LYCHv^*|D#7F&OxbhQsHYI2bXcV|W`Ye9`&qHEX^xF= zmnGok6g0T7k4wGdMD@Kyw4I1{64ATzrZ}9KEUt+s!lB8ybBSi)9F@Ai4v!4#rX4Ds2yO@L>) zsOF1hunMD3t1u*U6^8Jv!q`-!!jN)RIG%$co2t(tGpaBIIu(X=rNWSZR5*!)!GYB0 z^*9()p87n6gHt)U0S7na;6@zWn1h>ea8nL$#=*@wxCIBdiaBvz2x8-0X z2d8szI}UEo!5ugl(v(V*P8{5sgS&7rtX1m!-8lFh4(`su862F+!C4$^;$X9m*nU!6 z*}55z4$kA?9vqy{!96*+7YFy|;65CTo#7X-5)k#}-~tYYMoE3Akb?(s@IVe8 z#KD6(cnAl>O0D8NpMx=-sn3UTa1jR=b1<}1>iZ=e4CiR|`A7~f<=`?79>u|DD4gQs(_kAwXj49mKTr<#MYbxVB?!AXU&olAvha_}q;zLTNz_n8s z4xX`#E9bj9*@%bhJ^54$cJ1cg*`tG&LcZSD$%aE*ALznc0zcFdOj_*Pt0Q_ufj`nQ zjVHT4)-i)1yFSqoZInU!R7bR0fj{H&{ai3y$+q zX%2mjdcG?(Mk);N0Tw~4|{mF z)DzpHg{zf5d=70J?)@|lZp*<&4o>Ibb{yQEgFA3=M-J}9!JRp{3kSo8MJ+!LPf_7> zIJi3pXK-*P2WN3GT;o(cW)8M+a5e|$aBwaM=W%ck4$kM`o*dkZgL`vu9}Yg3gZpyu zc^ur2g9|vgKL;0b@Bj`T$iag+crXVK;ozYhd_D(Xz`?^fxQK&`Ie0h+mvAs*7O8D9 zl7mY*xQv5Gaqwsk9>c*Ga`0FV9>>AsId}pG!wRjI=OPZC#KDs}*vi3hU{$}haj>0( z9s2N`SfQ6=_u#7J-kG8gpD*p?o=@fAX&j7`!w~}r7xZH4oa@$y`6>=vQ@6c)xo@X) zu#d|Zj*;pa*8zQaUasc&*bF_v^MhSA9KWj7hv&_i`tV#Zi+kr{?)fF$^V$0FJb0;I zjzfWK4p)9`d|xJKOY`*Mwe5U;cy7H+A3hKKa(!4%Tfn`)P#>N*7je%QbMTcMd=&>@ ztqt3~wcb0;9WAcELD0w{%51kmHBnoXJ6?0>V#lwrxu1-7^g zh7Kr=MsC(_q8Nt_QOsKo?FQYliW2Q6igC1j2I8TEJ`g9&qvje6W5gof* zg9yra4WeUnPecS85e%8CKP|k@+6gR}N~qPK$>$JB?P8*IJDnB_Yycb<5xUaY5a|U? zyw^}NKGqUxyERM~T0}8+>vsASO^IOl&?1VlTes7<)gXe=M2jdj z)~acHBP=djM8;SV&C!$y<{B-cela3S(DozPdNhdQVr~8uEg~3-G>F7l5w+DKf|W^w zC^c3@=V=kaM5RGwj1|!wEh5;rG>B9e!qf5DcH6XwU>wsRnj2$@+D9OQWsOJFenYH? zp4XNLW;qQa<{=#e=WqX_77=WE8bmL|TB4V?h>mCx z!ThR0^ka;OdS0zX1lui-sOQx&PW=5+w9OC0FOR5SiZ?b6+3!1T^TTSaLG<17*bwz^ z`jw_1!Q{*%>fiLs7!g%y=QY@?HHa!=BzFI!lQboQv0H=aXpFPSAfr||f~A~CG{_j^ z5E)Wm+x#%I^N5DjkFojBpRGj%8$FNc{Mj+mXv*zcL@@C4h^E{YE25XRh~OQdK@=;8 zobtW4L&CK{gXsGhJLI(0T14Rl4s z5OJ;1mI&??8boViEzu)dHUeJ^4WdV4Z2tK>wIzZh2ajm}&KMCbYPw!CXyFCIBU;on z##UR@^eGJ@xR7WOJscac7d73eK?MI3EusyvB6?bb2+k{7L{Gqq{Jh-r#8mv=$<{xG&F*T zlLpbAn_?`{$J((5_b3gbk7FEbYu%kSC4z4ik7%ts#uen+_q8;FW0nTd`!V+Hwa2xH z;MJu;bUa2x4?U+v1eY)#(L>M0iYTZZwD2d>APUAP`aN@(cHIwWwEyew%fsWSu6(aH zYcaBo4F(Lsl4TM*&@FXKYPH&Sz`HP(v9ZmP5KMJdb*oTySGlTMvI0pk5VK`LGs$G6 zpoHWxF$p9jAt4X4k$ody$o4`e30Y<`!z43~$V@`s0A{}5t)=g+ZdH{U`TgPTvAGSMk zK>I!)5vatMZ0wcffJza4_74v7K-g%>0{!4%M4$b1hHs9rOOpk9Iuo($_w=QFXB1mJ zIiO1;c1EB6BR}hh{h=JtAFKFm+|R>K9kUbt*i`BQ(C{ruMUNXLx?*rZHZ8hh;9q>e z-1E%r^B-q{up`w4!ioXtKxw_SXj($v5DIfb#rr=s%0gj7D+>jBM5sqLewC97`(arq z&?7?4%zlr9!gg8~3iOCjtJ`_!kKMQ|)av%LX%&fJtJUp%gM`hzJd{1ojsO+AwqMM<6YNB0p|)RacW)vnxcx!i4`3rR z2lb%sP$EF>8o!*g74|{1P`k!=M^!N2C~{EPM$JOy8?TQFb@UjoAa-H1P)Cp1eSruH z&dl;q*u>33%{a4e5uiTyB40$Y2b_ia*o%>i=p!4y%GnBA$XTdIHrft2f>e)falD7k&_C0|5+%|BSNii-@@4n zM+aCa&?7<}Si1Q`tb#asz(Ro@5o+6(U!TW9;ot%b1$soNnc0^(1##|yg#tYy)c%hz z{xvHVj!m#ophtw7nQiT3p>XPgg#tY?)Qeo}j6)kd)QeGD=b72Ba<;;m4<72PQEj!l zeJ7_Nj*PHSphr}2@SfrmtgUe3goOeI?tIIzM(fgTa+z|t)O3x)G8EEMPw zp?>zjqD~eH$7NV3&?7>vZr{(D9j9$rD9|H9&CEW>6$TvEVWB{e2zB(>`JBJPSsxY( z^oUT8UGsAe3P*)lD9|H9&CI@tIQHJ25u7vvlsbYHx{iecJtEZ1?DL#dIGhKloL8Nn zk1Ey7?C&`!obBVGejgp`4;&PZ2J%pUhzfPppP%Ad9Gom zkjlS91m{^EV< zsObH6!byd*ygU?%F4eC&C>#X_RNnKVzn%varyx!e`=FvL_`+JYh~gkJ5B0*@$T|2D z*MY=2W*+LL=pD$Hx>%`j4B7|P6fwk`gZJp~V4-jXoP`2CBGk<63maJ|oFHeRK#vY}GYf?S=su{MBSW2NVxe$;orgNn z6dCFzt}x*EI}i0z^uq8GClyZ5`=FvrbpipBJTHpF_dL`I8hSI5Lq2f<3x%`$KBx;K z+v){QK^*<(p9vye-dbUE~0Tv4M$O@iFu~3Lxz(UQ; zo=8Q6I(lr?jVu(x9bw~g#taYR4;J0LaYuJ zYG(F@YPP!Ex7v)w;%kaBHv@@KA1oB;kcvGPxai7l`!6jD2!qQmUIPvnm9k1AS_t42 zr^F+mz8|jjs+}D+B7$eLh%6Ffjkriy4nIv9Etzp$HbrMqyk(DerDQ5a0jt>@bvOVP zVM|!pW>p)Lt0B6CAQ=(&gatb-ubCxNE#;MJh#YlafQ$&C!os%dnmA$!)iBE>|JelA zmWac`0=A7&!y(>0GKaGy848dLL0nj%RtL!5roiLu48TDE7#62xLMy3N6(qX@U=TZo zg=rrx>56V>l2A1R$d&*s#GYZXnhO(E_Fn`kg@`pQLQ7uO6g@6#l{WTo<6tuj!EOL^ z!)$|H@Nr*RR?|kk>~dewZ5%-oAyy6x)soAKQrrn{&BFwl8DVx?w3SP+UrUN&HjcmU(LXsMDK=cJnWuBvzdDhAb&Y+%>dm+jySls+v!450C<3m{=*g z^0F336^=_zkD^5aEOkEWwM8OhNEgv)VctNT#J!F-NW|*9-d9VtY zM*;*xL@-vcjDhgwMYB|p4a7N@Vmx>(FKY#1zNNdz2NJ68O#vb!a2YG|Ii_lQwV!pf zL5^pYshVQhX|SK&6~G&T(pcW>^J+E@{&vk51*?X-fA(Ao1bIP(X=5chKPUGxzTM|N zf=sbGC-;iR+}{ROGX#iZrJ(i@$6uK}UKOZHkW)sCI!>INoMdvjwx(ef55g9e_XHFb z#K>c1NlMyyQPl(~a+@5KX{+W&`?~<45Uh_C3cZV54ZVxR-0Ycx#G2~P0I3i*kd^9e z%go91Y(Uqs-*C-ysBjdH4f)| zcwA8}S&E6085a+$T1leatblfR^<}WCi)WZY=-ya|-qM)*Zc8Zb?kFJ(#@amb` zwftm&jEK(4%6KtllZ{(yX`v0e-Z5x6_yYj~BZMp~uwzuKCZoRYm1+Bq067ufmX&j@ zX=#Rx5|xwUN3yboOZadRV#I+&2m8Hb9;vA3j|B*W__`3L=y>66VPNdo$!SpSk$kjK z&qedWKOP`Bf&sIFpDQO)slHTPGR3^pd_);7Zk>-jbLd;Gby>H4_ZQgK1@VeqanZVf z9@@I3lEI_$+XC!^pvW#mIwO_MGgA{74CVyWQbR}dt9ygHJ$rmI&^ugM%@L8=6@*^m z5}-DzZpzEJ{lWVxl`c^ z`)pSzAFK05yyjH!3+$%GG}RhCqumbFu6@wx3(>eCtnLWAQb_jn z_M%R^GeBWo!jzpi;Vnsc2eEzEU4LSW0m6g3!rAk5cl{}#EW7h`!JYS@=_kY>cNwDG z^(}Be=DZ-h_Xm_I1Vm>ATZ1W-n)@%kL1N6&Jqv0X5Tc!xZbL#k6*aXhu`Lw#9|DYs z=<%$Wwh^;6*2+xnN(S{+5Z0a*a;1<+CTSbn8*z*lY9qcP-Wy;s#MNho>B-C5m}~_4 zb*{S-P+PGO5QcS6fNY5K&&qbToapHt=$Y5db$0|ASbeHBmVM7YdM4|%aOZ$47ai3; z`{T;@w)9hE@T4!u&=eUi%5fRefnn6uj5(|u zlwpxqN`kt^xXp(Zc(rBPGr4k6n&-;R#jjA;>KS_3U)c=Bg+s2m@HgwWU-sAV3{9kJ z@He|SM~B;uc*eWJ9bGCByd~qU0saP8D7g$#lFl+EbDkNp8vB&S1w)Q`t0LuoJghy5^V1)%FN}O>YT#{2xok5fZO(u3%Fcq zkmaC9u>Abn^uFWA|CP;h-1fyX20fHYOG|~Z`IqMp4X@~K0j@O#!a};jTI+-3f7uB z!Z3q&8sL^WRzP>+tF|?!fiO|#=q5}C_%+;p$4Yp%kVyAqRb(E^>OEm{`NzW5Yu)`X zveg|I@wtN0vBUBEUktDAJ@aqN+jrf`ogl)ke=K9rLm7uvs-WtQs|CTZFCmY~0ac!r|5Y6*4vta4*f}p7J0^NKM?u(VJ z*d!Jk78DgH1S%383E+UsKv@pw`Z+L*=hc`6r9TwF7Z;DRd@FRXCGrd0^|AjpxSrc$;I-* z<|T&T*EBh&~&rRGRB4AKE`r5fFbeo@Wp2`lLhl1kF*nxM*m&SKY^$Mnel>JpVq|&~$U2H8n1A_c6|go4SV8ouTRG zWh`Ud81G}eESz!3z`L5M*X|b6#!AL?031@dYHB2IU>R?!WPC%o#x<;T3{7^GSjMk&7~kl2eI~o;1s{PL z*V3;Zn(X50@x>0~o63yC>v5_U&o$Y_Ri{fT8HZP=u)X0`J=bIx=Q1}}G7fi{VLMdj zV0@U(<1Lkp4~G`6TIN88Cc7+_@zzSlbn+^saLs?McxbYV>(FnjWE|e1uVs8ZG}&da z8gH*;Y(y~i{Krm1lU>|saYrTN@X=x|`yhrUySQHF&PvANz06cC&EjMi=Q4*J#&0e= zkZ_los$~c>*~LvaU0TUFe7Y%Y=f@oNn48PoRmnKQTxPO{4*gWq?QE&O%+GkL>Gsf4 z-CskWYiO#8D_pxP8HX3Hnx+&dySUNfu%Gc{SNLc#Rm<3Es%aBz>OFqOQ%#$~O1M98ca@*TCRrr<SZK{~nrZI?6JBy~Frsw;oS59SvpN zU&~zPRMRn*@f#``9}8z(%V=?`>2)mQYbzPQE}U^KGXhghce0G%SjqU#aK^O^%qP3J z`ReQZj3>Lo=c{X4{+VjxTBk#P##2qz*#1X-iUqRTKbIKULfGxKNY; z#Vvv8jKH)iO?HJZfz-06X=tkHZETx#*w1*X>1`1_Vek&0YM$^XpXP6FH++nL@@f0x zU~boA+ciQ_l8YCs}1oA13HfW-iR2lbjZVg(~k0CgkRO zJ})f1Y|t@>l253l+aku~lA-DHD?7FR8W%03d+@(}4IP^WV~&KkIWB5_QH}|3qQ-O4 zV}<#~yG?kXMpZND7{Its#MrzdO$AhrwK&}y1{QQ|^@tu0%qeo+q8>KcIuC1wK?Mc( zdb3Y5C%9LH08;a>4ON1Bh4XnZzzx2|C;Ub?GFf05pTFR*b^vsr1y?Bw9s6ZtOg1_@ zJFoVEv(mkT0Y&j>r{Ts+f;5QOg^<%Lz}xohM*(i#2Wm_znpg6;T$lHqKHN6o<~1#^ z(m88CXxmOo0_tc0>ZA|#TvHZHhGI>`MVxobsWhNO(L@A^YO*h($KrOl$*v7x^=^mN z9Znx$sihQTM}rFZJqPx}G>aWAkkogEk2Cs|5Bv0W$cRudE!lv}s}9=0fj&|J+7Jv{Z3^r2hQPU=Py0YY_e;81 z)l4g=sD-#SRvq(t4)Ze=nAZnl`fC#``q0)#zs6ehQ6DDgemUEXl4S_usBFN`S3?