From e0a8f0093baced35b395b07e3f351d8a24ca963c Mon Sep 17 00:00:00 2001 From: vados-dev Date: Fri, 15 May 2026 08:40:17 +0300 Subject: [PATCH] Backup for MikroMaster created successfully at May 15 08:40:17. --- .../20260515/20260515084002-Binary.backup | Bin 0 -> 121230 bytes .../20260515/20260515084002-Config.rsc | 1241 +++++++++++++++++ .../20260515/20260515084002-Diff-Config.rsc | 40 + 3 files changed, 1281 insertions(+) create mode 100644 MikroMaster/20260515/20260515084002-Binary.backup create mode 100644 MikroMaster/20260515/20260515084002-Config.rsc create mode 100644 MikroMaster/history/20260515/20260515084002-Diff-Config.rsc diff --git a/MikroMaster/20260515/20260515084002-Binary.backup b/MikroMaster/20260515/20260515084002-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..6e17c0c0af5877d3dfb1a39d4ca1a632d38ab86a GIT binary patch literal 121230 zcmeFa34BvU*FS!4lBV}|p=IAo$_~;tNf*i@Qc78rmO=}NfRH9>8%UFoq_m*OqO!Pe zh#LwjpopO2qadsLsJNq`prW`hfVi@WwExd{?!C#}P#`>yufOO0zt2_Xp4{Gh=FFLy zGc)I$IkRZ(il=Y+NT4_(@@HqvaQXu-ug6S80uf0hUwRIX;ow*f?#$pqt3V_P(%Aug z<8cNvX86lnDd;a&?sfI`^^Fy{h=?wxLaUzWF_2eiH4uqJq!WmQSgI4^sE!1xlPHGj z#QOUBdWq^%DVge04OKRmr!ga;P6W~zyw+4MqTgE`ba^T=s>>>T8TRsu1f{Gam5gy8 zNrl!#C5xu`7WoKmOubSQ$|`(m9%rz|>z@`tUa<~mxvknAY)^GPTFPIsFZjPTQi|;I z1=Gr1?x52@Q6TC-MDHk>nuzFm1x_WRw-vY}_q-GLKA3&I@=g~bdPsr0647b}?nXp6 zDR6fps!`w`MC4N7oL{$o$Mnt0(IGu>bC~yW5U8TTiFvAqs!r`XsAPi5BTtKFDjMK*E{RCPX?kJktcC)TCivk8`Ha8#E2G z*{3=E-H1|STpnL_5UsXJncHihW~x-*8C+B{o+vfG)L$J4Ivr_)i%OpV_e�mWFQb z)?jIj+R~W#(xjfdG?8S#ts&dUm<&eSP4d5WBC&s{6txm!sg6)VBGn0MCGn)A!cZ9? zAIy&+H%-KM<%i`5it}jmuN!twn)iOGl3>DJ>WrSqJ}YO6=cRh!3@} za}giWays(FcRD}uEhC7x1%gh$D=>{GJF+97)8gL+bOcQi!27vNjSV)Ph~jkOi_`i1 z#fj_)MWw}>7FASQe0``zaqWcSs7~lWB)lq+aK9jTYP90+=#!1mCp)7rc0s?3E%*9s zY<>qSKXr&L5G?iE?9)u;UcbrX^`wn0E;8A@9*@%=ba_32RHD@6vBgD`i@cLVFFzC_ zLY6H&OLr@>1mvkrcyl}n9}>~CiYyta$On+f2A3{Oih#tfAkpZp4l1&tQ=Z-K^aV|$ ztKCjUqbd}NN{dY;PCth1D|lg1R9d|H9OS9JOc8Y|nT&&KZ-clytC(Z-c16WDRU}+D ztu*UylPLy)cDKvv2?k7FkIC(|+uSCb-)S=`1L#c=WUkL7_74pcLZS^3-7b&-NephH zl0hQR$q)y-F%Ig8Bm>ykJ%WwN3Q^-+e&^6?o8JMR#f>d4N|Sk56G4mMC-(1OqNTf* zmL41}5!t#z*+#bJJxXhSroq%=AoP%ey`8u^31TgU5+s!j1BQ1 z#L{$>T>#b$E!JistP1_Z^9zfw3L$+&AmNP&<}##NMB*GGAzQhF>I~pFYw>49;tzV2 zF6#DrePxh{-60b5^NIt7c||>jg|co)azI)jS4@g<50%f1tS!h|k!j(E_)56Bh2OVa z2a$Na$`mWU>w zYVVeG$Sw!v>W!S_>2j3c8t`pze488o_L5M(@5gE-9o7NJHx8fW@?%?{@aKWh=NN!6 zC}B8(S<49oe&P!$ldhP7CEj$vF~thVLgc0{yLd8a)QJ*a$}f`y_2W0Cx@0%MVUqw+q# z*qhTBG^mR`NGAx#oka8ox0FLYsS}4^^u#06$34AmbI(Z@ve2@&llqFqGv z84(?jhj&b;)Q*nj34K9CyNPJ2Ky;5lbgw{kpFniKK=gn>tiIlafbv`QdaEigR|JuVP9O=|?AwF1$T0?|5wXuUx6ltA>fK=h12ghe%a&l3XCa{`+W zU@AhJ1fmy|smT_B&`}8!>g@v24uR-JfoNAO(aQqSKLvu2r}tusUK5D+#1ickh$%JR zQj{n*BKlfcOQM%T(SX_?X&~v0DQ*^qo@^vJ7$tgRO`i*>50ZXFVsbZVrAV4H0B>D_ zh0rL01`a@NOJU2@E3yVBajp!!OG5142ag|DoHG%Qx*7siiox#qFqBoD5D4? zLV-g>EIeD4{A-+O2O`=xKtyO11r?zmAu=8eiD)cYR1qzU>nKFDZ~-D369%^I`I|+w z@NbG}Ho^HDMKtT1=M&MIQTksL)a@G<)G7ZJ)Xb6+A*h)&Wpb5CSSD*Z*~?@xFPt0b zi_OLkE*b8zF$Gqh+Z~=Qg>>9d#b6x3-R5@tLcR0CCs62_m_(gx0)- zMm33oKI%4Q5(Qndt>PC9k!#I$G^K6^T(C(#i@+6fe!Qn6W7l(VNsO!IZN*^}v9 zvnMv`C@d*~YIWRDbU9T`!gs}}=SdHT`rE%W8eYhPg)N_>T(Ag#(Sjw~{&ubf%m1(X zTZe}GTg&tJxBr}_%K1B4qw_COI-IMM{RJamdZEof%@ko&f(FQ0Yj;;WoU)26WLaX1 zmc#l6Y)&_7rp=s+LtW8e1=G-)R*Vx#R%?iK=8DF|>y9Ec8}T5!NcMIJ4bDZ*;2FxH zc+SJYV+%qv1g-aSd2z1*5o zePPv=Lf@64Ora$Q>v=mH%GI3dGeX*Ow$^7xpVq9H0l!@-W|JygV0yLFZ*w?JgJoZs zuns;FGuA;+`-F06jSkuf>|={+4zEtu3y4MDv5tVtV?+BhjvI>RwJAh>bha$a(_l`6 zDeZ_-wW#9n^=vVb$_C*dlphE6B*J=y0Umdd+5*gIqng}83UIdk=4!l|tqSJ%^cgmX zH<0eHt_%i!0oHGmqwvojtY_7_6(BQVx1#d@9|Y_h@h$% z`W3}L06l~^57ROc9JU4S^xb=?|8{fu^*y_>KsYK_>oz zk+5QdM3r<^-vb5kg|q^x1;}m@BD?(=WT$XFerp6p@HA4rjZ})hQK$q%SB8yWj54f2 z&^A?XBc^3T11-E<)T4nmMgzqURsSeXDP>Mk;&pnim8PI|#-T%X;Hbl7vGI7D$Kk9^ zhd>%)t8%$#GF8ZB!v~kF`JX19^{(?1-$5mwtwK5aLzG62JS~#KBTtUvTnCRni~`M+ z5drsRT5mvxU-PMK(unp`b-Z&pXSnRnzypd8q3SZH!=lh2XAk4WE(OLdOHpCMj}n!I z3rftc3Jm{96^6g#2<16EG@n;sWM3hFN+9`n1y00Wc?b5IrYVNYFU5GUE=$;|`|d4hG^5M^@ayMBKqZ+`&BD!8qK(G~CfN za8Fk5fbp-1a)&P|exqsO-dwpu=HNHXVz^_ngFAXW?ideo#{>s=Om1+;#0GavYH-Jd z2KPjXmg~q!_DY+}V^;2#1PT6(xKP*e4Zahnc_&4L7j3NKl}jgLRRp+NFr9u&k?2S) z2|vY>a7rX0Mk3OQM9+${MJHAy5=F2|pkxX6IzbXi*da0tj3m7uOOmiBmPEHi^g%31 z`VV7eb<*Bgk{a)eB`N76yz_A^N%fxqIvGpi-dLhPVo9P?crryIiEK#9kl2wJM3N{* zlyN!mgf+-Gkt9dFNRl-{Bm`t;e&ck-Q_4B)kh~7n1j6vgv)1r25@>vPUFI{{fN@MUrCoBH4#Oe2nB1 zB>RzkisUnqL>LDTDEBY$@Jr#9u|CZ}8)Ly!!)^ zgZOz!Bq`-Epd(0rLh>z=?~weA2VG zND}m5x=1^n&r3wDh6iG9QBx_4RttFClZP+IeIKyte;+8fqi4vveRN3r( z&9&KPbB4J#$K1>0tDM=_T$`Dhnbpf=%kFEgHTN>vtn%II^!dG2fSXH{NML-3*y#mSq|wT1cQliv0`H z%o37ju}qp}S2QTkUd$506E*|nnZPD&9gUcbvzT-9%*c3VRhX64AhR3|GRyJ5iCJ62%-Y(OgPs5Qz`i+5SgykD1^GCw{Ld znn@&PCny62EVnv1!wJ||fZe3m!h7#JYI2} zTPmt8VIXuEyaq>fTZ6tdmj~;J9$gEqugiX&5f^l!F%+*XanQ|-@-~>?xoi@UO~;0_ zkythb-r>c_XXV-Q`Bd?afR_aFtW(@mzd_}Fi{yJGhmgEMB(8}exSO*3pLn>BNPH^$ z%_lx0Vmo<1A(B$|<1e2PN&OF?#!eIUh%2<3>g(96KcHH^MDih$y>K08a~~A5X-UxL zcf;S>YASS1^LtB*%ZTd{iRUP@%-R_~4~o3?JVl0M2=fhBi_8}f?Heo*7z+4dJX81hm0i`tQ{_3+9`*UnRjd&TX5LH$@#npKulz&J=n!#~HQS56~ zDS)2Lgc?&4#>n;(Y~VVmr_^4vsz(P#UgQ{&F*V0lV;eN?ij1NP&#=)KmE{+WnL2u0 znQhn*pJUdvB2P`$#XsPKf{{7nhuN$(B{jJhdHt4)T!A4Yt-<`j@Jq)`&7GE4WOJGw z)7@2t-XX&;R`#lwl{?h^+tBtZDpsarHBg}y`qi?4(?0_`K1?tpU%+#FmCfUVvpu&F z9DAs7;oeo*2#(3AD!*V0g6fA!2{4jr8QpeA&|7V<1Xf%_xcd+)w0eky>B`P!@D37k z8g`_k891R@izO<@4+uL5O-b+}nF=pii#0O~^t+vofV$5bI!0V5n+k(Y6~<&*h4HNl zgE7!Q;<|-B$EN){2_K{aL#n~;bXZy{j|I(RtNK`{d7P;})@vSTsgDhs$JuQa+%ciY zVs*gjPjfpR;Gf&+m>l%GDk_|QR$7!01}R)9p$emfDvT1UFiNPxXc}r5130%Avl@ju z0bj&2uXX4}^^hqEp`QlqaZ^J8#1M%q>+9<=AhC@l0t_-BMKXl(Ay+LvL5nY@A$&1l zy{;jAFbZh#>9qKa4dF8aA2S$5(g(wW7N1^=FSa3kvA}0&h(74nwfGELd}2fR*#7vK zFg`?zz%(Zm7sBTAs6E!9)H&`Br6J*Yf^Nk_$xKo5T99Rzw%-|xo-vq1I0P=f2*cm#$}2dGG^H4LmU zuEL(nws|p2DRXIHmeL5sl$aIUf$XG~KWs(@jSm~-Rr1pF+L!MX6qc&DZN8Ovm7T8LBU#x4gbK%9i|4w42K z75*b?CDEmBJwci5QD)Tz1?h^c)LkMCWTgHH*+{_}S5*bF2yga2cWJsJi*D!00%&7u zfpUD5RCfc)?&m=nAC$Mi0I@Sl#NC0o2ScpvS80eH%AY`Y{7i3ku)55NOeRK|Ne^Vw z^BkD~aia>ax5DkT`CI|u9v6w5b+j`Zeox@O=sdWkiV9z45NO9nqCHE0x(H}{od>PR zc#&S_JcHP?V3jxQp9iZnGpIDUNl_9j@6JCD+9a93Gh7a*7o3Q;>7|1c8RtPBUl9n} zf-XA{N81zS-TCK1++3y_(`38X6Lfl5Ek-L9Jd*KeX?zy& z#tQuBl8TaF?lH1t4F8I@6jtPtdA?kXRjf~Hy~_6e?v*c@-n+4-Qx^Sh%%3C@G9qAc>ryKnm^jBCrZ@v zmi+UvDben&@};?*o}f*saP5;bCM;*E6nPW>`EpARR0VzMRW_G9JzV`~JUpYJouxVF zf_Z(;m#4A9J3}d&0{Wxmpd2FLeE5_6y>rvc0|8%pIHSmCXVlqQN`wdjQor-%m}v94 z(j8@KE+5(h8i@8uI7rU98+bp}r~G^wCL_b3)9u8@*>ta;HOey{Mmqhas4)bUH5#sG zp%_r^&*}=T6Nv-|5mYN!qzLfjYC@5(!uwVc!=PG+3BmLDG*%K(sol!MHxPDJRxBqHewl+6L|Lq^uEv$gAZ@v4wV(|Cc@HI!kSh>#6na# zyGC(v0S6D};C!NF$9tGo5e*_r9-ypvM-rv#-8N4l_wEP|9?rqTIJi3pcjMsB9NdY6 z)$khAtDV)(;7p%0P^;+nN}>KzG+&bx7@98?h8}B*@*FxS#FoVMM}2*LnF61xudjC~ zFpT+j1wLJ0U+-36ETvVPTM~&%g+l8MdKfr%=!h2RiEh;s-KLja|2peQxLr@eU3#{6 zK#I9TAn{-f(NTmSI3|!}Jr3xEKq3M*Fulx4Joy93DS@Q8KLuHddRn>H2_(&}M>1YV zl69+2ZbsX5Brabd&~_b(i<%O>sFOcSMR1PpL>=|=-#h8$zeAgPPhX-gdilMsN)V53 zxD)BR>t#xtLus@S{sfDVpe0%t1G-T`coTlyjN}$QNwIeTx)Vv7KvMs7lraP4FbgC# zvj{S^OYp+=`f%%OfhCp_C3MnX&Qsn0S)L{{p9+sNh)7=u!TQ%TSO1^KT*KefV3TWH zekbf?Ds!j&#{7f+^LQPx!if7HT45wAli;*KmCfzO`p^^f!GMiRweaE&6@3ERnjgo) zUKxl4Ba4&BR@uz34g-5*)xh2e;pw`vrK%Kz$Zpv6Cb88Mmf%VlIP947I|E+#45vRs z)`8Du(RsrM20%lj9wYz)Rr@s-u&TWq3t06e1~@>d??B_D9z1|WoC?FWLxtfNq{1-C ztM+Sf;R=Nl*yyL)qp{>xVUVxV0KI{lFKo*yJ=pv=Q^A7`fGP}il4=KsT1kbWUQ+Gv zaK2G(-`Et0o!_`%rB)9@z~(^pIUICUUSX4<3S*<7N)J?3YF_X$P!Dq8ZQ`fnz!Oz1 z4bKAAjR{H~1TTbhOI%7yDqEmKFT;Wn>$*Ux(iw>WJ+a>#2yJU;K2PC*$>%^i8Ax>@ zq_!>;1(x3!LKmw=r9PqD_0@PNvr(rxJOR`2;u%>cYczR?%=xQPD37EI%fk{?cTR!KNebnWtj!~-%H?)* zAv#!hE*w5$M8W8&N;}>elY9LLSZYVcQ%cKlWBCl^aFIxTsEQ z8p^oYUy!jSY=7ojuE2LTNs=UF+$@xFb8W_nDBbjGo1+iRrzm4`K7NJUZo|1~y7UsC z&xc%^hjM9gp}APYP9kS3%Y+?US2o7my*I9>RN?Rx7MN-8S0`j z`K%R(Bif&X*0G?qbqHY_Ey8$)aJWAg@&EJ;&~9Tmnhkk~GSv3-LWFG#vH1IG3tj44`-#tNI?R>4F%Mc>y_Lg+eZ z(M8eM!pA>wwXf;XYA@)Z=E5B9wHckYBSe~t;k{0NUjSxWtTR}I6vDA7VHoQS^*PoV zDvWi83geYRIZ@J6O0?y$2oTc*pb1Jm9U@q#| zhXj$1RRUHAaHxhCFjgXPein^LVzCHgZqO{W0(_yFsTB(uwquHIsbY&Zkj{*+x>kzS z8KzgPFeEH3B&;JO7*Zu&XF$xz+X<@xI0J-ZYs;Ob)HSU!9ydaghy?!CSbL>nA(RS^ z%R35G`xoo1Sev=M6=^p4fFFlthL2UWRQdB>~A^FnJEwy4El zP@!=|%vT&NLra4rwZb-Ln^u`7>U6A@B|X-;U^uMQSocXfY&PTg274h`Ab}a|Rpw%@ zSFGQ#^XU@fB$OFj!=!SzEl`=^_R4c{ETfE7&ML2e=Gwo3TA^WT(H~g(qoCH{a0RCQ z9kl8irWIREqNdepuk`*Mtw7%}t=RVxEv-hsv&tKEZf>X*pmU(jGU=$aS?qK87u&3% zVQR4*Cz9GmY&AZRrRo0av$WtCCw#1+bwLmISG%38|Dw;rD+U+(tO}#gsxW${3Pb#= zTM+sRcwT7LF?E!{1RwCB=OWykvb>Ug$OR@rV$jFf-l513kzs=$>dx~asBZ8>{dqo= zM-?rpY!+vT_z)hq;WFx&x=JZ$=)^6y?Fd3TCiHRZo;at)>A2cnY4cP#9ap3E%y2qP zJsATa>jECIWr2q0lT-R6%|?