From fde869bffbfb0daa4d92a869ddc9e9dc7a194823 Mon Sep 17 00:00:00 2001 From: vados-dev Date: Fri, 10 Jul 2026 12:20:03 +0300 Subject: [PATCH] Backup for MikroNUC created successfully at Jul 10 12:20:03. --- .../20260710/20260710114002-Config.rsc | 5 + .../20260710/20260710120002-Config.rsc | 3478 ++++++++ MikroMaster/tmp/Diff-Config.rsc | 7280 ++++++++--------- .../20260710/20260710122001-Binary.backup | Bin 0 -> 385044 bytes MikroNUC/20260710/20260710122001-Config.rsc | 5519 +++++++++++++ .../20260710/20260710122001-Diff-Config.rsc | 3 + 6 files changed, 12479 insertions(+), 3806 deletions(-) create mode 100644 MikroMaster/20260710/20260710114002-Config.rsc create mode 100644 MikroMaster/20260710/20260710120002-Config.rsc create mode 100644 MikroNUC/20260710/20260710122001-Binary.backup create mode 100644 MikroNUC/20260710/20260710122001-Config.rsc create mode 100644 MikroNUC/history/20260710/20260710122001-Diff-Config.rsc diff --git a/MikroMaster/20260710/20260710114002-Config.rsc b/MikroMaster/20260710/20260710114002-Config.rsc new file mode 100644 index 0000000..ae7cf0e --- /dev/null +++ b/MikroMaster/20260710/20260710114002-Config.rsc @@ -0,0 +1,5 @@ +# 2026-07-10 11:40:35 by RouterOS 7.23.1 +# software id = A8L5-07YF +# +# model = RB952Ui-5ac2nD +# serial number = D3D50CEDCD38 diff --git a/MikroMaster/20260710/20260710120002-Config.rsc b/MikroMaster/20260710/20260710120002-Config.rsc new file mode 100644 index 0000000..c23ba5a --- /dev/null +++ b/MikroMaster/20260710/20260710120002-Config.rsc @@ -0,0 +1,3478 @@ +# 2026-07-10 12:00:07 by RouterOS 7.23.1 +# software id = A8L5-07YF +# +# model = RB952Ui-5ac2nD +# serial number = D3D50CEDCD38 +/interface bridge +add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\ + "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\ + Bridge-LAN port-cost-mode=short +/interface ethernet +set [ find default-name=ether1 ] comment=Unet-cable loop-protect=off name=\ + Unet-ether1 rx-flow-control=auto tx-flow-control=auto +set [ find default-name=ether2 ] comment=LAN-2 +set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\ + -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3 +set [ find default-name=ether4 ] comment=LAN-4 +set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\ + -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \ + loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto +/interface wireless +# managed by CAPsMAN +# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding +set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \ + ssid=vados wireless-protocol=802.11 +# managed by CAPsMAN +# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding +set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \ + ssid=vados5g wireless-protocol=802.11 +/interface wireguard +add comment=WG listen-port=13231 mtu=1320 name=WG +add comment="WG interface for Amnezia route" disabled=yes listen-port=33033 \ + mtu=1360 name=wg-nuc +/interface list +add include=static name=LAN +add name=Internet +add include=Internet name=WAN +/interface wireless security-profiles +set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\ + dynamic-keys supplicant-identity=MikroTik +/iot wiliot servers +set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East" +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=HP1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +add name=VADOS-LEN options=HostName +add name=VADOS-NUC options=HostName +add name=MikroNUC options=HostName +add name=master options=HostName +add name=MikroYellow options=HostName +add name="=\"Client ID\"" options=HostName +add name=iVados options=HostName +/ip dns forwarders +add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no +add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \ + verify-doh-cert=no +add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no +add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no +add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\ + no +add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\ + no +add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no +/ip ipsec proposal +set [ find default=yes ] disabled=yes +/ip pool +add name=dhcp ranges=10.30.30.83-10.30.30.254 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \ + name=masterDHCP server-address=10.30.30.81 +/ip smb users +set [ find default=yes ] disabled=yes +add disabled=yes name=vados +/ipv6 dhcp-client option +add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" +add code=12 name=HostName value="\$(HOSTNAME)" +add code=61 name=DUID value=0x00030001488f5a8e1abc +add code=61 name=clientid +/ipv6 dhcp-server option +add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" +add code=12 name=HostName value="\$(HOSTNAME)" +add code=61 name=CLIENT_DUID +add code=61 name=CLIENT_MAC +/ppp profile +set *FFFFFFFE use-upnp=no +/routing bgp template +set default disabled=no output.network=bgp-networks +/routing table +add disabled=no fib name=To-VPN +add disabled=no fib name=r_to_vpn +/system logging action +add email-start-tls=yes email-to=vados@vados.ru name=email target=email +/system script +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\ + \n\r\ + \n#:local Script AM-setup\ + \n;\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n\ + \n\r\ + \n#\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n\r\ + \n#\r\ + \n\ + \n#root.mnuc.backuper\ + \n\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ + .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ + \n\ + \n#:local Script AM-GlobalConfig;\ + \n\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\r\ + \n\r\ + \n#\ + \n:global MkDir;\ + \n\r\ + \n\ + \n#:local FetchFile Binary.backup\ + \n:local localDir \"\";\ + \n\ + \n\r\ + \n#\$MkDir \$localDir;\r\ + \n\ + \n#\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/729/f42d43ae\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 00:05:03 01.07.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add comment=\ + "Lookup IP addresses for RKN list and add them to firewall address-list" \ + dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-RKN-dnsLookup\r\ + \n# Script comment: Lookup IP addresses for RKN list and add them to firew\ + all address-list\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Script description: This script is intended to be run periodically, e.\ + g. once a day, to update the IP addresses in the firewall address-list bas\ + ed on the RKN list.\r\ + \n# It resolves the domain names in the RKN list and a\ + dds the corresponding IP addresses to the specified firewall address-list.\ + \r\ + \n# The script also handles CNAME records by following\ + \_them until it finds A records.\r\ + \n# Usage:\r\ + \n# /system/script { run AM-RKN-dnsLookup; }\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:global dnsLookupReady false;\r\ + \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\ + \_true; }\r\ + \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\ + \n:set dnsLookupReady false;\r\ + \n\r\ + \n:local arrRKN {\r\ + \n \"telegra.ph\"\r\ + \n \"grani.ru\"\r\ + \n \"xhamster.com\"\r\ + \n \"lostfilm.tv\"\r\ + \n \"rutracker.org\"\r\ + \n \"lurkmore.to\"\r\ + \n \"dou.ua\"\r\ + \n \"youporn.com\"\r\ + \n \"pornolab.net\"\r\ + \n \"crimerussia.com\"\r\ + \n \"telegram.org\"\r\ + \n \"api.telegram.org\"\r\ + \n \"facebook.com\"\r\ + \n \"instagram.com\"\r\ + \n \"x.com\"\r\ + \n \"twitter.com\"\r\ + \n \"youtube.com\"\r\ + \n \"googleapis.com\"\r\ + \n \"youtu.be\"\r\ + \n \"googlevideo.com\"\r\ + \n \"gstatic.com\"\r\ + \n \"googleusercontent.com\"\r\ + \n \"nhacmp3youtube.com\"\r\ + \n \"telegram.me\"\r\ + \n \"t.me\";}\r\ + \n\r\ + \n:local ListRKN \"RKN-dnsLookup\";\r\ + \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\ + \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\ + ={\r\ + \n /ip firewall address-list remove \$aListItem;\r\ + \n}\r\ + \n:foreach aItem in=\$arrRKN do={\r\ + \n# :do {\r\ + \n :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\ + ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\ + \n# } on-error={\r\ + \n# :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\ + \n# }\r\ + \n :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \ + do={\r\ + \n :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\ + \n :local newAddress [/ip dns cache all get \$dnsRecord data];\ + \r\ + \n :do {\r\ + \n /ip firewall address-list add list=\$ListRKN address=\$newA\ + ddress comment=\$aItem;\r\ + \n :log warning \"Successfully adding ip to list A record: \ + \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\ + \n } on-error={\r\ + \n :log error \"error when adding ip to list A record: \$dn\ + sRecord, address: \$newAddress domain: \$aItem\";\r\ + \n }\r\ + \n }\r\ + \n :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\ + \n :local cname;\r\ + \n :local nextCname;\r\ + \n :local cnameAddress;\r\ + \n :set cname [/ip dns cache all find where (name=\$aItem && ty\ + pe=\"CNAME\")];\r\ + \n :set nextCname [/ip dns cache all find where (name=[/ip dns \ + cache all get \$cname data] && type=\"CNAME\")];\r\ + \n :while (\$nextCname != \"\") do={\r\ + \n :set cname \$nextCname;\r\ + \n :set nextCname [/ip dns cache all find where (name=[/ip \ + dns cache all get \$cname data] && type=\"CNAME\")];\r\ + \n }\r\ + \n :foreach aRecord in=[/ip dns cache all find where (name=[/ip\ + \_dns cache all get \$cname data] && type=\"A\")] do={\r\ + \n :do {\r\ + \n :set cnameAddress [/ip dns cache all get \$aRecord d\ + ata];\r\ + \n /ip firewall address-list add list=\$ListRKN address\ + =\$cnameAddress comment=\$aItem;\r\ + \n :log warning \"Succesfully adding ip to list CNAME r\ + ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \ + \$aItem.\";\r\ + \n# /ip firewall raw add action=add-dst-to-address-list\ + \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\ + g comment=\$aItem content=\$aItem;\r\ + \n } on-error={\r\ + \n :log error \"error when adding ip to list CNAME reco\ + rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\ + tem.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\ + ptName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \ + run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\ + olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\ + \_start-time=startup;\r\ + \n }\r\ + \n:set dnsLookupReady true;\r\ + \ndelay 2s; \r\ + \n:global dnsLookupReady (a);\r\ + \n" +add dont-require-permissions=no name="renameLists " owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local oldName \"Test\";\ + \n:local newName \"Test-IP\";\ + \n/ip firewall address-list\ + \n:foreach i in=[find list=\$oldName] do={\ + \nset \$i list=\$newName;\ + \n}\ + \n" +add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + #############Script Settings##################\ + \n\ + \n:local \"IF-TUN\" \"6to4-tun\"\ + \n:local \"IF-LOC\" \"Bridge-LAN\"\ + \n:local \"POOL-6TO4\" \"poolV6-local\"\ + \n:local \"force-update\" false\ + \n############ use then static ip #######################\ + \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \ + address]\ + \n#:local \"interface\" \"ext\"\ + \n:local bound 0\ + \n\ + \n###############################################\ + \n\ + \n:local 6to4prefix do={\ + \n :global dec2hex\ + \n :local ipv4 \$1\ + \n :local ipv6 \"2002:\"\ + \n :for i from=0 to=2 step=1 do={ \ + \n :if ( \$i = 2) do={\ + \n :set ipv6 (\$ipv6.\":\")\ + \n }\ + \n :local fp [:find \$ipv4 \".\"]\ + \n :if ( \$fp > 0 ) do={\ + \n :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\ + \n :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\ + \n }\ + \n }\ + \n :return (\$ipv6.[\$dec2hex \$ipv4])\ + \n}\ + \n:local \"str_replace\" do={\ + \n :local \"str-pos\" [:find \$1 \$2]\ + \n :local \"str-len\" [:len \$2]\ + \n :local str \"\"\ + \n :local rest \$1\ + \n :while (\$\"str-pos\" >= 0) do={\ + \n :local t [:pick \$rest 0 \$\"str-pos\"]\ + \n :if ( \$4 > 0 ) do={\ + \n :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\ + \n :set str (\$str.\$5)\ + \n }\ + \n }\ + \n :set str (\$str.\$t.\$3)\ + \n :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\ + st]]\ + \n :set \"str-pos\" [:find \$rest \$2]\ + \n }\ + \n :return (\$str.\$rest)\ + \n}\ + \n\ + \n:if (\$bound=1) do={\ + \n :local t [:find \$\"lease-address\" \"/\"]\ + \n\ + \n :if ( \$t >= 0 ) do={\ + \n :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\ + \n }\ + \n\ + \n :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\ + ) do={\ + \n /interface 6to4 add !keepalive local-address=\$\"lease-address\"\ + \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\ + \n :set \"force-update\" true\ + \n }\ + \n\ + \n :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\ + cal-address];\ + \n\ + \n :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \ + true) do={\ + \n /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\ + ease-address\"\ + \n /ipv6 address remove [find interface=\$\"IF-TUN\"]\ + \n /ipv6 address remove [find interface=\$\"IF-LOC\"]\ + \n /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\ + \"::/0\"]\ + \n :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\ + \n :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\ + \_0) do={ \ + \n /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\ + \".\":1::/64\") prefix-length=64\ + \n } else={\ + \n /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \ + prefix=(\$\"pool-prefix\".\":1::/64\")\ + \n }\ + \n /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\ + \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\ + ace=\$\"IF-TUN\" advertise=no\ + \n /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\ + =\$\"IF-LOC\" advertise=yes\ + \n /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\ + \"IF-TUN\")\ + \n :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\ + s]\ + \n :set t [:pick \$t 0 [:find \$t \"/\"]]\ + \n :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\ + \_= 0) do={\ + \n /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\ + [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ + \n } else={\ + \n /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \ + where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ + \n }\ + \n :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\ + -LOC\"] = 0) do={\ + \n /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\ + on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\ + \n }\ + \n :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \ + 0) do={\ + \n /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\ + onfiguration=yes\ + \n }\ + \n }\ + \n}" +add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global MAC2EUI64 do={\ + \n :local EUI64 \"\"\ + \n :local MAC \$1\ + \n :local HEX2DEC \"0123456789ABCDEF\"\ + \n :for i from=0 to=5 step=1 do={\ + \n :if ( \$i = 0 ) do={\ + \n :set EUI64 [:pick \$MAC 0]\ + \n :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\ + \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\ + \n }\ + \n :if ( \$i = 1 || \$i = 3) do={\ + \n :set EUI64 (\$EUI64.\":\")\ + \n }\ + \n :if ( \$i = 2 ) do={\ + \n :set EUI64 (\$EUI64.\"FF:FE\")\ + \n }\ + \n :if ( [:find \$MAC \":\"] = 2 ) do={\ + \n :set MAC [:pick \$MAC 3 [:len \$MAC]]\ + \n :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\ + \n }\ + \n }\ + \n :return (\$EUI64)\ + \n}\ + \n\ + \n:global dec2hex do={\ + \n :local hex \"\"\ + \n :local dec [:tonum \$1]\ + \n :for i from=0 to=4 step=4 do={\ + \n :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\ + c>>\$i)&0xf)+1)].\$hex)\ + \n }\ + \n :return ([:tostr \$hex])\ + \n}" +add comment=Generator dont-require-permissions=no name=proxySet owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# 2. WireGuard interface\r\ + \n/interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDg\ + uMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=21641\r\ + \n/interface/wireguard/peers/add interface=wg-VDSina public-key=\"o5IgCl1/\ + G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcYQnD9\ + N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=10.30.30.33 endpoint-port=518\ + 20 allowed-address=0.0.0.0/0 persistent-keepalive=11\r\ + \n/ip/address/add address=10.9.0.3/32 interface=wg-VDSina\r\ + \n\r\ + \n# 3. DNS\r\ + \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\ + n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\ + \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /system/script/add name=VDS\ + ina-prev-dns comment=\"\$prevDNS\" source=\"\" }\r\ + \n/ip/dns/set servers=8.8.4.4\r\ + \n/ip/route/add dst-address=8.8.4.4/32 gateway=wg-VDSina distance=1 commen\ + t=VDSina-dns\r\ + \n\r\ + \n# 4. Enable WireGuard\r\ + \n/interface/wireguard/enable wg-VDSina\r\ + \n" +add dont-require-permissions=no name=AM-Telegram-Send owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\ + \n# RouterOS script: AM-Telegram-Send\ + \n# Script comment: Mini script for send messages to admin Telegram chat\ + \n# Copyright (c) 2007-2026 Vados \ + \n#\ + \n#\ + \n# requires RouterOS, version=7.19\ + \n# requires device-mode, fetch\ + \n#\ + \n# Script description: \ + \n#\ + \n#\ + \n# Usage:\ + \n# /system/script { run AM-Telegram-Send \"Message here )))\"; }\ + \n\ + \n/system/script\ + \nadd name=telegram-send dont-require-permissions=no source={\ + \n :global TelegramTokenId;\ + \n :global TelegramChatId;\ + \n :local message [:tostr \$1];\ + \n :local identity [/system/identity/get name];\ + \n :local sendMsg (\"[\".\$identity.\"] \".\$message)\ + \n /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\ + \n \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\ + \n \"&text=\".\$sendMsg.\\\ + \n \"&parse_mode=HTML\") \\\ + \n mode=https keep-result=no\ + \n}" +add dont-require-permissions=no name=telegram-send owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n :global TelegramTokenId;\ + \n :global TelegramChatId;\ + \n :local message [:tostr \$1];\ + \n :local identity [/system/identity/get name];\ + \n :local sendMsg (\"[\".\$identity.\"] \".\$message)\ + \n /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\ + \n \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\ + \n \"&text=\".\$sendMsg.\\\ + \n \"&parse_mode=HTML\") \\\ + \n mode=https keep-result=no\ + \n" +/user group +add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\ + t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon" +/ip smb +set enabled=no interfaces=lo +/interface bridge port +add bridge=Bridge-LAN interface=ether5 +add bridge=Bridge-LAN interface=ether2 +add bridge=Bridge-LAN interface=ether4 trusted=yes +add bridge=Bridge-LAN interface=ether3 +add bridge=Bridge-LAN interface=wlan2 +add bridge=Bridge-LAN interface=wlan1 +/interface bridge settings +set use-ip-firewall=yes +/ip firewall connection tracking +set udp-timeout=10s +/ip neighbor discovery-settings +set discover-interface-list=LAN lldp-med=no lldp-poe-power=no +/ip settings +set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\ + 8192 +/ipv6 settings +set disable-ipv6=yes disable-link-local-address=yes forward=no \ + max-neighbor-entries=8192 multipath-hash-policy=l4 +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN request-interval=1m wan-interface-list=WAN +/interface l2tp-server server +set authentication=mschap2 use-ipsec=yes +/interface list member +add interface=Unet-ether1 list=Internet +add interface=WG list=WAN +add interface=Bridge-LAN list=LAN +add interface=Unet-ether1 list=WAN +/interface wireguard peers +add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\ + 109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \ + persistent-keepalive=10s public-key=\ + "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4=" +add allowed-address=0.0.0.0/0 client-allowed-address=::/0 disabled=yes \ + endpoint-address=10.30.30.33 endpoint-port=55055 interface=wg-nuc name=\ + NUC persistent-keepalive=11s public-key=\ + "+OvzAjLC45Td52hjkQPmpGvC3RGhZ+Q2CDMJ1U/D4Rw=" +/interface wireless cap +# +set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \ + caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\ + CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\ + wlan2,wlan1 lock-to-caps-man=yes +/ip address +add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.8.0.2/24 interface=WG network=10.8.0.0 +add address=192.168.33.2/24 disabled=yes interface=wg-nuc network=\ + 192.168.33.0 +/ip cloud +set update-time=no +/ip dhcp-client +add add-default-route=special-classless check-gateway=arp comment=Unet-client \ + default-route-distance=2 default-route-tables=main:2 dhcp-options=\ + hostname,clientid_duid interface=Unet-ether1 name=UnetDHCP use-peer-dns=\ + no use-peer-ntp=no +/ip dhcp-server config +set accounting=no +/ip dhcp-server lease +add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ + 48:8F:5A:8E:EE:A8 server=masterDHCP +add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ + F0:DE:F1:91:0D:1E server=masterDHCP +add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ + 00:80:77:EC:43:86 server=masterDHCP +add address=10.30.30.70 dhcp-option=domain-search-list,HostName \ + dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP +add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ + 04:7C:16:36:F5:37 server=masterDHCP +add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ + 10:2D:41:2C:20:C2 server=masterDHCP +add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ + 10:08:C1:81:59:5F server=masterDHCP +add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ + 10:38:1F:D2:5F:13 server=masterDHCP +add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ + 10:B1:DF:E9:D0:D5 server=masterDHCP +add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ + FE:02:52:BE:3F:16 server=masterDHCP +add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ + D4:6D:6D:FD:E5:49 server=masterDHCP +add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ + CC:42:10:12:46:94 server=masterDHCP +add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ + 50:CC:F8:85:96:0A server=masterDHCP +add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ + E4:18:6B:58:34:AB server=masterDHCP +add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ + 00:27:15:41:97:A9 server=masterDHCP +add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ + mac-address=C4:82:E1:03:49:10 server=masterDHCP +add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ + 10:38:1F:82:81:F2 server=masterDHCP +add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \ + dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP +add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \ + dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP +add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ + server=masterDHCP +add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ + MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP +add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \ + mac-address=F0:75:5D:1E:5F:71 server=masterDHCP +add address=10.30.30.100 client-id=iVados dhcp-option=HostName \ + dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP +add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\ + ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \ + dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \ + use-src-mac=yes +/ip dhcp-server network +add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\ + domain-search-list dhcp-option-set=domain-search-set dns-server=\ + 10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\ + 24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +/ip dns +set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=8.8.8.8 verify-doh-cert=yes +/ip dns static +add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \ + type=A +add address=109.107.177.79 name=vds.vados.ru type=A +add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \ + regexp=*.vados.ru type=NS +add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\ + "\".