~+ zv*R@^>SukZpa-K?(|_doecZOP|LsS8ejnXd#uoX-YRMQaXoeiOv}*Tdj+}8GcNX+9 zKjsq9icDVsM-MMEjbM#(f4djDlL+>tYPo?wOjk`EVjzp#GXYDRd^^l`3yKH1(|t+kHvuk)+YeS$db3X7MTtQ`bgL62LT27{w5Koh0?-Ybyx(`U(Ph z>s*d7*s>+i?PO~c{lrxCRb)8nCIDd(<)`bcOs}oy`8CrthGk+;1xz_l(Z`km9=QnJ4m-8Do%sIb*&_L)2coQLaVD0r}-BLnYsTy@M zew{-|Cpj07HbU074JSKZKG{-NS68X5XNSjkW~jaZg$X1cor1{d8@ z(Tp7~$;QM*9YxJja`;y$$eY*!hBnf1>E5xvj>M11up`~82_s>Wke1KY*#@r>%K^(1FWPpgWVQt!`*TEi7(W9lDs+~=h3Y%;m+A{v)ysJxj}4@C$)6fXYa8{~|JguV$$#PT7bj^GIoa~^%P+r-R;G z)AJ3U=fb?t3I4yNk#v&(0A{N1nq>d>gRkGW&q{Bba`NEsjYc{>qK-Sj}C*c6e>0~%rM^3iDtW9Woa1U6~(qp*ZM>fojj`_DZ_Ji|w zf1}ZJf5UmZzu~+uancXf;r(#3kr3K0HG3|)o{&}qnQU#Ng47YR{_Nr8t6x4@Wm=>v zLVW;2#k5CNgoXfwidl}T2#o;<6|)nUlGNmw`80h#NuS@P&+pLZPwDgj(C4@5 z^C|j7(Sb-mAcU+Sgq%T09ePLTqdbcdI*Jdvq4(TF$ocqx3nAaf%OB#gl8{yeL2H%j z(ZmC-q!;yqtJ*S0HT=7bmVAP8=yZn&p&b@Uqg_AzNjd59Z^}*&&^mNUAW~0>kmaZ~ zt>AtdA*~ycoe-)MdUO)_vvJ+fj!blmS}~`1(0_EG@$VnK{@Gqa2)YL65;&-4+6kk5 z8bXoIBj9J7hSY(8M?D@5cr@bCgvTO0n(=7CqZN-fJQm|YuRm%cq~+>*g8mi#cQH7f zj%&yNtAU(NNGlpsYT%neIf}i&0I$Ou(EEb`TOteD(l>|`y zANUGn3(6?Gx?5(E6R&ZSB8~goaLO|L4cs#Nw^Re_d+XprVD z{bjqh);Y=Q94K$02+10eYzffnQ2Y$p)YLKA=+0@zxL`=KVWL+Gp)Yd;h0vEfzaijm zMgjLX%Hgo{9z|!5^BX1I{g!RlV)ekM$~;g{+DN(Q>ixD0?tQcvQiD)iz=PM*flXF5 z^|(N)zyVa)&RIh53bi0 ztqNACXpO+4q1&ivy>U^bEy!>Uay0>qUfR%_HIw6V))fqElRle;D!B+?%}}x}YbLX@ zX}M^%>fLs$-L1-kDW3sT5<>pqls1&q-#foiQr+LE zYQJ>eqolg;QBvJ+QBvLaEzEli^xQOUOd9ke-1l(4?r*q57iS6cekt=F&iQAKJW$O2 z7LISF(+fo9bbp^gXuCxJpsjFqS;^p>MF@G$!Mxy1U=Alwr{l(3Xwg4R=zpktxswpM zGg_-K?tC*LRKB+m>ik>D+u`fr?1^kIZOb|QCr^me<+J}C!An{#HT)WPULV1KCg5Q{ zdY+x|Hiz;zge1t_@R}wbIw1+<0U<=i|L?`)eR$A9a1(yrNJ!_3M5ZsDN#`>CLMAO| zWH}?GC44*duGhcw!~?%yP*q2RRjog@sxD7tay=PI&g2rA!9+&NBxI`T>@&|zwx7SS zn(hzQwBeL%+LKB5WCjK@vY6@X&7@OQQ*!h8zi&PEOD9k3X{AP;Scqc0!>@5`omYk% zPp!JdR_^@8tL}Km!e(RAuN1ALo?cC-R6Pnf}2{f6msl<;zE}Ikd2uIuxvF%c<4W&eYy?CXvfX$xMGPljyZoO|Smpp%n|O zsu-+l>;DT?vx$t9%gBQnsV5`#+p2!@SO50ZPZqZPYQd_uomy4ViprT}razg<%9-9= zCSkWNC+n~H;>9Z$HdC(+)^zcy)pSK7BlTrc68`3-jNG5;8>E@~<3i!3-(9+}s=hH; z)zeP7ssnN+oy{cVjF`=2(-|>KRef^HvgJG8y|Cr?x?ok?PpzuU6Pf;=j3{Pu=}fvm zGnmQ+BBuwQa5UI)%$l zt*Uls_iMNOrs2|M3tL(*^()19c27UGda=EQbP|1|oYMtNufFBzpH|k{WA0ayhb@c9 z-dowB_aSIphoSdpKfCCLWta;@Ha241yy?|gUA{lI=ipX47Qf@;zr23%0LJ1g5}9;5Bgh#^%A|TS zy@Q$lzJTF*MOx~vY`6un%3^XoXO*mHmES*VTcy>r$_mFSSy*NJHrpzH^J&H^SZc%c z?p#)(+uUQST%=a{)*Hs2e)3C>Rm60rKbsjyWu!D5bT$`Ym5Q{~DmL6R3p#0WeQ>on zIIJAFl4f0p@sS_( zr54^*pI@O|lc(IuQ>&cqs%J}YJpa()=N6z1YFX;5sghSyFLnIa60fG7<Jr^l-33{#?>5yqo+8<%E7Q02dP1(YVqv7EPgF>T!P)*t^8r>f}E5|K13aiqI2Dqx8yr`YS3 zn7?w@fZTP<2D&i{6gq>76&ZT&r&*G7LP@pgx}|6+x<#cz!sVE}cK%)7G@Lw-ynJ6B zSx)R^nVf8iBU?+Rr4_KT$s&Y|V*l>b4L7KSv^-kZcmrisAf&b7Fd;3oqji|m?QEj{ zE{8Kd42Dcd$3HY?^7j52dmGJuTcCr6+OfvnOk`-~joaO8Hng|3w{>+}nx=MBu#SQz z$@b2p4(vf%x3&T*-mxa06-K)YIOudJD~uj8OyQD5PrR4@O{d~|DZ6HUhh$nYU9d(r ztqDoG0WxG%O%&7)TjY+-!!c8~N_yJ{h-XfimR#tz4c9G5lD!{ft&>rF)H(oFWRAylFx#~8~hAFOD-_fC!EWKoH zDw(p;A(*i-K`qH0Z;ZWejU-sYn)Msn+uFLiOJ+8~YYxM-LD>a2I)V;HG`f?N8Xa;P znr6id#gZ7uR<4pR8xWDT-77B=iOAA9NvQ=ZiiBMhx6*ZMD*yjqCBs#C2Ry?LMU_zv zwp~7ijd3V>$QKkIw~`N!Zc_}{p~{zAl%ilvI9b}}Sdvz;ZHm#cX3Yj#4%bqMjFAsvAzytqj->fYjKb z(tv#p_LkH(LOOf*4{c8Nr!pyZvzXeyKi7XaeI$3`&I`9>_l$R6c;U9<@YP%QUO7H? zMBKbNmz&rt2z{Fx3F$o3b6t$v!rc&^tsbQgi(mDG^qd8unjxxT3fP-Ldr5V53!xe1E1aac4f(L zmv;}ZYHED?obQjWdh3sFe(L$>fAOx?EpPglGalS>|9|}LU$6Vg6`#EO){O&+lkZ(T z^0xTz`a_=m~kC-fH{*gGy?J9zak#-_i%W$e0Gtl@iq+3>IL|M|MdU;XuoUuazi z$G>_*^Vo`?{@WKX{=jE1TYLUf4>!H`rZt_Tzj^jc_4j|_&_7-B&o|EQx$l9&ftN1Z z@Ys6krO$nP-{)@m(BJ*vU%ho?IC0LyACGOhcj%_uKKjGfzh3-o{nFJ~Yc<6Y8GDhj zC4&Az8=W;2DKE$5BbFqOxdg1hI)s90Deh}5oR(k5v@zK*6iIf;XyG05m?{)a_dS}{ ztRr&74VUb`!@{lev91}GShNh)rD3s`p~*))BrF>{l$?}x(=%@i<+tEU zdn95R`5gD1Da!gGQ8;87LeUgNOVP^mm%B1Zq*=Pl2MXJL91si?IQj>=l;7LS>Mjk7 zvf@ZiD|$M>JoF@@n*`#E1w*i8Q_SVvw^-#CwL(ECO7Nsb&GHP7g>H|e%c82~m7@C{ z(CG5Mpvs2F6r$6&qN>P6%iXI)*Tb3jhcumPP`V+j!i4wQV?tlMtWjQQVrOST zRw+tK(bLFJwt0D&SaxT>w#kP~xh$<8!RF&3V9}pN7?X>V=H&$JE-B`yS5B!-Xdlxy zimL`yj=o39bl;*-=9GLvC}ML~Q5HQ4Y~)aMxm>~l@4Tj=O}K$dlFH$T1w&MeRyU5|yEwGm7Yy#54WY`hf`EfsZc#Q7;wbf(u?rACU#s8kw7}8lO&hxL5fENIcfL93_KB8Hsu30vit1GI$OQ3aI@q7hK z@?{T8GL11%T|nfs3&=WQ2<^Tf7gSZ2VtMRb^PCC$;doy0JRx{d{bSzVYnKR?_iBGsgM(00!D9&j)Tu$MMqs!bW;|)6$t?-EYAg@-Lom9 zviA}jm=puscIY2SII2jZRwybM-&%(3Ssq)k0BDXYmN*gmElqJ?unBkJZf= zsHBbQMW>nY-ouW%PLEf*Ns%$gltZc}j=C@Hbb7ZScxHtJx~_MtNxJJ@G-NNkVR2p8 zHJR>)R~XlX+{8yFmmU)9md>>?lq24i`y9wFoTPG;aAiXoHu}2@x@vYC=9u1%!MsaE zOUms1w)4N+WE&5-TPBHS>bY*gD3>3220xvvuD<={6acM|P%PJ_YH5myG?Oj2%GDSd zLNV_Z3!kK=Y+k1gu&eC3yrhn@=pL1djAK|`HJNJMuRZ+60;rVNyMQjwY?6a!U%`zQzjL}8ZbkC8ajb=zWp=b%FM@3aJ`n&T5J$8du z?wG*gFdvoMQlH)3iA&d9J~;w%%usaBj=nsnWSNIU7E|Lbn@Nt=(CBqt5pDEBK$wMw2(L0`=fB&Fn;lvl#Om?f&q&#V_ugNg=kzA1wmkvAS2Pi zS7p-_R3-0~Sg7F=oD*TLSnM}uQPaFq0r%{FBZ^*og5Ht$+N<#p*nR6FqvS(G-?yqL z=JKp}cG59=P#&r%jtE8OEfq)=C3Kyb*Oav?D&x#M$2z9WqEb!mVU8e*vgrwm9COcc z3F3&CW6TGVVlXoZlrTQtP3v1XqabQUnZVZ=ng`xTTt%n)jwfTHp!=1;+d`F>GW!yq z)3ts#J~1t3Vgq(FOZmKPa?@szHES6;GiH{uW13njl?>spHz2d6&Ld|`$r6*MN3X^|dJ#t>$~#j?ws{SGag z<`U2eK;lA4wUn4Hn5I5r2&R{1P6H&C+b$0Gr#N@mon`X=^mt!2;^d(Y?PAW`RyI>gi_|myxY%;W4zGMYKjAaEA zn@sFKyoIP-T2W4FMK8}0mc)lbNBlgFn|-#W%@IK_w@kboXcJ?Ksi^{7NOd`A8dVlX zh4NsK=b&q+#>1H%9C=a(Jq*Eq);w*EEl~zvF4`75^~{?Q1W`N zsLy7>^!2dt7CrESP|TNSq2a)7x6Ak&AY&#Zt7(>OFa*rRl}vBp27-b6p=`;r%H;qa zhJQmFG~M*218;M}Ova?F;T2}r*Rk)A#c*kou2Y#z%MkRKQp|Zy4<&?I=fIez+\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n\ + \n\r\ + \n#\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n\r\ + \n#\r\ + \n\ + \n#root.mnuc.backuper\ + \n\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ + .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ + \n\ + \n#:local Script AM-GlobalConfig;\ + \n\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\r\ + \n\r\ + \n#\ + \n:global MkDir;\ + \n\r\ + \n\ + \n#:local FetchFile Binary.backup\ + \n:local localDir \"\";\ + \n\ + \n\r\ + \n#\$MkDir \$localDir;\r\ + \n\ + \n#\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\r\ + \n" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +/certificate settings +set builtin-trust-store="ipsec,wpa-eap,capsman,fetch,sstp,ovpn,radius,userman,\ + openflow,tr069,dot1x,www,api,reverse-proxy,logging" crl-store=system +/interface bridge port +add bridge=Bridge-LAN interface=ether5 +add bridge=Bridge-LAN interface=ether2 +add bridge=Bridge-LAN interface=ether4 +add bridge=Bridge-LAN interface=ether3 +add bridge=Bridge-LAN interface=wlan2 +add bridge=Bridge-LAN interface=wlan1 +/ip firewall connection tracking +set udp-timeout=10s +/ip neighbor discovery-settings +set discover-interface-list=LAN +/ip settings +set max-neighbor-entries=8192 secure-redirects=no +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes \ + forward=no max-neighbor-entries=8192 +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=WAN lan-interface-list=\ + LAN wan-interface-list=WAN +/interface l2tp-server server +set authentication=mschap2 use-ipsec=yes +/interface list member +add interface=Bridge-LAN list=LAN +add interface="ether1 - Unet" list=WAN +/interface wireguard peers +add allowed-address=0.0.0.0/0,::/0 client-allowed-address=::/0 \ + endpoint-address=89.110.101.17 endpoint-port=29185 interface=WG name=\ + MikroVados persistent-keepalive=10s public-key=\ + "64Y25EUZQQt8EIeAJYD8qWt+te8qvGEepnswdBgmzlY=" +/interface wireless cap +# +set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \ + caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\ + CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\ + wlan1,wlan2 lock-to-caps-man=yes +/ip address +add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.8.0.2/24 interface=WG network=10.8.0.0 +/ip dhcp-client +add interface="ether1 - Unet" name=client1 +/ip dhcp-server config +set accounting=no +/ip dhcp-server lease +add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ + 48:8F:5A:8E:EE:A8 server=masterDHCP +add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ + F0:DE:F1:91:0D:1E server=masterDHCP +add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ + 00:80:77:EC:43:86 server=masterDHCP +add address=10.30.30.70 dhcp-option=domain-search-list,HostName \ + dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP +add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ + 04:7C:16:36:F5:37 server=masterDHCP +add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ + 10:2D:41:2C:20:C2 server=masterDHCP +add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ + 10:08:C1:81:59:5F server=masterDHCP +add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ + 10:38:1F:D2:5F:13 server=masterDHCP +add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ + 10:B1:DF:E9:D0:D5 server=masterDHCP +add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ + FE:02:52:BE:3F:16 server=masterDHCP +add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ + D4:6D:6D:FD:E5:49 server=masterDHCP +add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ + CC:42:10:12:46:94 server=masterDHCP +add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ + 50:CC:F8:85:96:0A server=masterDHCP +add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ + E4:18:6B:58:34:AB server=masterDHCP +add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ + 00:27:15:41:97:A9 server=masterDHCP +add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ + mac-address=C4:82:E1:03:49:10 server=masterDHCP +add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ + 10:38:1F:82:81:F2 server=masterDHCP +add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \ + dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP +add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \ + dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP +add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ + server=masterDHCP +add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ + MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP +add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \ + mac-address=F0:75:5D:1E:5F:71 server=masterDHCP +add address=10.30.30.100 client-id=iVados dhcp-option=HostName \ + dhcp-option-set="=\"Client ID\"" mac-address=DE:4D:72:F3:1A:9F server=\ + masterDHCP +/ip dhcp-server network +add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\ + domain-search-list dhcp-option-set=domain-search-set dns-server=\ + 10.30.30.81 domain=WORKGROUP gateway=10.30.30.81 netmask=24 ntp-server=\ + 10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +/ip dns +set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=8.8.8.8,8.8.4.4 verify-doh-cert=yes +/ip dns static +add address=10.30.30.33 name=ros.vados.ru type=A +add address=10.30.30.95 name=vados-nuc type=A +add address=10.30.30.33 name=amster-nuc type=A +add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A +add address=10.30.30.33 name=amster type=A +add address=10.30.30.33 name=amster-reg type=A +add address=10.30.30.33 name=mng.vados.ru type=A +add address=10.30.30.33 name=mgr.vados.ru type=A +add address=10.30.30.33 name=prt.vados.ru type=A +add address=10.30.30.33 name=reg.vados.ru type=A +add address=10.30.30.33 match-subdomain=yes name=mikrots.vados.ru type=A +add address=10.30.30.33 name=oxidized.vados.ru type=A +add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A +add address=8.8.8.8 comment="Google-dns IPv4 1" name=dns.google type=A +add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A +add address=10.30.30.30 name=MILLER-LEN type=A +add address=10.30.30.30 name=miller type=A +add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" name=\ + security.cloudflare-dns.com type=A +add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" name=\ + security.cloudflare-dns.com type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=149.112.112.112 comment="Cuad9-dns IPv4 2" name=dns.quad9.net \ + type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +add address=10.30.30.81 comment=LocalNet name=MikroVados type=A +add address=10.30.30.10 name=MikroNUC type=A +add address=10.30.30.86 name=MikroYellow type=A +add address=10.30.30.85 name=MikroMic type=A +add address=10.30.30.95 name=VADOS-NUC type=A +add address=10.30.30.98 name=VADOS-LEN type=A +add address=10.30.30.20 name=garage type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +/ip firewall address-list +add address=91.215.120.206 list=TRUSTED +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=10.30.30.100-255 list=KIDS +add address=8.8.4.0/24 list=YouTube +add address=8.8.8.0/24 