=5n)G@GW#lIM-3)Wp%uqF?0P9?Dl!PTswM}VL7cD}P%~6@ zZ@6QTs|MMEIEEe#dOH*x!N!zLb;`LCdUm7)1ahsixkuill?w5l%9?>#?($bbgOB21 z^G=|~6|`5T;rKHbJKPo5X_m_O(^P0}WrSagfu(RxL6|c%Y79*vJK0D=l97ZwBMJFN zq9I24T%<>hL>-Mpos1-`G!ktzl0=)3yo7`euK}Z6ifZLvquggI_p9;dY$OYiEJU&h z36!bE8vwC!WicSO#p%-+Ws4IASxIPwWUx^l)(eaz39InxY9wosJc(o-lJ!W~QM58! zEYNLoT=IGSLAJ#Xtr+fVxX?LO7|lzCF*j0S%#BnSZB2!7?#oarv^Hg(xe*DhX+uMb zsR}niVSB#VOp57{^(2US%pa>x*}`wRFf=hCG{Z}EtjJ2tjSEA=4!3K7n#>DB6C0vN zTd1rHLxc5vL)2tz&@d@^4i=-X*p@iPmUyKlq}hGdsCB#3&qN2r#T-+~;73 zRX0#pwZc1v)?3(NKy4_$=wjt~xU~Gdv~0^DYj#1lx%Xgm@9T&jBeuINfe0sa(zQg` zVJ6R6vD;6av#xGV1&j_X$Y7l$V8?z78#|m-s_KGPj#i?BQy-3O6PLpe4IEjBCur6! z&yqb(CqQR5C+N-d^`d#c@bhxLPSEMZ=3f;TFB*Eu?dC+I)N{eG1;-NwAwGu89W5qv zicvqtpiej(Qgcen#NKAJ#cVO-vRu(JF*Da}vE-UFEm`K?S44$lzR;1+T8JV2d?AU< z^MyFwd_ka%ql+)^_1wYdZ#-(g{LXF*Q-{ts-t^&js|?9cq;6RH*71ciFCE$Z*pH2~ z_BQR&sdr5G7MUGa9*ArFr*C!t56lTq-&34ka;SB?-=?;Ir1H?t>vz7e;Y!`^^68EN zgEMYioM?;byeg)CV&l(-|Cae^i$KyN;s@Jno9`MC^zRwkxozO|*eQpS&10@xoAc(3 zx~6HXH(qpV`>=O%O758Q=BJih7UjP=+0bs*C37F``SrKAtlKl8>w;moJ#+l}kB>L| z=+NnD`R^?Ie*38_@Aqxk|7qVBPtGd%;?lcJv-|vGQSp5}?k>2f)uZ2-SN6@T%O92J zZ!>4;Bf{5Tebe-+qg4a%NI5q3_NTAB{*NbTl{W7@C02)MYL5&u4>Ttk^<&yM6@+?2 zj9D)T_2x!+kc0;Yy-s+}+#bIh8Cn>cb-T0a+s-Ri9qaeOZO6UKstXMNxN9lT<#@(r zfx0ceXX}jZUtRjzRcmkjIb;629&tsEQTN206k*--CoW&Pe_5xsI}G(5j~?CnbiQ!i z4Z4nx4{rVQzRQ2_6Bl>v{ui627!JP?JbLZ%ywqTm_9u)rr*GZ&YRP~}d%Z7>J=}R% zr=#6&crp2nAKK>c@b?>F?VQ@?pZzDVK00*U8}n8LdUk$!%j|c$9s2t4;ujaRYMM24 zYyE@E9y^lTf7ifGbo$}b?+w~=;F6c0`eE(3B}>=YpJ^1BeA(l7_PJ~OcKbbJ=Xp={ zSl#T%kBy%g7C1ert9bmLlCQetUi7SuWJ*Z zfA8n=%kEe=dvpB2KJy+tJ-hZqpO$yOFtzbwqGa?s^zlX9X-f0{+f)AAQ&dr?hZy?5 z-cxSH0CE#i>cHN;ZFWa_d7s?O-nKGFPG+t($8PIwH=E79ZMkK+Wfq&ck2%w9b7p2{ zo6F03TXLO!%5!q8PD`e}k1f-D1Cgac0d*s?sKx2hmTYHcwmI9Jo14`;v%HUGI`;XV zWn}v%`GSXEW*k2M@T=p8Ul^9oKl~===M|@gV`mP^Pa-m}GCVZ$UftSj?h8)aV~%n6 zan^Khy=APlbm{BYpSs@U+4a&(`?E@W9N9;GEe~D3qnlG0vdP@IPqw^QzOq%z;i);E{p*Imdh_?cwp}`^ zUB4IaT2?5taNCja?;g`s$l_vW&Bn-ZS*rqB4_PMi=&efid& zPc{@A2VQ&q$FF~%wl@B~<`X?b?|J3KnB#Ze{pSsN^I8zt59j?f&#H ze{{>-_j&I}YCoRddO+5({-$S>KkBe_?wn73%YXI?D?WcKugPtXyj8q#-h(6K(;vIm z+OMqFGZ%0C_KSZ$dh+7Nv%9@=`*RbLPwXjelKav(O&Yy6d6L^=TxQN%J2Y?Xlk2Ws zk-Amaa{Di|!fkQM!HZrS~>^d1Kbh`l`IO;yp?4{rr)1|HThp-|vrG zmp1>zc4xB=BTh{(*Spe6zP)U_C-BTo)~#1R{>J<@rSUv3B;+w84-}C1a6Q6%<=fOau$3EWj*u2vHucb`y_3r#F_mzFu!B;Y- z%Wi-2*+XpybF6)2Ov`z0%F+6xMYt;vvZvXapqwg2D-j@6OX8lhg<)!rNc{OFA4r|V~@=G3Cpa{ z>o<>SbK@-^W`93@;gUT`MMHXhcP#&*(gbUD?$#bt- zIcCu}lYYPI+f{GJ+?ZQ1!MHzpXzjaM!mr2LZhrQvr2Svl*FCrC=+1pH^MCnp@3yzI zg*jQHx23(4^1@GZJDHvmuYPXZ#^x)s{T^f=jT%=q~i-!fgeWOrx5ecPVgrJuCkGPB29*G|kXyT*0sy)ic|cqb`sX`Fjn z;qID`n%0lFX7%VNUVdcr%E#tjHRfHh)iQs-lJeg!nY3#C_eCq$yYDx~NmqZ^b;kDhy7pLp z>HS~tIdV;6cHM6uz1nZ#)hE8l{dVg7o!74(*?CY8(^UuCK3P1wb@0*aR9a&$(c}c&6hbpZ0~&Lr>bPLTu{opW58ae|_^TF&53QBD z|4=PZ_Sm>?tZ5!{i%j<&C=3?zK!0;5e40yES z-qCknJ#EsjhL^>i@h6W?{P>vB+ySeEPKH+I7IPaMh9hd4&3<|{@w8acWb~h##}%z; ze$(q~Hs3h#u3^uP&YaYFp!1gWjW1`n`m&(QmK`T9KGtv3mtS7->es1_7CrZ z#=`y14_aS-y7iiEPrq96-h?N6Hb2}c=J-@k{@C{7C0jg8nr{ANP5qM#FMXfvx2?$= zd1dXS=kmJT-)Gpw2e&Of{q>9u`MG~KdT8#lhd!tq_Dc_4vx~1@ymMRa_t&i5c1hy8 z^0{w)b!*X+OoNI zXs+dx{a^fWq}}$1DwFo_ed@f1-yPPX60vzR4`R^}jRU|IU2>JM;bT%=dr6%$Mmk zva_-r<>sv3y{+Yza+hYn#Sf@ zvn7NE(SAc%L={WF2n3)L2ogX?eCO`NMwXNouXhpps`a^wvJq$c@R7VyRH7+Fu`LVyKQ9u|oL|AN%@QWEYa`a_GM~@s+ ze1@|YERPj_Z?z9$22nOd+rWhqAbcP$nD|v2H!2mO1aa+R?}sW|jt&V6BO*bH9y!3N zh!`G>9{A%J{7#!AyP5+_2Rpyv%z+$V5iCY-1c+ywXD%DpeR-XF;TC6eOrRr`$dX#H;u&Fn?6{gO_dM{(#-_JAuDW{GXYK*Z+aGy!&3D(;dDp-t z)RO#(;munYk32T=WwDVZSTF){Zc}4yjw+YumWBwFdY)})W7?|y&SRd0Uxl+P$r(=z7Eg4U-twEg`b_s)NF@7uc=HOzet zr-Post_W%%bsJ_Eq`2a|#i*IO($lN?3t!H7%i-U!%Rb`M>C1YIoz=5j`)gm>xu*VL z-8O`IwItWCe_?(5C5slj|NQC4=k5BpL5;-r`AjaeO~b(E_Exw&YOSljQK)qlMy;zb z-h*!yq}h?2w_GZ`%n;zHnl zT;XR1gZ#_@M@6<1m4&1dnQxMKzaWRC!tO;(LLhw;;DZ*+JbA_BZY<=K!qFS9SKvHD4 z92TP(m5O+0IHAFzV~5G2nTU7P4t!4~9x=Y^>+4T&g+QT75aTN@C8ds);wl|UG*3s8 z{(2p;BhnDaNjFI+9}0OT{ybSnk`IG3-GIN{f@e1YV#Q<(gLmp3wF7t0(orha=qNRr zb?fYkZUNKKYG)uAu;VY+>nL=p)kK|o%ELuyq|HKSXl!YP-z|}_@fk}Cw&55wv zRzUo@)=CUI%(SubS8YMq>Yr8=sR<*)tm(6qM!ZU)H%U zgwV$7D)*eU%I@b7J}8$6DFQcKhjWJ86<|yGCPX>}nZ$*#kSYwX=`@Y&ICE5I!UFmX zdGWJL12KDfgz_@x4;&$BRnDq1rym18gdR4|;KGDJg%Q}Y6BSz3I0Beq z#;JmYWx(1`kh{DhLcA7;9NZnr}s7-!_8WY{VAf>|2r8l0QzA7vrICA+P<}8Gdgy zeA?OFiLpW;nmbrwPa+35;@~6>PUhgoM03>u6HSQbs^K~61fs!8Ih$gq);!GTW92zO z9h`yZCJNLeq0ri~zD`Q)P+up(@3}`(p|wkWozx1GrX7!+69-8BH*jEYf`}qUfg|Qz zWdUoVz;U*+Fgn1}C~(BE$P$>5B?u&?jKnxcK+xJ{oUA3HwlsKCaV z#BCr@nO5%g*Vz0HmnXE(;wN-lB6k1DP-um&QJyZNZzCUdB9HxwdbVE?(-s{zHt3)) z(8m#(p8=X!WZ@6k@S%YICJ6NUy_<#~E<8E+n|&+Wjao8z?A*eJYY)_dgqqJ9*RIDKqDmuJSFI`flyL_b313 z&B7HsFVSay_j2=?yB-`DpR#@A*3%=8HhHV#tJ_Kn^xJQLsYg! zmvwmf%Lx-7`MO_y%NDOxJUZrJ!mdZ}@AKi|eG{JVwm7bh*L-K|?gNfB{_dKGHybxM z>+^KWw9X4VY-+pVq6wqE+B~f7_hV)sp0exa+duuTboRz8`sj|2ebV__<@(=>Z|&jm zzqM2N;?rT{q;-W`;>K^zIec_p_7j_*8}E?TJkfPnw(jJDPc1h*I4i^U{vpPMn`c~h z^2*TpOl>3+PlYW%)AlRXE&zoyLx3%cJr zs@*^T_3$W@=j}S@6dBhNyRHGuXI*lJ8{Cott4)J zf2n)onm@NBPuR98KW5;7xQo#s=FzuLPi*@^Q`@|w^&|RU-sgq!HP76rFFxZ~cL`ByCLRNC6+ zxYqMSVC4hb+xFk!UiOf&?8L!aFC7vnd2!FLTYCOu`H(>sOCJB`hYqVd6pddoVteuQ zA685%zInuZjEDozUy;$ddgt7(L)ZK|s&3ijR$0AA|8r6Du;AduUH@E}IBd?ojq6S6 z?T-!gbsg2Nd8foCmd_U_UwdTnbvNGLBkQxf7tI^AbL$h`mIW7{n7Y2FA?w*eFHc^u zy2XaabC#zcxciR%KOfjTZ1s_#bFW+nQwHOok()C|- z`S`|yBEvhWM?AZ>j{fF>wM&N;?mfDBRhQUAMANQlI$a*$7xPcfyu?e}C}n50=EX zuO0QnihF*2en;x_*ZsC`@#?^4Yy7pFlb>E|tuJh~zn$-FraO>#5lXHd0+3WZJnka95ZOq zyG#4MIJIEq(fi)L=kV;O+q>GV_^Gb{-95g}#g^!~xrMX0EuV7YtMAv}UHn+=bW0cA zlIJ%q=+$$R^!W|FzV5d2*9nvRu5EqzhHd+|9<7T1Y+#RATjAoCZPsmm{kiK$FM2X= z_SRqj8F%HzFU{*WANjifQmc|$Dnk%`(EPpNSk@~(DYbs1Yn_^Qj$@clN&3`Yh#NfB!W zjmz@9M)c%e8-aYD_TMzjL<-Pa@ z7ALZ{Jgu?@M=qjF>gj0s9^002p#$eDFgkFx0;2=(RbX`Bw-kQ-Y6Kn}dPmFIDr-4Y z>|n7Vw>)%JtUu~8Ct_>dxPa5|vbl4u*=8`E`^n-hKrPEX>nq5}k#`)MEhbS}bs(cU zP?ljfTksF{%<==TSq-BnhB9TVraViU+0@-$?e{x9LHA6P&s|+n;dGcr56Uu|O$Ed9 zhxao1{9YWR6EI;Rn-P&o577GWV?jIxqq){>He>D!(BjA`!~WkGlQrFJ#$IrJR<0Sb zCM17Zmf1YHI#7na(Q#o?VPkJL0_T~TveR?YGfmD)yK8c#9jb2G;HtNzne)%fIctb> zXn#0nQOmS^OPZx2rseyqXF2_*AvU`+cy6{?8QcB}JWatOt2L`CPhnwpcJCa8h34M5 z7L|n-4GWuPsuSj@TE*=BGvfiDC28CzoW40Z*k@hr4dD=bu7b~1A> zfad@X>QlKV?~muX$0W?9*jCw>{h!`o+Z&ai*C#i(w<*_bO}AKVcGEZ|O1Y`X8LaX8 zrGuX;a&Dp)3I{&D;&lSgs=c9ho5Li3hPf~MFHNbTG`Z^1 zSo2G3sDfoVp{Iburq&T_;q0JJwhNyPHM6S&Wev7(C8Kk;bBswBPFdOjCR+jy8>`d* zw-lhllgE?{GFj6tW>Z$KxvbRgMeyujCq7q+?!XaQSM^P6&p9P4!4YTqac)ipeFSWHgfx9+LFsiX{t!Ee>`@ zX-?n}pSZrJnV84mcxM*z%1tCD{#GQXhDl^tA%)os;6tai$=iPNyjF;0 zAd*Xv48TEqEVN*$Yud$l(g%1v=fcB$yL#hY=Es!{2#5K>y(|?1DHT>wSP|F-Lv)Yy zbc|^(yEBmCbK8RDUVl{vo4KZ8TAFUgRNazcNwdIq%@_#NH3L}F#&W{t^Lf2)wV&d6 zXI!}VBw6pud^}5Fn`b?XS%=x@aX<#i2Z>r`vj?5-GbAbyO=P*tX8r&>bPK;>An$!jQtDTnR@>oT@#Q5+I5P$;bd zqo;8~!0ioA!e}K2i43}?l@t!b9Lrc(GHhgF0oI#L>?_W+e%Yru2PFJfUteFKlpOa0 z&dU?ZeEc12&XK^^lr2im;`SS-I4oD$>{#r&d;zCDqsr@WDnlR&6}dizpn%lEU?D4B zSWG=s7jsBX@H?k7Z2(R#z|vX9>T^2%lYM@#&l|9@1_33%x>Cg*t4&$eAiE4OxeVtS zw$g@Nu7#c`M&)SOnE(xk+4kV1EXQLr3`A?L3%N=nvoIZCBD^2KWL&s6W23w55vbZq zG3qE^dEGAi%*o8_7hgj>Bitb_+*>QegA``ERDCq@GLHfZ7g+67qa07h78C)A`|?v9Kj85Xxc< zI^7;;5Y0yc5fs(P92-?V7^|A|;bm?@%|m$gO?aII2>is-j|IEb?sCF@lLUpNo~s=5tj?Q)f{#k$Lmk zP1@{?H7-w?w-z}n;Jj!u4V5u^4ofI)>xk0E+I+4MlNC7d@75(ex5Ulzxt&<9Q);5$ zIm77>IMdh&jlxDgAqse^d}&ZMRC`=OmopTlPc>NJj&pL`vXxF-d8H#^&JPKzxiF}x zM~7gh%T$Wt!$H_;mIZ^wy4mQfE^{lbfuo#`@(t>W0ZnT2-K;yIi?F`Z8bSf%&<8vj_FwWNBBap!~?``+3fNA-%YGmiD( zClK=d0Z|VhQ%F?3Mj?&6DaAsr>Y5jlnK{xbl&G#XkkTrQ;;Jy%m9F4{lveRTN~+E zNzmpGj&PMbEy@y}LnV7>;WbG<J| zLhmJ9+%cbRtTPQC+%ZxUAh&DPj-|F6unR6=xG;-Q)Gc!B!L*6(XOrhID7ZMx8weKJ zs+>dQRfIf|!;3ZQBs#NOXh&E#%&9}mmew5mj*~kJe@4)ae?pQ5!2#3G#-@q#appZS|Jn`@(9JZ%30-p|4Xv2M= zTn&tWCe1;zf zkbDG+-a~?gt?I+4F7Cc>CR@H#YvVp4Yr?LeXB>QhgFols zFF5#14*p6AH`}kd=ihMfw;cQ(2Y=7OKXC9t4nD-ehdKC14nD%cKXLHS9Q+Fh|H{F? zaWIbRR(X4rgO73WaSlGg!6!NR4-P)X!GCh_X%2>aqM9$3!77Y4t-_d@t1u?dDvV7v zDvVjK3de9T=BDa%%o$Y}6FL>f>`H|(|54$14u%9$pC@uKhCKCo5(g)9aAOW`!of{B zxETjG=in9`+>(P^ad2x6Zo|QCIk+7Mx98v#4(`CgCJs*J;Eo*JiGw?HFlJLKPr7n& zHxBO3!LU}T@Au^3i#WI!2d8mxItOQPu$hA`I(a`Su1sB64rFm~HV5Z$aBmLI<={RX z+?Rv}kp;1!b$>-p~99+P`LpXRS2M^<5SgBQ27Y9$};AtG}=HMz0#x^T8UoQvyICwe- z`#Ctk!LY2Wc&a%VTesBbm^i60wsWcQOb(vK!B=tc)f_yVgRkM>IUGEfgXeMZd=9>r zgRkS@>p6G<2QTE{MI5}CgKyyA8#(wU4!)U#Z{gruIrugXzMX^b;NUws_%04!!ohcQ z@KO%GhlB6s;QKiEehz+slXc6u=Ll`Bp6j?m7gp#!tP7vs`KXRyv0&F~?)e&B_}s{K z9R8U=XCPkeOxe&sS!0^(1kUaTR1wmaqn#B@Vuxas+3XE zOFE)E75HTxv6un4{was=X4fk^Vn#Duuj;~QX}+c-f)NeZPVU>+bcFnO+&lYp&}7KhM>^TKi0flrc-!D7I)d4YUHf%JPb=`JI;It6*JnCrG-THS z9nmHkq|bFks}=YQF5fS8MAs?LztRyEDe%|aJKyMtwkprR)rGe-e#i0Td+z-oIQ}2h z5k07Udx)dqu#RY@^881R<|8`UAd2fJ9no#dJ3n*yf8pR?bwoER@BF3nQjBF&)ue%Jbt~8#uwebCQGq&=EbPynl)-@1NW|r#ZNes}~&kqw*X&9rX-YXq8kL z9tJGLHe4FG=h)1wz7wNoVeZ*w)U&Ym?26^y5jj}m;5dD_kHqW4{VPEq=2fCT+-@7` ziN)){mBism=HSL0&L;YB8*9qFgLSD&Ka}q(+=7Fl>{p++)`yJ_ZS({iExX$4!)MjD z=iX1@;0_#Y;^0&c?