*\\\\.vados\\\\.ru\"" type=FWD +add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\ + 10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\ + FWD +add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\ + ns.vados.ru.local type=A +add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\ + vados.ru ns=ns.vados.ru.local type=NS +add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A +add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\ + dns.google type=A +add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A +add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A +add address=10.30.30.33 name=ros.vados.ru type=A +add address=10.30.30.95 name=vados-nuc type=A +add address=10.30.30.33 name=amster-nuc type=A +add address=10.30.30.33 name=amster type=A +add address=10.30.30.33 name=amster-reg type=A +add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A +add address=10.30.30.33 name=mgr.vados.ru type=A +add address=10.30.30.33 name=prt.vados.ru type=A +add address=10.30.30.33 disabled=yes match-subdomain=yes name=\ + mikrots.vados.ru type=A +add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A +add address=10.30.30.30 name=MILLER-LEN type=A +add address=10.30.30.30 name=miller type=A +add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\ + security.cloudflare-dns.com type=A +add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\ + security.cloudflare-dns.com type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\ + dns.quad9.net type=A +add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \ + type=A +add address=10.30.30.81 comment=LocalNet name=MikroVados type=A +add address=10.30.30.10 name=MikroNUC type=A +add address=10.30.30.86 disabled=yes name=MikroYellow type=A +add address=10.30.30.85 disabled=yes name=MikroMic type=A +add address=10.30.30.95 name=VADOS-NUC type=A +add address=10.30.30.98 name=VADOS-LEN type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +add address=10.30.30.20 disabled=yes name=garage type=A +/ip firewall address-list +add address=91.215.120.206 list=TRUSTED +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=8.8.4.0/24 list=YouTube +add address=8.8.8.0/24 list=YouTube +add address=8.34.208.0/20 list=YouTube +add address=8.35.192.0/20 list=YouTube +add address=23.236.48.0/20 list=YouTube +add address=23.251.128.0/19 list=YouTube +add address=34.0.0.0/15 list=YouTube +add address=34.2.0.0/16 list=YouTube +add address=34.3.0.0/23 list=YouTube +add address=34.3.3.0/24 list=YouTube +add address=34.3.4.0/24 list=YouTube +add address=34.3.8.0/21 list=YouTube +add address=34.3.16.0/20 list=YouTube +add address=34.3.32.0/19 list=YouTube +add address=34.3.64.0/18 list=YouTube +add address=34.4.0.0/14 list=YouTube +add address=34.8.0.0/13 list=YouTube +add address=34.16.0.0/12 list=YouTube +add address=34.32.0.0/11 list=YouTube +add address=34.64.0.0/10 list=YouTube +add address=34.128.0.0/10 list=YouTube +add address=35.184.0.0/13 list=YouTube +add address=35.192.0.0/14 list=YouTube +add address=35.196.0.0/15 list=YouTube +add address=35.198.0.0/16 list=YouTube +add address=35.199.0.0/17 list=YouTube +add address=35.199.128.0/18 list=YouTube +add address=35.200.0.0/13 list=YouTube +add address=35.208.0.0/12 list=YouTube +add address=35.224.0.0/12 list=YouTube +add address=35.240.0.0/13 list=YouTube +add address=57.140.192.0/18 list=YouTube +add address=64.15.112.0/20 list=YouTube +add address=64.233.160.0/19 list=YouTube +add address=66.22.228.0/23 list=YouTube +add address=66.102.0.0/20 list=YouTube +add address=66.249.64.0/19 list=YouTube +add address=70.32.128.0/19 list=YouTube +add address=72.14.192.0/18 list=YouTube +add address=74.125.0.0/16 list=YouTube +add address=104.154.0.0/15 list=YouTube +add address=104.196.0.0/14 list=YouTube +add address=104.237.160.0/19 list=YouTube +add address=107.167.160.0/19 list=YouTube +add address=107.178.192.0/18 list=YouTube +add address=108.59.80.0/20 list=YouTube +add address=108.170.192.0/18 list=YouTube +add address=108.177.0.0/17 list=YouTube +add address=130.211.0.0/16 list=YouTube +add address=136.22.160.0/20 list=YouTube +add address=136.22.176.0/21 list=YouTube +add address=136.22.184.0/23 list=YouTube +add address=136.22.186.0/24 list=YouTube +add address=142.250.0.0/15 list=YouTube +add address=146.148.0.0/17 list=YouTube +add address=152.65.208.0/22 list=YouTube +add address=152.65.214.0/23 list=YouTube +add address=152.65.218.0/23 list=YouTube +add address=152.65.222.0/23 list=YouTube +add address=152.65.224.0/19 list=YouTube +add address=162.120.128.0/17 list=YouTube +add address=162.216.148.0/22 list=YouTube +add address=162.222.176.0/21 list=YouTube +add address=172.110.32.0/21 list=YouTube +add address=172.217.0.0/16 list=YouTube +add address=172.253.0.0/16 list=YouTube +add address=173.194.0.0/16 list=YouTube +add address=173.255.112.0/20 list=YouTube +add address=192.158.28.0/22 list=YouTube +add address=192.178.0.0/15 list=YouTube +add address=193.186.4.0/24 list=YouTube +add address=199.36.154.0/23 list=YouTube +add address=199.36.156.0/24 list=YouTube +add address=199.192.112.0/22 list=YouTube +add address=199.223.232.0/21 list=YouTube +add address=207.223.160.0/20 list=YouTube +add address=208.65.152.0/22 list=YouTube +add address=208.68.108.0/22 list=YouTube +add address=208.81.188.0/22 list=YouTube +add address=208.117.224.0/19 list=YouTube +add address=209.85.128.0/17 list=YouTube +add address=216.58.192.0/19 list=YouTube +add address=216.73.80.0/20 list=YouTube +add address=216.239.32.0/19 list=YouTube +add address=2ip.ru list=Test-IP +add address=wg.vados.ru comment=VDSIna list=TRUSTED +add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED +add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina +add address=love.ru comment=love.ru list=NoVdsina +add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina +add address=pochta.ru comment=pochta.ru list=NoVdsina +add address=vdsina.com list=NoVdsina +add address=vdsina.ru list=NoVdsina +add address=youla.ru list=NoVdsina +add address=kupiprodai.ru list=NoVdsina +add address=myip.ru list=Test-IP +add address=geoip.co list=NoVdsina +add address=comp-lenta.ru list=NoVdsina +add address=128.85.102.70 comment=update.microsoft.com list=\ + windowsupdateslist +add address=wu-b-net.trafficmanager.net. comment=\ + ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ + ctldl.windowsupdate.com list=windowsupdateslist +add address=redir.update.msft.com.trafficmanager.net. comment=\ + update.microsoft.com list=windowsupdateslist +add address=geo.prod.do.dsp.trafficmanager.net. comment=\ + geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12437.d.akamaiedge.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ + comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ + list=windowsupdateslist +add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ + sls.update.microsoft.com list=windowsupdateslist +add address=fe3.delivery.mp.microsoft.com. comment=\ + fe3cr.delivery.mp.microsoft.com list=windowsupdateslist +add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ + fe3.delivery.mp.microsoft.com list=windowsupdateslist +add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ + fe2cr.update.microsoft.com list=windowsupdateslist +add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ + download.windowsupdate.com list=windowsupdateslist +add address=wu-f-net.trafficmanager.net. comment=\ + download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=tsfe.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ + comment=9.au.download.windowsupdate.com list=windowsupdateslist +add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dspw65.akamai.net. comment=\ + download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ + comment=licensing.mp.microsoft.com list=windowsupdateslist +add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-nlu-net.trafficmanager.net. comment=\ + star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-tlu-net.trafficmanager.net. comment=\ + star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=storeedgefd.xbetservices.akadns.net. comment=\ + storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ + comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ + windowsupdateslist +add address=e16646.dscg.akamaiedge.net. comment=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ + windowsupdateslist +add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=bg.microsoft.map.fastly.net. comment=\ + 3.au.download.windowsupdate.com list=windowsupdateslist +add list=windowsupdateslist +add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ + star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a2033.dscd.akamai.net. comment=\ + star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-nlu-net.trafficmanager.net. comment=\ + dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-b-tlu-net.trafficmanager.net. comment=\ + 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a122.dscg3.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist +add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e10370.d.akamaiedge.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=a1683.dscd.akamai.net. comment=\ + dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ + comment=collections.mp.microsoft.com list=windowsupdateslist +add address=a1847.dscd.akamai.net. comment=\ + wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=au.download.windowsupdate.com.edgesuite.net. comment=\ + 2.au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dscg3.akamai.net. comment=\ + au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + 4.au.download.windowsupdate.com list=windowsupdateslist +add address=cl-glcb907925.gcdn.co. comment=\ + 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ + comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=ts-frontend.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ + list=windowsupdateslist +add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ + windowsupdateslist +add address=e12671.dscd.akamaiedge.net. comment=\ + download.microsoft.com.edgekey.net list=windowsupdateslist +add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12358.d.akamaiedge.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-tlu-net.trafficmanager.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a1856.dspw65.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina +add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ + purchase.mp.microsoft.com list=windowsupdateslist +add address=e110219.a.akamaiedge.net. comment=\ + purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.141 list=windowsupdateslist +add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=storesdk.xbetservices.akadns.net. comment=\ + storesdk.dsx.mp.microsoft.com list=windowsupdateslist +add address=e16646.g.akamaiedge.net. comment=\ + storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ + software-download.microsoft.com list=windowsupdateslist +add address=download.prss.microsoft.com.akamaized.net. comment=\ + software-download.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina +add address=87.250.250.50 comment=YandexDisk list=NoVdsina +add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ + purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ + purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ + cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=a1996.dscd.akamai.net. comment=\ + wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ + tas02.sls.update.microsoft.com list=windowsupdateslist +add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ + star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ + paymentinstruments.mp.microsoft.com list=windowsupdateslist +add address=10.30.30.33 comment=amster list=NoWG +add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG +add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG +add address=wg.vados.ru comment=VDSina-vpn list=VDSina +add address=80.85.244.9 list=TRUSTED +add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina +add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS +add address=dns.google comment=Google-dns list=Trusted-DNS +add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\ + Trusted-DNS +add address=time.google.com comment=Google-time list=Trusted-NTP +add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP +add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=cp.vdsina.com comment=VDSina-vpn list=VDSina +add address=vdsina.ru comment=VDSina-vpn list=VDSina +add address=ns.vados.ru comment=VDSina-vpn list=VDSina +add address=vdsina.com comment=VDSina-vpn list=VDSina +add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina +add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina +add address=10.30.30.0/24 comment="Local Network" list=Local-Net +add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net +add address=146.120.64.208/29 comment="External Net" list=Unet +add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina +add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina +add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina +add address=10.30.30.30 comment=miller disabled=yes list=NoWG +add address=10.30.30.33 comment="Direct connet to DNS servers" list=\ + Direct-DNS +add address=109.107.177.79 list=VPN-Server +add address=10.0.0.0/8 list=RFC1918 +add address=172.16.0.0/12 list=RFC1918 +add address=192.168.0.0/16 list=RFC1918 +add address=8.8.4.4 disabled=yes list=to_vpn +add address=myip.ru disabled=yes list=to_vpn +add address=10.30.30.98 disabled=yes list=to_vpn +/ip firewall filter +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=12h chain=input comment="block honeypot DNS" \ + connection-state=new dst-port=53 in-interface=Unet-ether1 protocol=udp \ + src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \ + in-interface=Unet-ether1 protocol=tcp src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment=\ + "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \ + in-interface=Unet-ether1 protocol=tcp src-address-list=!TRUSTED +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ + connection-state=new dst-port=5060 in-interface=Unet-ether1 protocol=udp +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot NTP" \ + connection-state=new dst-port=123 in-interface=Unet-ether1 protocol=udp +add action=fasttrack-connection chain=forward comment=\ + "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \ + connection-state=established,related,new disabled=yes +add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \ + protocol=tcp +add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \ + protocol=udp +add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \ + dst-port=53 protocol=tcp src-address=10.30.30.0/24 +add action=accept chain=input comment="udp Accept input DNS queries" \ + dst-port=53 protocol=udp src-address=10.30.30.0/24 +add action=accept chain=output comment="accept WireGuard" disabled=yes \ + dst-address-list=VPN-Server out-interface=Unet-ether1 protocol=udp \ + src-port=13231 +add action=accept chain=output disabled=yes dst-address-list=VPN-Server \ + dst-port=29185 out-interface=Unet-ether1 protocol=udp +add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ + connection-state=established,related,new disabled=yes routing-mark=\ + !To-VPN +add action=accept chain=output disabled=yes protocol=tcp src-port=443 +add action=accept chain=output disabled=yes src-address=127.0.0.1 +add action=accept chain=forward comment="defconf: accept in ipsec policy" \ + disabled=yes ipsec-policy=in,ipsec +add action=accept chain=forward comment="defconf: accept out ipsec policy" \ + disabled=yes ipsec-policy=out,ipsec +add action=accept chain=forward comment=\ + "defconf: accept established,related, untracked" connection-state=\ + established,related,untracked disabled=yes +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid in-interface=Unet-ether1 src-address=\ + !10.30.30.0/24 +add action=drop chain=forward comment=\ + "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ + connection-state=new in-interface=Unet-ether1 src-address-list=!VDSina +add action=accept chain=input in-interface=Unet-ether1 protocol=icmp \ + src-address-list=VDSina +add action=accept chain=input connection-state=established +add action=accept chain=input connection-state=related +/ip firewall mangle +add action=accept chain=prerouting comment=RFC1918 dst-address-list=RFC1918 \ + in-interface-list=!WAN +add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \ + new-routing-mark=main passthrough=no src-address-list=NoWG +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for NoVdsina" disabled=yes dst-address-list=NoVdsina \ + new-routing-mark=main passthrough=no src-address=10.30.30.0/24 +add action=mark-connection chain=prerouting comment=\ + "Transit for address-list \"to_vpn\"" connection-mark=no-mark disabled=\ + yes dst-address-list=to_vpn in-interface-list=!WAN new-connection-mark=\ + to-vpn-conn routing-mark=!main +add action=mark-routing chain=prerouting comment=\ + "Find routing over table r_to_vpn" connection-mark=to-vpn-conn disabled=\ + yes in-interface-list=!WAN new-routing-mark=r_to_vpn +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for VDSina" dst-address-list=VPN-Server \ + new-routing-mark=main passthrough=no src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \ + new-routing-mark=main src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=\ + "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\ + Unet new-routing-mark=main passthrough=no +add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\ + To-VPN src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \ + new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment="WG for all" \ + dst-address-list=!NoVdsina new-routing-mark=To-VPN src-address=\ + 10.30.30.0/24 +add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \ + out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\ + 1381-65535 +add action=mark-connection chain=prerouting comment=\ + "Mark VPN connections to exclude from FastTrack" disabled=yes \ + new-connection-mark=VPN_No_FastTrack routing-mark=To-VPN +add action=mark-routing chain=prerouting comment="VPN Network" disabled=yes \ + dst-address=10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24 +add action=mark-connection chain=output comment="For this router" \ + connection-mark=no-mark disabled=yes dst-address-list=to_vpn \ + new-connection-mark=to-vpn-conn-local +add action=mark-routing chain=output comment="For this router" \ + connection-mark=to-vpn-conn-local disabled=yes new-routing-mark=r_to_vpn +/ip firewall nat +add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\ + yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\ + !NoWG to-addresses=10.30.30.33 to-ports=53 +add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\ + yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\ + !NoWG to-addresses=10.30.30.33 to-ports=53 +add action=masquerade chain=srcnat comment=\ + "Nat Addresses for routing mark r_to_vpn" disabled=yes routing-mark=\ + r_to_vpn +add action=dst-nat chain=dstnat comment=\ + "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \ + in-interface=Unet-ether1 protocol=tcp src-address-list=VPN-Server \ + to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat comment=\ + "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\ + udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\ + Unet-ether1 protocol=udp src-address=!10.30.30.0/24 to-addresses=\ + 10.30.30.33 to-ports=44333 +add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \ + routing-mark=To-VPN diff --git a/MikroMaster/tmp/Diff-Config.rsc b/MikroMaster/tmp/Diff-Config.rsc index b53a30d..0bff4d6 100644 --- a/MikroMaster/tmp/Diff-Config.rsc +++ b/MikroMaster/tmp/Diff-Config.rsc @@ -1,3806 +1,3474 @@ -36a37,3841 -> /interface wireless security-profiles -> set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\ -> dynamic-keys supplicant-identity=MikroTik -> /iot wiliot servers -> set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East" -> /ip dhcp-server option -> add code=12 name=HostName -> add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" -> /ip dhcp-server option sets -> add name=HP1505n options=HostName -> add name=StartLife1 options=HostName -> add name=amsterDev options=HostName -> add name=MiTV options=HostName -> add name=miller options=HostName -> add name=amster options=HostName -> add name=garage options=HostName -> add name=domain-search-set options=domain-search-list -> add name=VADOS-LEN options=HostName -> add name=VADOS-NUC options=HostName -> add name=MikroNUC options=HostName -> add name=master options=HostName -> add name=MikroYellow options=HostName -> add name="=\"Client ID\"" options=HostName -> add name=iVados options=HostName -> /ip dns forwarders -> add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no -> add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \ -> verify-doh-cert=no -> add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no -> add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no -> add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\ -> no -> add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\ -> no -> add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no -> /ip ipsec proposal -> set [ find default=yes ] disabled=yes -> /ip pool -> add name=dhcp ranges=10.30.30.83-10.30.30.254 -> /ip dhcp-server -> add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ -> dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \ -> name=masterDHCP server-address=10.30.30.81 -> /ip smb users -> set [ find default=yes ] disabled=yes -> add disabled=yes name=vados -> /ipv6 dhcp-client option -> add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" -> add code=12 name=HostName value="\$(HOSTNAME)" -> add code=61 name=DUID value=0x00030001488f5a8e1abc -> add code=61 name=clientid -> /ipv6 dhcp-server option -> add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" -> add code=12 name=HostName value="\$(HOSTNAME)" -> add code=61 name=CLIENT_DUID -> add code=61 name=CLIENT_MAC -> /ppp profile -> set *FFFFFFFE use-upnp=no -> /routing bgp template -> set default disabled=no output.network=bgp-networks -> /routing table -> add disabled=no fib name=To-VPN -> add disabled=no fib name=r_to_vpn -> /system logging action -> add email-start-tls=yes email-to=vados@vados.ru name=email target=email -> /system script -> add dont-require-permissions=no name=fetchCustom owner=vados policy=\ -> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ -> global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ -> \n\r\ -> \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ -> 0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\ -> \n\r\ -> \n#:local Script AM-setup\ -> \n;\r\ -> \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ -> heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ -> sc\") output=user as-value ]->\"data\");\r\ -> \n\ -> \n#/usb1/mikro_bak_rsa.pub\ -> \n\ -> \n\r\ -> \n#\ -> \n\r\ -> \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ -> 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ -> \n\r\ -> \n#\r\ -> \n\ -> \n#root.mnuc.backuper\ -> \n\ -> \n\r\ -> \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ -> .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ -> \n\ -> \n#:local Script AM-GlobalConfig;\ -> \n\r\ -> \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ -> heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ -> sc\") output=user as-value ]->\"data\");\r\ -> \n\ -> \n#/usb1/mikro_bak_rsa.pub\ -> \n#:local FetchFile AM-DOHCert.rsc\ -> \n\ -> \n\r\ -> \n\r\ -> \n#\ -> \n:global MkDir;\ -> \n\r\ -> \n\ -> \n#:local FetchFile Binary.backup\ -> \n:local localDir \"\";\ -> \n\ -> \n\r\ -> \n#\$MkDir \$localDir;\r\ -> \n\ -> \n#\ -> \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ -> \$localDir . \$FetchFile);\r\ -> \n" -> add comment="Global Config Script" dont-require-permissions=no name=\ -> AM-GlobalConfig owner=AM-GlobalConfig policy=\ -> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ -> !rsc by Vados\r\ -> \n# RouterOS script: AM-GlobalConfig\r\ -> \n# Script comment: Global Config Script\r\ -> \n# Copyright (c) 2007-2026 Vados \r\ -> \n#\r\ -> \n#\r\ -> \n# Warning: Dont touch this line!\r\ -> \n:global Identity [/system/identity/get name];\r\ -> \n:global GlobalConfReady false;\r\ -> \n#\r\ -> \n#\r\ -> \n# Global Url For Amster scripts to fetch\r\ -> \n# most be defined in AM-Init-Script or AM-setup scripts\r\ -> \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ -> \n:global ScriptsUrlSuffix (a);\r\ -> \n:global CheckSumsVerify true;\r\ -> \n\r\ -> \n:global ScriptUpdatesCRLF true;\r\ -> \n:global CommentsInScripts true;\r\ -> \n\r\ -> \n# Debug output:\r\ -> \n:global PrintDebug true; #false;\r\ -> \n\r\ -> \n# Debug output for specific script:\r\ -> \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ -> \n\r\ -> \n# Debug logs\r\ -> \n# Other actions (disk, email, remote or support) can be used as well.\r\ -> \n# I do not recommend using echo - use debug output instead (https://rsc.\ -> eworm.de/main/DEBUG.html#debug-output).\r\ -> \n#/system/logging/add topics=script,debug action=memory;\r\ -> \n\r\ -> \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ -> \n:global Domain \"WORKGROUP\";\r\ -> \n\r\ -> \n:global EmailGeneralTo \"vados@vados.ru\";\r\ -> \n#:global EmailGeneralCc \"\";\r\ -> \n\r\ -> \n# \$ScriptInstallUpdate mod/notification-telegram\r\ -> \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ -> \";\r\ -> \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ -> \n# Use this to send notifications to a specific topic in group.\r\ -> \n#:global TelegramThreadId \"30\";\r\ -> \n# Using telegram-chat you have to define trusted chat ids (not group ids\ -> !)\r\ -> \n# or user names. Groups allow to chat with devices simultaneously.\r\ -> \n:global TelegramChatIdsTrusted {\r\ -> \n \"454403445\"\r\ -> \n \"-1003631309063\"\r\ -> \n \"-5124482807\"\r\ -> \n \"1087968824\";\r\ -> \n};\r\ -> \n# \"-5294757340\";\r\ -> \n\r\ -> \n:global TelegramChatGroups \"(all)\";\r\ -> \n#:global TelegramChatGroups \"(all|home|office)\";\r\ -> \n\r\ -> \n:global NotificationFunctions {\r\ -> \n \"email\"\r\ -> \n \"telegram\";\r\ -> \n};\r\ -> \n# Toggle this to disable symbols in notifications.\r\ -> \n:global NotificationsWithSymbols true;\r\ -> \n:global TerminalColorOutput true;\r\ -> \n\r\ -> \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ -> \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ -> \n\r\ -> \n## Update channel. Possible values: stable, long-term, testing, developm\ -> ent\r\ -> \n:global updateChannel \"stable\";\r\ -> \n\r\ -> \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ -> \");\r\ -> \n:global CertRenewTime 2w;\r\ -> \n:global CertRenewPass (a); #{\r\ -> \n# \"\";\r\ -> \n# \"v3ry-s3cr3t\";\r\ -> \n# \"4n0th3r-s3cr3t\";\r\ -> \n#};\r\ -> \n:global CertWarnTime 1w;\r\ -> \n:global CertIssuedExportPass (a); # {\r\ -> \n# \"\";\r\ -> \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ -> \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ -> \n#};\r\ -> \n\r\ -> \n# Script BackupAndUpdate mode, possible values: backup,\r\ -> \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ -> n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ -> \n# osupdate - Update if available and creates backups before/after update\ -> \_(ignores `forceBackup`)\r\ -> \n# Set `forceBackup` to true to always create backups, even\ -> \_without updates\r\ -> \n# osnotify - Set `forceBackup` to always create backups on every run\r\ -> \n:global DevInfoIncludeIP true;\r\ -> \n:global BackupAndUpdateMode \"osnotify\"\r\ -> \n\r\ -> \n:global forceBackup true;\r\ -> \n:global BackupPassword \"Peskar55\";\r\ -> \n\r\ -> \n# SFTP Backup Variables\r\ -> \n:global BackupRandomDelay 0;\r\ -> \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ -> \n:global BackupUploadUser \$Identity;\r\ -> \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ -> \n\r\ -> \n:global BackupSendBinary true;\r\ -> \n:global BackupSendExport true;\r\ -> \n:global BackupSendGlobalConfig true;\r\ -> \n:global BackupSendScripts true;\r\ -> \n\r\ -> \n# Remove local file after uploading if no errors\r\ -> \n:global BackupRmLocal true;\r\ -> \n\r\ -> \n# Local Backups Root Directory \r\ -> \n:global BackupLocalRoot \"tmpfs\";\r\ -> \n\r\ -> \n# Encrypt Backup\r\ -> \n:global BackupEncrypt true;\r\ -> \n\r\ -> \n# Sensitive information in Backups\r\ -> \n:global BackupSens true;\r\ -> \n\r\ -> \n# User Export\r\ -> \n:global BackupUser true;\r\ -> \n\r\ -> \n# License Export (not for CHR, will silently skip)\r\ -> \n:global BackupLicense false;\r\ -> \n\r\ -> \n# SSH Keys\r\ -> \n:global BackupSshKeys true;\r\ -> \n\r\ -> \n# Certificate Export\r\ -> \n:global BackupCerts true;\r\ -> \n\r\ -> \n# Certificate Password\r\ -> \n:global BackupCertsPasswd \"\";\r\ -> \n\r\ -> \n# User-Manager Export\r\ -> \n:global BackupUserMan false;\r\ -> \n\r\ -> \n# The Dude Export\r\ -> \n:global BackupDude false;\r\ -> \n\r\ -> \n# User Files to export, comma-separated string or array of strings\r\ -> \n# User Files are not removed on backup\r\ -> \n# Any directory paths will be removed (/ -> _) on remote file\r\ -> \n# Nonpresent files are silently skipped\r\ -> \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ -> \n\r\ -> \n# load functions and any custom scripts\r\ -> \n# [ /system/script/find where name=\"global-config-ov\ -> erlay\" ], \\\r\ -> \n# [ /system/script/find where name~\"^global-config-o\ -> verlay\\\\.d/.\" ]\r\ -> \n#\r\ -> \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ -> ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ -> \r\ -> \n# :onerror Err {\r\ -> \n# /system/script/run \$Script;\r\ -> \n# } do={\r\ -> \n# :log error (\"Loading configuration from configs and functions\"\ -> \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ -> \n# }\r\ -> \n#}\r\ -> \n#:log info \"\\ndevMode = \$devMode\";\r\ -> \n#:log info \"\\ndevRunning = \$devRunning\";\r\ -> \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ -> GlobalRUN\\r\?