list=YouTube +add address=8.34.208.0/20 list=YouTube +add address=8.35.192.0/20 list=YouTube +add address=23.236.48.0/20 list=YouTube +add address=23.251.128.0/19 list=YouTube +add address=34.0.0.0/15 list=YouTube +add address=34.2.0.0/16 list=YouTube +add address=34.3.0.0/23 list=YouTube +add address=34.3.3.0/24 list=YouTube +add address=34.3.4.0/24 list=YouTube +add address=34.3.8.0/21 list=YouTube +add address=34.3.16.0/20 list=YouTube +add address=34.3.32.0/19 list=YouTube +add address=34.3.64.0/18 list=YouTube +add address=34.4.0.0/14 list=YouTube +add address=34.8.0.0/13 list=YouTube +add address=34.16.0.0/12 list=YouTube +add address=34.32.0.0/11 list=YouTube +add address=34.64.0.0/10 list=YouTube +add address=34.128.0.0/10 list=YouTube +add address=35.184.0.0/13 list=YouTube +add address=35.192.0.0/14 list=YouTube +add address=35.196.0.0/15 list=YouTube +add address=35.198.0.0/16 list=YouTube +add address=35.199.0.0/17 list=YouTube +add address=35.199.128.0/18 list=YouTube +add address=35.200.0.0/13 list=YouTube +add address=35.208.0.0/12 list=YouTube +add address=35.224.0.0/12 list=YouTube +add address=35.240.0.0/13 list=YouTube +add address=57.140.192.0/18 list=YouTube +add address=64.15.112.0/20 list=YouTube +add address=64.233.160.0/19 list=YouTube +add address=66.22.228.0/23 list=YouTube +add address=66.102.0.0/20 list=YouTube +add address=66.249.64.0/19 list=YouTube +add address=70.32.128.0/19 list=YouTube +add address=72.14.192.0/18 list=YouTube +add address=74.125.0.0/16 list=YouTube +add address=104.154.0.0/15 list=YouTube +add address=104.196.0.0/14 list=YouTube +add address=104.237.160.0/19 list=YouTube +add address=107.167.160.0/19 list=YouTube +add address=107.178.192.0/18 list=YouTube +add address=108.59.80.0/20 list=YouTube +add address=108.170.192.0/18 list=YouTube +add address=108.177.0.0/17 list=YouTube +add address=130.211.0.0/16 list=YouTube +add address=136.22.160.0/20 list=YouTube +add address=136.22.176.0/21 list=YouTube +add address=136.22.184.0/23 list=YouTube +add address=136.22.186.0/24 list=YouTube +add address=142.250.0.0/15 list=YouTube +add address=146.148.0.0/17 list=YouTube +add address=152.65.208.0/22 list=YouTube +add address=152.65.214.0/23 list=YouTube +add address=152.65.218.0/23 list=YouTube +add address=152.65.222.0/23 list=YouTube +add address=152.65.224.0/19 list=YouTube +add address=162.120.128.0/17 list=YouTube +add address=162.216.148.0/22 list=YouTube +add address=162.222.176.0/21 list=YouTube +add address=172.110.32.0/21 list=YouTube +add address=172.217.0.0/16 list=YouTube +add address=172.253.0.0/16 list=YouTube +add address=173.194.0.0/16 list=YouTube +add address=173.255.112.0/20 list=YouTube +add address=192.158.28.0/22 list=YouTube +add address=192.178.0.0/15 list=YouTube +add address=193.186.4.0/24 list=YouTube +add address=199.36.154.0/23 list=YouTube +add address=199.36.156.0/24 list=YouTube +add address=199.192.112.0/22 list=YouTube +add address=199.223.232.0/21 list=YouTube +add address=207.223.160.0/20 list=YouTube +add address=208.65.152.0/22 list=YouTube +add address=208.68.108.0/22 list=YouTube +add address=208.81.188.0/22 list=YouTube +add address=208.117.224.0/19 list=YouTube +add address=209.85.128.0/17 list=YouTube +add address=216.58.192.0/19 list=YouTube +add address=216.73.80.0/20 list=YouTube +add address=216.239.32.0/19 list=YouTube +add address=2ip.ru list=Test +add address=157.240.247.174 list=Instagram +add address=46.53.178.107 list=Instagram +add address=179.60.195.174 list=Instagram +add address=157.240.205.174 list=Instagram +add address=31.13.24.0/21 list=Instagram +add address=31.13.64.0/18 list=Instagram +add address=45.64.40.0/22 list=Instagram +add address=66.220.144.0/20 list=Instagram +add address=69.63.176.0/20 list=Instagram +add address=69.171.224.0/19 list=Instagram +add address=74.119.76.0/22 list=Instagram +add address=103.4.96.0/22 list=Instagram +add address=129.134.0.0/16 list=Instagram +add address=157.240.0.0/16 list=Instagram +add address=173.252.64.0/18 list=Instagram +add address=179.60.192.0/22 list=Instagram +add address=185.60.216.0/22 list=Instagram +add address=204.15.20.0/22 list=Instagram +add address=157.240.200.63 list=Instagram +add address=185.60.219.63 list=Instagram +add address=129.134.31.12 list=Instagram +add address=66.81.203.132 list=Instagram +add address=185.89.218.12 list=Instagram +add address=31.13.66.63 list=Instagram +add address=84.15.65.162 list=Instagram +add address=68.66.224.28 list=Instagram +add address=157.240.253.63 list=Instagram +add address=83.174.11.224 list=Instagram +add address=157.240.9.52 list=Instagram +add address=157.240.252.174 list=Instagram +add address=157.240.195.63 list=Instagram +add address=31.13.71.52 list=Instagram +add address=57.144.110.192 list=Instagram +add address=157.240.252.17 list=Instagram +add address=84.15.66.97 list=Instagram +add address=217.168.6.33 list=Instagram +add address=31.13.83.52 list=Instagram +add address=157.240.241.63 list=Instagram +add address=129.134.30.12 list=Instagram +add address=185.89.219.12 list=Instagram +add address=157.240.252.10 list=Instagram +add address=157.240.201.63 list=Instagram +add address=66.81.203.197 list=Instagram +add address=179.60.195.52 list=Instagram +add address=66.81.203.7 list=Instagram +add address=216.40.34.41 list=Instagram +add address=157.240.202.63 list=Instagram +add address=157.240.229.63 list=Instagram +add address=157.240.252.63 list=Instagram +add address=31.13.72.53 list=Instagram +add address=124.108.16.224 list=Instagram +add address=157.240.205.63 list=Instagram +add address=92.46.37.96 list=Instagram +add address=157.240.247.63 list=Instagram +add address=157.240.234.63 list=Instagram +add address=157.240.235.63 list=Instagram +add address=87.245.208.97 list=Instagram +add address=216.58.192.0/19 list=Instagram +add address=209.85.128.0/17 list=Instagram +add address=198.105.240.0/20 list=Instagram +add address=173.194.0.0/16 list=Instagram +add address=172.217.0.0/16 list=Instagram +add address=142.250.0.0/15 list=Instagram +add address=108.177.0.0/17 list=Instagram +add address=87.245.197.140 list=Instagram +add address=74.125.0.0/16 list=Instagram +add address=64.233.160.0/19 list=Instagram +add address=157.240.0.1 