#RKNIJh$hcj4f!9NdkAyK^x7TvYmTz={fA#KFBdIE{nTIXHuZ z;XbG0v2d`JgEKiei-WT{IERCKb8s#P_u=5a9NdqC`*ZNc96W%7FX7;U9Gu6&gE%;! zg9meP0S6D^;GrBmjDv@B@TDAl83&Kx;6e^A;^2`ST+G3UYoyl2Xbvvn;8G4A!@*-Y zcpL{`&cWk3_zDi5z`+wa7?x_4o+~+cG6zrLU>gU+$yNQ<&cO~2cIv}pV!2+9?}Mv? zd#6$#K7-oDJ)g?K(>NHXiz7}DF6hqGG1sFH%T*l8rf!Y*aoM~wt#zop*}orF5;dq=HMGR_(l%CNguZ9-^>iM@^ykUo5-`UAWKlG2`Q=p+kyzL{O&ki17EQ5IvRs<`X<3XkvLp_4d4p@umjhD_qbXf$mc?3`#s|cX$PqvuTGui(ZvpLP0oegY;%Z3jwX^7pd-bB%W zO;gOH4)q58vx*Y+CW;1T)`%VNtuC!DlTS{Ks5b?Xs6hnfwH6WL*3?CTsN(?*B51yW zXtL6h#E!e7MAYeB4I-$`HHbRxhz?Q9!S zM}o0a^|^%?LPvoGTnW`0wEY|+sbf@}?x@pZft`TEB0`@U9U{G;DHn_k8btc25$QFE zV4=_=(nm{?wpqixp+yvBv+k%*(oh83h!#ah+t*aAo@I7M8~y=V4~F^`Z-EOeQwes zf_;}q)aRxs2mXOc+UkdKm`5})$rqi39QcE_`e9ktAo^i>bchDE_(s!?V3y_)4Qlaq zl!(f;;~H$*8bsw$GJDX;$r_4a5Z53&8RaN4#H5`Z!J5t^8e)pFiwtX|t$vu|c|^k+ zMOpoq&ekG=9iK;Z>Fg+ZRC&J^5u5;cM3whNi|92iB6tvJ5Jf8?D}U5BNVp$p5d9cs zgPgWniwM38Jfdl(sy%35>x(>6$WP4I}^{feXOBJMR>ir{jgL9`}X zik{Yr5%_Cp5Ir4b_0Qj}r3lU*Jfiu#qeQf*#d=Mrg{KIQXiF9^SW9!y|Y>X%OwZD@uw!)AlvE zP-zf-7G+;s>*=PU2>w?*qP3nVSCDHz(((w-TN*?kMcJ~~p4K9Q=a&Z2=_nCB`H~h9 z+{SoBPrei_qIzwoh0mD=QGJwCza0;1*Zpu<;}Pw6uw8W3zhi^8Xwc4R5IqxR(O!H( zs~dr<9FOS57oyaSyw>@CO*?|09gpa>&i6%EwAVU6pg{yDJuRXKqC~VKpg{x=KOibo zMD1%kqO7&o4*aA+1ouD{1JxiJ9_3_o-%nbtAACqPh<<87X5$PWUUkeX`r&x0 zB48n2tS(==znWPLN}Yiqvlv7gAE0|)_Ve*|JR*3ls)%4Qz~6yI8tw@MZ54i7)mc%c zXFoHIM+K)>9u@u`C8`bmU)E3spIIIi{vIW&Wk0{IK?Rpv9u@u`C8`dITHz0mT^?13 z#8#|}M8T^LiP`}P4!>Gd@;W;TRA~b*(ntXK3j>v1k&lROSIwy-pV|xf=lG-O%w$zctR@&;OwkH^@J=?qCjV?9M>TJOJQs+ffXjZ?qJpD0k7}8sb&CSklYeTPDE!2E zR8RgHbrapt|Nram%cJ9{&U~*nYcaBo4F(Lsl4TMb=$5)AwWPKk@GcB8Ha6RYV5+OC zTZO8-%2m~p6-dGs)+}fy%aei=!ee5RkdRC=%p;jBlVwg8=1i8!8!}1AHkrv}W;`OZ zkT-yN=XY!AdvCX@N{#&fcs@Smc73;g-*WH$?*84cakj!Xa~A5eTU`enL#k)C@?#Y2 zQfHx_+4@{uvp>7?98M~1a%Z8QU3peqsN?hByo_~y*dxzEfgaPzJhS!392BpKr|X2*#f77Fy3P{-$A;0gl{^srE%$Ar4`-U~T@h4Vlx z6zDObp1JYI92AZdu~4ALggQR|GGg5adq!{?2~eu%+d+>F^)1d;ILyRDeJif5b{zc9 zH(04~7K()eJ*HHj-TF1IFyJT^3k7;is2vBt)5=PPlUOVi=rN(5+q41EGy}8aAQuY- zdQ7O}^WWyoj&oov6zH*`e$7GQ7#R=s>-bPFb5J;i#zVav7ixXy=pbt=9AaakK#!^5 z?fNRN@xmE677Fy3P{-&0ic=6r=vXMwV?y1OyyzBIL7c#2p+Jubb$tFsPAVMW15`e! z&M(H5>iGO`IVha}$T;q5e58)b;=QU9QE!=|dI@^q961r*m+4k%jW7 zb7G7p#3?46ePp5hDW(`uf2r{!FC3j@q5e{vk2{(Wr@e9Vl7;f8y<BoQ)SI}_olZEnE&|*M|OQ<+D%0l@|s4<|f|Icr{ldXd|b;?449&@p*dtVbJ2>$Sey5dQ1h6&!6O~Gfv#{P$%P7=i~Dyxqdqi z>-!C=y?)pL0++E)1wb;6;DF2q;cLoHiDq;w$*lMz)CJurd$z(#F_1 z_zKs7#93z^>XrB%$X9w;sc=+Ufa-}Y)yYm43MZ|3sFR)Xp@vx~9Ml$|hT}s$#X{kn zw*d82OsJ8E&3Ca-I3~_QfgTg;`20&-Sty(`XQ4ok4|N9%g+uBB)E%**PPVX6IOEPk zootB>^$J%Qa73PmdL@2gc!iS+C+r2N_)?uj5T(G2;($I6b&`hXjOCC|Uc^G-e7^v7 zQEXei#3_jI06f%7@fCb&11lAx3kXp37(omLM;+l1SepjK##59$qWmH*aj@r z@%fXPm{51#yY4m?3ZW5LD9~d<9iM+0cee!!BC-Mt1$s=V^__>CSttZ%V4*;d33Yt_ z=bUdxTn9jnR~oPQzWpR86~aRBP$%O{MY!sWs1iIBiCdkUx*zIdZH1r|EEMRmZAG}o z3o$KNsN?fw5slXhRw{(V;Gs^gh%MDg&bK3?h5!}Uw~st*&ahG;AO{NtdTgm);%tR@ z9xT-H`Il{RB_pLyAEAZk`TU^T~G%cE?8wHL^Kn? zX39LP<$lldWJSpwv(o6%icnL+kWFZ#nws^%*Ij2LSPYA zg@tX^jY+i@qE85u5ph{qurmsVUAFadL92zxQ4fa5h!8I{-jD|>tATumby9eZMo#1iyhTtGT4U5w@ZItzz3X-crU=Z7eh3T9q zo0@4Eic~WL$c_*!#KvKrd;oFle3M&u@{+9P3}eDaYV%)EmlLKGLIAN)ZTXz6B)z!aJWNLeXY%I7t?D3zpwYQY-G5XMQ_(G@+( zNd?|XMb))Q)tcr-dQXT*2(ZM8)Vnz7Fe%Sj0P5ZlaS-E)6=$=hDw>t_4Q;zNUZlBd z=F>Yvq(F2jR*Ig2Y9!$Wl8TX3Y;%$PyTs3nCZ9pmf-ESTo%4E;Cq>_{-q@tujiYO71(IT+g%!U{WvBg+%Qi^7qx->0Ij-(rfgk>g+N|os$ zt5UL~SX%SF{fh<7EygC`2AQIr;2y88r>NOf-y5gGB= zSdq`Obvvm2teXvUJnL-TmMcz!{p`UI-iZIk^4?s~b4l=bYrZTwb=3WH7g8Y13nKa) zE6IgsW* zhIKp$TU6c`QdAK7kCi2@7*i$Pkd)YMa#*IVTNv&AAwnSrAuAMm7x_AR7paBWGX;q? z)dL|?AsQkp)wzzHR~OlUZeqW&$0buM6=+=)tHNU;f*=$l1kt_rEK8dS#ZJgWsZ?L0 zqEJCMa+02eb3Qty>5i%-WW`R(M|GpD&~8>pySsiQDV388Td-DBKk%Vny_Icw5h&7^ z6iq$oAuQddemIp5ZJR$BVj4uF^ckXGIvA?L0)-&VDz6I#ygx)V1jmGEMK9ORk%lru z$or|xpx4|-HKCgp&JEhc+hxt6{e_x&^MULQY~CP1r!No9n-64fh>N^Yv^XI3&5)C)Sre3hp?oqaQy*{+rP+LM#)hO z!>X@qF;cg#9}5v0@l#o$x7dzkCG$x|XG*r%#?~HLg_Ze>iZ=By;lPiF2#VmYtf1Yp zV#1^AfruC+yNPLAkoEsuh_?`>iIJv!XRuggeiGmcvln{ zJ9hFKRCgpFZ`5WE;58p{MvFTaBhLc*)@ofg?Y`=Z zZ0mwB%)Yp2T|kd)T{7wLQTaU~_Cc&?pCO%*$`zQY2@D4FlI`e`Bl`9I;oYA7f(-Qf z8dh@zn)U^u_t%7|O=_F+N^To8qE$11ZJTyqNw+~SFqh}em!$eb8|p6#YOoq0B(~2G zro5c`20MQ`T;YK03e{r{dH_brj>G4ZA;KeuH-tC53VxB>)Y!IOr)PBAf%>%%8+{?j zID|DlVb@COzW#pHX@3SNs!N!0^Cr3_iS8hF?tAceY%xI8b6+@jp6 zSYi4Ksxhfrp?;m~u7uQ9ECfVhJsct%t}kF^J6BEh^$+zeYUa8(h77DewHnKT-#mRb z>$Gr{f-e^x)&Az`vqQ|_I<3J}c)z0-<4t?Ujc1zanoh6gbD61$xpnbLGcmMkS1qZ@>dc<5YA=e~C@V+#*1@$ltyo7#6T zi!3~uzM;^<^WG4H;HD6tAqvl>q0?HtLSb%YeLB4N9JXqK8%tQ3)_N0Ua%|sw$s)9< zRi_6Yx$Q8UEx0$umxwx(M{YYDnJvSq;m~ZU#dy>1{ij&QxTJ+;40SjM=Thh+?UB;!mvd|((hMTYx- ze1>#j7UB7 zpQromL+1|%BYH7m`>k*-o6itst#@KFvvm8dqM*Vyg5Z)kRx<3j>K`0l)TlMNIBmkl zO}M9y6=(P~tTlB-VTSEAz~yiF-J_tw7W;62BP5&jBpYPr50+$Ef6Hr_=%`(Y9{nU+h;ZqouYg;K z9{prwUJmw!Pb$@7ylKzads)V~;gV$xdNkuYdZGg-zWFwmF|N~O8G|0pIASKGmc|1o zPHbTrYE6^u=LuHsJ8;$l{?nF=O$uc9YuBf3xFUG-XwJNJEliq#Ld zz_N@%k1iMy{kB?+2R`%Z&$Eni^hm~o5hbz~<4t?6I-g~X`)ygqphq)~7>3qj zJaFPsZYBkn>9UMLk7nE#K9f?5@#tJ@iPabvps|cWk7PWY3ZM9`#kh0dyW3dCxF(oo z40L52JIfIaXs_#|_5Q6;tOT84pJs zrm9uAM(0|&>V&($1;)|UX}FGhJUZ7p&T5Q{#s$XX(Hhq=XE!?6sb5 z9?L9aT%j&7mSZqp{7`aqu9Z6gkNesM#`FMuXxC>rVh7Lyg^LU6hRfjv#x$f`1mnf` zxkl$&3#_Se6TQH=5N+x@)^bMYT34}*aqYdpcvUpxh+%duQ*YWc_8FG(fWR2^NXCP8 z^gsqqJkG5-40?>;5-giN9=+x;7;!eFmd2xVts1LwMqmtjq{dN)QWjv$-C{6Q&6wU| z5MHY5=yMJH<|Egz8V?JML66jUu)cb%vy4Xs#-nqsdL-lFx;pe9c@xVxD=;27@sT%0 zG9Ik2S%=uD5rYP`Feu@$Xx9b>1_nI3MmxTl(N^k}i3T@Rx(JzOtyZ#CoS zUS_7AW^ty6bD5(aEWiEuBc`lJ>3+w&trj7&CO-*t7aTyE;C(6 zhkmx@KDJa}DKegIxi7L*57yD=8l7$73fEQDjH3%zT~mrPJ=|zIJ>W&~zi z9$*>2xtj3<(TwXEn9uZZ^VK(tjAweH=d0^l{+VszTBjo-~wMQWASd!{7yvy4}w#h78^0;KHuOUdyc@+#HJj;C{ z8(#8)B75&`XN_&Pg}Z72ro+MyikD|adeuS% z<2pLFGd=aehA(^n~QidSj#lZm#)3R;;u#M+{ z-lEd@$6*p>>Ql02(=gM+ErFPfz_cpO^h7U#)U&5)bhhOkY@2jcWIWsQju@UWe1}gh zPx!;n@z>8=0^=Wk&b|GZ+x6ISqf}DVW4knaq88@$|NY--RvBBs1RcsOgc){j(_yes z<%OWFIXSN+CWjJIezB+VqJqhW9cm~GLZ$r{F`<|mNyD4?2zg)PqKG- z#&hHM#5lFT_`rC69Jgrju(SBng1~E~)W`@8>=ic%&>$0>AS|W>e~v#ad*33+)GM1& zn@!kOFD!#ML_>vH>o!5M1Y#RIlHHd^gkyTDBN;?E7JJuWa$OjJ)C|)cX06*jneO$9 zT(4|KO|~w=T2WA8p}gKINals|iV-eq@wK5wD6eQfp9pb-Zxe*y>c=4qE#r$9{PkWq zMms#fWmsS7?SiOG)Uo=4T)Lq=BP3ct*AIl)^bSGLOPpfD)bfgZ9IBAh6H}^I7+>r? z4n3wcT~tesR?qc<91`j>aN5EYh_9+MPlOJ|Bp? z#QLskAbN>)0Ms_7O<2bMYj+;vtwqtqn}F^X(EOW#0<_NV?rz-MvwwSccXxN#y*T$U zQ0NjZpDH9LCB?A4i(-}^w#qglHD7mNKhE5AT(|3xR+18vW=Sw09UC9G_CMO$uEV_y zJPZgr4A{!tSwzBOo!!R(Kt9|7ATO2g-xvo>P?KiJGkf>!XVtu)krHZxUZrL&pid8e z=MyZ@0|F4}ae+S00zFs_^zoQL-~K8K^iUPhx4&8i^yV0a_MINkecsH1Uue0G{2I65 zY9*=bkZMh;R(E&z4FWhT-Mbi26pv0CT)ZqPBZyQ8IfDYcYyTk>;P!){CX|wW9goX( zdEYJIb^y0v7zLfqS&N_@dnpO16CtQG0_yp;Dwi$InNG?Gfu7fC_=u8?coDT^U$GO( z_V~$e3SsqLkJbHNA7G`U6;)4zD){|}55P3bJuQ$l$76FwpB1pr>`PkZq-hv>vgDXa z!=kHIfsH)$l|mZP(XrV&=W%$zlm5(991cVY5&DB7WI7IHb*eBPkBB__WAUg;btA6_ zS2B+aJUV4F$=?wc7{1zNUmF7aVF8%GFf0T#takTKCqp5ZtgV`=+sB=Da#Yr zT+8o^fnkD%y@}!R6HkZQ?*bTLsz_4q9sp>(4ET^JbqD zKtUHJU9KCplh^cO(wVG{c?*a6r&XA@gkp-d2^M{F=hI(jE&8;83A!j}r&V?=NuE$G z`1x9><7aohfkpi@0TuLc)LQzFzj%<_R`$O{)E5uZZDnkcU#^#}iK1btNyn&l!RGi` z7jS1mpAj+7x`3VqWigj2MmbrQYQa6Z<8ki18vb0@g+ z`4s^dbP@Lq&m|X8mBa=FMtI-cN4fp7f8l{X|N$VTsX6Z5`>5Yq3xUq%R7=lyPF(*KyIA4@k9a(@Fkn-J1QPLU3B zs-c0LYHw&Dq`N8am>Yv6yM-i;NYd=&9kVA$vwR(eY3LxQ2w<8hjAqIGUXn)g^)-Zi zV-1144L(O0Y}E?rcB;LFeqw9pIx?2_6M(Rc@-t0Vri&YSeyuc(<=EI$0n<%Mjy#?| z?Ah%@o*iJfA24>i)%)E{2>Gb@8#cVf`wbgD=>3Kb^WN|8H4!=j-bTp%SbIIyu#%8= zsz!r~U*{3hP0q)ogOJS~W9hC}Pqj5PG&HQkJ9OM{R*dmWyA)$QQMUALNa+OVT^ZOabR+wEA<01=1KQ@!bq4Vr0ok0uE85a zBqgLG>3t9~FX?(tk|*jG86dK1Iooz=1#PElIbD0{)lyy87>3ieb9=N>w+1S425(we z4g3iVelhG})cWwSJ}&)&m_T$@~z5^Um2 zdG#oj@|N0Cwk#}VdwY9(AZ3?QvIPb^=`h>J#|n6j0={fv{P&rr8Q|}Wwn8xIXAR+& zX-<-SZAn@emgG%e`C?-r$?HRM9^LvfZkV02J3Xg6rCDmBELqCAp7*#6u9pyU>eW|Y zJ=6052O0>utYIuY-$b5hBxjJZ^hK|pYA0QIobUgy`_)sx;Qq8VlP4O&leCgkWLYz< zwdD6rq^-dsq`8^2lNLPwt%Z`A!mFb{U zl-FT$@P#JQeW{$=zQZZsaB!q_cyQ?0{$0a+ZoTH}>1+2Myzct#SL?e+MsvlzJ9ph^ zUUl%`wilZM&xLuPll*^4GwCM(3e3#Fjp@PN*Z#r5gU;~oE7a}#Zrn9|^m^wKM;$&o zxp%i}mh35IN1^x@{l;ytG?C4XV`(@*awZu|H;_|pFl!5%9^Cp>a?AuS^HD8(t7rZl zp8epw{oiQx{NHfi{%<(%%f0lY4R}A6ZYG4bORa&6ZX~1~Atl>8s2~l5Y(94^{rXo= z)tDBkiO?8=P&MsQ6QL;tp=y?+CPH%vLe=cV|80c)HC}!nkF|uf zBjj1T(ugJ=Xl1ix7Jb!Ld8*;xRkY+2ltZsOL-jr!#TM_q0U0#uu=8>Mv8G2o_~uC%19s^JaoN7BhT0J??%61{zOxr5jNzJa^Xrn`AziuO>drc}kFq|FE zX9uP1u$ooXtTe3P+tK&@!MjgB@!KU;bs}8V#?!0n>Qpx0msQkkK9wCwWtD77rJBw^ z|H4e?g-fgHp>R!`PP?Xk+2OwI&`?