\\n\" ] do={\r\ -> \n :onerror Err {\r\ -> \n /system/script/run \$Script;\r\ -> \n } do={\r\ -> \n :log error (\"Run script \" . [ /system/script/get \$Script name \ -> ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ -> \n }\r\ -> \n}\r\ -> \n\r\ -> \n# signal we are ready\r\ -> \n:set GlobalConfReady true;\r\ -> \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ -> \n" -> add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ -> owner=AM-GlobalFunc policy=\ -> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ -> !rsc by Vados\r\ -> \n# RouterOS script: AM-GglobalFunc\r\ -> \n# Script comment: Global functions\r\ -> \n# Copyright (c) 2005-2026 Vados \r\ -> \n#\r\ -> \n#\r\ -> \n# requires RouterOS, version=7.19\r\ -> \n# requires device-mode, fetch, scheduler\r\ -> \n:local ExitOK false;\r\ -> \n:local ScriptName [ :jobname ];\r\ -> \n#:global checkRunJob \$SriptName;\r\ -> \n#:global fixCRLF;\r\ -> \n#:if (\$fixCRLF != false) do={\r\ -> \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ -> ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ -> }\r\ -> \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ -> et \$fixScript source ] ] \$fixScript};};\r\ -> \n#}\r\ -> \n:global GlobalFuncReady false;\r\ -> \n\r\ -> \n# Git commit id & info, expected configuration version\r\ -> \n:global CommitId \"main/729/f42d43ae\";\r\ -> \n:global CommitTAG \"unknown\";\r\ -> \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ -> r: root, in 00:05:03 01.07.2026.\";\r\ -> \n\r\ -> \n# The variables are received right here.\r\ -> \n:global GlobalConfVersion 140;\r\ -> \n\r\ -> \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ -> \n\r\ -> \n:global Identity [/system/identity/get name];\r\ -> \n:global IdentityShort [:pick \$Identity 0 18];\r\ -> \n\r\ -> \n:global devBoardName [/system/resource/get board-name];\r\ -> \n:global devMode [/system/device-mode/get mode];\r\ -> \n:global devCurArch [/system/resource/get architecture-name];\r\ -> \n:global devCurVersion [/system/resource/get version];\r\ -> \n\r\ -> \n# Variables defined in AM-GlobalConfig.rsc\r\ -> \n:global TerminalColorOutput;\r\ -> \n:global CommentsInScripts;\r\ -> \n:global DetectIpAddrDefault;\r\ -> \n:global DetectIpAddrFallback;\r\ -> \n:global updateChannel;\r\ -> \n:global Domain;\r\ -> \n:global EmailGeneralTo;\r\ -> \n:global BackupAndUpdateMode;\r\ -> \n\r\ -> \n# Single functions, without nested functions.\r\ -> \n:global MiniDateTimeStamp;\r\ -> \n:global MicroDateTimeStamp;\r\ -> \n\r\ -> \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ -> \n:global LogPrint;\r\ -> \n\r\ -> \n# DeviceInfo and Updates\r\ -> \n:global IsCheckUpdates;\r\ -> \n:global WaitCheckUpdates;\r\ -> \n:global GetPubIp;\r\ -> \n\r\ -> \n:global GetArrDeviceInfo;\r\ -> \n:global WaitArrDeviceInfo;\r\ -> \n\r\ -> \n:global devModel;\r\ -> \n:global devRunningMode;\r\ -> \n\r\ -> \n:global devRbRevision;\r\ -> \n:global devRbSerialNumber;\r\ -> \n:global devRbVerAvail;\r\ -> \n\r\ -> \n:global runningChannelVersion;\r\ -> \n:global runningChannel;\r\ -> \n:global runningVersion;\r\ -> \n\r\ -> \n:global devBuildTime;\r\ -> \n:global ROsVerAvail;\r\ -> \n:global PkgUpdStatus;\r\ -> \n:global currentUpdateChannel;\r\ -> \n\r\ -> \n:global ScriptInstallUpdate;\r\ -> \n\r\ -> \n:global DeviceInfo;\r\ -> \n\r\ -> \n:global OldMode;\r\ -> \n\r\ -> \n:global ParseKeyValueStore;\r\ -> \n:global RandomDelay;\r\ -> \n:global GetRandomNumber;\r\ -> \n:global EscapeForRegEx;\r\ -> \n:global CharacterMultiply;\r\ -> \n:global CharacterReplace;\r\ -> \n:global CleanFilePath;\r\ -> \n:global CleanName;\r\ -> \n\r\ -> \n:global CommitBrief;\r\ -> \n\r\ -> \n:global EitherOr;\r\ -> \n:global FormatLine;\r\ -> \n:global GetRandom20CharAlNum;\r\ -> \n:global GetRandom20CharHex;\r\ -> \n:global GetRandomNumber;\r\ -> \n:global Grep;\r\ -> \n:global IfThenElse;\r\ -> \n:global MAX;\r\ -> \n:global MIN;\r\ -> \n:global HumanReadableNum;\r\ -> \n\r\ -> \n:global IsFullyConnected;\r\ -> \n:global IsDNSResolving;\r\ -> \n:global IsTimeSync;\r\ -> \n:global IsTimeSyncCached;\r\ -> \n:global IsTimeSyncResetNtp;\r\ -> \n\r\ -> \n:global MkDir;\r\ -> \n:global RmDir;\r\ -> \n:global RmFile;\r\ -> \n:global FileGet;\r\ -> \n:global Unix2Dos;\r\ -> \n:global UrlEncode;\r\ -> \n:global WaitForFile;\r\ -> \n:global ScriptLock;\r\ -> \n:global SendTelegram;\r\ -> \n:global NotificationFunctions;\r\ -> \n:global SendNotification;\r\ -> \n:global SendNotification2;\r\ -> \n:global SymbolForNotification;\r\ -> \n:global SymbolByUnicodeName;\r\ -> \n:global ValidateSyntax;\r\ -> \n:global CheckSumsVerify;\r\ -> \n:global GlobalConfChanges;\r\ -> \n:global GlobalConfMigration;\r\ -> \n:global VersionToNum;\r\ -> \n:global RequiredRouterOS;\r\ -> \n:global ExitError;\r\ -> \n:global ExitOnError;\r\ -> \n\r\ -> \n:global FetchHugeFiles;\r\ -> \n:global FetchUserAgentStr;\r\ -> \n:global FileExists;\r\ -> \n:global CertificateAvailable;\r\ -> \n:global CertificateDownload;\r\ -> \n:global CertificateNameByCN;\r\ -> \n:global CharacterMultiply;\r\ -> \n\r\ -> \n:global InspectVar;\r\ -> \n:global InspectVarRet;\r\ -> \n:global ParseCustom;\r\ -> \n\r\ -> \n:set IsCheckUpdates do={\r\ -> \n :local isInfo [:tobool \$1];\r\ -> \n :global updateChannel;\r\ -> \n :global PkgUpdStatus;\r\ -> \n :global currentUpdateChannel;\r\ -> \n :global ROsVerAvail;\r\ -> \n :global arrDeviceInfo;\r\ -> \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ -> \n :local CurrentChannel [ /system/package/update/get channel ];\r\ -> \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ -> el) do={\r\ -> \n :retry command={/system/package/update set channel=\$updateChannel} \ -> \_delay=300ms max=5 on-error={};\r\ -> \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ -> \n }\r\ -> \n :local Update [ /system/package/update/get ];\r\ -> \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ -> \n :set currentUpdateChannel \$Channel;\r\ -> \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ -> \n :local StatusPkg \"undefined\";\r\ -> \n :log info (\$0 . \" Checking for updates...\");\r\ -> \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ -> dates without-paging as-value]->\"status\")} \\\r\ -> \n delay=300ms max=5 on-error={};\r\ -> \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ -> \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ -> s true; } else={ :set PkgUpdStatus false; }\r\ -> \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ -> ] ];\r\ -> \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ -> \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ -> \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ -> \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ -> \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ -> \n }\r\ -> \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ -> kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ -> \n :return true;\r\ -> \n } else={\r\ -> \n :return \$PkgUpdStatus;\r\ -> \n }\r\ -> \n}\r\ -> \n\r\ -> \n:set WaitCheckUpdates do={\r\ -> \n :global IsCheckUpdates;\r\ -> \n :global PkgUpdStatus;\r\ -> \n :global currentUpdateChannel;\r\ -> \n :global ROsVerAvail;\r\ -> \n :global arrDeviceInfo;\r\ -> \n :local Status \"\";\r\ -> \n :local Update;\r\ -> \n :local WaitCount 0;\r\ -> \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ -> \n :return false;\r\ -> \n }\r\ -> \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ -> \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ -> \") && \$WaitCount < 60) do={\r\ -> \n :delay 1s;\r\ -> \n :set WaitCount (\$WaitCount + 1);\r\ -> \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ -> \n }\r\ -> \n :set Update [ /system/package/update/get ];\r\ -> \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ -> \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ -> \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ -> \n :set PkgUpdStatus true;\r\ -> \n } else={\r\ -> \n :set PkgUpdStatus false;\r\ -> \n }\r\ -> \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ -> \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ -> \n }\r\ -> \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ -> \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ -> do={\r\ -> \n :return false;\r\ -> \n }\r\ -> \n :return true;\r\ -> \n}\r\ -> \n\r\ -> \n:set WaitArrDeviceInfo do={\r\ -> \n :global GetArrDeviceInfo;\r\ -> \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ -> \n :delay 1s;\r\ -> \n }\r\ -> \n}\r\ -> \n\r\ -> \n:set GetArrDeviceInfo do={\r\ -> \n :global LogPrint;\r\ -> \n :global arrDeviceInfo;\r\ -> \n :global devBoardName;\r\ -> \n :global devModel;\r\ -> \n :global devRunning;\r\ -> \n :global devCurArch;\r\ -> \n :global devRbRevision;\r\ -> \n :global devRbSerialNumber;\r\ -> \n :global devBuildTime;\r\ -> \n :global runningChannelVersion;\r\ -> \n :global runningChannel;\r\ -> \n :global runningVersion;\r\ -> \n :global currentUpdateChannel;\r\ -> \n :global ROsVerAvail;\r\ -> \n\r\ -> \n :local DeviceInfo;\r\ -> \n :local Resource [/system/resource/get];\r\ -> \n :local Update [ /system/package/update/get ];\r\ -> \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ -> \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ -> \n :local RouterBoard;\r\ -> \n :local IsRouterBoard false;\r\ -> \n :local RunningMode \"\";\r\ -> \n\r\ -> \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ -> \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ -> \n :set runningChannelVersion \$VersionString;\r\ -> \n :set runningVersion \$VersionString;\r\ -> \n :set runningChannel \"\";\r\ -> \n\r\ -> \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ -> {\r\ -> \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ -> \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ -> len \$VersionString ] ];\r\ -> \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ -> \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ -> \r\ -> \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ -> \n }\r\ -> \n }\r\ -> \n\r\ -> \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ -> \_3] != \"x86\") do={\r\ -> \n :do {\r\ -> \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ -> \n# :set RouterBoard [ /system/routerboard/get ];\r\ -> \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ -> \n :set IsRouterBoard true;\r\ -> \n }\r\ -> \n } on-error={}\r\ -> \n }\r\ -> \n\r\ -> \n :do {\r\ -> \n :set RunningMode [ /system/device-mode/get mode ];\r\ -> \n } on-error={\r\ -> \n :do {\r\ -> \n :set RunningMode [ /system/device-mode/get running ];\r\ -> \n } on-error={\r\ -> \n :set RunningMode \"\";\r\ -> \n }\r\ -> \n }\r\ -> \n :set devRunning \$RunningMode;\r\ -> \n\r\ -> \n :if (\$IsRouterBoard = true) do={\r\ -> \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ -> \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ -> \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ -> ];\r\ -> \n } else={\r\ -> \n :set devModel \$devBoardName;\r\ -> \n :set devRbRevision \"\";\r\ -> \n :set devRbSerialNumber \"\";\r\ -> \n }\r\ -> \n\r\ -> \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ -> \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ -> \n\r\ -> \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ -> \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ -> \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ -> \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ -> \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ -> \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ -> \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ -> \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ -> ion;\r\ -> \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ -> \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ -> \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ -> \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ -> current-firmware\") ];\r\ -> \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ -> upgrade-firmware\") ];\r\ -> \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ -> \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ -> alled-version\") ];\r\ -> \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ -> \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ -> ) ];\r\ -> \n\r\ -> \n :set arrDeviceInfo \$DeviceInfo;\r\ -> \n :return \$DeviceInfo;\r\ -> \n}\r\ -> \n\r\ -> \n:set DeviceInfo do={\r\ -> \n :global GetArrDeviceInfo;\r\ -> \n :global GlobalConfVersion;\r\ -> \n :global Identity;\r\ -> \n :global IfThenElse;\r\ -> \n :global FormatLine;\r\ -> \n :global CommitBrief;\r\ -> \n\r\ -> \n :local License [/system/license/get];\r\ -> \n :local Snmp [ /snmp/get ];\r\ -> \n :local Info [ \$GetArrDeviceInfo ];\r\ -> \n\r\ -> \n :if ([ :typeof \$Info ] != \"array\") do={\r\ -> \n :return false;\r\ -> \n }\r\ -> \n\r\ -> \n :return ( \\\r\ -> \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ -> \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ -> \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ -> \_. \\\r\ -> \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ -> \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ -> \_\\\r\ -> \n \"Hardware:\\n\" . \\\r\ -> \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ -> \\\r\ -> \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ -> n\" . \\\r\ -> \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ -> \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ -> \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ -> \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ -> \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ -> \\n\") ] . \\\r\ -> \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ -> \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ -> \")) ] . \"\\n\") ] . \\\r\ -> \n \"RouterOS:\\n\" . \\\r\ -> \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ -> \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ -> \")) ] . \"\\n\") ] . \\\r\ -> \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ -> \\n\" . \\\r\ -> \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ -> \_\"\\n\" . \\\r\ -> \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ -> \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ -> \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ -> \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ -> \"\\n\") ] . \\\r\ -> \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ -> \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ -> \_\\\r\ -> \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ -> \_\"\\n\") ] . \\\r\ -> \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ -> \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ -> ) \\\r\ -> \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ -> \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ -> \n \"RouterOS-Scripts:\\n\" . \\\r\ -> \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ -> \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ -> \n}\r\ -> \n\r\ -> \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ -> tionFunctions ({})}\r\ -> \n\r\ -> \n:set GetRandom20CharAlNum do={\r\ -> \n :global EitherOr;\r\ -> \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ -> FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ -> \n}\r\ -> \n\r\ -> \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ -> \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ -> \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ -> \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ -> \n\r\ -> \n:global checkRunJob;\r\ -> \n:set checkRunJob do={\r\ -> \n :local Script [ :tostr \$1 ];\r\ -> \n :global ScriptLock; \r\ -> \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ -> \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ -> :set Job [ /system/script/job/get \$Job ];\r\ -> \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ -> stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ -> \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ -> lse; \r\ -> \n}\r\ -> \n\r\ -> \n:set InspectVar do={\r\ -> \n :global InspectVarRet;\r\ -> \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ -> \n}\r\ -> \n\r\ -> \n:set CommitBrief do={\r\ -> \n :global CommitId;\r\ -> \n :global CommitInfo;\r\ -> \n :if (\$CommitId = \"unknown\") do={\r\ -> \n :return \"unknown\";\r\ -> \n }\r\ -> \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ -> \n}\r\ -> \n\r\ -> \n:set InspectVarRet do={\r\ -> \n :local Input \$1;\r\ -> \n :local Level (0 + [ :tonum \$2 ]);\r\ -> \n :global CharacterReplace;\r\ -> \n :global IfThenElse;\r\ -> \n :global InspectVarRet;\r\ -> \n :local IndentReturn do={\r\ -> \n :local Prefix [ :tostr \$1 ];\r\ -> \n :local Value [ :tostr \$2 ];\r\ -> \n :local Level [ :tonum \$3 ];\r\ -> \n :global CharacterMultiply;\r\ -> \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ -> fix . \"-> \" . \$Value);\r\ -> \n }\r\ -> \n :local TypeOf [ :typeof \$Input ];\r\ -> \n :local Len [ :len \$Input ];\r\ -> \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ -> \n :if (\$TypeOf = \"array\") do={\r\ -> \n :foreach Key,Value in=\$Input do={\r\ -> \n :set \$Return (\$Return . \"\\n\" . \\\r\ -> \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ -> \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ -> \n }\r\ -> \n } else={\r\ -> \n :if (\$TypeOf = \"str\") do={\r\ -> \n :set \$Return (\$Return . \"\\n\" . \\\r\ -> \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ -> \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ -> \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ -> \n }\r\ -> \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ -> \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ -> \n }\r\ -> \n }\r\ -> \n :if (\$TypeOf != \"nothing\") do={\r\ -> \n :set \$Return (\$Return . \"\\n\" . \\\r\ -> \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ -> \_\\\r\ -> \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ -> \n }\r\ -> \n }\r\ -> \n :return \$Return;\r\ -> \n}\r\ -> \n\r\ -> \n:set GetPubIp do={\r\ -> \n :global DetectIpAddrDefault;\r\ -> \n :global DetectIpAddrFallback;\r\ -> \n\r\ -> \n :local PubIpAddr false;\r\ -> \n :local Url \$DetectIpAddrDefault;\r\ -> \n :local JobName [ :jobname ];\r\ -> \n\r\ -> \n :do {\r\ -> \n :log debug (\$0 . \" Trying to detect public IP using default serv\ -> ice: \" . \$Url . \"...\");\r\ -> \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ -> \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ -> )} \\\r\ -> \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ -> detect public IP using default service: \" . \$Url . \".\")}\r\ -> \n } on-error={\r\ -> \n :log error (\$0 . \" Failed to detect public IP using default serv\ -> ice: \" . \$Url . \".\");\r\ -> \n :set Url \$DetectIpAddrFallBack;\r\ -> \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ -> vice: \" . \$Url . \"...\");\r\ -> \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ -> \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ -> )} \\\r\ -> \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ -> \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ -> \n };\r\ -> \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ -> \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ -> {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ -> \n :return \$PubIpAddr;\r\ -> \n}\r\ -> \n\r\ -> \n:set FormatLine do={\r\ -> \n :local Key [ :tostr \$1 ];\r\ -> \n :local Value [ :tostr \$2 ];\r\ -> \n :local Indent [ :tonum \$3 ];\r\ -> \n :local Spaces;\r\ -> \n :local Return \"\";\r\ -> \n :global CharacterMultiply;\r\ -> \n :global EitherOr;\r\ -> \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ -> \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ -> \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ -> \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ -> n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ -> \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ -> \$Return ]) ] . \$Value)}\r\ -> \n :return \$Return;\r\ -> \n}\r\ -> \n\r\ -> \n:set ParseCustom do={\r\ -> \n :local Str [ :tostr \$1 ];\r\ -> \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ -> \n :local End [ :tostr \$3 ];\r\ -> \n :local Num [ :tonum \$4 ];\r\ -> \n :local Return;\r\ -> \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ -> \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ -> \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ -> lse={\r\ -> \n :set End [:find \$rest \$End];\r\ -> \n :set Return [:pick \$rest 0 \$End];\r\ -> \n }\r\ -> \n:return \$Return;\r\ -> \n}\r\ -> \n\r\ -> \n:set LogPrint do={\r\ -> \n :local Severity [ :tostr \$1 ];\r\ -> \n :local Name [ :tostr \$2 ];\r\ -> \n :local Message [ :tostr \$3 ];\r\ -> \n :global PrintDebug;\r\ -> \n :global PrintDebugOverride;\r\ -> \n :global EitherOr;\r\ -> \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ -> ];\r\ -> \n :local PrintSeverity do={\r\ -> \n :global TerminalColorOutput;\r\ -> \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ -> \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ -> \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ -> \n}\r\ -> \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ -> \r\ -> \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ -> \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ -> \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ -> \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ -> \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ -> \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ -> erity \$Severity ] . \": \" . \$Message)}\r\ -> \n}\r\ -> \n\r\ -> \n:set CertificateAvailable do={\r\ -> \n :local CommonName [ :tostr \$1 ];\r\ -> \n :local UseFor [ :tostr \$2 ];\r\ -> \n\r\ -> \n :global CertificateDownload;\r\ -> \n :global ParseKeyValueStore;\r\ -> \n\r\ -> \n :if ([ :len \$UseFor ] = 0) do={\r\ -> \n :log warning (\$0 . \"The intended use is undefined!\");\r\ -> \n :set UseFor \"undefined\";\r\ -> \n }\r\ -> \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ -> \n [ /certificate/settings/get crl-download ] = true && \\\r\ -> \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ -> \n :log warning (\$0 . \"This system has low free flash space but \" . \ -> \\\r\ -> \n \"is configured to download certificate CRLs to system!\");\r\ -> \n }\r\ -> \n :if ([ :len \$CommonName ] = 0) do={\r\ -> \n :log warning (\$0 . \"No CommonName given!\");\r\ -> \n :return false;\r\ -> \n }\r\ -> \n :local CertSettings [ /certificate/settings/get ];\r\ -> \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ -> \r\ -> \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ -> \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ -> \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ -> \_] ] > 0) do={\r\ -> \n :return true;\r\ -> \n }\r\ -> \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ -> ) do={\r\ -> \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ -> \"' not available.\");\r\ -> \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ -> \n :return false;\r\ -> \n }\r\ -> \n }\r\ -> \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ -> ) do={\r\ -> \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ -> \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ -> \n :return true;\r\ -> \n }\r\ -> \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ -> e ] ];\r\ -> \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ -> ertVal->\"skid\")) do={\r\ -> \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ -> \_= 0) do={\r\ -> \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ -> >\"CN\");\r\ -> \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ -> is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ -> \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ -> \n :return false;\r\ -> \n }\r\ -> \n }\r\ -> \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ -> \") ] ];\r\ -> \n }\r\ -> \n :return true;\r\ -> \n}\r\ -> \n\r\ -> \n:set CertificateDownload do={\r\ -> \n :local CommonName [ :tostr \$1 ];\r\ -> \n :global ScriptUpdatesBaseUrl;\r\ -> \n :global ScriptUpdatesUrlSuffix;\r\ -> \n :global CertificateNameByCN;\r\ -> \n :global CleanName;\r\ -> \n :global FetchUserAgentStr;\r\ -> \n :global RmFile;\r\ -> \n :global WaitForFile;\r\ -> \n\r\ -> \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ -> \r\ -> \n \"CommonName '\" . \$CommonName . \"'.\");\r\ -> \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ -> \n :do {\r\ -> \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ -> -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ -> \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ -> sUrlSuffix) \\\r\ -> \n dst-path=\$FileName as-value;\r\ -> \n \$WaitForFile \$FileName;\r\ -> \n } on-error={\r\ -> \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ -> e '\" . \$CommonName . \\\r\ -> \n \"' from repository! Trying fallback to mkcert.org...\");\r\ -> \n :do {\r\ -> \n :local CertSettings [ /certificate/settings/get ];\r\ -> \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ -> \_] ] = 0 && \\\r\ -> \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ -> || \\\r\ -> \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ -> \\\r\ -> \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ -> \r\ -> \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ -> \_Root X1\" ] ] > 0)) do={\r\ -> \n :log error (\$0 . \" Required certificate is not available.\");\ -> \r\ -> \n :return false;\r\ -> \n }\r\ -> \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ -> er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ -> \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ -> n ({ \$CommonName }) ] \\\r\ -> \n dst-path=\$FileName as-value;\r\ -> \n \$WaitForFile \$FileName;\r\ -> \n :if ([ /file/get \$FileName size ] = 0) do={\r\ -> \n \$RmFile \$FileName;\r\ -> \n :error false;\r\ -> \n }\r\ -> \n } on-error={\r\ -> \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ -> e '\" . \$CommonName . \"'!\");\r\ -> \n :return false;\r\ -> \n }\r\ -> \n }\r\ -> \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ -> \n :delay 1s;\r\ -> \n \$RmFile \$FileName;\r\ -> \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ -> ) do={\r\ -> \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ -> +\\\$\") ];\r\ -> \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ -> e . \"' still unavailable!\");\r\ -> \n :return false;\r\ -> \n }\r\ -> \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ -> \"_[0-9]+\\\$\") ] do={\r\ -> \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ -> \n }\r\ -> \n :return true;\r\ -> \n}\r\ -> \n\r\ -> \n:set CertificateNameByCN do={\r\ -> \n :local Match [ :tostr \$1 ];\r\ -> \n :global CleanName;\r\ -> \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ -> rint=\$Match or name=\$Match) ]->0);\r\ -> \n :if ([ :len \$Cert ] = 0) do={\r\ -> \n :log warning (\$0 .