list=Instagram +add address=157.240.238.63 list=Instagram +add address=157.240.238.174 list=Instagram +add address=157.240.0.63 list=Instagram +add address=157.240.224.63 list=Instagram +add address=157.240.224.174 list=Instagram +add address=157.240.251.36 list=Instagram +add address=157.240.253.12 list=Instagram +add address=157.240.253.35 list=Instagram +add address=157.240.238.13 list=Instagram +add address=157.240.238.56 list=Instagram +add address=157.240.238.175 list=Instagram +add address=57.144.112.141 list=Instagram +add address=157.240.251.60 list=Instagram +add address=157.240.251.128 list=Instagram +add address=157.240.238.5 list=Instagram +add address=157.240.253.13 list=Instagram +add address=157.240.253.5 list=Instagram +add address=157.240.238.2 list=Instagram +add address=157.240.238.37 list=Instagram +add address=157.240.251.5 list=Instagram +add address=157.240.251.34 list=Instagram +add address=57.144.112.1 list=Instagram +add address=157.240.238.54 list=Instagram +add address=129.134.26.123 list=Instagram +add address=157.240.252.3 list=Instagram +add address=31.13.84.4 list=Instagram +add address=157.240.224.12 list=Instagram +add address=157.240.238.4 list=Instagram +add address=157.240.0.13 list=Instagram +add address=3.33.139.32 list=Instagram +add address=157.240.0.35 list=Instagram +add address=157.240.238.14 list=Instagram +add address=157.240.238.60 list=Instagram +add address=57.144.112.145 list=Instagram +add address=157.240.251.35 list=Instagram +add address=89.110.101.17 comment=VDSIna list=TRUSTED +add address=10.8.0.0/24 comment="WG VDSIna" list=TRUSTED +add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina +add address=love.ru comment=love.ru list=NoVdsina +add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina +add address=pochta.ru comment=pochta.ru list=NoVdsina +add address=vdsina.com list=NoVdsina +add address=vdsina.ru list=NoVdsina +add address=youla.ru list=NoVdsina +add address=kupiprodai.ru list=NoVdsina +add address=myip.ru list=Test +add address=geoip.co list=NoVdsina +add address=facebook.com list=facebook +add address=fbcd.net list=facebook +add address=comp-lenta.ru list=NoVdsina +add address=128.85.102.70 comment=update.microsoft.com list=\ + windowsupdateslist +add address=wu-b-net.trafficmanager.net. comment=\ + ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ + ctldl.windowsupdate.com list=windowsupdateslist +add address=redir.update.msft.com.trafficmanager.net. comment=\ + update.microsoft.com list=windowsupdateslist +add address=geo.prod.do.dsp.trafficmanager.net. comment=\ + geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12437.d.akamaiedge.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ + comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ + list=windowsupdateslist +add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ + sls.update.microsoft.com list=windowsupdateslist +add address=fe3.delivery.mp.microsoft.com. comment=\ + fe3cr.delivery.mp.microsoft.com list=windowsupdateslist +add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ + fe3.delivery.mp.microsoft.com list=windowsupdateslist +add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ + fe2cr.update.microsoft.com list=windowsupdateslist +add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ + download.windowsupdate.com list=windowsupdateslist +add address=wu-f-net.trafficmanager.net. comment=\ + download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=tsfe.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ + comment=9.au.download.windowsupdate.com list=windowsupdateslist +add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dspw65.akamai.net. comment=\ + download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ + comment=licensing.mp.microsoft.com list=windowsupdateslist +add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-nlu-net.trafficmanager.net. comment=\ + star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-tlu-net.trafficmanager.net. comment=\ + star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=storeedgefd.xbetservices.akadns.net. comment=\ + storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ + comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ + windowsupdateslist +add address=e16646.dscg.akamaiedge.net. comment=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ + windowsupdateslist +add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=bg.microsoft.map.fastly.net. comment=\ + 3.au.download.windowsupdate.com list=windowsupdateslist +add list=windowsupdateslist +add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ + star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a2033.dscd.akamai.net. comment=\ + star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-nlu-net.trafficmanager.net. comment=\ + dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-b-tlu-net.trafficmanager.net. comment=\ + 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a122.dscg3.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist +add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e10370.d.akamaiedge.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=a1683.dscd.akamai.net. comment=\ + dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ + comment=collections.mp.microsoft.com list=windowsupdateslist +add address=a1847.dscd.akamai.net. comment=\ + wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=au.download.windowsupdate.com.edgesuite.net. comment=\ + 2.au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dscg3.akamai.net. comment=\ + au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + 4.au.download.windowsupdate.com list=windowsupdateslist +add address=cl-glcb907925.gcdn.co. comment=\ + 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ + comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=ts-frontend.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ + list=windowsupdateslist +add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ + windowsupdateslist +add address=e12671.dscd.akamaiedge.net. comment=\ + download.microsoft.com.edgekey.net list=windowsupdateslist +add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12358.d.akamaiedge.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-tlu-net.trafficmanager.