&DvjhFv;SAN3+%fepJMaCem#2-iQlm~RMKRtZ zYTVusl;P&nt1fYsyKwos``@*+*_alUqIERTtL60SwK|m@$PUTbR3_V>$>s;M{XZ-){OS`_hw3)gsT-Dao ztLkd1>Tp(0WrtJQ!IA7>-qp12FYdhY$kJx&Xt<_rr&m)qQ~QUrseD#RX9x4yRKKh0 z@cQo`S+lgN%HgWE|G!W*m&z*ntU8ia`m)NPtLkTd_D|pa;nJ30BV5&v)2k|4Q8k;+ z4yLm?HQS%hrrfsWRO2;Yx@_&zX6jAhnl3-RnyyJ@m4R$V!QZ@+RR^;JBQ#V0rdWLC z*HX4cp&Sg_-R?cN}!&x~;Reg5Hs?~emyR_x^=5SRzPp_)0Q`y13 ztSo2q!`b1%>_{dnQB4m#`}=pizhh}L^_p-^SDao=*QB!QKsGg;&E&F!!`c3UtmJ0u z-=8~i!@wt&HdC(*S9Rs-RdsbL+m}rbWmALbL5vJ#CAX%MH=Mow10Va5*Wqngvd-?9 zsBL>=&?#JXdR28hyI;TS7fn~JTH4Zjg{TzY**)|0>c#dJhSTU9<-IQ8@cO&%{N36H zcg+1-@~~|gIdC^S^gaTO8!+_#*`F-Cbrt3Uk&Vq5cds_w;rS5^y|b4$l4FFl-S_Eb zw+5r{zi%LPBC{bFdbf=o+H<&TFxiJ8c>8tRcU^rbvH#kgbS!@Vr+#|N$YG4d*QBz; z!&ynqDoQrfm+c?P4i1D2&#Tf>cjdw@iB*=9TR5xa0;_ECtkND>WsPT*9IW#G%UrAc z>M6!5mq%EIZgWrQYKdCqn{S$Y?%6MUR*{FZgSqTbCaVm?LFe)zR;fx$t>VHxzoe5E zw}e-VvrccdSf(8qH%jhA#lD$;U9o<|AHKhqn!wLM?GrU@Zw|cK*{4^%<}vN?bu{a` ztdIR*AhYzY`ob#ZS_0+Po?hi#S3O^T^Myx_zOV#sP}@qOrYb>Ay~eAlD}tJOj#pC^ z)YMOUHTA#QntFXzO{G(ZUWudC^Z7CB-`9N@)pMCfm!KD_ksg`mr27#jYq49T*H#^@ zINJU)+Qr^XD*nCLTNcCYG8TEU9M*`XrH3zR#I$kS+yCaLI8{ZLmWX0Fsbjsx2?HqnhypwJmqtjN%FKdp+Im&&?B*DYmBGaV`w60XMNwfFDpma+5& z3G zZg&gycX^!gVK7uey8gI1TX6T!xZ7wBxdL5l>0KNA%|w<_*|^=iVM}L6XGc%3V;Fib z1?wsrit6q>>cSqRO&hDAl3g2;IccJ|h=Wc?a?->R%a$%r^(Fi1-{DNsEax_C?ow-ZGAS-+p^^io4dM< zvSXH=ZDm`vx+FU>Dd}ak>&=NbZcrpg+OT;`XGcd*Z`sbJc+Fv$4k)|iMn}-Wm`3-K zQlmpo%P^c|u~e3m*veHlRSP1rwtMYGA{ARYFDbQPRgrLu;!e75P38apt7P~J?}2C7 zqv7blGnIZ*0NRygQ*7yU_t#+6&bG%B6Y6x}F&~55B!vF^Si@MFZe_rB z0Hnqal_utX^ZDrmk~FZbnULpQg-zg*orwyvf5x%2*dV%^(+aL0FFeDNpmY2Wdde>m$CJ0AbnKl=U6KfLBM58b_W zD0S)s%g5i5{NM|pFV5|3`rbc$;^C=h=YL%4_}u6F?kCHiy#AYC`FM-@FHc|5|AU*~ z{lRAwKmB3Tiu;~wZu{u>(EpnuRt=PXSrs0sC$qo|WU0V}W`p=djr{~8OYmDdSlQnf5iQGGI6c#k}( zOC{TXkES)}s5V+n`Uk}+=ZyElCHwENaO-_+8kQrM9833USnOqJ>ahR`%f=ohujKsn z%-dq+Ex6JiiCjTG&wppjs(D0~jyRT7vL)HkjEek~t_%_xj_LD(!fqc21PcX@{(&x) z_wKT~Ps5_DJf1g7fetVaJ&EWif%tOKk{s2R^9BDcR=H)PSd>Z%JZZ^r0>fjWJ0O{= ztQ!Tbh(APd| zloy)V+gXs)N{UtrG!n@!uK*Lv?(Ekt`G~Dnq!kfdJ^=z2{aJ)bwWJt9PQdPpW={m= zl-h*$Fr8EB^>bHYZ}_b2V&k+*Y3YZ zvGdYfYLUrq2Hz^{9FAPHWWD6{;t0NvL(6^9;@-Isx|%3TIH=_(bw$zDgxfC*ECUM^ zB-`tD`>A2xf+d;b*ieWKYQ06NQtps9JT+$=t3YDo1y7dEa#1b%;MMeTRnndDh3Q&e zlEd(imeq2Fj?Eqcf0`eH0GxJi0!0dpTH|w`e~kpZ0B{7nO33hW!?8`nalw3DQT2TS zt=n4QD_D|{JuJz#CPDQ9kx3b+|9(o+byZ0euyZYNChUh(1ugJ|;6?RM1beT2 zUT{uYp=i4M7z=7iwWOeo)9(TzMex6aH7cZHUiJwXy=f*6J_i*Ybx|{IRqoXk1fXyN z7ld}trA(;7OKf1$ENt7Me<0z6rpQLgu?)ReQ71Jy5Cal2MAlj`hOR2X2-n9$<8~ESf=OK>fpMB1uuKiZ7-K@zx6R0Y<|s zHRmK`Nmqj=2^R7Rc}-{PJf!t0rAh&Za(JzoPKJH&bI?qI0~$Sipi9%LHDp?bV+1Ps zG+Qg0y2{rBACSIvEH$t^wqOC!p3)q7JR!+?LM=I#R;k0t8>E;#rc0&XNk=sUj&OR| ziH;ttpD$3!m^4dXGZDOp9Zi!Suk@25V~{CFbVHu-U%KhcUP%hf3JFZp?A6nB*Sl<~ zL3YF9rfC`~-3_lXt_it`k8CbIBsLwBYhx%!ysPv%kX<-QWaKky79ovW_G{&EU{R!AyU>Qb#VB}AIZ zRa)g*j4Y{C2#SRuX*pLgX#?yldp<9zr!2ZhSa>ZxWq}vrb>KLPoY?y%~M;pzM@>0o>?0|}@Vh#2d zie}f!(l$Ew55XG{fSH8T!I`SIc8}lXGbB=DOs?hz#B=V@`5!OWU=CS;!zKf zE0~j}9!Tz4n38nGm5r^Jo<%5~tJLC$ZfUNV(#!h**rglgzzMQ$iE?JkpGf3-zao*U z>t}_R?*U)Fe+)nG`$D!y%6>(CBqt5pDE});b;^NHL0`?16s;VXlvD5ZIQDho* z%3e|?m0r_Q^V%_AXliBp-kXN@2^ff2M$rh^q4l9J*zpEnZPn5wJ;9CdAe*gPjvRCX z@VQ;g+2fK`X)DpZ*u@~tG?W)EI zo5FFr*jEsm^9z&-ol$a2u0pm!9!4r)9E_TT!*DESak z_*R$Ye1Y}OUOGk(%0rjsajC?-r2^@)g02(unzGhqZHjs4S;tmcRH~^v%#mbSwF5zs zWBxfVNgfY!jQK#(EM^9Q5~iklX?^Qu6hy745cnEH^C0+$tLRkUsdPe?Oi>BEE!KFc zvM=E|ee3t)6Wd`XHeffqTqvkEH*E%4bB>j_6LvW_Y3Su*rM^Ky%m88)kNPP;PhnVk z>P}U(pqCBy!ON<$4EEj}U{RL>2Z9#We{EZ)ST{woVxXxAvJA!y4sc0|u2tq!&?$!v zm}~(UZy&B;RGE(}OI1{b%_Ovg95f28Z!KCJy!uG*+G_h4Uk-EzfjyTE~9OBFi1x&pl=mgM}qe-H8ajD zN^+13(19Uwv&#O6wpg|`nHx1BH}I89IcnI6f@PEgzvGW9D`dr%%|uZOQt;4aW@eeE z6c?me3sRtiZ&~!OD}sWOPz#o7+X<&qj&W>LNTij#RG6&x!7%O-()nO)GPGMlvZ5p> za*~ZrChi~JLR2oJq^6Bhkmm?XBB0O_Kab;QpKED*Trw*y6E6qa#Dr!Wx&#+eTMn8= zSEUK5G8p7Jn1-&&LFdFTS1xzQDwl$hJStU1eEL~MGG2SiRY<|-n@3Ebpw%cuM-97% zqXu_SggHC-GM~g?`D)^eqGZyF;2X&=l0L06DTf;EgE_~Fm2$^&F)I^metIk+7mrBg zpy!JEY!_{zhlRK3ffuDxp)v~%2kyFE#@_%LGa)&{a8!#SU?#3?2Mae44BU_8%8pYh z2kaf5N4eNW133q zRpqfww!48|U*MFfC#@PvLQiHU%Fjx8NYkwDCJW\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n\ + \n\r\ + \n#\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n\r\ + \n#\r\ + \n\ + \n#root.mnuc.backuper\ + \n\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ + .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ + \n\ + \n#:local Script AM-GlobalConfig;\ + \n\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\r\ + \n\r\ + \n#\ + \n:global MkDir;\ + \n\r\ + \n\ + \n#:local FetchFile Binary.backup\ + \n:local localDir \"\";\ + \n\ + \n\r\ + \n#\$MkDir \$localDir;\r\ + \n\ + \n#\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\r\ + \n" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +/certificate settings +set builtin-trust-store="ipsec,wpa-eap,capsman,fetch,sstp,ovpn,radius,userman,\ + openflow,tr069,dot1x,www,api,reverse-proxy,logging" crl-store=system +/interface bridge port +add bridge=Bridge-LAN interface=ether5 +add bridge=Bridge-LAN interface=ether2 +add bridge=Bridge-LAN interface=ether4 +add bridge=Bridge-LAN interface=ether3 +add bridge=Bridge-LAN interface=wlan2 +add bridge=Bridge-LAN interface=wlan1 +/ip firewall connection tracking +set udp-timeout=10s +/ip neighbor discovery-settings +set discover-interface-list=LAN +/ip settings +set max-neighbor-entries=8192 secure-redirects=no +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes \ + forward=no max-neighbor-entries=8192 +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=WAN lan-interface-list=\ + LAN wan-interface-list=WAN +/interface l2tp-server server +set authentication=mschap2 use-ipsec=yes +/interface list member +add interface=Bridge-LAN list=LAN +add interface="ether1 - Unet" list=WAN +/interface wireguard peers +add allowed-address=0.0.0.0/0,::/0 client-allowed-address=::/0 \ + endpoint-address=89.110.101.17 endpoint-port=29185 interface=WG name=\ + MikroVados persistent-keepalive=10s public-key=\ + "64Y25EUZQQt8EIeAJYD8qWt+te8qvGEepnswdBgmzlY=" +/interface wireless cap +# +set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \ + caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\ + CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\ + wlan1,wlan2 lock-to-caps-man=yes +/ip address +add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.8.0.2/24 interface=WG network=10.8.0.0 +/ip dhcp-client +add interface="ether1 - Unet" name=client1 +/ip dhcp-server config +set accounting=no +/ip dhcp-server lease +add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ + 48:8F:5A:8E:EE:A8 server=masterDHCP +add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ + F0:DE:F1:91:0D:1E server=masterDHCP +add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ + 00:80:77:EC:43:86 server=masterDHCP +add address=10.30.30.70 dhcp-option=domain-search-list,HostName \ + dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP +add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ + 04:7C:16:36:F5:37 server=masterDHCP +add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ + 10:2D:41:2C:20:C2 server=masterDHCP +add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ + 10:08:C1:81:59:5F server=masterDHCP +add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ + 10:38:1F:D2:5F:13 server=masterDHCP +add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ + 10:B1:DF:E9:D0:D5 server=masterDHCP +add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ + FE:02:52:BE:3F:16 server=masterDHCP +add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ + D4:6D:6D:FD:E5:49 server=masterDHCP +add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ + CC:42:10:12:46:94 server=masterDHCP +add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ + 50:CC:F8:85:96:0A server=masterDHCP +add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ + E4:18:6B:58:34:AB server=masterDHCP +add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ + 00:27:15:41:97:A9 server=masterDHCP +add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ + mac-address=C4:82:E1:03:49:10 server=masterDHCP +add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ + 10:38:1F:82:81:F2 server=masterDHCP +add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \ + dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP +add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \ + dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP +add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ + server=masterDHCP +add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ + MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP +add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \ + mac-address=F0:75:5D:1E:5F:71 server=masterDHCP +add address=10.30.30.100 client-id=iVados dhcp-option=HostName \ + dhcp-option-set="=\"Client ID\"" mac-address=DE:4D:72:F3:1A:9F server=\ + masterDHCP +/ip dhcp-server network +add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\ + domain-search-list dhcp-option-set=domain-search-set dns-server=\ + 10.30.30.81 domain=WORKGROUP gateway=10.30.30.81 netmask=24 ntp-server=\ + 10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +/ip dns +set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=8.8.8.8,8.8.4.4 verify-doh-cert=yes +/ip dns static +add address=10.30.30.33 name=ros.vados.ru type=A +add address=10.30.30.95 name=vados-nuc type=A +add address=10.30.30.33 name=amster-nuc type=A +add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A +add address=10.30.30.33 name=amster type=A +add address=10.30.30.33 name=amster-reg type=A +add address=10.30.30.33 name=mng.vados.ru type=A +add address=10.30.30.33 name=mgr.vados.ru type=A +add address=10.30.30.33 name=prt.vados.ru type=A +add address=10.30.30.33 name=reg.vados.ru type=A +add address=10.30.30.33 match-subdomain=yes name=mikrots.vados.ru type=A +add address=10.30.30.33 name=oxidized.vados.ru type=A +add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A +add address=8.8.8.8 comment="Google-dns IPv4 1" name=dns.google type=A +add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A +add address=10.30.30.30 name=MILLER-LEN type=A +add address=10.30.30.30 name=miller type=A +add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" name=\ + security.cloudflare-dns.com type=A +add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" name=\ + security.cloudflare-dns.com type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=149.112.112.112 comment="Cuad9-dns IPv4 2" name=dns.quad9.net \ + type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +add address=10.30.30.81 comment=LocalNet name=MikroVados type=A +add address=10.30.30.10 name=MikroNUC type=A +add address=10.30.30.86 name=MikroYellow type=A +add address=10.30.30.85 name=MikroMic type=A +add address=10.30.30.95 name=VADOS-NUC type=A +add address=10.30.30.98 name=VADOS-LEN type=A +add address=10.30.30.20 name=garage type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +/ip firewall address-list +add address=91.215.120.206 list=TRUSTED +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=10.30.30.100-255 list=KIDS +add address=8.8.4.0/24 list=YouTube +add address=8.8.8.0/24 list=YouTube +add address=8.34.208.0/20 list=YouTube +add address=8.35.192.0/20 list=YouTube +add address=23.236.48.0/20 list=YouTube +add address=23.251.128.0/19 list=YouTube +add address=34.0.0.0/15 list=YouTube +add address=34.2.0.0/16 list=YouTube +add address=34.3.0.0/23 list=YouTube +add address=34.3.3.0/24 list=YouTube +add address=34.3.4.0/24 list=YouTube +add address=34.3.8.0/21 list=YouTube +add address=34.3.16.0/20 list=YouTube +add address=34.3.32.0/19 list=YouTube +add address=34.3.64.0/18 list=YouTube +add address=34.4.0.0/14 list=YouTube +add address=34.8.0.0/13 list=YouTube +add address=34.16.0.0/12 list=YouTube +add address=34.32.0.0/11 list=YouTube +add address=34.64.0.0/10 list=YouTube +add address=34.128.0.0/10 list=YouTube +add address=35.184.0.0/13 list=YouTube +add address=35.192.0.0/14 list=YouTube +add address=35.196.0.0/15 list=YouTube +add address=35.198.0.0/16 list=YouTube +add address=35.199.0.0/17 list=YouTube +add address=35.199.128.0/18 list=YouTube +add address=35.200.0.0/13 list=YouTube +add address=35.208.0.0/12 list=YouTube +add address=35.224.0.0/12 list=YouTube +add address=35.240.0.0/13 list=YouTube +add address=57.140.192.0/18 list=YouTube +add address=64.15.112.0/20 list=YouTube +add address=64.233.160.0/19 list=YouTube +add address=66.22.228.0/23 list=YouTube +add address=66.102.0.0/20 list=YouTube +add address=66.249.64.0/19 list=YouTube +add address=70.32.128.0/19 list=YouTube +add address=72.14.192.0/18 list=YouTube +add address=74.125.0.0/16 list=YouTube +add address=104.154.0.0/15 list=YouTube +add address=104.196.0.0/14 list=YouTube +add address=104.237.160.0/19 list=YouTube +add address=107.167.160.0/19 list=YouTube +add address=107.178.192.0/18 list=YouTube +add address=108.59.80.0/20 list=YouTube +add address=108.170.192.0/18 list=YouTube +add address=108.177.0.0/17 list=YouTube +add address=130.211.0.0/16 list=YouTube +add address=136.22.160.0/20 list=YouTube +add address=136.22.176.0/21 list=YouTube +add address=136.22.184.0/23 list=YouTube +add address=136.22.186.0/24 list=YouTube +add address=142.250.0.0/15 list=YouTube +add address=146.148.0.0/17 list=YouTube +add address=152.65.208.0/22 list=YouTube +add address=152.65.214.0/23 list=YouTube +add address=152.65.218.0/23 list=YouTube +add address=152.65.222.0/23 list=YouTube +add address=152.65.224.0/19 list=YouTube +add address=162.120.128.0/17 list=YouTube +add address=162.216.148.0/22 list=YouTube +add address=162.222.176.0/21 list=YouTube +add address=172.110.32.0/21 list=YouTube +add address=172.217.0.0/16 list=YouTube +add address=172.253.0.0/16 list=YouTube +add address=173.194.0.0/16 list=YouTube +add address=173.255.112.0/20 list=YouTube +add address=192.158.28.0/22 list=YouTube +add address=192.178.0.0/15 list=YouTube +add address=193.186.4.0/24 list=YouTube +add address=199.36.154.0/23 list=YouTube +add address=199.36.156.0/24 list=YouTube +add address=199.192.112.0/22 list=YouTube +add address=199.223.232.0/21 list=YouTube +add address=207.223.160.0/20 list=YouTube +add address=208.65.152.0/22 list=YouTube +add address=208.68.108.0/22 list=YouTube +add address=208.81.188.0/22 list=YouTube +add address=208.117.224.0/19 list=YouTube +add address=209.85.128.0/17 list=YouTube +add address=216.58.192.0/19 list=YouTube +add address=216.73.80.0/20 list=YouTube +add address=216.239.32.0/19 list=YouTube +add address=2ip.ru list=Test +add address=157.240.247.174 list=Instagram +add address=46.53.178.107 list=Instagram +add address=179.60.195.174 list=Instagram +add address=157.240.205.174 list=Instagram +add address=31.13.24.0/21 list=Instagram +add address=31.13.64.0/18 list=Instagram +add address=45.64.40.0/22 list=Instagram +add address=66.220.144.0/20 list=Instagram +add address=69.63.176.0/20 list=Instagram +add address=69.171.224.0/19 list=Instagram +add address=74.119.76.0/22 list=Instagram +add address=103.4.96.0/22 list=Instagram +add address=129.134.0.0/16 list=Instagram +add address=157.240.0.0/16 list=Instagram +add address=173.252.64.0/18 list=Instagram +add address=179.60.192.0/22 list=Instagram +add address=185.60.216.0/22 list=Instagram +add address=204.15.20.0/22 list=Instagram +add address=157.240.200.63 list=Instagram +add address=185.60.219.63 list=Instagram +add address=129.134.31.12 list=Instagram +add address=66.81.203.132 list=Instagram +add address=185.89.218.12 list=Instagram +add address=31.13.66.63 list=Instagram +add address=84.15.65.162 list=Instagram +add address=68.66.224.28 list=Instagram +add address=157.240.253.63 list=Instagram +add address=83.174.11.224 list=Instagram +add address=157.240.9.52 list=Instagram +add address=157.240.252.174 list=Instagram +add address=157.240.195.63 list=Instagram +add address=31.13.71.52 list=Instagram +add address=57.144.110.192 list=Instagram +add address=157.240.252.17 list=Instagram +add address=84.15.66.97 list=Instagram +add address=217.168.6.33 list=Instagram +add address=31.13.83.52 list=Instagram +add address=157.240.241.63 list=Instagram +add address=129.134.30.12 list=Instagram +add address=185.89.219.12 list=Instagram +add address=157.240.252.10 list=Instagram +add address=157.240.201.63 list=Instagram +add address=66.81.203.197 list=Instagram +add address=179.60.195.52 list=Instagram +add address=66.81.203.7 list=Instagram +add address=216.40.34.41 list=Instagram +add address=157.240.202.63 list=Instagram +add address=157.240.229.63 list=Instagram +add address=157.240.252.63 list=Instagram +add address=31.13.72.53 list=Instagram +add address=124.108.16.224 list=Instagram +add address=157.240.205.63 list=Instagram +add address=92.46.37.96 list=Instagram +add address=157.240.247.63 list=Instagram +add address=157.240.234.63 