\" No matching certificate found.\");\r\ -> \n :return false;\r\ -> \n }\r\ -> \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ -> \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ -> \n :return true;\r\ -> \n}\r\ -> \n\r\ -> \n:set CharacterMultiply do={\r\ -> \n :local Str [ :tostr \$1 ];\r\ -> \n :local Num [ :tonum \$2 ];\r\ -> \n :if (\$Num = 0) do={:return \"\"}\r\ -> \n :local Return \"\";\r\ -> \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ -> \n :return \$Return;\r\ -> \n}\r\ -> \n\r\ -> \n:set FileExists do={\r\ -> \n :local FileName [ :tostr \$1 ];\r\ -> \n :local Type [ :tostr \$2 ];\r\ -> \n :global FileGet;\r\ -> \n :local FileVal [ \$FileGet \$FileName ];\r\ -> \n :if (\$FileVal = false) do={ :return false; }\r\ -> \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ -> \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ -> \_true; }\r\ -> \n :return false;\r\ -> \n}\r\ -> \n\r\ -> \n:set Grep do={\r\ -> \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ -> \n :local Pattern [ :tostr \$2 ];\r\ -> \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ -> }\r\ -> \n :do {\r\ -> \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ -> \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ -> \$Line}\r\ -> \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ -> Input ] ];\r\ -> \n } while=([ :len \$Input ] > 0);\r\ -> \n :return [];\r\ -> \n}\r\ -> \n\r\ -> \n:set HumanReadableNum do={\r\ -> \n :local Input [ :tonum \$1 ];\r\ -> \n :local Base [ :tonum \$2 ];\r\ -> \n :global EitherOr;\r\ -> \n :global IfThenElse;\r\ -> \n :local Prefix \"kMGTPE\";\r\ -> \n :local Pow 1;\r\ -> \n :set Base [ \$EitherOr \$Base 1024 ];\r\ -> \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ -> \n :if (\$Input < \$Base) do={:return \$Input}\r\ -> \n :for I from=0 to=[ :len \$Prefix ] do={\r\ -> \n :set Pow (\$Pow * \$Base);\r\ -> \n :if (\$Input / \$Base < \$Pow) do={\r\ -> \n :set Prefix [ :pick \$Prefix \$I ];\r\ -> \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ -> \n :local Tmp2 (\$Tmp1 / 100);\r\ -> \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ -> \n :return (\$Tmp2 . \".\" . \\\r\ -> \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ -> 2 ] + 1) ] . \\\r\ -> \n \$Prefix . \$Bin);\r\ -> \n }\r\ -> \n }\r\ -> \n}\r\ -> \n\r\ -> \n:set CleanFilePath do={\r\ -> \n :local Path [ :tostr \$1 ];\r\ -> \n :global CharacterReplace;\r\ -> \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ -> \"//\" \"/\" ]; }\r\ -> \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ -> n \$Path ] ]; }\r\ -> \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ -> :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ -> \n :return \$Path;\r\ -> \n}\r\ -> \n\r\ -> \n:set CleanName do={\r\ -> \n :local Input [ :tostr \$1 ];\r\ -> \n :local Return \"\";\r\ -> \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ -> \n :local Char [ :pick \$Input \$I ];\r\ -> \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ -> stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ -> \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ -> \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ -> ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ -> \n };\r\ -> \n :set Return (\$Return . \$Char)};\r\ -> \n :return \$Return;\r\ -> \n}\r\ -> \n\r\ -> \n:set RandomDelay do={\r\ -> \n :local Time [ :tonum \$1 ];\r\ -> \n :local Unit [ :tostr \$2 ];\r\ -> \n :global EitherOr;\r\ -> \n :global GetRandomNumber;\r\ -> \n :global MAX;\r\ -> \n :if (\$Time = 0) do={:return false}\r\ -> \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ -> [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ -> \n}\r\ -> \n\r\ -> \n:set EscapeForRegEx do={\r\ -> \n :local Input [ :tostr \$1 ];\r\ -> \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ -> \n :local Return \"\";\r\ -> \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ -> \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ -> \n :local Char [ :pick \$Input \$I ];\r\ -> \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ -> \n :set Return (\$Return . \$Char);\r\ -> \n }\r\ -> \n :return \$Return;\r\ -> \n}\r\ -> \n\r\ -> \n:set ExitError do={\r\ -> \n :local ExitOK [ :tostr \$1 ];\r\ -> \n :local Name [ :tostr \$2 ];\r\ -> \n :local Error [ :tostr \$3 ];\r\ -> \n :global IfThenElse;\r\ -> \n :if (\$ExitOK = \"false\") do={\r\ -> \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ -> \\\r\ -> \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ -> ror\" . \\\r\ -> \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ -> \$Error) \".\" ]);\r\ -> \n }\r\ -> \n}\r\ -> \n\r\ -> \n:set ExitOnError do={\r\ -> \n :local Name [ :tostr \$1 ];\r\ -> \n :local Error [ :tostr \$2 ];\r\ -> \n :global IfThenElse;\r\ -> \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ -> \\\$\") \\\r\ -> \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ -> r\" . \\\r\ -> \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ -> rror) \".\" ]);\r\ -> \n}\r\ -> \n\r\ -> \n:set MiniDateTimeStamp do={\r\ -> \n :local mikro [ :tobool \$1 ];\r\ -> \n /system/clock;\r\ -> \n :local vdate [get date];\r\ -> \n :local vtime [get time];\r\ -> \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ -> \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ -> \n :local M [:tonum \$MM];\r\ -> \n :if (\$vdate ~ \".../../....\") do={\r\ -> \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ -> \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ -> PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ -> \n :if (\$M>12) do={:set M (\$M - 12)}\r\ -> \n :set MM [:pick (100 + \$M) 1 3];\r\ -> \n }\r\ -> \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ -> \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ -> \n :local HH [:pick \$vtime 0 2];\r\ -> \n :local mm [:pick \$vtime 3 5];\r\ -> \n :local ss [:pick \$vtime 6 8];\r\ -> \n :local Return;\r\ -> \n :if (\$mikro = true) do={\r\ -> \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ -> \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ -> \n } else={\r\ -> \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ -> \r\ -> \n }\r\ -> \n :return \$Return;\r\ -> \n}\r\ -> \n\r\ -> \n:set WaitForFile do={\r\ -> \n :local FileName [ :tostr \$1 ];\r\ -> \n :local WaitTime [ :totime \$2 ];\r\ -> \n :global CleanFilePath;\r\ -> \n :global EitherOr;\r\ -> \n :global MAX;\r\ -> \n :set FileName [ \$CleanFilePath \$FileName ];\r\ -> \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ -> \n :do {\r\ -> \n :retry {\r\ -> \n /file/get \$FileName;\r\ -> \n :return true;\r\ -> \n } delay=\$Delay max=10;\r\ -> \n } on-error={ }\r\ -> \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ -> \n :do {\r\ -> \n /file/get \$FileName;\r\ -> \n :return true;\r\ -> \n } on-error={ }\r\ -> \n :delay \$Delay;\r\ -> \n :set Delay (\$Delay * 3 / 2);\r\ -> \n }\r\ -> \n :return false;\r\ -> \n}\r\ -> \n\r\ -> \n:set FileGet do={\r\ -> \n :local FileName [ :tostr \$1 ];\r\ -> \n :global WaitForFile;\r\ -> \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ -> \n :return false;\r\ -> \n }\r\ -> \n :local FileVal false;\r\ -> \n :do {\r\ -> \n :set FileVal [ /file/get \$FileName ];\r\ -> \n } on-error={ }\r\ -> \n :return \$FileVal;\r\ -> \n}\r\ -> \n\r\ -> \n:set RmDir do={\r\ -> \n :local DirName [ :tostr \$1 ];\r\ -> \n :global FileGet;\r\ -> \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ -> \n :local DirVal [ \$FileGet \$DirName ];\r\ -> \n :if (\$DirVal = false) do={\r\ -> \n :log debug (\$0 . \" ... which does not exist.\");\r\ -> \n :return true;\r\ -> \n };\r\ -> \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ -> \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ -> ory.\");\r\ -> \n :return false;\r\ -> \n };\r\ -> \n :onerror Err {\r\ -> \n /file/remove \$DirName;\r\ -> \n } do={\r\ -> \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ -> : \" . \$Err);\r\ -> \n :return false;\r\ -> \n };\r\ -> \n :return true;\r\ -> \n}\r\ -> \n\r\ -> \n:set RmFile do={\r\ -> \n :local FileName [ :tostr \$1 ];\r\ -> \n :global FileGet;\r\ -> \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ -> \n :local FileVal [ \$FileGet \$FileName ];\r\ -> \n :if (\$FileVal = false) do={\r\ -> \n :log debug (\$0 . \" ... which does not exist.\");\r\ -> \n :return true;\r\ -> \n }\r\ -> \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ -> sk\") do={\r\ -> \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ -> \r\ -> \n :return false;\r\ -> \n }\r\ -> \n :onerror Err {\r\ -> \n /file/remove \$FileName;\r\ -> \n } do={\r\ -> \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ -> \_. \$Err); :return false;\r\ -> \n }\r\ -> \n :return true;\r\ -> \n}\r\ -> \n\r\ -> \n:set MkDir do={\r\ -> \n :local Path [ :tostr \$1 ];\r\ -> \n :global CleanFilePath;\r\ -> \n :global FileGet;\r\ -> \n :global RmDir;\r\ -> \n :global WaitForFile;\r\ -> \n\r\ -> \n :local MkTmpfs do={\r\ -> \n :global WaitForFile;\r\ -> \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ -> \n :if ([ :len \$TmpFs ] = 1) do={\r\ -> \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ -> \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ -> \n /disk/enable \$TmpFs;\r\ -> \n }\r\ -> \n :return true;\r\ -> \n }\r\ -> \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ -> \n \$RmDir \"tmpfs\";\r\ -> \n :onerror Err {\r\ -> \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ -> /get total-memory ] / 3);\r\ -> \n \$WaitForFile \"tmpfs\";\r\ -> \n } do={\r\ -> \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ -> Err);\r\ -> \n :return false;\r\ -> \n }\r\ -> \n :return true;\r\ -> \n }\r\ -> \n :set Path [ \$CleanFilePath \$Path ];\r\ -> \n :if (\$Path = \"\") do={\r\ -> \n :return true;\r\ -> \n }\r\ -> \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ -> \n :local PathVal [ \$FileGet \$Path ];\r\ -> \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ -> \n :log debug (\$0 . \" ... which already exists.\");\r\ -> \n :return true;\r\ -> \n }\r\ -> \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ -> \n :if ([ \$MkTmpfs ] = false) do={\r\ -> \n :return false;\r\ -> \n }\r\ -> \n }\r\ -> \n :onerror Err {\r\ -> \n /file/add type=\"directory\" name=\$Path;\r\ -> \n \$WaitForFile \$Path;\r\ -> \n } do={\r\ -> \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ -> \" . \$Err);\r\ -> \n :return false;\r\ -> \n }\r\ -> \n :return true;\r\ -> \n}\r\ -> \n\r\ -> \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ -> \n :return \$2;\r\ -> \n}\r\ -> \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ -> \n :return \$2;\r\ -> \n}\r\ -> \n\r\ -> \n:set CharacterMultiply do={\r\ -> \n :local Str [ :tostr \$1 ];\r\ -> \n :local Num [ :tonum \$2 ];\r\ -> \n :if (\$Num = 0) do={:return \"\"}\r\ -> \n :local Return \"\";\r\ -> \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ -> \n :return \$Return;\r\ -> \n}\r\ -> \n\r\ -> \n:set CharacterReplace do={\r\ -> \n :local String [ :tostr \$1 ];\r\ -> \n :local ReplaceFrom [ :tostr \$2 ];\r\ -> \n :local ReplaceWith [ :tostr \$3 ];\r\ -> \n :local Return \"\";\r\ -> \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ -> \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ -> \r\ -> \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ -> \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ -> \r\ -> \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ -> \_\$String ] ];\r\ -> \n }\r\ -> \n :return (\$Return . \$String);\r\ -> \n}\r\ -> \n\r\ -> \n:set IfThenElse do={\r\ -> \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ -> \$2};\r\ -> \n :return \$3;\r\ -> \n}\r\ -> \n\r\ -> \n:set EitherOr do={\r\ -> \n :global IfThenElse;\r\ -> \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ -> \$1 \$2 ]}\r\ -> \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ -> \_\$1 \$2 ]}\r\ -> \n# this works for boolean values, literal ones with parentheses\r\ -> \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ -> \n}\r\ -> \n\r\ -> \n:set ParseKeyValueStore do={\r\ -> \n :local Source \$1;\r\ -> \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ -> \n :do {\r\ -> \n :return [ :deserialize from=json \$Source ];\r\ -> \n } on-error={ }\r\ -> \n } \r\ -> \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ -> }\r\ -> \n :local Result ({});\r\ -> \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ -> \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ -> \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ -> \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ -> \_:len \$KeyValue ] ];\r\ -> \n :if (\$Value=\"true\") do={:set Value true}\r\ -> \n :if (\$Value=\"false\") do={:set Value false}\r\ -> \n :set (\$Result->\$Key) \$Value;\r\ -> \n } else={:set (\$Result->\$KeyValue) true}\r\ -> \n }\r\ -> \n :return \$Result;\r\ -> \n}\r\ -> \n:set RequiredRouterOS do={\r\ -> \n :local Caller [ :tostr \$1 ];\r\ -> \n :local Required [ :tostr \$2 ];\r\ -> \n :local Warn [ :tostr \$3 ];\r\ -> \n :global IfThenElse;\r\ -> \n :global VersionToNum;\r\ -> \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ -> \\\$\")) do={\r\ -> \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ -> \n :return false;\r\ -> \n }\r\ -> \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ -> e/update/get installed-version ] ]) do={\r\ -> \n :if (\$Warn = \"true\") do={\r\ -> \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ -> 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ -> \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ -> es RouterOS \" . \$Required . \". Please update!\");\r\ -> \n }\r\ -> \n :return false;\r\ -> \n }\r\ -> \n :return true;\r\ -> \n}\r\ -> \n\r\ -> \n:set ValidateSyntax do={\r\ -> \n :local Code [ :tostr \$1 ];\r\ -> \n :global LogPrint;\r\ -> \n :onerror Err {\r\ -> \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ -> \n } do={\r\ -> \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ -> \n :return false;\r\ -> \n }\r\ -> \n :return true;\r\ -> \n}\r\ -> \n\r\ -> \n:set VersionToNum do={\r\ -> \n :local Input [ :tostr \$1 ];\r\ -> \n :local Multi 0x1000000;\r\ -> \n :local Return 0;\r\ -> \n :global CharacterReplace;\r\ -> \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ -> \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ -> \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ -> \r\ -> \n }\r\ -> \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ -> \n :local Num [ :tonum \$Value ];\r\ -> \n :if (\$Multi = 0x100) do={\r\ -> \n :if ([ :typeof \$Num ] = \"num\") do={\r\ -> \n :set Return (\$Return + 0xff00);\r\ -> \n :set Multi (\$Multi / 0x100);\r\ -> \n } else={\r\ -> \n :if (\$Value = \"zero\") do={ }\r\ -> \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ -> }\r\ -> \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ -> \r\ -> \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ -> \n }\r\ -> \n }\r\ -> \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ -> lue * \$Multi)); }\r\ -> \n :set Multi (\$Multi / 0x100);\r\ -> \n }\r\ -> \n :return \$Return;\r\ -> \n}\r\ -> \n\r\ -> \n:set ScriptLock do={\r\ -> \n :local Script [ :tostr \$1 ];\r\ -> \n :local WaitMax [ :totime \$2 ];\r\ -> \n :global GetRandom20CharAlNum;\r\ -> \n :global IfThenElse;\r\ -> \n :global ScriptLockOrder;\r\ -> \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ -> \n :set ScriptLockOrder ({});\r\ -> \n }\r\ -> \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ -> \n :set (\$ScriptLockOrder->\$Script) ({});\r\ -> \n }\r\ -> \n :local JobCount do={\r\ -> \n :local Script [ :tostr \$1 ];\r\ -> \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ -> \r\ -> \n }\r\ -> \n :local TicketCount do={\r\ -> \n :local Script [ :tostr \$1 ];\r\ -> \n :global ScriptLockOrder;\r\ -> \n :local Count 0;\r\ -> \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ -> \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ -> + 1)}\r\ -> \n }\r\ -> \n :return \$Count;\r\ -> \n }\r\ -> \n :local IsFirstTicket do={\r\ -> \n :local Script [ :tostr \$1 ];\r\ -> \n :local Check [ :tostr \$2 ];\r\ -> \n :global ScriptLockOrder;\r\ -> \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ -> \n :if (\$Ticket = \$Check) do={:return true}\r\ -> \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ -> o={:return false}\r\ -> \n }\r\ -> \n :return false;\r\ -> \n }\r\ -> \n :local AddTicket do={\r\ -> \n :local Script [ :tostr \$1 ];\r\ -> \n :local Add [ :tostr \$2 ];\r\ -> \n :global ScriptLockOrder;\r\ -> \n :while (true) do={\r\ -> \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ -> \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ -> \n :delay 10ms;\r\ -> \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ -> e}\r\ -> \n }\r\ -> \n }\r\ -> \n :local RemoveTicket do={\r\ -> \n :local Script [ :tostr \$1 ];\r\ -> \n :local Remove [ :tostr \$2 ];\r\ -> \n :global ScriptLockOrder;\r\ -> \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ -> \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ -> \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ -> \n :delay 10ms;\r\ -> \n }\r\ -> \n }\r\ -> \n }\r\ -> \n :local CleanupTickets do={\r\ -> \n :local Script [ :tostr \$1 ];\r\ -> \n :global ScriptLockOrder;\r\ -> \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ -> \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ -> \n }\r\ -> \n :set (\$ScriptLockOrder->\$Script) ({});\r\ -> \n }\r\ -> \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ -> \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ -> \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ -> ist!\");\r\ -> \n :error false;\r\ -> \n }\r\ -> \n :if ([ \$JobCount \$Script ] = 0) do={\r\ -> \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ -> );\r\ -> \n :error false;\r\ -> \n }\r\ -> \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ -> \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ -> t . \"', resetting!\");\r\ -> \n :set (\$ScriptLockOrder->\$Script) ({});\r\ -> \n /system/script/job/remove [ find where script=\$Script ];\r\ -> \n }\r\ -> \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ -> \n \$AddTicket \$Script \$MyTicket;\r\ -> \n :local WaitInterval (\$WaitMax / 20);\r\ -> \n :local WaitTime \$WaitMax;\r\ -> \n :while (\$WaitTime > 0 && \\\r\ -> \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ -> \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ -> \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ -> \n :delay \$WaitInterval;\r\ -> \n }\r\ -> \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ -> \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ -> \n \$RemoveTicket \$Script \$MyTicket;\r\ -> \n \$CleanupTickets \$Script;\r\ -> \n :return true;\r\ -> \n }\r\ -> \n \$RemoveTicket \$Script \$MyTicket;\r\ -> \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ -> once\" . \\\r\ -> \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ -> \_lock\" \"\" ] . \"...\");\r\ -> \n :return false;\r\ -> \n}\r\ -> \n\r\ -> \n:set SendNotification do={ :onerror Err {\r\ -> \n :global SendNotification2;\r\ -> \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ -> \_silent=\$4 });\r\ -> \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ -> \n}\r\ -> \n\r\ -> \n:set SendNotification2 do={\r\ -> \n :local Notification \$1;\r\ -> \n :global NotificationFunctions;\r\ -> \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ -> \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ -> ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ -> \n }\r\ -> \n}\r\ -> \n\r\ -> \n:set SymbolByUnicodeName do={\r\ -> \n :local Name [ :tostr \$1 ];\r\ -> \n :global EitherOr;\r\ -> \n :global SymbolsExtra;\r\ -> \n :local Symbols ({\r\ -> \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ -> \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ -> \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ -> \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ -> \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ -> \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ -> \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ -> \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ -> \n \"cloud\"=\"\\E2\\98\\81\";\r\ -> \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ -> \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ -> \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ -> \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ -> \n \"gear\"=\"\\E2\\9A\\99\";\r\ -> \n \"heart\"=\"\\E2\\99\\A5\";\r\ -> \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ -> \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ -> \n \"information\"=\"\\E2\\84\\B9\";\r\ -> \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ -> \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ -> \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ -> \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ -> \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ -> \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ -> \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ -> \n \"scissors\"=\"\\E2\\9C\\82\";\r\ -> \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ -> \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ -> \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ -> \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ -> \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ -> \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ -> \n \"star\"=\"\\E2\\AD\\90\";\r\ -> \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ -> \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ -> \n }, \$SymbolsExtra);\r\ -> \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ -> \n :local Special {\r\ -> \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ -> \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ -> \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ -> \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ -> \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ -> \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ -> '!\");\r\ -> \n :return \"\";\r\ -> \n }\r\ -> \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ -> me) ] . \"\\EF\\B8\\8F\");\r\ -> \n}\r\ -> \n\r\ -> \n:set SymbolForNotification do={\r\ -> \n :global NotificationsWithSymbols;\r\ -> \n :global SymbolByUnicodeName;\r\ -> \n :global IfThenElse;\r\ -> \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ -> \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ -> \n :local Return \"\";\r\ -> \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ -> mbolByUnicodeName \$Symbol ])}\r\ -> \n :return (\$Return . \" \");\r\ -> \n}\r\ -> \n\r\ -> \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ -> \n:set UrlEncode do={\r\ -> \n :local Input [ :tostr \$1 ];\r\ -> \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ -> \n :local Return \"\";\r\ -> \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ -> \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ -> %24\"; \"%25\"; \"%26\"; \"%27\";\r\ -> \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ -> \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ -> \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ -> \"%7C\"; \"%7D\"; \"%7E\" };\r\ -> \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ -> \n :local Char [ :pick \$Input \$I ];\r\ -> \n :local Replace [ :find \$Chars \$Char ];\r\ -> \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ -> ce)}\r\ -> \n :set Return (\$Return . \$Char);\r\ -> \n }\r\ -> \n :return \$Return;\r\ -> \n}\r\ -> \n\r\ -> \n:set IsDNSResolving do={\r\ -> \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ -> \n :return true;\r\ -> \n}\r\ -> \n\r\ -> \n:set IsFullyConnected do={\r\ -> \n :global IsDNSResolving;\r\ -> \n :global IsTimeSync;\r\ -> \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ -> \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ -> \n :return true;\r\ -> \n}\r\ -> \n\r\ -> \n:set IsTimeSync do={\r\ -> \n :global IsTimeSyncCached;\r\ -> \n :global IsTimeSyncResetNtp;\r\ -> \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ -> \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ -> \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ -> \n :set IsTimeSyncCached true;\r\ -> \n :return true;\r\ -> \n }\r\ -> \n :local Uptime [ /system/resource/get uptime ];\r\ -> \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ -> \n :set IsTimeSyncResetNtp \$Uptime;\r\ -> \n }\r\ -> \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ -> \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ -> ;\r\ -> \n :set IsTimeSyncResetNtp \$Uptime;\r\ -> \n /system/ntp/client/set enabled=no;\r\ -> \n :delay 20ms;\r\ -> \n /system/ntp/client/set enabled=yes;\r\ -> \n :return false;\r\ -> \n }\r\ -> \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ -> \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ -> \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ -> ee license and x86.\";\r\ -> \n :return true;\r\ -> \n }\r\ -> \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ -> \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ -> \n :set IsTimeSyncCached true;\r\ -> \n :return true;\r\ -> \n }\r\ -> \n :return false;\r\ -> \n }\r\ -> \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ -> \r\ -> \n :return true;\r\ -> \n}\r\ -> \n\r\ -> \n:set FetchHugeFiles do={\r\ -> \n :local ScriptName [ :tostr \$1 ];\r\ -> \n :local Url [ :tostr \$2 ];\r\ -> \n :local CheckCert [ :tostr \$3 ];\r\ -> \n\r\ -> \n :global CleanName;\r\ -> \n :global FetchUserAgentStr;\r\ -> \n :global GetRandom20CharAlNum;\r\ -> \n :global IfThenElse;\r\ -> \n :global LogPrint;\r\ -> \n :global MkDir;\r\ -> \n :global RmDir;\r\ -> \n :global RmFile;\r\ -> \n :global WaitForFile;\r\ -> \n\r\ -> \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ -> ithout-crl\" ];\r\ -> \n\r\ -> \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ -> \n :if ([ \$MkDir \$DirName ] = false) do={\r\ -> \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ -> \n :return false;\r\ -> \n }\r\ -> \n\r\ -> \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ -> \$GetRandom20CharAlNum ]);\r\ -> \n :onerror Err {\r\ -> \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ -> \\\r\ -> \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ -> lue;\r\ -> \n } do={\r\ -> \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ -> \n \$RmFile \$FileName;\r\ -> \n }\r\ -> \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ -> \_. \$Err);\r\ -> \n \$RmDir \$DirName;\r\ -> \n :return false;\r\ -> \n }\r\ -> \n\r\ -> \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ -> \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ -> \_not show up.