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a1856.dspw65.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=smtp.mail.me.com comment=smtp.mail.me.com list=iCloud-Mail +add address=smtp.mail.me.com.akadns.net comment=smtp.mail.me.com.akadns.net \ + list=iCloud-Mail +add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina +add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ + purchase.mp.microsoft.com list=windowsupdateslist +add address=e110219.a.akamaiedge.net. comment=\ + purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.141 list=windowsupdateslist +add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=storesdk.xbetservices.akadns.net. comment=\ + storesdk.dsx.mp.microsoft.com list=windowsupdateslist +add address=e16646.g.akamaiedge.net. comment=\ + storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ + software-download.microsoft.com list=windowsupdateslist +add address=download.prss.microsoft.com.akamaized.net. comment=\ + software-download.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina +add address=87.250.250.50 comment=YandexDisk list=NoVdsina +add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ + purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ + purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ + cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=a1996.dscd.akamai.net. comment=\ + wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ + tas02.sls.update.microsoft.com list=windowsupdateslist +add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ + star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ + paymentinstruments.mp.microsoft.com list=windowsupdateslist +add address=10.30.30.33 comment=NUC disabled=yes list=NoWG +add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG +add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG +add address=wg.vados.ru comment=VDSina-vpn list=Trusted-VPN +add address=80.85.244.9 list=TRUSTED +add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=89.110.101.17 comment="!!!VDSina Server!!!" disabled=yes list=\ + NoVdsina +add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS +add address=dns.google comment=Google-dns list=Trusted-DNS +add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\ + Trusted-DNS +add address=time.google.com comment=Google-time list=Trusted-NTP +add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP +add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=cp.vdsina.com comment=VDSina-vpn list=Trusted-VPN +add address=vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=ns.vados.ru comment=VDSina-vpn list=Trusted-VPN +add address=vdsina.com comment=VDSina-vpn list=Trusted-VPN +add address=cp.vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=ns1.vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=149.154.164.13 comment=telegra.ph list=FuckRKN +add address=109.70.26.37 comment=grani.ru list=FuckRKN +add address=194.85.61.76 comment=grani.ru list=FuckRKN +add address=104.16.4.81 comment=xhamster.com list=FuckRKN +add address=104.16.3.81 comment=xhamster.com list=FuckRKN +add address=188.114.97.1 comment=lostfilm.tv list=FuckRKN +add address=188.114.96.1 comment=lostfilm.tv list=FuckRKN +add address=172.67.182.196 comment=rutracker.org list=FuckRKN +add address=104.21.32.39 comment=rutracker.org list=FuckRKN +add address=104.247.81.99 comment=lurkmore.to list=FuckRKN +add address=104.20.28.254 comment=dou.ua list=FuckRKN +add address=172.66.164.200 comment=dou.ua list=FuckRKN +add address=66.254.114.79 comment=youporn.com list=FuckRKN +add address=185.110.92.41 comment=pornolab.net list=FuckRKN +add address=185.110.92.40 comment=pornolab.net list=FuckRKN +add address=172.67.172.95 comment=crimerussia.com list=FuckRKN +add address=104.21.71.238 comment=crimerussia.com list=FuckRKN +add address=149.154.167.99 comment=telegram.org list=FuckRKN +add address=149.154.166.110 comment=api.telegram.org list=FuckRKN +/ip firewall filter +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=12h chain=input comment="block honeypot DNS" \ + connection-state=new dst-port=53 in-interface-list=WAN protocol=udp \ + src-address=!10.30.30.0/24 src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \ + in-interface-list=WAN protocol=tcp src-address=!10.30.30.0/24 \ + src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment=\ + "block honeypot ssh rdp winbox" connection-state=new dst-port=\ + 22,8291,2222 in-interface-list=WAN protocol=tcp src-address-list=!TRUSTED +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ + connection-state=new dst-port=5060 in-interface-list=WAN protocol=udp \ + src-address-list=!TRUSTED +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=5d chain=input comment="block honeypot NTP" \ + connection-state=new dst-port=123 in-interface-list=WAN protocol=udp \ + src-address=!10.30.30.0/24 src-address-list=!Trusted-NTP +add action=fasttrack-connection chain=forward comment=\ + "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \ + connection-state=established,related,new disabled=yes +add action=accept chain=output comment="Accept Rule for Trusted-NTP Servers" \ + dst-address-list=Trusted-NTP dst-port=123 out-interface-list=WAN \ + protocol=udp +add action=accept chain=input comment=\ + "accept NTP clients on local area network" disabled=yes dst-port=123 \ + in-interface-list=LAN protocol=udp src-address=10.30.30.0/24 +add action=accept chain=output comment="accept WireGuard" disabled=yes \ + dst-address-list=VPN-Server dst-port=13231 out-interface="ether1 - Unet" \ + protocol=udp +add action=accept chain=output disabled=yes dst-address-list=VPN-Server \ + dst-port=29185 out-interface="ether1 - Unet" protocol=udp +add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ + connection-state=established,related,new disabled=yes routing-mark=\ + !To-VPN +add action=accept chain=input disabled=yes dst-port=443 in-interface=\ + "ether1 - Unet" protocol=tcp +add action=accept chain=output disabled=yes protocol=tcp src-port=443 +add action=accept chain=input comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=input comment="defconf: drop invalid" connection-state=\ + invalid +add action=accept chain=input comment="defconf: accept ICMP" disabled=yes \ + protocol=icmp +add action=accept chain=input comment=\ + "defconf: accept to local loopback (for CAPsMAN)" disabled=yes \ + dst-address=127.0.0.1 +add action=accept chain=output disabled=yes src-address=127.0.0.1 +add action=accept chain=forward comment="defconf: accept in ipsec policy" \ + ipsec-policy=in,ipsec +add action=accept chain=forward comment="defconf: accept out ipsec policy" \ + ipsec-policy=out,ipsec +add action=accept chain=forward comment=\ + "defconf: accept established,related, untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid +add action=drop chain=forward comment=\ + "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ + connection-state=new in-interface="ether1 - Unet" +add action=accept chain=input connection-state=established disabled=yes +add action=accept chain=input connection-state=related disabled=yes +add action=drop chain=input disabled=yes in-interface-list=!LAN +add action=drop chain=forward comment=\ + "Filter Rule to block FB address LIST : )" disabled=yes dst-address-list=\ + facebook +add action=drop chain=forward comment=\ + "Filter Rule to block YOUTUBE address LIST : )" disabled=yes \ + dst-address-list=YouTube +/ip firewall mangle +add action=mark-connection chain=prerouting comment=\ + "Mark VPN connections to exclude from FastTrack" in-interface=WG \ + new-connection-mark=VPN_No_FastTrack +add action=mark-routing chain=prerouting comment="Test sites" disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=Test new-routing-mark=To-VPN \ + src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=FuckRKN dst-address-list=\ + FuckRKN new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=Instagram dst-address-list=\ + Instagram new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=Twitter dst-address-list=\ + Twitter new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=YouTube dst-address-list=\ + YouTube new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=facebook dst-address-list=\ + facebook new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment="VDSIna for All sites" \ + dst-address=!10.30.30.0/24 dst-address-list=!Trusted-VPN log-prefix=\ + VPN-all new-routing-mark=To-VPN src-address=10.30.30.0/24 +add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \ + out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\ + 1381-65535 +add action=mark-routing chain=prerouting comment="VPN Network" dst-address=\ + 10.8.0.0/24 log-prefix=VPN-Net new-routing-mark=To-VPN passthrough=no \ + src-address=10.30.30.0/24 +/ip firewall nat +add action=redirect chain=dstnat comment=\ + "FORCE DNS TO LOCAL MIKROTIK DNS SERVER" dst-port=53 protocol=tcp \ + src-address=10.30.30.0/24 to-ports=53 +add action=redirect chain=dstnat dst-port=53 protocol=udp src-address=\ + 10.30.30.0/24 to-ports=53 +add action=masquerade chain=srcnat comment="masquerade Default" ipsec-policy=\ + out,none out-interface="ether1 - Unet" routing-mark=!To-VPN +add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \ + log-prefix=WG-nat out-interface=WG +add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \ + in-interface="ether1 - Unet" log-prefix=2Amster protocol=tcp \ + routing-mark=!To-VPN to-addresses=10.30.30.33 to-ports=443 +add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\ + 10.30.30.33 to-ports=81 +add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \ + dst-port=80 in-interface="ether1 - Unet" protocol=tcp routing-mark=\ + !To-VPN to-addresses=10.30.30.33 to-ports=80 +add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\ + 10.30.30.33 to-ports=22 +add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \ + dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \ + time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\ + Bridge-LAN protocol=tcp src-address-list=KIDS time=\ + 6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +/ip firewall raw +add action=drop chain=prerouting comment="Drop Honeypot Hackers" \ + in-interface="ether1 - Unet" src-address-list="Honeypot Hacker" +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \ + content=linux.duke.edu disabled=yes +add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \ + in-interface-list=WAN src-address-list=Trusted-DNS +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment="vk.com raw" \ + content=vk.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment="ok.ru raw" \ + content=ok.ru +add action=add-dst-to-address-list address-list=Instagram \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "Instagram raw" content=instagram.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting comment="Twitter raw" content=twimg.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting comment="Twitter raw" content=x.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting comment="Twitter raw" content=twitter.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googleapis.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googlevideo.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=gstatic.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googleusercontent.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=nhacmp3youtube.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \ + content=rutube.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=me.com \ + content=me.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=icloud.com \ + content=icloud.com +add action=add-dst-to-address-list address-list=facebook \ + address-list-timeout=none-dynamic chain=prerouting comment=facebook \ + content=fbcd.net +add action=add-dst-to-address-list address-list=facebook \ + address-list-timeout=none-dynamic chain=prerouting content=facebook.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=comp-lenta.ru \ + content=comp-lenta.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + smtp.mail.me.com content=smtp.mail.me.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=gov.ru \ + content=gov.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + r78.fssp.gov.ru content=r78.fssp.gov.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=api.db-ip.com \ + content=api.db-ip.