list=Instagram +add address=157.240.235.63 list=Instagram +add address=87.245.208.97 list=Instagram +add address=216.58.192.0/19 list=Instagram +add address=209.85.128.0/17 list=Instagram +add address=198.105.240.0/20 list=Instagram +add address=173.194.0.0/16 list=Instagram +add address=172.217.0.0/16 list=Instagram +add address=142.250.0.0/15 list=Instagram +add address=108.177.0.0/17 list=Instagram +add address=87.245.197.140 list=Instagram +add address=74.125.0.0/16 list=Instagram +add address=64.233.160.0/19 list=Instagram +add address=157.240.0.1 list=Instagram +add address=157.240.238.63 list=Instagram +add address=157.240.238.174 list=Instagram +add address=157.240.0.63 list=Instagram +add address=157.240.224.63 list=Instagram +add address=157.240.224.174 list=Instagram +add address=157.240.251.36 list=Instagram +add address=157.240.253.12 list=Instagram +add address=157.240.253.35 list=Instagram +add address=157.240.238.13 list=Instagram +add address=157.240.238.56 list=Instagram +add address=157.240.238.175 list=Instagram +add address=57.144.112.141 list=Instagram +add address=157.240.251.60 list=Instagram +add address=157.240.251.128 list=Instagram +add address=157.240.238.5 list=Instagram +add address=157.240.253.13 list=Instagram +add address=157.240.253.5 list=Instagram +add address=157.240.238.2 list=Instagram +add address=157.240.238.37 list=Instagram +add address=157.240.251.5 list=Instagram +add address=157.240.251.34 list=Instagram +add address=57.144.112.1 list=Instagram +add address=157.240.238.54 list=Instagram +add address=129.134.26.123 list=Instagram +add address=157.240.252.3 list=Instagram +add address=31.13.84.4 list=Instagram +add address=157.240.224.12 list=Instagram +add address=157.240.238.4 list=Instagram +add address=157.240.0.13 list=Instagram +add address=3.33.139.32 list=Instagram +add address=157.240.0.35 list=Instagram +add address=157.240.238.14 list=Instagram +add address=157.240.238.60 list=Instagram +add address=57.144.112.145 list=Instagram +add address=157.240.251.35 list=Instagram +add address=151.101.84.159 list=Twitter +add address=pbs.twimg.com list=Twitter +add address=89.110.101.17 comment=VDSIna list=TRUSTED +add address=10.8.0.0/24 comment="WG VDSIna" list=TRUSTED +add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina +add address=love.ru comment=love.ru list=NoVdsina +add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina +add address=pochta.ru comment=pochta.ru list=NoVdsina +add address=vdsina.com list=NoVdsina +add address=vdsina.ru list=NoVdsina +add address=youla.ru list=NoVdsina +add address=kupiprodai.ru list=NoVdsina +add address=myip.ru list=Test +add address=geoip.co list=NoVdsina +add address=x.com list=Twitter +add address=facebook.com list=facebook +add address=fbcd.net list=facebook +add address=comp-lenta.ru list=NoVdsina +add address=128.85.102.70 comment=update.microsoft.com list=\ + windowsupdateslist +add address=wu-b-net.trafficmanager.net. comment=\ + ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ + ctldl.windowsupdate.com list=windowsupdateslist +add address=redir.update.msft.com.trafficmanager.net. comment=\ + update.microsoft.com list=windowsupdateslist +add address=geo.prod.do.dsp.trafficmanager.net. comment=\ + geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12437.d.akamaiedge.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ + comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ + list=windowsupdateslist +add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ + sls.update.microsoft.com list=windowsupdateslist +add address=fe3.delivery.mp.microsoft.com. comment=\ + fe3cr.delivery.mp.microsoft.com list=windowsupdateslist +add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ + fe3.delivery.mp.microsoft.com list=windowsupdateslist +add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ + fe2cr.update.microsoft.com list=windowsupdateslist +add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ + download.windowsupdate.com list=windowsupdateslist +add address=wu-f-net.trafficmanager.net. comment=\ + download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=tsfe.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ + comment=9.au.download.windowsupdate.com list=windowsupdateslist +add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dspw65.akamai.net. comment=\ + download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ + comment=licensing.mp.microsoft.com list=windowsupdateslist +add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-nlu-net.trafficmanager.net. comment=\ + star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-tlu-net.trafficmanager.net. comment=\ + star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=storeedgefd.xbetservices.akadns.net. comment=\ + storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ + comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ + windowsupdateslist +add address=e16646.dscg.akamaiedge.net. comment=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ + windowsupdateslist +add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=bg.microsoft.map.fastly.net. comment=\ + 3.au.download.windowsupdate.com list=windowsupdateslist +add list=windowsupdateslist +add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ + star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a2033.dscd.akamai.net. comment=\ + star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-nlu-net.trafficmanager.net. comment=\ + dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-b-tlu-net.trafficmanager.net. comment=\ + 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a122.dscg3.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist +add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e10370.d.akamaiedge.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=a1683.dscd.akamai.net. comment=\ + dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ + comment=collections.mp.microsoft.com list=windowsupdateslist +add address=a1847.dscd.akamai.net. comment=\ + wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=au.download.windowsupdate.com.edgesuite.net. comment=\ + 2.au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dscg3.akamai.net. comment=\ + au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + 4.au.download.windowsupdate.com list=windowsupdateslist +add address=cl-glcb907925.gcdn.co. comment=\ + 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ + comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=ts-frontend.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ + list=windowsupdateslist +add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ + windowsupdateslist +add address=e12671.dscd.akamaiedge.net. comment=\ + download.microsoft.com.edgekey.net list=windowsupdateslist +add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12358.d.akamaiedge.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-tlu-net.trafficmanager.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a1856.dspw65.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=smtp.mail.me.com.akadns.net. comment=smtp.mail.me.com list=NoWG +add address=17.57.155.37 comment=smtp.mail.me.com.akadns.net list=NoWG +add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina +add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ + purchase.mp.microsoft.com list=windowsupdateslist +add address=e110219.a.akamaiedge.net. comment=\ + purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.141 list=windowsupdateslist +add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=storesdk.xbetservices.akadns.net. comment=\ + storesdk.dsx.mp.microsoft.com list=windowsupdateslist +add address=e16646.g.akamaiedge.net. comment=\ + storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ + software-download.microsoft.com list=windowsupdateslist +add address=download.prss.microsoft.com.akamaized.net. comment=\ + software-download.