\");\r\ -> \n :return false;\r\ -> \n }\r\ -> \n\r\ -> \n :local FileSize [ /file/get \$FileName size ];\r\ -> \n :local Return \"\";\r\ -> \n :local VarSize 0;\r\ -> \n :while (\$VarSize != \$FileSize) do={\r\ -> \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ -> 768 file=\$FileName as-value ]->\"data\"));\r\ -> \n :set FileSize [ /file/get \$FileName size ];\r\ -> \n :set VarSize [ :len \$Return ];\r\ -> \n :if (\$VarSize > \$FileSize) do={\r\ -> \n :delay 100ms;\r\ -> \n }\r\ -> \n }\r\ -> \n \$RmDir \$DirName;\r\ -> \n :return \$Return;\r\ -> \n}\r\ -> \n\r\ -> \n:set FetchUserAgentStr do={\r\ -> \n :local Caller [ :tostr \$1 ];\r\ -> \n :global GlobalScriptsUrl;\r\ -> \n :global CommitBrief;\r\ -> \n :global IfThenElse;\r\ -> \n :local Resource [ /system/resource/get ];\r\ -> \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ -> \_\$Resource->\"architecture-name\" . \\\r\ -> \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ -> CommitBrief ] . \")\");\r\ -> \n}\r\ -> \n\r\ -> \n:set ScriptInstallUpdate do={ :onerror Err {\r\ -> \n :local Scripts [ :toarray \$1 ];\r\ -> \n :local NewComment [ :tostr \$2 ];\r\ -> \n :global InitSetup;\r\ -> \n\r\ -> \n :global CommitId;\r\ -> \n :global ScriptUpdatesCRLF;\r\ -> \n :global GlobalConfVersion;\r\ -> \n :global Identity;\r\ -> \n :global CertificateAvailable;\r\ -> \n :global CheckSumsVerify;\r\ -> \n :global GlobalScriptsUrl;\r\ -> \n :global SumsDirAndFileName;\r\ -> \n :global GlobalScriptsUrlSuffix;\r\ -> \n :global EitherOr;\r\ -> \n :global FetchUserAgentStr;\r\ -> \n :global Grep;\r\ -> \n :global IfThenElse;\r\ -> \n :global LogPrint;\r\ -> \n :global ParseKeyValueStore;\r\ -> \n :global RequiredRouterOS;\r\ -> \n :global SendNotification2;\r\ -> \n :global SymbolForNotification;\r\ -> \n :global ValidateSyntax;\r\ -> \n :global CommentsInScripts;\r\ -> \n\r\ -> \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ -> \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ -> hout.\");\r\ -> \n }\r\ -> \n\r\ -> \n :foreach Script in=\$Scripts do={\r\ -> \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ -> \r\ -> \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ -> \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ -> Vados\\n\" comment=\$NewComment;\r\ -> \n }\r\ -> \n }\r\ -> \n\r\ -> \n :local CommitIdBefore \$CommitId;\r\ -> \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ -> \n :local ReloadGlobal false;\r\ -> \n :local DeviceMode [ /system/device-mode/get ];\r\ -> \n\r\ -> \n :if (\$CheckSumsVerify = true) do={\r\ -> \n :local CheckSums ({});\r\ -> \n :do {\r\ -> \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ -> iptsUrlSuffix);\r\ -> \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ -> \r\ -> \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ -> ficate=yes-without-crl \\\r\ -> \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ -> =user as-value ]->\"data\") ];\r\ -> \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ -> \n }\r\ -> \n\r\ -> \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ -> s\" ] do={\r\ -> \n :local ScriptVal [ /system/script/get \$Script ];\r\ -> \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ -> ];\r\ -> \n :local SourceNew;\r\ -> \n\r\ -> \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ -> \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ -> \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ -> \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ -> \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ -> iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ -> \"'!\");\r\ -> \n }\r\ -> \n }\r\ -> \n :do {\r\ -> \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ -> \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ -> e\" . \"', as requested.\");\r\ -> \n :error true;\r\ -> \n }\r\ -> \n :if (\$CheckSumsVerify = true) do={\r\ -> \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ -> \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ -> ptInfo->\"url-suffix\") ] = 0 && \\\r\ -> \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ -> rce\") ] ] = \$CheckSum) do={\r\ -> \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ -> >\"name\" . \"' matches, ignoring.\");\r\ -> \n :error true;\r\ -> \n }\r\ -> \n }\r\ -> \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ -> \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ -> fetch\" ] = false) do={\r\ -> \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ -> ng without.\");\r\ -> \n }\r\ -> \n }\r\ -> \n :onerror Err {\r\ -> \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ -> lScriptsUrl ];\r\ -> \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ -> lobalScriptsUrlSuffix ];\r\ -> \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ -> Suffix);\r\ -> \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ -> name\") . \"' from url: \" . \$Url);\r\ -> \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ -> \r\ -> \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ -> ut=user as-value ];\r\ -> \n :if (\$Result->\"status\" = \"finished\") do={\r\ -> \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ -> \n } \r\ -> \n } do={\r\ -> \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ -> al->\"name\" . \"': \" . \$Err);\r\ -> \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ -> \n :error false;\r\ -> \n }\r\ -> \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ -> \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ -> \?\");\r\ -> \n /system/script/remove \$Script;\r\ -> \n :error false;\r\ -> \n }\r\ -> \n :if (\$CheckSumsVerify = true) do={\r\ -> \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ -> riptInfo->\"url-suffix\") ] = 0 && \\\r\ -> \n [ :len \$CheckSum ] = 0) do={\r\ -> \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ -> pdates with 'ignore=true' in comment.\");\r\ -> \n }\r\ -> \n }\r\ -> \n :error false;\r\ -> \n }\r\ -> \n\r\ -> \n :if ([ :len \$SourceNew ] = 0) do={\r\ -> \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ -> >\"name\") . \"'.\");\r\ -> \n :error false;\r\ -> \n }\r\ -> \n\r\ -> \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ -> \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ -> lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ -> \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ -> \$ScriptVal->\"source\")) do={\r\ -> \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ -> . \"' source did not change. End of lines set to CRLF.\");\r\ -> \n if (\$ScriptUpdatesCRLF = false) do={\r\ -> \n :put [ :tolf \$SourceNew ];\r\ -> \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ -> ) . \"' source update end of lines to LF.\");\r\ -> \n }\r\ -> \n :error false;\r\ -> \n }\r\ -> \n }\r\ -> \n\r\ -> \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ -> \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ -> l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ -> );\r\ -> \n :error false;\r\ -> \n }\r\ -> \n\r\ -> \n :if (\$CommentsInScripts = true) do={\r\ -> \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ -> \_\") ];\r\ -> \n :if ([ :len \$CommentLine ] = 0) do={\r\ -> \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ -> iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ -> noring!\");\r\ -> \n :error false;\r\ -> \n } else={\r\ -> \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ -> ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ -> ] + 2) [ :len \$CommentLine] ]) do={\r\ -> \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ -> \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ -> ;\r\ -> \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ -> ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ -> \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ -> omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ -> ded!\");\r\ -> \n } else={\r\ -> \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ -> al->\"name\") . \"' did not change.\");\r\ -> \n :error false;\r\ -> \n }\r\ -> \n } \r\ -> \n }\r\ -> \n\r\ -> \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ -> \"\\23 requires RouterOS, \") ] ]->version);\r\ -> \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ -> \_false ] = false) do={\r\ -> \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ -> \") . \"' requires RouterOS \" . \\\r\ -> \n \$RequiredROS . \", which is not met by your installation. I\ -> gnoring!\");\r\ -> \n :error false;\r\ -> \n }\r\ -> \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ -> \\23 requires device-mode, \") ] ];\r\ -> \n :local MissingDM ({});\r\ -> \n :foreach Feature,Value in=\$RequiredDM do={\r\ -> \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ -> ceMode->\$Feature) = false) do={\r\ -> \n :set MissingDM (\$MissingDM, \$Feature);\r\ -> \n }\r\ -> \n }\r\ -> \n :if ([ :len \$MissingDM ] > 0) do={\r\ -> \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ -> \") . \"' requires disabled \" . \\\r\ -> \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ -> gnoring!\");\r\ -> \n :error false;\r\ -> \n }\r\ -> \n\r\ -> \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ -> \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ -> ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ -> \n :error false;\r\ -> \n }\r\ -> \n \r\ -> \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ -> ript comment: \" . (\$ScriptVal->\"comment\"));\r\ -> \n\r\ -> \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ -> Val->\"comment\") \\\r\ -> \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ -> F \$SourceNew ] \$Script;\r\ -> \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ -> \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ -> \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ -> o={\r\ -> \n :set ReloadGlobal true;\r\ -> \n }\r\ -> \n } on-error={ }\r\ -> \n }\r\ -> \n :if (\$ReloadGlobal = true) do={\r\ -> \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ -> \");\r\ -> \n :onerror Err {\r\ -> \n :global InitSetup (a);\r\ -> \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ -> \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ -> ctions failed! \" . \$Err)}\r\ -> \n }\r\ -> \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ -> \n \$LogPrint warning \$0 (\"The configuration version decreased from \ -> \" . \\\r\ -> \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ -> \n \". Installed an older version\?\");\r\ -> \n }\r\ -> \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ -> \n :global GlobalConfChanges;\r\ -> \n :global GlobalConfMigration;\r\ -> \n :local ChangeLogCode;\r\ -> \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ -> \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ -> \n :onerror Err {\r\ -> \n [ :parse \$ChangeLogCode ];\r\ -> \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ -> . \$Err)}\r\ -> \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ -> dation!\")}\r\ -> \n }\r\ -> \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ -> \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ -> \_do={\r\ -> \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ -> \n :do {\r\ -> \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ -> \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ -> \_\" is not available.\");\r\ -> \n :error false;\r\ -> \n }\r\ -> \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ -> \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ -> \_. \" failed syntax validation!\");\r\ -> \n :error false}\r\ -> \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ -> . \": \" . \$Migration);\r\ -> \n :onerror Err {\r\ -> \n [ :parse \$Migration ];\r\ -> \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ -> \_\$I . \" failed to run: \" . \$Err)}\r\ -> \n } on-error={ }\r\ -> \n }\r\ -> \n }\r\ -> \n :local NotificationMessage (\"The configuration version on \" . \$Id\ -> entity . \" increased \" . \\\r\ -> \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ -> d modification. \" . \\\r\ -> \n \"Please review and update global-config-overlay, then re-run glo\ -> bal-config.\");\r\ -> \n \$LogPrint info \$0 (\$NotificationMessage);\r\ -> \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ -> \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ -> \");\r\ -> \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ -> \_do={\r\ -> \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ -> \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ -> \r\ -> \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ -> \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ -> \n }\r\ -> \n } else={\r\ -> \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ -> \_changes are not available.\");\r\ -> \n\r\ -> \n }\r\ -> \n\r\ -> \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ -> } else={ :global GlobalConfChanges (a); }\r\ -> \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ -> on; } else={ :global GlobalConfMigration (a); }\r\ -> \n }\r\ -> \n} do={\r\ -> \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ -> \n} }\r\ -> \n\r\ -> \n# load modules\r\ -> \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ -> ns\\\\.d|mod)/.\" ] do={\r\ -> \n :local ScriptVal [ /system/script/get \$Script ];\r\ -> \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ -> \n :onerror Err {\r\ -> \n /system/script/run \$Script;\r\ -> \n } do={\r\ -> \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ -> ailed to run: \" . \$Err);\r\ -> \n }\r\ -> \n } else={\r\ -> \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ -> led syntax validation, skipping.\");\r\ -> \n }\r\ -> \n}\r\ -> \n\r\ -> \n# Add and fix global scheduler\r\ -> \n:put \"Add or/and fix Global scheduler...\";\r\ -> \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ -> ; }\";\r\ -> \n:local Comment \"Every Day Set Global Environment Variables\";\r\ -> \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ -> = 0) do={\r\ -> \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ -> ent=\$OnEvent start-time=startup;\r\ -> \n}\r\ -> \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ -> \_do={\r\ -> \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ -> \n}\r\ -> \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ -> ) do={\r\ -> \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ -> \n}\r\ -> \n# Add Update Script scheduler\r\ -> \n:put \"Add or/and fix Update Script scheduler\";\r\ -> \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ -> \r\ -> \n:set Comment \"Every Day Check For Update Scripts\";\r\ -> \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ -> \" ] ] = 0) do={\r\ -> \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ -> start-time=startup interval=1d on-event=\$OnEvent;\r\ -> \n}\r\ -> \n\r\ -> \n:onerror Err {\r\ -> \n :global GlobalConfReady;\r\ -> \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ -> \_not ready.\"); }; } delay=100ms max=5;\r\ -> \n\r\ -> \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ -> \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ -> \") ] . \\\r\ -> \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ -> \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ -> \n # signal we are ready\r\ -> \n:set GlobalFuncReady true;\r\ -> \n:set ExitOK true;\r\ -> \n\r\ -> \n:log info (\$0 . \"Global configs ready!\");\r\ -> \n} do={\r\ -> \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ -> \n}\r\ -> \n" -> add comment=\ -> "Lookup IP addresses for RKN list and add them to firewall address-list" \ -> dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \ -> policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ -> source="#!rsc by Vados\r\ -> \n# RouterOS script: AM-RKN-dnsLookup\r\ -> \n# Script comment: Lookup IP addresses for RKN list and add them to firew\ -> all address-list\r\ -> \n# Copyright (c) 2007-2026 Vados \r\ -> \n#\r\ -> \n#\r\ -> \n# requires RouterOS, version=7.19\r\ -> \n# requires device-mode, fetch\r\ -> \n#\r\ -> \n# Script description: This script is intended to be run periodically, e.\ -> g. once a day, to update the IP addresses in the firewall address-list bas\ -> ed on the RKN list.\r\ -> \n# It resolves the domain names in the RKN list and a\ -> dds the corresponding IP addresses to the specified firewall address-list.\ -> \r\ -> \n# The script also handles CNAME records by following\ -> \_them until it finds A records.\r\ -> \n# Usage:\r\ -> \n# /system/script { run AM-RKN-dnsLookup; }\r\ -> \n:local ScriptName [ :jobname ];\r\ -> \n\r\ -> \n:global dnsLookupReady false;\r\ -> \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\ -> \_true; }\r\ -> \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\ -> \n:set dnsLookupReady false;\r\ -> \n\r\ -> \n:local arrRKN {\r\ -> \n \"telegra.ph\"\r\ -> \n \"grani.ru\"\r\ -> \n \"xhamster.com\"\r\ -> \n \"lostfilm.tv\"\r\ -> \n \"rutracker.org\"\r\ -> \n \"lurkmore.to\"\r\ -> \n \"dou.ua\"\r\ -> \n \"youporn.com\"\r\ -> \n \"pornolab.net\"\r\ -> \n \"crimerussia.com\"\r\ -> \n \"telegram.org\"\r\ -> \n \"api.telegram.org\"\r\ -> \n \"facebook.com\"\r\ -> \n \"instagram.com\"\r\ -> \n \"x.com\"\r\ -> \n \"twitter.com\"\r\ -> \n \"youtube.com\"\r\ -> \n \"googleapis.com\"\r\ -> \n \"youtu.be\"\r\ -> \n \"googlevideo.com\"\r\ -> \n \"gstatic.com\"\r\ -> \n \"googleusercontent.com\"\r\ -> \n \"nhacmp3youtube.com\"\r\ -> \n \"telegram.me\"\r\ -> \n \"t.me\";}\r\ -> \n\r\ -> \n:local ListRKN \"RKN-dnsLookup\";\r\ -> \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\ -> \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\ -> ={\r\ -> \n /ip firewall address-list remove \$aListItem;\r\ -> \n}\r\ -> \n:foreach aItem in=\$arrRKN do={\r\ -> \n# :do {\r\ -> \n :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\ -> ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\ -> \n# } on-error={\r\ -> \n# :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\ -> \n# }\r\ -> \n :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \ -> do={\r\ -> \n :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\ -> \n :local newAddress [/ip dns cache all get \$dnsRecord data];\ -> \r\ -> \n :do {\r\ -> \n /ip firewall address-list add list=\$ListRKN address=\$newA\ -> ddress comment=\$aItem;\r\ -> \n :log warning \"Successfully adding ip to list A record: \ -> \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\ -> \n } on-error={\r\ -> \n :log error \"error when adding ip to list A record: \$dn\ -> sRecord, address: \$newAddress domain: \$aItem\";\r\ -> \n }\r\ -> \n }\r\ -> \n :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\ -> \n :local cname;\r\ -> \n :local nextCname;\r\ -> \n :local cnameAddress;\r\ -> \n :set cname [/ip dns cache all find where (name=\$aItem && ty\ -> pe=\"CNAME\")];\r\ -> \n :set nextCname [/ip dns cache all find where (name=[/ip dns \ -> cache all get \$cname data] && type=\"CNAME\")];\r\ -> \n :while (\$nextCname != \"\") do={\r\ -> \n :set cname \$nextCname;\r\ -> \n :set nextCname [/ip dns cache all find where (name=[/ip \ -> dns cache all get \$cname data] && type=\"CNAME\")];\r\ -> \n }\r\ -> \n :foreach aRecord in=[/ip dns cache all find where (name=[/ip\ -> \_dns cache all get \$cname data] && type=\"A\")] do={\r\ -> \n :do {\r\ -> \n :set cnameAddress [/ip dns cache all get \$aRecord d\ -> ata];\r\ -> \n /ip firewall address-list add list=\$ListRKN address\ -> =\$cnameAddress comment=\$aItem;\r\ -> \n :log warning \"Succesfully adding ip to list CNAME r\ -> ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \ -> \$aItem.\";\r\ -> \n# /ip firewall raw add action=add-dst-to-address-list\ -> \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\ -> g comment=\$aItem content=\$aItem;\r\ -> \n } on-error={\r\ -> \n :log error \"error when adding ip to list CNAME reco\ -> rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\ -> tem.\";\r\ -> \n }\r\ -> \n }\r\ -> \n }\r\ -> \n }\r\ -> \n}\r\ -> \n\r\ -> \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ -> ={\r\ -> \n :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\ -> ptName . \" is NOT SET! Fix It Now!\");\r\ -> \n /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \ -> run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\ -> olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\ -> \_start-time=startup;\r\ -> \n }\r\ -> \n:set dnsLookupReady true;\r\ -> \ndelay 2s; \r\ -> \n:global dnsLookupReady (a);\r\ -> \n" -> add dont-require-permissions=no name="renameLists " owner=vados policy=\ -> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ -> local oldName \"Test\";\ -> \n:local newName \"Test-IP\";\ -> \n/ip firewall address-list\ -> \n:foreach i in=[find list=\$oldName] do={\ -> \nset \$i list=\$newName;\ -> \n}\ -> \n" -> add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\ -> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ -> #############Script Settings##################\ -> \n\ -> \n:local \"IF-TUN\" \"6to4-tun\"\ -> \n:local \"IF-LOC\" \"Bridge-LAN\"\ -> \n:local \"POOL-6TO4\" \"poolV6-local\"\ -> \n:local \"force-update\" false\ -> \n############ use then static ip #######################\ -> \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \ -> address]\ -> \n#:local \"interface\" \"ext\"\ -> \n:local bound 0\ -> \n\ -> \n###############################################\ -> \n\ -> \n:local 6to4prefix do={\ -> \n :global dec2hex\ -> \n :local ipv4 \$1\ -> \n :local ipv6 \"2002:\"\ -> \n :for i from=0 to=2 step=1 do={ \ -> \n :if ( \$i = 2) do={\ -> \n :set ipv6 (\$ipv6.\":\")\ -> \n }\ -> \n :local fp [:find \$ipv4 \".\"]\ -> \n :if ( \$fp > 0 ) do={\ -> \n :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\ -> \n :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\ -> \n }\ -> \n }\ -> \n :return (\$ipv6.[\$dec2hex \$ipv4])\ -> \n}\ -> \n:local \"str_replace\" do={\ -> \n :local \"str-pos\" [:find \$1 \$2]\ -> \n :local \"str-len\" [:len \$2]\ -> \n :local str \"\"\ -> \n :local rest \$1\ -> \n :while (\$\"str-pos\" >= 0) do={\ -> \n :local t [:pick \$rest 0 \$\"str-pos\"]\ -> \n :if ( \$4 > 0 ) do={\ -> \n :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\ -> \n :set str (\$str.\$5)\ -> \n }\ -> \n }\ -> \n :set str (\$str.\$t.\$3)\ -> \n :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\ -> st]]\ -> \n :set \"str-pos\" [:find \$rest \$2]\ -> \n }\ -> \n :return (\$str.\$rest)\ -> \n}\ -> \n\ -> \n:if (\$bound=1) do={\ -> \n :local t [:find \$\"lease-address\" \"/\"]\ -> \n\ -> \n :if ( \$t >= 0 ) do={\ -> \n :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\ -> \n }\ -> \n\ -> \n :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\ -> ) do={\ -> \n /interface 6to4 add !keepalive local-address=\$\"lease-address\"\ -> \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\ -> \n :set \"force-update\" true\ -> \n }\ -> \n\ -> \n :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\ -> cal-address];\ -> \n\ -> \n :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \ -> true) do={\ -> \n /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\ -> ease-address\"\ -> \n /ipv6 address remove [find interface=\$\"IF-TUN\"]\ -> \n /ipv6 address remove [find interface=\$\"IF-LOC\"]\ -> \n /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\ -> \"::/0\"]\ -> \n :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\ -> \n :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\ -> \_0) do={ \ -> \n /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\ -> \".\":1::/64\") prefix-length=64\ -> \n } else={\ -> \n /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \ -> prefix=(\$\"pool-prefix\".\":1::/64\")\ -> \n }\ -> \n /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\ -> \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\ -> ace=\$\"IF-TUN\" advertise=no\ -> \n /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\ -> =\$\"IF-LOC\" advertise=yes\ -> \n /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\ -> \"IF-TUN\")\ -> \n :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\ -> s]\ -> \n :set t [:pick \$t 0 [:find \$t \"/\"]]\ -> \n :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\ -> \_= 0) do={\ -> \n /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\ -> [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ -> \n } else={\ -> \n /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \ -> where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ -> \n }\ -> \n :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\ -> -LOC\"] = 0) do={\ -> \n /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\ -> on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\ -> \n }\ -> \n :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \ -> 0) do={\ -> \n /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\ -> onfiguration=yes\ -> \n }\ -> \n }\ -> \n}" -> add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\ -> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ -> global MAC2EUI64 do={\ -> \n :local EUI64 \"\"\ -> \n :local MAC \$1\ -> \n :local HEX2DEC \"0123456789ABCDEF\"\ -> \n :for i from=0 to=5 step=1 do={\ -> \n :if ( \$i = 0 ) do={\ -> \n :set EUI64 [:pick \$MAC 0]\ -> \n :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\ -> \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\ -> \n }\ -> \n :if ( \$i = 1 || \$i = 3) do={\ -> \n :set EUI64 (\$EUI64.\":\")\ -> \n }\ -> \n :if ( \$i = 2 ) do={\ -> \n :set EUI64 (\$EUI64.\"FF:FE\")\ -> \n }\ -> \n :if ( [:find \$MAC \":\"] = 2 ) do={\ -> \n :set MAC [:pick \$MAC 3 [:len \$MAC]]\ -> \n :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\ -> \n }\ -> \n }\ -> \n :return (\$EUI64)\ -> \n}\ -> \n\ -> \n:global dec2hex do={\ -> \n :local hex \"\"\ -> \n :local dec [:tonum \$1]\ -> \n :for i from=0 to=4 step=4 do={\ -> \n :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\ -> c>>\$i)&0xf)+1)].\$hex)\ -> \n }\ -> \n :return ([:tostr \$hex])\ -> \n}" -> add comment=Generator dont-require-permissions=no name=proxySet owner=vados \ -> policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ -> source="# 2. WireGuard interface\r\ -> \n/interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDg\ -> uMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=21641\r\ -> \n/interface/wireguard/peers/add interface=wg-VDSina public-key=\"o5IgCl1/\ -> G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcYQnD9\ -> N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=10.30.30.33 endpoint-port=518\ -> 20 allowed-address=0.0.0.0/0 persistent-keepalive=11\r\ -> \n/ip/address/add address=10.9.0.3/32 interface=wg-VDSina\r\ -> \n\r\ -> \n# 3. DNS\r\ -> \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\ -> n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\ -> \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /system/script/add name=VDS\ -> ina-prev-dns comment=\"\$prevDNS\" source=\"\" }\r\ -> \n/ip/dns/set servers=8.8.4.4\r\ -> \n/ip/route/add dst-address=8.8.4.4/32 gateway=wg-VDSina distance=1 commen\ -> t=VDSina-dns\r\ -> \n\r\ -> \n# 4. Enable WireGuard\r\ -> \n/interface/wireguard/enable wg-VDSina\r\ -> \n" -> add dont-require-permissions=no name=AM-Telegram-Send owner=vados policy=\ -> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ -> !rsc by Vados\ -> \n# RouterOS script: AM-Telegram-Send\ -> \n# Script comment: Mini script for send messages to admin Telegram chat\ -> \n# Copyright (c) 2007-2026 Vados \ -> \n#\ -> \n#\ -> \n# requires RouterOS, version=7.19\ -> \n# requires device-mode, fetch\ -> \n#\ -> \n# Script description: \ -> \n#\ -> \n#\ -> \n# Usage:\ -> \n# /system/script { run AM-Telegram-Send \"Message here )))\"; }\ -> \n\ -> \n/system/script\ -> \nadd name=telegram-send dont-require-permissions=no source={\ -> \n :global TelegramTokenId;\ -> \n :global TelegramChatId;\ -> \n :local message [:tostr \$1];\ -> \n :local identity [/system/identity/get name];\ -> \n :local sendMsg (\"[\".