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + api.telegram.org content=api.telegram.org +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set irc disabled=no +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip ipsec settings +set accounting=no +/ip ipsec policy +set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0 +/ip ipsec profile +set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 +/ip proxy +set cache-administrator="" max-cache-size=none port=80,443 src-address=\ + 0.0.0.0 +/ip route +add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn +add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn +add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn +add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn +add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=WG routing-table=\ + To-VPN scope=30 target-scope=10 +add disabled=no distance=2 dst-address=0.0.0.0/0 gateway=146.120.64.209 \ + routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set reverse-proxy disabled=yes +set ssh address=10.30.30.0/24 port=2222 +set winbox address=10.30.30.0/24 +set api address=10.30.30.0/24 disabled=yes +set api-ssl address=10.30.30.0/24 disabled=yes +set www-ssl port=18443 +set www address=10.30.30.0/24 disabled=yes port=18880 +/ip service webserver +set graphs-plain=no rest-plain=no webfig-plain=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=Bridge-LAN type=internal +add interface="ether1 - Unet" type=external +add disabled=yes forced-ip=89.110.101.17 interface=WG type=external +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system clock manual +set time-zone=+03:00 +/system identity +set name=MikroMaster +/system logging +add action=email disabled=yes regex="* added|changed|removed *" topics=\ + system,info +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes use-local-clock=yes +/system ntp client servers +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +add address=time.google.com disabled=yes +/system watchdog +set watchdog-timer=no +/tool e-mail +set certificate-verification=no from=MikroVados port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool mac-server +set allowed-interface-list=LAN +/tool mac-server mac-winbox +set allowed-interface-list=LAN +/tool netwatch +add comment="doh, doh-url=https://security.cloudflare-dns.com/dns-query, notif\ + y, name=CloudFlare-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 \ + http-codes="" test-script="" type=simple up-script="" +add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\ + flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\ + oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \ + port=443 test-script="" type=simple up-script="" +add comment="dns-fallback, notify, name=Google-DNS IPv4" disabled=yes \ + down-script="" host=8.8.8.8 http-codes="" test-script="" type=simple \ + up-script="" +add comment="doh-fallback, doh-url=https://dns.google/dns-query, doh-cert=GTS \ + Root R1, notify, name=Google-DOH IPv4" disabled=yes down-script="" host=\ + 8.8.4.4 http-codes="" test-script="" type=simple up-script="" +add comment="dns, notify, name=Cuad9-DOH IPv4" disabled=yes down-script="" \ + host=9.9.9.9 http-codes="" test-script="" type=simple up-script="" +add comment="doh-fallback, doh-url=https://dns.quad9.net/dns-query, name=Cuad9\ + -DOH IPv4" disabled=yes down-script="" host=149.112.112.112 http-codes="" \ + test-script="" type=simple up-script="" +add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \ + down-script="" host=91.192.189.2 http-codes="" test-script="" type=simple \ + up-script="" +/user aaa +set accounting=no diff --git a/MikroMaster/history/20260515/20260515090001-Diff-Config.rsc b/MikroMaster/history/20260515/20260515090001-Diff-Config.rsc new file mode 100644 index 0000000..10c2cb0 --- /dev/null +++ b/MikroMaster/history/20260515/20260515090001-Diff-Config.rsc @@ -0,0 +1,70 @@ +473a474,475 +> add address=151.101.84.159 list=Twitter +> add address=pbs.twimg.com list=Twitter +485a488 +> add address=x.com list=Twitter +679,681c682,683 +< add address=smtp.mail.me.com comment=smtp.mail.me.com list=iCloud-Mail +< add address=smtp.mail.me.com.akadns.net comment=smtp.mail.me.com.akadns.net \ +< list=iCloud-Mail +--- +> add address=smtp.mail.me.com.akadns.net. comment=smtp.mail.me.com list=NoWG +> add address=17.57.155.37 comment=smtp.mail.me.com.akadns.net list=NoWG +1045c1047 +< out,none out-interface="ether1 - Unet" routing-mark=!To-VPN +--- +> out,none out-interface="ether1 - Unet" +1078c1080 +< address-list-timeout=none-dynamic chain=prerouting comment="vk.com raw" \ +--- +> address-list-timeout=none-dynamic chain=prerouting comment=vk.com \ +1081,1082c1083,1084 +< address-list-timeout=none-dynamic chain=prerouting comment="ok.ru raw" \ +< content=ok.ru +--- +> address-list-timeout=none-dynamic chain=prerouting comment=ok.ru content=\ +> ok.ru +1084,1085c1086,1087 +< address-list-timeout=none-dynamic chain=prerouting comment=\ +< "Instagram raw" content=instagram.com +--- +> address-list-timeout=none-dynamic chain=prerouting comment=Instagram \ +> content=instagram.com +1087c1089 +< none-dynamic chain=prerouting comment="Twitter raw" content=twimg.com +--- +> none-dynamic chain=prerouting comment=Twitter content=twimg.com +1089c1091 +< none-dynamic chain=prerouting comment="Twitter raw" content=x.com +--- +> none-dynamic chain=prerouting content=x.com +1091c1093 +< none-dynamic chain=prerouting comment="Twitter raw" content=twitter.com +--- +> none-dynamic chain=prerouting content=twitter.com +1093c1095 +< none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com +--- +> none-dynamic chain=prerouting comment=YouTube content=youtube.com +1095,1096c1097 +< none-dynamic chain=prerouting comment="YouTube raw" content=\ +< googleapis.com +--- +> none-dynamic chain=prerouting content=googleapis.com +1098c1099 +< none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com +--- +> none-dynamic chain=prerouting content=ggpht.com +1100c1101 +< none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be +--- +> none-dynamic chain=prerouting content=youtu.be +1102c1103 +< none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com +--- +> none-dynamic chain=prerouting content=ytimg.com +1104,1105c1105 +< none-dynamic chain=prerouting comment="YouTube raw" content=\ +< googlevideo.com +--- +> none-dynamic chain=prerouting content=googlevideo.com -- 2.52.0