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina +add address=87.250.250.50 comment=YandexDisk list=NoVdsina +add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ + purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ + purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ + cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=a1996.dscd.akamai.net. comment=\ + wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ + tas02.sls.update.microsoft.com list=windowsupdateslist +add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ + star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ + paymentinstruments.mp.microsoft.com list=windowsupdateslist +add address=10.30.30.33 comment=NUC disabled=yes list=NoWG +add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG +add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG +add address=wg.vados.ru comment=VDSina-vpn list=Trusted-VPN +add address=80.85.244.9 list=TRUSTED +add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=89.110.101.17 comment="!!!VDSina Server!!!" disabled=yes list=\ + NoVdsina +add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS +add address=dns.google comment=Google-dns list=Trusted-DNS +add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\ + Trusted-DNS +add address=time.google.com comment=Google-time list=Trusted-NTP +add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP +add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=cp.vdsina.com comment=VDSina-vpn list=Trusted-VPN +add address=vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=ns.vados.ru comment=VDSina-vpn list=Trusted-VPN +add address=vdsina.com comment=VDSina-vpn list=Trusted-VPN +add address=cp.vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=ns1.vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=149.154.164.13 comment=telegra.ph list=FuckRKN +add address=109.70.26.37 comment=grani.ru list=FuckRKN +add address=194.85.61.76 comment=grani.ru list=FuckRKN +add address=104.16.4.81 comment=xhamster.com list=FuckRKN +add address=104.16.3.81 comment=xhamster.com list=FuckRKN +add address=188.114.97.1 comment=lostfilm.tv list=FuckRKN +add address=188.114.96.1 comment=lostfilm.tv list=FuckRKN +add address=172.67.182.196 comment=rutracker.org list=FuckRKN +add address=104.21.32.39 comment=rutracker.org list=FuckRKN +add address=104.247.81.99 comment=lurkmore.to list=FuckRKN +add address=104.20.28.254 comment=dou.ua list=FuckRKN +add address=172.66.164.200 comment=dou.ua list=FuckRKN +add address=66.254.114.79 comment=youporn.com list=FuckRKN +add address=185.110.92.41 comment=pornolab.net list=FuckRKN +add address=185.110.92.40 comment=pornolab.net list=FuckRKN +add address=172.67.172.95 comment=crimerussia.com list=FuckRKN +add address=104.21.71.238 comment=crimerussia.com list=FuckRKN +add address=149.154.167.99 comment=telegram.org list=FuckRKN +add address=149.154.166.110 comment=api.telegram.org list=FuckRKN +/ip firewall filter +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=12h chain=input comment="block honeypot DNS" \ + connection-state=new dst-port=53 in-interface-list=WAN protocol=udp \ + src-address=!10.30.30.0/24 src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \ + in-interface-list=WAN protocol=tcp src-address=!10.30.30.0/24 \ + src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment=\ + "block honeypot ssh rdp winbox" connection-state=new dst-port=\ + 22,8291,2222 in-interface-list=WAN protocol=tcp src-address-list=!TRUSTED +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ + connection-state=new dst-port=5060 in-interface-list=WAN protocol=udp \ + src-address-list=!TRUSTED +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=5d chain=input comment="block honeypot NTP" \ + connection-state=new dst-port=123 in-interface-list=WAN protocol=udp \ + src-address=!10.30.30.0/24 src-address-list=!Trusted-NTP +add action=fasttrack-connection chain=forward comment=\ + "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \ + connection-state=established,related,new disabled=yes +add action=accept chain=output comment="Accept Rule for Trusted-NTP Servers" \ + dst-address-list=Trusted-NTP dst-port=123 out-interface-list=WAN \ + protocol=udp +add action=accept chain=input comment=\ + "accept NTP clients on local area network" disabled=yes dst-port=123 \ + in-interface-list=LAN protocol=udp src-address=10.30.30.0/24 +add action=accept chain=output comment="accept WireGuard" disabled=yes \ + dst-address-list=VPN-Server dst-port=13231 out-interface="ether1 - Unet" \ + protocol=udp +add action=accept chain=output disabled=yes dst-address-list=VPN-Server \ + dst-port=29185 out-interface="ether1 - Unet" protocol=udp +add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ + connection-state=established,related,new disabled=yes routing-mark=\ + !To-VPN +add action=accept chain=input disabled=yes dst-port=443 in-interface=\ + "ether1 - Unet" protocol=tcp +add action=accept chain=output disabled=yes protocol=tcp src-port=443 +add action=accept chain=input comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=input comment="defconf: drop invalid" connection-state=\ + invalid +add action=accept chain=input comment="defconf: accept ICMP" disabled=yes \ + protocol=icmp +add action=accept chain=input comment=\ + "defconf: accept to local loopback (for CAPsMAN)" disabled=yes \ + dst-address=127.0.0.1 +add action=accept chain=output disabled=yes src-address=127.0.0.1 +add action=accept chain=forward comment="defconf: accept in ipsec policy" \ + ipsec-policy=in,ipsec +add action=accept chain=forward comment="defconf: accept out ipsec policy" \ + ipsec-policy=out,ipsec +add action=accept chain=forward comment=\ + "defconf: accept established,related, untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid +add action=drop chain=forward comment=\ + "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ + connection-state=new in-interface="ether1 - Unet" +add action=accept chain=input connection-state=established disabled=yes +add action=accept chain=input connection-state=related disabled=yes +add action=drop chain=input disabled=yes in-interface-list=!LAN +add action=drop chain=forward comment=\ + "Filter Rule to block FB address LIST : )" disabled=yes dst-address-list=\ + facebook +add action=drop chain=forward comment=\ + "Filter Rule to block YOUTUBE address LIST : )" disabled=yes \ + dst-address-list=YouTube +/ip firewall mangle +add action=mark-connection chain=prerouting comment=\ + "Mark VPN connections to exclude from FastTrack" in-interface=WG \ + new-connection-mark=VPN_No_FastTrack +add action=mark-routing chain=prerouting comment="Test sites" disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=Test new-routing-mark=To-VPN \ + src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=FuckRKN dst-address-list=\ + FuckRKN new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=Instagram dst-address-list=\ + Instagram new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=Twitter dst-address-list=\ + Twitter new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=YouTube dst-address-list=\ + YouTube new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=facebook dst-address-list=\ + facebook new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment="VDSIna for All sites" \ + dst-address=!10.30.30.0/24 dst-address-list=!Trusted-VPN log-prefix=\ + VPN-all new-routing-mark=To-VPN src-address=10.30.30.0/24 +add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \ + out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\ + 1381-65535 +add action=mark-routing chain=prerouting comment="VPN Network" dst-address=\ + 10.8.0.0/24 log-prefix=VPN-Net new-routing-mark=To-VPN passthrough=no \ + src-address=10.30.30.0/24 +/ip firewall nat +add action=redirect chain=dstnat comment=\ + "FORCE DNS TO LOCAL MIKROTIK DNS SERVER" dst-port=53 protocol=tcp \ + src-address=10.30.30.0/24 to-ports=53 +add action=redirect chain=dstnat dst-port=53 protocol=udp src-address=\ + 10.30.30.0/24 to-ports=53 +add action=masquerade chain=srcnat comment="masquerade Default" ipsec-policy=\ + out,none out-interface="ether1 - Unet" +add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \ + log-prefix=WG-nat out-interface=WG +add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \ + in-interface="ether1 - Unet" log-prefix=2Amster protocol=tcp \ + routing-mark=!To-VPN to-addresses=10.30.30.33 to-ports=443 +add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\ + 10.30.30.33 to-ports=81 +add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \ + dst-port=80 in-interface="ether1 - Unet" protocol=tcp routing-mark=\ + !To-VPN to-addresses=10.30.30.33 to-ports=80 +add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\ + 10.30.30.33 to-ports=22 +add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \ + dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \ + time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\ + Bridge-LAN protocol=tcp src-address-list=KIDS time=\ + 6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +/ip firewall raw +add action=drop chain=prerouting comment="Drop Honeypot Hackers" \ + in-interface="ether1 - Unet" src-address-list="Honeypot Hacker" +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \ + content=linux.duke.edu disabled=yes +add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \ + in-interface-list=WAN src-address-list=Trusted-DNS +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=vk.com \ + content=vk.