\$identity.\"] \".\$message)\ -> \n /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\ -> \n \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\ -> \n \"&text=\".\$sendMsg.\\\ -> \n \"&parse_mode=HTML\") \\\ -> \n mode=https keep-result=no\ -> \n}" -> add dont-require-permissions=no name=telegram-send owner=vados policy=\ -> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ -> \n :global TelegramTokenId;\ -> \n :global TelegramChatId;\ -> \n :local message [:tostr \$1];\ -> \n :local identity [/system/identity/get name];\ -> \n :local sendMsg (\"[\".\$identity.\"] \".\$message)\ -> \n /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\ -> \n \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\ -> \n \"&text=\".\$sendMsg.\\\ -> \n \"&parse_mode=HTML\") \\\ -> \n mode=https keep-result=no\ -> \n" -> /user group -> add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\ -> t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon" -> /ip smb -> set enabled=no interfaces=lo -> /interface bridge port -> add bridge=Bridge-LAN interface=ether5 -> add bridge=Bridge-LAN interface=ether2 -> add bridge=Bridge-LAN interface=ether4 trusted=yes -> add bridge=Bridge-LAN interface=ether3 -> add bridge=Bridge-LAN interface=wlan2 -> add bridge=Bridge-LAN interface=wlan1 -> /interface bridge settings -> set use-ip-firewall=yes -> /ip firewall connection tracking -> set udp-timeout=10s -> /ip neighbor discovery-settings -> set discover-interface-list=LAN lldp-med=no lldp-poe-power=no -> /ip settings -> set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\ -> 8192 -> /ipv6 settings -> set disable-ipv6=yes disable-link-local-address=yes forward=no \ -> max-neighbor-entries=8192 multipath-hash-policy=l4 -> /interface detect-internet -> set detect-interface-list=WAN internet-interface-list=Internet \ -> lan-interface-list=LAN request-interval=1m wan-interface-list=WAN -> /interface l2tp-server server -> set authentication=mschap2 use-ipsec=yes -> /interface list member -> add interface=Unet-ether1 list=Internet -> add interface=WG list=WAN -> add interface=Bridge-LAN list=LAN -> add interface=Unet-ether1 list=WAN -> /interface wireguard peers -> add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\ -> 109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \ -> persistent-keepalive=10s public-key=\ -> "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4=" -> add allowed-address=0.0.0.0/0 client-allowed-address=::/0 disabled=yes \ -> endpoint-address=10.30.30.33 endpoint-port=55055 interface=wg-nuc name=\ -> NUC persistent-keepalive=11s public-key=\ -> "+OvzAjLC45Td52hjkQPmpGvC3RGhZ+Q2CDMJ1U/D4Rw=" -> /interface wireless cap -> # -> set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \ -> caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\ -> CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\ -> wlan2,wlan1 lock-to-caps-man=yes -> /ip address -> add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0 -> add address=10.8.0.2/24 interface=WG network=10.8.0.0 -> add address=192.168.33.2/24 disabled=yes interface=wg-nuc network=\ -> 192.168.33.0 -> /ip cloud -> set update-time=no -> /ip dhcp-client -> add add-default-route=special-classless check-gateway=arp comment=Unet-client \ -> default-route-distance=2 default-route-tables=main:2 dhcp-options=\ -> hostname,clientid_duid interface=Unet-ether1 name=UnetDHCP use-peer-dns=\ -> no use-peer-ntp=no -> /ip dhcp-server config -> set accounting=no -> /ip dhcp-server lease -> add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ -> 48:8F:5A:8E:EE:A8 server=masterDHCP -> add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ -> F0:DE:F1:91:0D:1E server=masterDHCP -> add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ -> 00:80:77:EC:43:86 server=masterDHCP -> add address=10.30.30.70 dhcp-option=domain-search-list,HostName \ -> dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP -> add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ -> 04:7C:16:36:F5:37 server=masterDHCP -> add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ -> 10:2D:41:2C:20:C2 server=masterDHCP -> add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ -> 10:08:C1:81:59:5F server=masterDHCP -> add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ -> 10:38:1F:D2:5F:13 server=masterDHCP -> add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ -> 10:B1:DF:E9:D0:D5 server=masterDHCP -> add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ -> FE:02:52:BE:3F:16 server=masterDHCP -> add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ -> D4:6D:6D:FD:E5:49 server=masterDHCP -> add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ -> CC:42:10:12:46:94 server=masterDHCP -> add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ -> 50:CC:F8:85:96:0A server=masterDHCP -> add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ -> E4:18:6B:58:34:AB server=masterDHCP -> add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ -> 00:27:15:41:97:A9 server=masterDHCP -> add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ -> mac-address=C4:82:E1:03:49:10 server=masterDHCP -> add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ -> 10:38:1F:82:81:F2 server=masterDHCP -> add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \ -> dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP -> add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \ -> dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP -> add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ -> server=masterDHCP -> add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ -> MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP -> add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \ -> mac-address=F0:75:5D:1E:5F:71 server=masterDHCP -> add address=10.30.30.100 client-id=iVados dhcp-option=HostName \ -> dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP -> add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\ -> ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \ -> dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \ -> use-src-mac=yes -> /ip dhcp-server network -> add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\ -> domain-search-list dhcp-option-set=domain-search-set dns-server=\ -> 10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\ -> 24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 -> /ip dns -> set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \ -> doh-max-server-connections=20 servers=8.8.8.8 verify-doh-cert=yes -> /ip dns static -> add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \ -> type=A -> add address=109.107.177.79 name=vds.vados.ru type=A -> add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \ -> regexp=*.vados.ru type=NS -> add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\ -> "\".*\\\\.vados\\\\.ru\"" type=FWD -> add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\ -> 10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\ -> FWD -> add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\ -> ns.vados.ru.local type=A -> add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\ -> vados.ru ns=ns.vados.ru.local type=NS -> add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A -> add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\ -> dns.google type=A -> add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A -> add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A -> add address=10.30.30.33 name=ros.vados.ru type=A -> add address=10.30.30.95 name=vados-nuc type=A -> add address=10.30.30.33 name=amster-nuc type=A -> add address=10.30.30.33 name=amster type=A -> add address=10.30.30.33 name=amster-reg type=A -> add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A -> add address=10.30.30.33 name=mgr.vados.ru type=A -> add address=10.30.30.33 name=prt.vados.ru type=A -> add address=10.30.30.33 disabled=yes match-subdomain=yes name=\ -> mikrots.vados.ru type=A -> add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A -> add address=10.30.30.30 name=MILLER-LEN type=A -> add address=10.30.30.30 name=miller type=A -> add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\ -> security.cloudflare-dns.com type=A -> add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\ -> security.cloudflare-dns.com type=A -> add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ -> dns.quad9.net type=A -> add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\ -> dns.quad9.net type=A -> add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \ -> type=A -> add address=10.30.30.81 comment=LocalNet name=MikroVados type=A -> add address=10.30.30.10 name=MikroNUC type=A -> add address=10.30.30.86 disabled=yes name=MikroYellow type=A -> add address=10.30.30.85 disabled=yes name=MikroMic type=A -> add address=10.30.30.95 name=VADOS-NUC type=A -> add address=10.30.30.98 name=VADOS-LEN type=A -> add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ -> A -> add address=10.30.30.20 disabled=yes name=garage type=A -> /ip firewall address-list -> add address=91.215.120.206 list=TRUSTED -> add address=185.71.70.78 disabled=yes list=TRUSTED -> add address=176.53.203.171 disabled=yes list=TRUSTED -> add address=176.53.203.170 disabled=yes list=TRUSTED -> add address=176.53.202.194 disabled=yes list=TRUSTED -> add address=8.8.4.0/24 list=YouTube -> add address=8.8.8.0/24 list=YouTube -> add address=8.34.208.0/20 list=YouTube -> add address=8.35.192.0/20 list=YouTube -> add address=23.236.48.0/20 list=YouTube -> add address=23.251.128.0/19 list=YouTube -> add address=34.0.0.0/15 list=YouTube -> add address=34.2.0.0/16 list=YouTube -> add address=34.3.0.0/23 list=YouTube -> add address=34.3.3.0/24 list=YouTube -> add address=34.3.4.0/24 list=YouTube -> add address=34.3.8.0/21 list=YouTube -> add address=34.3.16.0/20 list=YouTube -> add address=34.3.32.0/19 list=YouTube -> add address=34.3.64.0/18 list=YouTube -> add address=34.4.0.0/14 list=YouTube -> add address=34.8.0.0/13 list=YouTube -> add address=34.16.0.0/12 list=YouTube -> add address=34.32.0.0/11 list=YouTube -> add address=34.64.0.0/10 list=YouTube -> add address=34.128.0.0/10 list=YouTube -> add address=35.184.0.0/13 list=YouTube -> add address=35.192.0.0/14 list=YouTube -> add address=35.196.0.0/15 list=YouTube -> add address=35.198.0.0/16 list=YouTube -> add address=35.199.0.0/17 list=YouTube -> add address=35.199.128.0/18 list=YouTube -> add address=35.200.0.0/13 list=YouTube -> add address=35.208.0.0/12 list=YouTube -> add address=35.224.0.0/12 list=YouTube -> add address=35.240.0.0/13 list=YouTube -> add address=57.140.192.0/18 list=YouTube -> add address=64.15.112.0/20 list=YouTube -> add address=64.233.160.0/19 list=YouTube -> add address=66.22.228.0/23 list=YouTube -> add address=66.102.0.0/20 list=YouTube -> add address=66.249.64.0/19 list=YouTube -> add address=70.32.128.0/19 list=YouTube -> add address=72.14.192.0/18 list=YouTube -> add address=74.125.0.0/16 list=YouTube -> add address=104.154.0.0/15 list=YouTube -> add address=104.196.0.0/14 list=YouTube -> add address=104.237.160.0/19 list=YouTube -> add address=107.167.160.0/19 list=YouTube -> add address=107.178.192.0/18 list=YouTube -> add address=108.59.80.0/20 list=YouTube -> add address=108.170.192.0/18 list=YouTube -> add address=108.177.0.0/17 list=YouTube -> add address=130.211.0.0/16 list=YouTube -> add address=136.22.160.0/20 list=YouTube -> add address=136.22.176.0/21 list=YouTube -> add address=136.22.184.0/23 list=YouTube -> add address=136.22.186.0/24 list=YouTube -> add address=142.250.0.0/15 list=YouTube -> add address=146.148.0.0/17 list=YouTube -> add address=152.65.208.0/22 list=YouTube -> add address=152.65.214.0/23 list=YouTube -> add address=152.65.218.0/23 list=YouTube -> add address=152.65.222.0/23 list=YouTube -> add address=152.65.224.0/19 list=YouTube -> add address=162.120.128.0/17 list=YouTube -> add address=162.216.148.0/22 list=YouTube -> add address=162.222.176.0/21 list=YouTube -> add address=172.110.32.0/21 list=YouTube -> add address=172.217.0.0/16 list=YouTube -> add address=172.253.0.0/16 list=YouTube -> add address=173.194.0.0/16 list=YouTube -> add address=173.255.112.0/20 list=YouTube -> add address=192.158.28.0/22 list=YouTube -> add address=192.178.0.0/15 list=YouTube -> add address=193.186.4.0/24 list=YouTube -> add address=199.36.154.0/23 list=YouTube -> add address=199.36.156.0/24 list=YouTube -> add address=199.192.112.0/22 list=YouTube -> add address=199.223.232.0/21 list=YouTube -> add address=207.223.160.0/20 list=YouTube -> add address=208.65.152.0/22 list=YouTube -> add address=208.68.108.0/22 list=YouTube -> add address=208.81.188.0/22 list=YouTube -> add address=208.117.224.0/19 list=YouTube -> add address=209.85.128.0/17 list=YouTube -> add address=216.58.192.0/19 list=YouTube -> add address=216.73.80.0/20 list=YouTube -> add address=216.239.32.0/19 list=YouTube -> add address=2ip.ru list=Test-IP -> add address=wg.vados.ru comment=VDSIna list=TRUSTED -> add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED -> add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina -> add address=love.ru comment=love.ru list=NoVdsina -> add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina -> add address=pochta.ru comment=pochta.ru list=NoVdsina -> add address=vdsina.com list=NoVdsina -> add address=vdsina.ru list=NoVdsina -> add address=youla.ru list=NoVdsina -> add address=kupiprodai.ru list=NoVdsina -> add address=myip.ru list=Test-IP -> add address=geoip.co list=NoVdsina -> add address=comp-lenta.ru list=NoVdsina -> add address=128.85.102.70 comment=update.microsoft.com list=\ -> windowsupdateslist -> add address=wu-b-net.trafficmanager.net. comment=\ -> ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist -> add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ -> ctldl.windowsupdate.com list=windowsupdateslist -> add address=redir.update.msft.com.trafficmanager.net. comment=\ -> update.microsoft.com list=windowsupdateslist -> add address=geo.prod.do.dsp.trafficmanager.net. comment=\ -> geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist -> add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ -> kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist -> add address=e12437.d.akamaiedge.net. comment=\ -> kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist -> add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ -> displaycatalog.mp.microsoft.com list=windowsupdateslist -> add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ -> comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ -> windowsupdateslist -> add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ -> list=windowsupdateslist -> add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ -> sls.update.microsoft.com list=windowsupdateslist -> add address=fe3.delivery.mp.microsoft.com. comment=\ -> fe3cr.delivery.mp.microsoft.com list=windowsupdateslist -> add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ -> fe3.delivery.mp.microsoft.com list=windowsupdateslist -> add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ -> fe2cr.update.microsoft.com list=windowsupdateslist -> add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ -> download.windowsupdate.com list=windowsupdateslist -> add address=wu-f-net.trafficmanager.net. comment=\ -> download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist -> add address=tsfe.trafficmanager.net. comment=\ -> tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist -> add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ -> comment=9.au.download.windowsupdate.com list=windowsupdateslist -> add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ -> list=windowsupdateslist -> add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ -> au.download.windowsupdate.com list=windowsupdateslist -> add address=a767.dspw65.akamai.net. comment=\ -> download.windowsupdate.com.edgesuite.net list=windowsupdateslist -> add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ -> comment=licensing.mp.microsoft.com list=windowsupdateslist -> add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ -> consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ -> windowsupdateslist -> add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ -> comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist -> add address=cdp-f-nlu-net.trafficmanager.net. comment=\ -> star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ -> windowsupdateslist -> add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ -> comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist -> add address=cdp-f-tlu-net.trafficmanager.net. comment=\ -> star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ -> windowsupdateslist -> add address=storeedgefd.xbetservices.akadns.net. comment=\ -> storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist -> add address=\ -> storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ -> comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ -> windowsupdateslist -> add address=e16646.dscg.akamaiedge.net. comment=\ -> storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ -> windowsupdateslist -> add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=bg.microsoft.map.fastly.net. comment=\ -> 3.au.download.windowsupdate.com list=windowsupdateslist -> add list=windowsupdateslist -> add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ -> comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ -> windowsupdateslist -> add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ -> star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ -> windowsupdateslist -> add address=a2033.dscd.akamai.net. comment=\ -> star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ -> windowsupdateslist -> add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ -> dl.delivery.mp.microsoft.com list=windowsupdateslist -> add address=dcat-f-nlu-net.trafficmanager.net. comment=\ -> dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ -> windowsupdateslist -> add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ -> comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist -> add address=dcat-b-tlu-net.trafficmanager.net. comment=\ -> 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ -> windowsupdateslist -> add address=a122.dscg3.akamai.net. comment=\ -> tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist -> add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ -> geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist -> add address=e10370.d.akamaiedge.net. comment=\ -> geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist -> add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=a1683.dscd.akamai.net. comment=\ -> dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist -> add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ -> comment=collections.mp.microsoft.com list=windowsupdateslist -> add address=a1847.dscd.akamai.net. comment=\ -> wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ -> windowsupdateslist -> add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=au.download.windowsupdate.com.edgesuite.net. comment=\ -> 2.au.download.windowsupdate.com list=windowsupdateslist -> add address=a767.dscg3.akamai.net. comment=\ -> au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist -> add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ -> 4.au.download.windowsupdate.com list=windowsupdateslist -> add address=cl-glcb907925.gcdn.co. comment=\ -> 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ -> windowsupdateslist -> add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ -> list=windowsupdateslist -> add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ -> comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist -> add address=ts-frontend.trafficmanager.net. comment=\ -> tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ -> windowsupdateslist -> add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ -> list=windowsupdateslist -> add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ -> list=windowsupdateslist -> add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ -> windowsupdateslist -> add address=e12671.dscd.akamaiedge.net. comment=\ -> download.microsoft.com.edgekey.net list=windowsupdateslist -> add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ -> list=windowsupdateslist -> add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ -> kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist -> add address=e12358.d.akamaiedge.net. comment=\ -> kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist -> add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ -> tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist -> add address=dcat-f-tlu-net.trafficmanager.net. comment=\ -> tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ -> windowsupdateslist -> add address=a1856.dspw65.akamai.net. comment=\ -> tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist -> add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ -> list=windowsupdateslist -> add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ -> kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist -> add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ -> consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ -> windowsupdateslist -> add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ -> list=windowsupdateslist -> add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ -> list=windowsupdateslist -> add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina -> add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ -> list=windowsupdateslist -> add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ -> purchase.mp.microsoft.com list=windowsupdateslist -> add address=e110219.a.akamaiedge.net. comment=\ -> purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist -> add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.141 list=windowsupdateslist -> add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=storesdk.xbetservices.akadns.net. comment=\ -> storesdk.dsx.mp.microsoft.com list=windowsupdateslist -> add address=e16646.g.akamaiedge.net. comment=\ -> storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist -> add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ -> software-download.microsoft.com list=windowsupdateslist -> add address=download.prss.microsoft.com.akamaized.net. comment=\ -> software-download.microsoft.com.delivery.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina -> add address=87.250.250.50 comment=YandexDisk list=NoVdsina -> add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ -> displaycatalog.mp.microsoft.com list=windowsupdateslist -> add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ -> purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist -> add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ -> purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist -> add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ -> cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist -> add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ -> comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist -> add address=a1996.dscd.akamai.net. comment=\ -> wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ -> windowsupdateslist -> add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ -> cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist -> add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ -> tas02.sls.update.microsoft.com list=windowsupdateslist -> add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ -> cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist -> add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ -> comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ -> windowsupdateslist -> add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ -> comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist -> add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ -> star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ -> windowsupdateslist -> add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ -> paymentinstruments.mp.microsoft.com list=windowsupdateslist -> add address=10.30.30.33 comment=amster list=NoWG -> add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG -> add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG -> add address=wg.vados.ru comment=VDSina-vpn list=VDSina -> add address=80.85.244.9 list=TRUSTED -> add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ -> disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist -> add address=185.71.70.78 disabled=yes list=TRUSTED -> add address=176.53.203.171 disabled=yes list=TRUSTED -> add address=176.53.203.170 disabled=yes list=TRUSTED -> add address=176.53.202.194 disabled=yes list=TRUSTED -> add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina -> add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS -> add address=dns.google comment=Google-dns list=Trusted-DNS -> add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\ -> Trusted-DNS -> add address=time.google.com comment=Google-time list=Trusted-NTP -> add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\ -> Trusted-NTP -> add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP -> add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\ -> Trusted-NTP -> add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\ -> Trusted-NTP -> add address=cp.vdsina.com comment=VDSina-vpn list=VDSina -> add address=vdsina.ru comment=VDSina-vpn list=VDSina -> add address=ns.vados.ru comment=VDSina-vpn list=VDSina -> add address=vdsina.com comment=VDSina-vpn list=VDSina -> add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina -> add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina -> add address=10.30.30.0/24 comment="Local Network" list=Local-Net -> add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net -> add address=146.120.64.208/29 comment="External Net" list=Unet -> add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina -> add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina -> add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina -> add address=10.30.30.30 comment=miller disabled=yes list=NoWG -> add address=10.30.30.33 comment="Direct connet to DNS servers" list=\ -> Direct-DNS -> add address=109.107.177.79 list=VPN-Server -> add address=10.0.0.0/8 list=RFC1918 -> add address=172.16.0.0/12 list=RFC1918 -> add address=192.168.0.0/16 list=RFC1918 -> add address=8.8.4.4 disabled=yes list=to_vpn -> add address=myip.ru disabled=yes list=to_vpn -> add address=10.30.30.98 disabled=yes list=to_vpn -> /ip firewall filter -> add action=add-src-to-address-list address-list="Honeypot Hacker" \ -> address-list-timeout=12h chain=input comment="block honeypot DNS" \ -> connection-state=new dst-port=53 in-interface=Unet-ether1 protocol=udp \ -> src-address-list=!Trusted-DNS -> add action=add-src-to-address-list address-list="Honeypot Hacker" \ -> address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \ -> in-interface=Unet-ether1 protocol=tcp src-address-list=!Trusted-DNS -> add action=add-src-to-address-list address-list="Honeypot Hacker" \ -> address-list-timeout=4w2d chain=input comment=\ -> "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \ -> in-interface=Unet-ether1 protocol=tcp src-address-list=!TRUSTED -> add action=add-src-to-address-list address-list="Honeypot Hacker" \ -> address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ -> connection-state=new dst-port=5060 in-interface=Unet-ether1 protocol=udp -> add action=add-src-to-address-list address-list="Honeypot Hacker" \ -> address-list-timeout=4w2d chain=input comment="block honeypot NTP" \ -> connection-state=new dst-port=123 in-interface=Unet-ether1 protocol=udp -> add action=fasttrack-connection chain=forward comment=\ -> "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \ -> connection-state=established,related,new disabled=yes -> add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \ -> protocol=tcp -> add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \ -> protocol=udp -> add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \ -> dst-port=53 protocol=tcp src-address=10.30.30.0/24 -> add action=accept chain=input comment="udp Accept input DNS queries" \ -> dst-port=53 protocol=udp src-address=10.30.30.0/24 -> add action=accept chain=output comment="accept WireGuard" disabled=yes \ -> dst-address-list=VPN-Server out-interface=Unet-ether1 protocol=udp \ -> src-port=13231 -> add action=accept chain=output disabled=yes dst-address-list=VPN-Server \ -> dst-port=29185 out-interface=Unet-ether1 protocol=udp -> add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ -> connection-state=established,related,new disabled=yes routing-mark=\ -> !To-VPN -> add action=accept chain=output disabled=yes protocol=tcp src-port=443 -> add action=accept chain=output disabled=yes src-address=127.0.0.1 -> add action=accept chain=forward comment="defconf: accept in ipsec policy" \ -> disabled=yes ipsec-policy=in,ipsec -> add action=accept chain=forward comment="defconf: accept out ipsec policy" \ -> disabled=yes ipsec-policy=out,ipsec -> add action=accept chain=forward comment=\ -> "defconf: accept established,related, untracked" connection-state=\ -> established,related,untracked disabled=yes -> add action=drop chain=forward comment="defconf: drop invalid" \ -> connection-state=invalid in-interface=Unet-ether1 src-address=\ -> !10.30.30.0/24 -> add action=drop chain=forward comment=\ -> "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ -> connection-state=new in-interface=Unet-ether1 src-address-list=!VDSina -> add action=accept chain=input in-interface=Unet-ether1 protocol=icmp \ -> src-address-list=VDSina -> add action=accept chain=input connection-state=established -> add action=accept chain=input connection-state=related -> /ip firewall mangle -> add action=accept chain=prerouting comment=RFC1918 dst-address-list=RFC1918 \ -> in-interface-list=!WAN -> add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \ -> new-routing-mark=main passthrough=no src-address-list=NoWG -> add action=mark-routing chain=prerouting comment=\ -> "Mark Routing main for NoVdsina" disabled=yes dst-address-list=NoVdsina \ -> new-routing-mark=main passthrough=no src-address=10.30.30.0/24 -> add action=mark-connection chain=prerouting comment=\ -> "Transit for address-list \"to_vpn\"" connection-mark=no-mark disabled=\ -> yes dst-address-list=to_vpn in-interface-list=!WAN new-connection-mark=\ -> to-vpn-conn routing-mark=!main -> add action=mark-routing chain=prerouting comment=\ -> "Find routing over table r_to_vpn" connection-mark=to-vpn-conn disabled=\ -> yes in-interface-list=!WAN new-routing-mark=r_to_vpn -> add action=mark-routing chain=prerouting comment=\ -> "Mark Routing main for VDSina" dst-address-list=VPN-Server \ -> new-routing-mark=main passthrough=no src-address=10.30.30.0/24 -> add action=mark-routing chain=prerouting comment=\ -> "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \ -> new-routing-mark=main src-address=10.30.30.0/24 -> add action=mark-routing chain=prerouting comment=\ -> "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\ -> Unet new-routing-mark=main passthrough=no -> add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \ -> dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\ -> To-VPN src-address=10.30.30.0/24 -> add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \ -> dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \ -> new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24 -> add action=mark-routing chain=prerouting comment="WG for all" \ -> dst-address-list=!NoVdsina new-routing-mark=To-VPN src-address=\ -> 10.30.30.0/24 -> add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \ -> out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\ -> 1381-65535 -> add action=mark-connection chain=prerouting comment=\ -> "Mark VPN connections to exclude from FastTrack" disabled=yes \ -> new-connection-mark=VPN_No_FastTrack routing-mark=To-VPN -> add action=mark-routing chain=prerouting comment="VPN Network" disabled=yes \ -> dst-address=10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24 -> add action=mark-connection chain=output comment="For this router" \ -> connection-mark=no-mark disabled=yes dst-address-list=to_vpn \ -> new-connection-mark=to-vpn-conn-local -> add action=mark-routing chain=output comment="For this router" \ -> connection-mark=to-vpn-conn-local disabled=yes new-routing-mark=r_to_vpn -> /ip firewall nat -> add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\ -> yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\ -> !NoWG to-addresses=10.30.30.33 to-ports=53 -> add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\ -> yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\ -> !NoWG to-addresses=10.30.30.33 to-ports=53 -> add action=masquerade chain=srcnat comment=\ -> "Nat Addresses for routing mark r_to_vpn" disabled=yes routing-mark=\ -> r_to_vpn -> add action=dst-nat chain=dstnat comment=\ -> "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \ -> in-interface=Unet-ether1 protocol=tcp src-address-list=VPN-Server \ -> to-addresses=10.30.30.33 to-ports=53 -> add action=dst-nat chain=dstnat comment=\ -> "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\ -> udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53 -> add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\ -> Unet-ether1 protocol=udp src-address=!10.30.30.0/24 to-addresses=\ -> 10.30.30.33 to-ports=44333 -> add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \ -> routing-mark=To-VPN -> add action=masquerade chain=srcnat comment="Default NAT" out-interface=\ -> Unet-ether1 routing-mark=!To-VPN src-address=10.30.30.0/24 -> add action=dst-nat chain=dstnat dst-port=44044 in-interface=Unet-ether1 \ -> protocol=udp src-address=109.107.177.79 to-addresses=10.30.30.33 \ -> to-ports=44044 -> add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \ -> fragment=no in-interface=Unet-ether1 protocol=tcp routing-mark=main \ -> to-addresses=10.30.30.33 to-ports=443 -> add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \ -> dst-port=80 in-interface=Unet-ether1 protocol=tcp to-addresses=\ -> 10.30.30.33 to-ports=80 -> add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \ -> dst-port=2904 in-interface=Unet-ether1 protocol=tcp to-addresses=\ -> 10.30.30.33 to-ports=2904 -> add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\ -> 5000 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \ -> to-ports=5000 -> add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\ -> 2377 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \ -> to-ports=2377 -> add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\ -> Unet-ether1 protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \ -> to-ports=81 -> add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\ -> Unet-ether1 protocol=tcp src-address-list=TRUSTED to-addresses=\ -> 10.30.30.33 to-ports=22 -> add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \ -> dst-port=2377 in-interface=Unet-ether1 protocol=tcp to-addresses=\ -> 10.30.30.33 to-ports=2377 -> add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\ -> Unet-ether1 protocol=tcp routing-mark=!To-VPN to-addresses=10.30.30.33 \ -> to-ports=22 -> add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \ -> dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \ -> time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 -> add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\ -> Bridge-LAN protocol=tcp src-address-list=KIDS time=\ -> 6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 -> /ip firewall raw -> add action=drop chain=prerouting comment="Drop Honeypot Hackers" \ -> in-interface=Unet-ether1 src-address-list="Honeypot Hacker" -> add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \ -> in-interface-list=WAN src-address-list=Trusted-DNS -> add action=add-dst-to-address-list address-list=NoVdsina \ -> address-list-timeout=none-dynamic chain=prerouting comment=\ -> extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes -> add action=add-dst-to-address-list address-list=NoVdsina \ -> address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \ -> content=linux.duke.edu disabled=yes -> add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ -> none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \ -> disabled=yes -> add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ -> none-dynamic chain=prerouting comment="YouTube raw" content=\ -> googleapis.com disabled=yes -> add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ -> none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \ -> disabled=yes -> add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ -> none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \ -> disabled=yes -> add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ -> none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \ -> disabled=yes -> add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ -> none-dynamic chain=prerouting comment="YouTube raw" content=\ -> googlevideo.com disabled=yes -> add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ -> none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \ -> disabled=yes -> add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ -> none-dynamic chain=prerouting comment="YouTube raw" content=\ -> googleusercontent.com disabled=yes -> add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ -> none-dynamic chain=prerouting comment="YouTube raw" content=\ -> nhacmp3youtube.com disabled=yes -> add action=add-dst-to-address-list address-list=NoVdsina \ -> address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \ -> content=rutube.ru disabled=yes -> add action=add-dst-to-address-list address-list=NoVdsina \ -> address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \ -> content=me.com disabled=yes -> add action=add-dst-to-address-list address-list=NoVdsina \ -> address-list-timeout=none-dynamic chain=prerouting comment=\ -> "icloud.com raw" content=icloud.com disabled=yes -> add action=add-dst-to-address-list address-list=NoVdsina \ -> address-list-timeout=none-dynamic chain=prerouting comment=\ -> "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes -> add action=add-dst-to-address-list address-list=NoVdsina \ -> address-list-timeout=none-dynamic chain=prerouting comment=\ -> "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \ -> disabled=yes -> add action=add-dst-to-address-list address-list=NoVdsina \ -> address-list-timeout=none-dynamic chain=prerouting comment=\ -> "api.db-ip.com raw" content=api.db-ip.com disabled=yes -> add action=add-dst-to-address-list address-list=NoVdsina \ -> address-list-timeout=none-dynamic chain=prerouting comment=\ -> esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes -> add action=add-dst-to-address-list address-list=NoVdsina \ -> address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \ -> content=gosuslugi.ru disabled=yes -> /ip firewall service-port -> set ftp disabled=yes -> set tftp disabled=yes -> set irc disabled=no -> set sip disabled=yes -> set pptp disabled=yes -> set rtsp disabled=no -> /ip ipsec settings -> set accounting=no -> /ip ipsec policy -> set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0 -> /ip ipsec profile -> set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 -> /ip proxy -> set cache-administrator="" max-cache-size=none port=80,443 src-address=\ -> 0.0.0.0 -> /ip route -> add check-gateway=none comment=WG-Default disabled=no distance=1 dst-address=\ -> 0.0.0.0/0 gateway=WG routing-table=To-VPN scope=30 target-scope=10 -> /ip service -> set ftp disabled=yes -> set telnet disabled=yes -> set reverse-proxy disabled=yes -> set ssh address=10.30.30.0/24 port=2222 -> set winbox address=10.30.30.0/24 -> set api address=10.30.30.0/24 -> set api-ssl address=10.30.30.0/24 disabled=yes -> set www-ssl certificate=Root-YE port=18443 -> set www address=10.30.30.0/24 disabled=yes port=18880 -> /ip service webserver -> set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ -> no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \ -> webfig-secure=no -> /ip ssh -> set forwarding-enabled=both publickey-authentication-options=verify-required -> /ip upnp -> set enabled=yes -> /ip upnp interfaces -> add interface=Bridge-LAN type=internal -> add forced-ip=146.120.64.211 interface=Unet-ether1 type=external -> add forced-ip=109.107.177.79 interface=*E type=external -> add interface=lo type=internal -> add interface=wlan2 type=internal -> add interface=wlan1 type=internal -> /ipv6 dhcp-client -> add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\ -> info use-interface-duid=yes validate-server-duid=no -> /ipv6 dhcp-server option sets -> add name=domain-search-set options=domain-search-list -> add name="=\"Client ID\"" options=HostName -> /ipv6 firewall address-list -> add address=::/128 comment="defconf: unspecified address" list=bad_ipv6 -> add address=::1/128 comment="defconf: lo" list=bad_ipv6 -> add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6 -> add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6 -> add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6 -> add address=100::/64 comment="defconf: discard only " list=bad_ipv6 -> add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6 -> add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6 -> add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6 -> /ipv6 firewall filter -> add action=accept chain=input comment=\ -> "defconf: accept established,related,untracked" connection-state=\ -> established,related,untracked -> add action=drop chain=input comment="defconf: drop invalid" connection-state=\ -> invalid -> add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\ -> icmpv6 -> add action=accept chain=input comment="defconf: accept UDP traceroute" \ -> dst-port=33434-33534 protocol=udp -> add action=accept chain=input comment=\ -> "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\ -> udp src-address=fe80::/10 -> add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \ -> protocol=udp -> add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\ -> ipsec-ah -> add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\ -> ipsec-esp -> add action=accept chain=input comment=\ -> "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec -> add action=drop chain=input comment=\ -> "defconf: drop everything else not coming from LAN" in-interface-list=\ -> !LAN -> add action=accept chain=forward comment=\ -> "defconf: accept established,related,untracked" connection-state=\ -> established,related,untracked -> add action=drop chain=forward comment="defconf: drop invalid" \ -> connection-state=invalid -> add action=drop chain=forward comment=\ -> "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6 -> add action=drop chain=forward comment=\ -> "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6 -> add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \ -> hop-limit=equal:1 protocol=icmpv6 -> add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\ -> icmpv6 -> add action=accept chain=forward comment="defconf: accept HIP" protocol=139 -> add action=accept chain=forward comment="defconf: accept IKE" dst-port=\ -> 500,4500 protocol=udp -> add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\ -> ipsec-ah -> add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\ -> ipsec-esp -> add action=accept chain=forward comment=\ -> "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec -> add action=drop chain=forward comment=\ -> "defconf: drop everything else not coming from LAN" in-interface-list=\ -> !LAN -> /ipv6 nd -> set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \ -> managed-address-configuration=yes other-configuration=yes pref64=::/64 -> /ipv6 nd prefix -> add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none -> /ipv6 nd prefix default -> set dhcp6-pd-preferred=yes -> /ipv6 nd proxy -> add disabled=yes interface=lo -> /ipv6 nd settings -> set router-advertisement-route-distance=100 -> /routing settings -> set single-process=no -> /system clock -> set time-zone-name=Europe/Moscow -> /system clock manual -> set time-zone=+03:00 -> /system identity -> set name=MikroMaster -> /system logging -> add action=email disabled=yes regex="* added|changed|removed *" topics=\ -> system,info -> /system ntp client -> set enabled=yes -> /system ntp server -> set enabled=yes manycast=yes multicast=yes use-local-clock=yes -> /system ntp client servers -> add address=0.ru.pool.ntp.org -> add address=1.ru.pool.ntp.org -> add address=2.ru.pool.ntp.org -> add address=3.ru.pool.ntp.org -> add address=time.google.com disabled=yes -> /system package update -> set check-certificate=yes-without-crl ip-version=ipv4 -> /system scheduler -> add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \ -> on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \ -> policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ -> start-time=startup -> add comment="Every Day Check For Update Scripts" interval=1d name=\ -> AM-ScriptInstallUpdate on-event=\ -> ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ -> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ -> start-time=startup -> add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\ -> AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \ -> policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ -> start-time=startup -> /system watchdog -> set watchdog-timer=no -> /tool e-mail -> set certificate-verification=no from=MikroVados port=587 \ -> server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com -> /tool mac-server -> set allowed-interface-list=LAN -> /tool mac-server mac-winbox -> set allowed-interface-list=LAN -> /tool netwatch -> add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\ -> -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\ -> e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \ -> interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\ -> https-get up-script="" -> add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\ -> flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\ -> oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \ -> name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \ -> up-script="" -> add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\ -> 8.8.8.8 down-script="" host=dns.google http-codes="" name=\ -> "Google-DNS IPv4" test-script="" type=dns up-script="" -> add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\ -> rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\ -> -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \ -> http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\ -> "" test-script="" type=dns up-script="" -> add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \ -> dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \ -> interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \ -> test-script="" timeout=800ms type=dns up-script="" -> add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\ -> ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \ -> down-script="" host=149.112.112.112 http-codes="" interval=10s name=\ -> "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script="" -> add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \ -> down-script="" host=91.192.189.2 http-codes="" interval=10s name=\ -> ns1.unet.ws test-script="" type=simple up-script="" -> add check-certificate=yes comment=\ -> "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \ -> disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\ -> vds.vados.ru port=443 test-script="" type=https-get up-script="" -> add comment="WireGuard NAT " disabled=yes down-script="/log info \"[WG-Monitor\ -> ] WireGuard is NOT running - reverting rules\"\ -> \n/ip firewall nat remove [find comment=\"Redirect to Router\"]\ -> \n/ip dns set servers=8.8.8.8\ -> \n/ip dns cache flush\ -> \n/ip route remove [find comment=\"wg-auto-route\"]\ -> \n" host=10.8.0.1 http-codes="" interval=15s name=WG test-script="" \ -> timeout=5s type=simple up-script="/log info \"[WG-Monitor] WireGuard is RU\ -> NNING - applying rules\";\ -> \n:local routeFile \"ips.txt\";\ -> \n:local routeDefAddr \"0.0.0.0/0\";\ -> \n:local routeGateway \"10.8.0.1\";\ -> \n:local routeIF \"WG\";\ -> \n:local routeTable \"To-VPN\";\ -> \n:local routeComment \"wg-auto-route\";\ -> \n/ip dns cache flush;\ -> \n:if ([:len [/ip firewall nat find comment=\"Redirect to Router\"]] > 0) \ -> do={\ -> \n /ip firewall nat remove [find comment=\"Redirect to Router\"];\ -> \n}\ -> \n/ip firewall nat add action=redirect chain=dstnat src-address-list=\"Red\ -> irectDNS\" dst-port=53 protocol=udp comment=\"Redirect to Router\";\ -> \n/ip dns set servers=\$routeGateway;\ -> \n:local content [/file get \$routeFile contents];\ -> \n:if ([:len \$content] > 0) do={\ -> \n :local line \"\";\ -> \n :for i from=0 to=([:len \$content] - 1) do={\ -> \n :local char [:pick \$content \$i];\ -> \n :if (\$char != \"\\r\" && \$char != \"\\n\") do={\ -> \n :set line (\$line . \$char);\ -> \n } else={\ -> \n :if ([:len \$line] > 5) do={\ -> \n :do { /ip route add disabled=no dst-address=\$routeDefAd\ -> dr gateway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$r\ -> outeTable comment=\$routeComment check-gateway=none } on-error={}\ -> \n }\ -> \n :set line \"\";\ -> \n }\ -> \n }\ -> \n :if ([:len \$line] > 5) do={\ -> \n# :do { /ip route add dst-address=\$line gateway=\$routeGateway \ -> distance=1 comment=\$routeComment } on-error={}\ -> \n :do { /ip route add disabled=no dst-address=\$routeDefAddr ga\ -> teway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$routeT\ -> able comment=\$routeComment check-gateway=none } on-error={}\ -> \n }\ -> \n}\ -> \n:local dotPos [:find \$routeGateway \".\"];\ -> \n:if (\$dotPos != \"\") do={\ -> \n :local firstOctet [:pick \$routeGateway 0 \$dotPos];\ -> \n :local derivedDstAddress (\$firstOctet . \".30.0.0/15\");\ -> \n :do { /ip route add dst-address=\$derivedDstAddress gateway=\$routeG\ -> ateway distance=1 comment=\$routeComment } on-error={}\ -> \n}\ -> \n\ -> \n" -> add comment=WG-Default disabled=yes down-script=\ -> "/ip route disable [find comment=\"WG-Default\"];" host=10.8.0.1 \ -> interval=15s name=WG packet-count=20 test-script="" thr-loss-count=5 \ -> type=icmp up-script="/ip route enable [find comment=\"WG-Default\"];" -> /user aaa -> set accounting=no +6,3478d5 +< /interface bridge +< add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\ +< "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\ +< Bridge-LAN port-cost-mode=short +< /interface ethernet +< set [ find default-name=ether1 ] comment=Unet-cable loop-protect=off name=\ +< Unet-ether1 rx-flow-control=auto tx-flow-control=auto +< set [ find default-name=ether2 ] comment=LAN-2 +< set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\ +< -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3 +< set [ find default-name=ether4 ] comment=LAN-4 +< set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\ +< -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \ +< loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto +< /interface wireless +< # managed by CAPsMAN +< # channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding +< set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \ +< ssid=vados wireless-protocol=802.11 +< # managed by CAPsMAN +< # channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding +< set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \ +< ssid=vados5g wireless-protocol=802.11 +< /interface wireguard +< add comment=WG listen-port=13231 mtu=1320 name=WG +< add comment="WG interface for Amnezia route" disabled=yes listen-port=33033 \ +< mtu=1360 name=wg-nuc +< /interface list +< add include=static name=LAN +< add name=Internet +< add include=Internet name=WAN +< /interface wireless security-profiles +< set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\ +< dynamic-keys supplicant-identity=MikroTik +< /iot wiliot servers +< set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East" +< /ip dhcp-server option +< add code=12 name=HostName +< add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +< /ip dhcp-server option sets +< add name=HP1505n options=HostName +< add name=StartLife1 options=HostName +< add name=amsterDev options=HostName +< add name=MiTV options=HostName +< add name=miller options=HostName +< add name=amster options=HostName +< add name=garage options=HostName +< add name=domain-search-set options=domain-search-list +< add name=VADOS-LEN options=HostName +< add name=VADOS-NUC options=HostName +< add name=MikroNUC options=HostName +< add name=master options=HostName +< add name=MikroYellow options=HostName +< add name="=\"Client ID\"" options=HostName +< add name=iVados options=HostName +< /ip dns forwarders +< add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no +< add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \ +< verify-doh-cert=no +< add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no +< add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no +< add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\ +< no +< add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\ +< no +< add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no +< /ip ipsec proposal +< set [ find default=yes ] disabled=yes +< /ip pool +< add name=dhcp ranges=10.30.30.83-10.30.30.254 +< /ip dhcp-server +< add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ +< dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \ +< name=masterDHCP server-address=10.30.30.81 +< /ip smb users +< set [ find default=yes ] disabled=yes +< add disabled=yes name=vados +< /ipv6 dhcp-client option +< add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" +< add code=12 name=HostName value="\$(HOSTNAME)" +< add code=61 name=DUID value=0x00030001488f5a8e1abc +< add code=61 name=clientid +< /ipv6 dhcp-server option +< add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" +< add code=12 name=HostName value="\$(HOSTNAME)" +< add code=61 name=CLIENT_DUID +< add code=61 name=CLIENT_MAC +< /ppp profile +< set *FFFFFFFE use-upnp=no +< /routing bgp template +< set default disabled=no output.network=bgp-networks +< /routing table +< add disabled=no fib name=To-VPN +< add disabled=no fib name=r_to_vpn +< /system logging action +< add email-start-tls=yes email-to=vados@vados.ru name=email target=email +< /system script +< add dont-require-permissions=no name=fetchCustom owner=vados policy=\ +< ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ +< global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ +< \n\r\ +< \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ +< 0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\ +< \n\r\ +< \n#:local Script AM-setup\ +< \n;\r\ +< \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ +< heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ +< sc\") output=user as-value ]->\"data\");\r\ +< \n\ +< \n#/usb1/mikro_bak_rsa.pub\ +< \n\ +< \n\r\ +< \n#\ +< \n\r\ +< \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ +< 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ +< \n\r\ +< \n#\r\ +< \n\ +< \n#root.mnuc.backuper\ +< \n\ +< \n\r\ +< \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ +< .