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=ok.ru content=\ + ok.ru +add action=add-dst-to-address-list address-list=Instagram \ + address-list-timeout=none-dynamic chain=prerouting comment=Instagram \ + content=instagram.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting comment=Twitter content=twimg.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting content=x.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting content=twitter.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting comment=YouTube content=youtube.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googleapis.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=ggpht.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=youtu.be +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=ytimg.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googlevideo.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=gstatic.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googleusercontent.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=nhacmp3youtube.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \ + content=rutube.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=me.com \ + content=me.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=icloud.com \ + content=icloud.com +add action=add-dst-to-address-list address-list=facebook \ + address-list-timeout=none-dynamic chain=prerouting comment=facebook \ + content=fbcd.net +add action=add-dst-to-address-list address-list=facebook \ + address-list-timeout=none-dynamic chain=prerouting content=facebook.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=comp-lenta.ru \ + content=comp-lenta.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + smtp.mail.me.com content=smtp.mail.me.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=gov.ru \ + content=gov.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + r78.fssp.gov.ru content=r78.fssp.gov.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=api.db-ip.com \ + content=api.db-ip.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + api.telegram.org content=api.telegram.org +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set irc disabled=no +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip ipsec settings +set accounting=no +/ip ipsec policy +set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0 +/ip ipsec profile +set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 +/ip proxy +set cache-administrator="" max-cache-size=none port=80,443 src-address=\ + 0.0.0.0 +/ip route +add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn +add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn +add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn +add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn +add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=WG routing-table=\ + To-VPN scope=30 target-scope=10 +add disabled=no distance=2 dst-address=0.0.0.0/0 gateway=146.120.64.209 \ + routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set reverse-proxy disabled=yes +set ssh address=10.30.30.0/24 port=2222 +set winbox address=10.30.30.0/24 +set api address=10.30.30.0/24 disabled=yes +set api-ssl address=10.30.30.0/24 disabled=yes +set www-ssl port=18443 +set www address=10.30.30.0/24 disabled=yes port=18880 +/ip service webserver +set graphs-plain=no rest-plain=no webfig-plain=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=Bridge-LAN type=internal +add interface="ether1 - Unet" type=external +add disabled=yes forced-ip=89.110.101.17 interface=WG type=external +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system clock manual +set time-zone=+03:00 +/system identity +set name=MikroMaster +/system logging +add action=email disabled=yes regex="* added|changed|removed *" topics=\ + system,info +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes use-local-clock=yes +/system ntp client servers +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +add address=time.google.com disabled=yes +/system watchdog +set watchdog-timer=no +/tool e-mail +set certificate-verification=no from=MikroVados port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool mac-server +set allowed-interface-list=LAN +/tool mac-server mac-winbox +set allowed-interface-list=LAN +/tool netwatch +add comment="doh, doh-url=https://security.cloudflare-dns.com/dns-query, notif\ + y, name=CloudFlare-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 \ + http-codes="" test-script="" type=simple up-script="" +add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\ + flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\ + oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \ + port=443 test-script="" type=simple up-script="" +add comment="dns-fallback, notify, name=Google-DNS IPv4" disabled=yes \ + down-script="" host=8.8.8.8 http-codes="" test-script="" type=simple \ + up-script="" +add comment="doh-fallback, doh-url=https://dns.google/dns-query, doh-cert=GTS \ + Root R1, notify, name=Google-DOH IPv4" disabled=yes down-script="" host=\ + 8.8.4.4 http-codes="" test-script="" type=simple up-script="" +add comment="dns, notify, name=Cuad9-DOH IPv4" disabled=yes down-script="" \ + host=9.9.9.9 http-codes="" test-script="" type=simple up-script="" +add comment="doh-fallback, doh-url=https://dns.quad9.net/dns-query, name=Cuad9\ + -DOH IPv4" disabled=yes down-script="" host=149.112.112.112 http-codes="" \ + test-script="" type=simple up-script="" +add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \ + down-script="" host=91.192.189.2 http-codes="" test-script="" type=simple \ + up-script="" +/user aaa +set accounting=no diff --git a/MikroMaster/history/20260515/20260515084002-Diff-Config.rsc b/MikroMaster/history/20260515/20260515084002-Diff-Config.rsc new file mode 100644 index 0000000..3f3f165 --- /dev/null +++ b/MikroMaster/history/20260515/20260515084002-Diff-Config.rsc @@ -0,0 +1,40 @@ +681a682 +> add address=82.202.162.184 comment=comp-lenta.ru list=NoWG +888c889 +< add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG +--- +> add address=89.110.101.17 comment=!!!VDSINA!!!! list=NoWG +916a918,919 +> add address=ghcr.io comment=GitHub list=Trusted-VPN +> add address=github.com comment=GitHub list=Trusted-VPN +935a939,940 +> add address=github.io comment=github.io list=Trusted-VPN +> add address=vk.com comment=VK list=Trusted-VPN +1010,1012d1014 +< add action=mark-connection chain=prerouting comment=\ +< "Mark VPN connections to exclude from FastTrack" in-interface=WG \ +< new-connection-mark=VPN_No_FastTrack +1016,1018c1018,1020 +< add action=mark-routing chain=prerouting comment=FuckRKN dst-address-list=\ +< FuckRKN new-routing-mark=To-VPN src-address=10.30.30.0/24 \ +< src-address-list=!NoWG +--- +> add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \ +> dst-address-list=FuckRKN new-routing-mark=To-VPN passthrough=no \ +> src-address=10.30.30.0/24 src-address-list=!NoWG +1032,1033c1034,1035 +< dst-address=!10.30.30.0/24 dst-address-list=!Trusted-VPN log-prefix=\ +< VPN-all new-routing-mark=To-VPN src-address=10.30.30.0/24 +--- +> dst-address=!10.30.30.0/24 log-prefix=VPN-all new-routing-mark=To-VPN \ +> src-address=10.30.30.0/24 +1035,1036c1037,1042 +< out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\ +< 1381-65535 +--- +> out-interface=WG passthrough=no protocol=tcp routing-mark=To-VPN \ +> tcp-flags=syn tcp-mss=1381-65535 +> add action=mark-connection chain=prerouting comment=\ +> "Mark VPN connections to exclude from FastTrack" disabled=yes \ +> in-interface=WG log-prefix=Mark-VPN-FT new-connection-mark=\ +> VPN_No_FastTrack passthrough=no -- 2.52.0