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ +< \n\ +< \n#:local Script AM-GlobalConfig;\ +< \n\r\ +< \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ +< heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ +< sc\") output=user as-value ]->\"data\");\r\ +< \n\ +< \n#/usb1/mikro_bak_rsa.pub\ +< \n#:local FetchFile AM-DOHCert.rsc\ +< \n\ +< \n\r\ +< \n\r\ +< \n#\ +< \n:global MkDir;\ +< \n\r\ +< \n\ +< \n#:local FetchFile Binary.backup\ +< \n:local localDir \"\";\ +< \n\ +< \n\r\ +< \n#\$MkDir \$localDir;\r\ +< \n\ +< \n#\ +< \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ +< \$localDir . \$FetchFile);\r\ +< \n" +< add comment="Global Config Script" dont-require-permissions=no name=\ +< AM-GlobalConfig owner=AM-GlobalConfig policy=\ +< ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ +< !rsc by Vados\r\ +< \n# RouterOS script: AM-GlobalConfig\r\ +< \n# Script comment: Global Config Script\r\ +< \n# Copyright (c) 2007-2026 Vados \r\ +< \n#\r\ +< \n#\r\ +< \n# Warning: Dont touch this line!\r\ +< \n:global Identity [/system/identity/get name];\r\ +< \n:global GlobalConfReady false;\r\ +< \n#\r\ +< \n#\r\ +< \n# Global Url For Amster scripts to fetch\r\ +< \n# most be defined in AM-Init-Script or AM-setup scripts\r\ +< \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ +< \n:global ScriptsUrlSuffix (a);\r\ +< \n:global CheckSumsVerify true;\r\ +< \n\r\ +< \n:global ScriptUpdatesCRLF true;\r\ +< \n:global CommentsInScripts true;\r\ +< \n\r\ +< \n# Debug output:\r\ +< \n:global PrintDebug true; #false;\r\ +< \n\r\ +< \n# Debug output for specific script:\r\ +< \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ +< \n\r\ +< \n# Debug logs\r\ +< \n# Other actions (disk, email, remote or support) can be used as well.\r\ +< \n# I do not recommend using echo - use debug output instead (https://rsc.\ +< eworm.de/main/DEBUG.html#debug-output).\r\ +< \n#/system/logging/add topics=script,debug action=memory;\r\ +< \n\r\ +< \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ +< \n:global Domain \"WORKGROUP\";\r\ +< \n\r\ +< \n:global EmailGeneralTo \"vados@vados.ru\";\r\ +< \n#:global EmailGeneralCc \"\";\r\ +< \n\r\ +< \n# \$ScriptInstallUpdate mod/notification-telegram\r\ +< \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ +< \";\r\ +< \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ +< \n# Use this to send notifications to a specific topic in group.\r\ +< \n#:global TelegramThreadId \"30\";\r\ +< \n# Using telegram-chat you have to define trusted chat ids (not group ids\ +< !)\r\ +< \n# or user names. Groups allow to chat with devices simultaneously.\r\ +< \n:global TelegramChatIdsTrusted {\r\ +< \n \"454403445\"\r\ +< \n \"-1003631309063\"\r\ +< \n \"-5124482807\"\r\ +< \n \"1087968824\";\r\ +< \n};\r\ +< \n# \"-5294757340\";\r\ +< \n\r\ +< \n:global TelegramChatGroups \"(all)\";\r\ +< \n#:global TelegramChatGroups \"(all|home|office)\";\r\ +< \n\r\ +< \n:global NotificationFunctions {\r\ +< \n \"email\"\r\ +< \n \"telegram\";\r\ +< \n};\r\ +< \n# Toggle this to disable symbols in notifications.\r\ +< \n:global NotificationsWithSymbols true;\r\ +< \n:global TerminalColorOutput true;\r\ +< \n\r\ +< \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ +< \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ +< \n\r\ +< \n## Update channel. Possible values: stable, long-term, testing, developm\ +< ent\r\ +< \n:global updateChannel \"stable\";\r\ +< \n\r\ +< \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ +< \");\r\ +< \n:global CertRenewTime 2w;\r\ +< \n:global CertRenewPass (a); #{\r\ +< \n# \"\";\r\ +< \n# \"v3ry-s3cr3t\";\r\ +< \n# \"4n0th3r-s3cr3t\";\r\ +< \n#};\r\ +< \n:global CertWarnTime 1w;\r\ +< \n:global CertIssuedExportPass (a); # {\r\ +< \n# \"\";\r\ +< \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ +< \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ +< \n#};\r\ +< \n\r\ +< \n# Script BackupAndUpdate mode, possible values: backup,\r\ +< \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ +< n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ +< \n# osupdate - Update if available and creates backups before/after update\ +< \_(ignores `forceBackup`)\r\ +< \n# Set `forceBackup` to true to always create backups, even\ +< \_without updates\r\ +< \n# osnotify - Set `forceBackup` to always create backups on every run\r\ +< \n:global DevInfoIncludeIP true;\r\ +< \n:global BackupAndUpdateMode \"osnotify\"\r\ +< \n\r\ +< \n:global forceBackup true;\r\ +< \n:global BackupPassword \"Peskar55\";\r\ +< \n\r\ +< \n# SFTP Backup Variables\r\ +< \n:global BackupRandomDelay 0;\r\ +< \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ +< \n:global BackupUploadUser \$Identity;\r\ +< \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ +< \n\r\ +< \n:global BackupSendBinary true;\r\ +< \n:global BackupSendExport true;\r\ +< \n:global BackupSendGlobalConfig true;\r\ +< \n:global BackupSendScripts true;\r\ +< \n\r\ +< \n# Remove local file after uploading if no errors\r\ +< \n:global BackupRmLocal true;\r\ +< \n\r\ +< \n# Local Backups Root Directory \r\ +< \n:global BackupLocalRoot \"tmpfs\";\r\ +< \n\r\ +< \n# Encrypt Backup\r\ +< \n:global BackupEncrypt true;\r\ +< \n\r\ +< \n# Sensitive information in Backups\r\ +< \n:global BackupSens true;\r\ +< \n\r\ +< \n# User Export\r\ +< \n:global BackupUser true;\r\ +< \n\r\ +< \n# License Export (not for CHR, will silently skip)\r\ +< \n:global BackupLicense false;\r\ +< \n\r\ +< \n# SSH Keys\r\ +< \n:global BackupSshKeys true;\r\ +< \n\r\ +< \n# Certificate Export\r\ +< \n:global BackupCerts true;\r\ +< \n\r\ +< \n# Certificate Password\r\ +< \n:global BackupCertsPasswd \"\";\r\ +< \n\r\ +< \n# User-Manager Export\r\ +< \n:global BackupUserMan false;\r\ +< \n\r\ +< \n# The Dude Export\r\ +< \n:global BackupDude false;\r\ +< \n\r\ +< \n# User Files to export, comma-separated string or array of strings\r\ +< \n# User Files are not removed on backup\r\ +< \n# Any directory paths will be removed (/ -> _) on remote file\r\ +< \n# Nonpresent files are silently skipped\r\ +< \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ +< \n\r\ +< \n# load functions and any custom scripts\r\ +< \n# [ /system/script/find where name=\"global-config-ov\ +< erlay\" ], \\\r\ +< \n# [ /system/script/find where name~\"^global-config-o\ +< verlay\\\\.d/.\" ]\r\ +< \n#\r\ +< \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ +< ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ +< \r\ +< \n# :onerror Err {\r\ +< \n# /system/script/run \$Script;\r\ +< \n# } do={\r\ +< \n# :log error (\"Loading configuration from configs and functions\"\ +< \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ +< \n# }\r\ +< \n#}\r\ +< \n#:log info \"\\ndevMode = \$devMode\";\r\ +< \n#:log info \"\\ndevRunning = \$devRunning\";\r\ +< \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ +< GlobalRUN\\r\?\\n\" ] do={\r\ +< \n :onerror Err {\r\ +< \n /system/script/run \$Script;\r\ +< \n } do={\r\ +< \n :log error (\"Run script \" . [ /system/script/get \$Script name \ +< ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ +< \n }\r\ +< \n}\r\ +< \n\r\ +< \n# signal we are ready\r\ +< \n:set GlobalConfReady true;\r\ +< \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ +< \n" +< add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ +< owner=AM-GlobalFunc policy=\ +< ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ +< !rsc by Vados\r\ +< \n# RouterOS script: AM-GglobalFunc\r\ +< \n# Script comment: Global functions\r\ +< \n# Copyright (c) 2005-2026 Vados \r\ +< \n#\r\ +< \n#\r\ +< \n# requires RouterOS, version=7.19\r\ +< \n# requires device-mode, fetch, scheduler\r\ +< \n:local ExitOK false;\r\ +< \n:local ScriptName [ :jobname ];\r\ +< \n#:global checkRunJob \$SriptName;\r\ +< \n#:global fixCRLF;\r\ +< \n#:if (\$fixCRLF != false) do={\r\ +< \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ +< ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ +< }\r\ +< \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ +< et \$fixScript source ] ] \$fixScript};};\r\ +< \n#}\r\ +< \n:global GlobalFuncReady false;\r\ +< \n\r\ +< \n# Git commit id & info, expected configuration version\r\ +< \n:global CommitId \"main/729/f42d43ae\";\r\ +< \n:global CommitTAG \"unknown\";\r\ +< \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ +< r: root, in 00:05:03 01.07.2026.\";\r\ +< \n\r\ +< \n# The variables are received right here.\r\ +< \n:global GlobalConfVersion 140;\r\ +< \n\r\ +< \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ +< \n\r\ +< \n:global Identity [/system/identity/get name];\r\ +< \n:global IdentityShort [:pick \$Identity 0 18];\r\ +< \n\r\ +< \n:global devBoardName [/system/resource/get board-name];\r\ +< \n:global devMode [/system/device-mode/get mode];\r\ +< \n:global devCurArch [/system/resource/get architecture-name];\r\ +< \n:global devCurVersion [/system/resource/get version];\r\ +< \n\r\ +< \n# Variables defined in AM-GlobalConfig.rsc\r\ +< \n:global TerminalColorOutput;\r\ +< \n:global CommentsInScripts;\r\ +< \n:global DetectIpAddrDefault;\r\ +< \n:global DetectIpAddrFallback;\r\ +< \n:global updateChannel;\r\ +< \n:global Domain;\r\ +< \n:global EmailGeneralTo;\r\ +< \n:global BackupAndUpdateMode;\r\ +< \n\r\ +< \n# Single functions, without nested functions.\r\ +< \n:global MiniDateTimeStamp;\r\ +< \n:global MicroDateTimeStamp;\r\ +< \n\r\ +< \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ +< \n:global LogPrint;\r\ +< \n\r\ +< \n# DeviceInfo and Updates\r\ +< \n:global IsCheckUpdates;\r\ +< \n:global WaitCheckUpdates;\r\ +< \n:global GetPubIp;\r\ +< \n\r\ +< \n:global GetArrDeviceInfo;\r\ +< \n:global WaitArrDeviceInfo;\r\ +< \n\r\ +< \n:global devModel;\r\ +< \n:global devRunningMode;\r\ +< \n\r\ +< \n:global devRbRevision;\r\ +< \n:global devRbSerialNumber;\r\ +< \n:global devRbVerAvail;\r\ +< \n\r\ +< \n:global runningChannelVersion;\r\ +< \n:global runningChannel;\r\ +< \n:global runningVersion;\r\ +< \n\r\ +< \n:global devBuildTime;\r\ +< \n:global ROsVerAvail;\r\ +< \n:global PkgUpdStatus;\r\ +< \n:global currentUpdateChannel;\r\ +< \n\r\ +< \n:global ScriptInstallUpdate;\r\ +< \n\r\ +< \n:global DeviceInfo;\r\ +< \n\r\ +< \n:global OldMode;\r\ +< \n\r\ +< \n:global ParseKeyValueStore;\r\ +< \n:global RandomDelay;\r\ +< \n:global GetRandomNumber;\r\ +< \n:global EscapeForRegEx;\r\ +< \n:global CharacterMultiply;\r\ +< \n:global CharacterReplace;\r\ +< \n:global CleanFilePath;\r\ +< \n:global CleanName;\r\ +< \n\r\ +< \n:global CommitBrief;\r\ +< \n\r\ +< \n:global EitherOr;\r\ +< \n:global FormatLine;\r\ +< \n:global GetRandom20CharAlNum;\r\ +< \n:global GetRandom20CharHex;\r\ +< \n:global GetRandomNumber;\r\ +< \n:global Grep;\r\ +< \n:global IfThenElse;\r\ +< \n:global MAX;\r\ +< \n:global MIN;\r\ +< \n:global HumanReadableNum;\r\ +< \n\r\ +< \n:global IsFullyConnected;\r\ +< \n:global IsDNSResolving;\r\ +< \n:global IsTimeSync;\r\ +< \n:global IsTimeSyncCached;\r\ +< \n:global IsTimeSyncResetNtp;\r\ +< \n\r\ +< \n:global MkDir;\r\ +< \n:global RmDir;\r\ +< \n:global RmFile;\r\ +< \n:global FileGet;\r\ +< \n:global Unix2Dos;\r\ +< \n:global UrlEncode;\r\ +< \n:global WaitForFile;\r\ +< \n:global ScriptLock;\r\ +< \n:global SendTelegram;\r\ +< \n:global NotificationFunctions;\r\ +< \n:global SendNotification;\r\ +< \n:global SendNotification2;\r\ +< \n:global SymbolForNotification;\r\ +< \n:global SymbolByUnicodeName;\r\ +< \n:global ValidateSyntax;\r\ +< \n:global CheckSumsVerify;\r\ +< \n:global GlobalConfChanges;\r\ +< \n:global GlobalConfMigration;\r\ +< \n:global VersionToNum;\r\ +< \n:global RequiredRouterOS;\r\ +< \n:global ExitError;\r\ +< \n:global ExitOnError;\r\ +< \n\r\ +< \n:global FetchHugeFiles;\r\ +< \n:global FetchUserAgentStr;\r\ +< \n:global FileExists;\r\ +< \n:global CertificateAvailable;\r\ +< \n:global CertificateDownload;\r\ +< \n:global CertificateNameByCN;\r\ +< \n:global CharacterMultiply;\r\ +< \n\r\ +< \n:global InspectVar;\r\ +< \n:global InspectVarRet;\r\ +< \n:global ParseCustom;\r\ +< \n\r\ +< \n:set IsCheckUpdates do={\r\ +< \n :local isInfo [:tobool \$1];\r\ +< \n :global updateChannel;\r\ +< \n :global PkgUpdStatus;\r\ +< \n :global currentUpdateChannel;\r\ +< \n :global ROsVerAvail;\r\ +< \n :global arrDeviceInfo;\r\ +< \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ +< \n :local CurrentChannel [ /system/package/update/get channel ];\r\ +< \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ +< el) do={\r\ +< \n :retry command={/system/package/update set channel=\$updateChannel} \ +< \_delay=300ms max=5 on-error={};\r\ +< \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ +< \n }\r\ +< \n :local Update [ /system/package/update/get ];\r\ +< \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ +< \n :set currentUpdateChannel \$Channel;\r\ +< \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ +< \n :local StatusPkg \"undefined\";\r\ +< \n :log info (\$0 . \" Checking for updates...\");\r\ +< \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ +< dates without-paging as-value]->\"status\")} \\\r\ +< \n delay=300ms max=5 on-error={};\r\ +< \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ +< \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ +< s true; } else={ :set PkgUpdStatus false; }\r\ +< \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ +< ] ];\r\ +< \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ +< \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ +< \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ +< \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ +< \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ +< \n }\r\ +< \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ +< kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ +< \n :return true;\r\ +< \n } else={\r\ +< \n :return \$PkgUpdStatus;\r\ +< \n }\r\ +< \n}\r\ +< \n\r\ +< \n:set WaitCheckUpdates do={\r\ +< \n :global IsCheckUpdates;\r\ +< \n :global PkgUpdStatus;\r\ +< \n :global currentUpdateChannel;\r\ +< \n :global ROsVerAvail;\r\ +< \n :global arrDeviceInfo;\r\ +< \n :local Status \"\";\r\ +< \n :local Update;\r\ +< \n :local WaitCount 0;\r\ +< \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ +< \n :return false;\r\ +< \n }\r\ +< \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ +< \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ +< \") && \$WaitCount < 60) do={\r\ +< \n :delay 1s;\r\ +< \n :set WaitCount (\$WaitCount + 1);\r\ +< \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ +< \n }\r\ +< \n :set Update [ /system/package/update/get ];\r\ +< \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ +< \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ +< \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ +< \n :set PkgUpdStatus true;\r\ +< \n } else={\r\ +< \n :set PkgUpdStatus false;\r\ +< \n }\r\ +< \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ +< \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ +< \n }\r\ +< \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ +< \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ +< do={\r\ +< \n :return false;\r\ +< \n }\r\ +< \n :return true;\r\ +< \n}\r\ +< \n\r\ +< \n:set WaitArrDeviceInfo do={\r\ +< \n :global GetArrDeviceInfo;\r\ +< \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ +< \n :delay 1s;\r\ +< \n }\r\ +< \n}\r\ +< \n\r\ +< \n:set GetArrDeviceInfo do={\r\ +< \n :global LogPrint;\r\ +< \n :global arrDeviceInfo;\r\ +< \n :global devBoardName;\r\ +< \n :global devModel;\r\ +< \n :global devRunning;\r\ +< \n :global devCurArch;\r\ +< \n :global devRbRevision;\r\ +< \n :global devRbSerialNumber;\r\ +< \n :global devBuildTime;\r\ +< \n :global runningChannelVersion;\r\ +< \n :global runningChannel;\r\ +< \n :global runningVersion;\r\ +< \n :global currentUpdateChannel;\r\ +< \n :global ROsVerAvail;\r\ +< \n\r\ +< \n :local DeviceInfo;\r\ +< \n :local Resource [/system/resource/get];\r\ +< \n :local Update [ /system/package/update/get ];\r\ +< \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ +< \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ +< \n :local RouterBoard;\r\ +< \n :local IsRouterBoard false;\r\ +< \n :local RunningMode \"\";\r\ +< \n\r\ +< \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ +< \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ +< \n :set runningChannelVersion \$VersionString;\r\ +< \n :set runningVersion \$VersionString;\r\ +< \n :set runningChannel \"\";\r\ +< \n\r\ +< \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ +< {\r\ +< \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ +< \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ +< len \$VersionString ] ];\r\ +< \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ +< \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ +< \r\ +< \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ +< \n }\r\ +< \n }\r\ +< \n\r\ +< \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ +< \_3] != \"x86\") do={\r\ +< \n :do {\r\ +< \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ +< \n# :set RouterBoard [ /system/routerboard/get ];\r\ +< \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ +< \n :set IsRouterBoard true;\r\ +< \n }\r\ +< \n } on-error={}\r\ +< \n }\r\ +< \n\r\ +< \n :do {\r\ +< \n :set RunningMode [ /system/device-mode/get mode ];\r\ +< \n } on-error={\r\ +< \n :do {\r\ +< \n :set RunningMode [ /system/device-mode/get running ];\r\ +< \n } on-error={\r\ +< \n :set RunningMode \"\";\r\ +< \n }\r\ +< \n }\r\ +< \n :set devRunning \$RunningMode;\r\ +< \n\r\ +< \n :if (\$IsRouterBoard = true) do={\r\ +< \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ +< \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ +< \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ +< ];\r\ +< \n } else={\r\ +< \n :set devModel \$devBoardName;\r\ +< \n :set devRbRevision \"\";\r\ +< \n :set devRbSerialNumber \"\";\r\ +< \n }\r\ +< \n\r\ +< \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ +< \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ +< \n\r\ +< \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ +< \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ +< \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ +< \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ +< \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ +< \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ +< \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ +< \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ +< ion;\r\ +< \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ +< \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ +< \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ +< \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ +< current-firmware\") ];\r\ +< \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ +< upgrade-firmware\") ];\r\ +< \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ +< \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ +< alled-version\") ];\r\ +< \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ +< \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ +< ) ];\r\ +< \n\r\ +< \n :set arrDeviceInfo \$DeviceInfo;\r\ +< \n :return \$DeviceInfo;\r\ +< \n}\r\ +< \n\r\ +< \n:set DeviceInfo do={\r\ +< \n :global GetArrDeviceInfo;\r\ +< \n :global GlobalConfVersion;\r\ +< \n :global Identity;\r\ +< \n :global IfThenElse;\r\ +< \n :global FormatLine;\r\ +< \n :global CommitBrief;\r\ +< \n\r\ +< \n :local License [/system/license/get];\r\ +< \n :local Snmp [ /snmp/get ];\r\ +< \n :local Info [ \$GetArrDeviceInfo ];\r\ +< \n\r\ +< \n :if ([ :typeof \$Info ] != \"array\") do={\r\ +< \n :return false;\r\ +< \n }\r\ +< \n\r\ +< \n :return ( \\\r\ +< \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ +< \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ +< \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ +< \_. \\\r\ +< \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ +< \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ +< \_\\\r\ +< \n \"Hardware:\\n\" . \\\r\ +< \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ +< \\\r\ +< \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ +< n\" . \\\r\ +< \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ +< \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ +< \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ +< \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ +< \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ +< \\n\") ] . \\\r\ +< \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ +< \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ +< \")) ] . \"\\n\") ] . \\\r\ +< \n \"RouterOS:\\n\" . \\\r\ +< \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ +< \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ +< \")) ] . \"\\n\") ] . \\\r\ +< \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ +< \\n\" . \\\r\ +< \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ +< \_\"\\n\" . \\\r\ +< \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ +< \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ +< \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ +< \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ +< \"\\n\") ] . \\\r\ +< \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ +< \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ +< \_\\\r\ +< \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ +< \_\"\\n\") ] . \\\r\ +< \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ +< \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ +< ) \\\r\ +< \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ +< \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ +< \n \"RouterOS-Scripts:\\n\" . \\\r\ +< \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ +< \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ +< \n}\r\ +< \n\r\ +< \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ +< tionFunctions ({})}\r\ +< \n\r\ +< \n:set GetRandom20CharAlNum do={\r\ +< \n :global EitherOr;\r\ +< \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ +< FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ +< \n}\r\ +< \n\r\ +< \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ +< \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ +< \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ +< \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ +< \n\r\ +< \n:global checkRunJob;\r\ +< \n:set checkRunJob do={\r\ +< \n :local Script [ :tostr \$1 ];\r\ +< \n :global ScriptLock; \r\ +< \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ +< \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ +< :set Job [ /system/script/job/get \$Job ];\r\ +< \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ +< stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ +< \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ +< lse; \r\ +< \n}\r\ +< \n\r\ +< \n:set InspectVar do={\r\ +< \n :global InspectVarRet;\r\ +< \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ +< \n}\r\ +< \n\r\ +< \n:set CommitBrief do={\r\ +< \n :global CommitId;\r\ +< \n :global CommitInfo;\r\ +< \n :if (\$CommitId = \"unknown\") do={\r\ +< \n :return \"unknown\";\r\ +< \n }\r\ +< \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ +< \n}\r\ +< \n\r\ +< \n:set InspectVarRet do={\r\ +< \n :local Input \$1;\r\ +< \n :local Level (0 + [ :tonum \$2 ]);\r\ +< \n :global CharacterReplace;\r\ +< \n :global IfThenElse;\r\ +< \n :global InspectVarRet;\r\ +< \n :local IndentReturn do={\r\ +< \n :local Prefix [ :tostr \$1 ];\r\ +< \n :local Value [ :tostr \$2 ];\r\ +< \n :local Level [ :tonum \$3 ];\r\ +< \n :global CharacterMultiply;\r\ +< \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ +< fix . \"-> \" . \$Value);\r\ +< \n }\r\ +< \n :local TypeOf [ :typeof \$Input ];\r\ +< \n :local Len [ :len \$Input ];\r\ +< \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ +< \n :if (\$TypeOf = \"array\") do={\r\ +< \n :foreach Key,Value in=\$Input do={\r\ +< \n :set \$Return (\$Return . \"\\n\" . \\\r\ +< \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ +< \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ +< \n }\r\ +< \n } else={\r\ +< \n :if (\$TypeOf = \"str\") do={\r\ +< \n :set \$Return (\$Return . \"\\n\" . \\\r\ +< \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ +< \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ +< \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ +< \n }\r\ +< \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ +< \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ +< \n }\r\ +< \n }\r\ +< \n :if (\$TypeOf != \"nothing\") do={\r\ +< \n :set \$Return (\$Return . \"\\n\" . \\\r\ +< \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ +< \_\\\r\ +< \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ +< \n }\r\ +< \n }\r\ +< \n :return \$Return;\r\ +< \n}\r\ +< \n\r\ +< \n:set GetPubIp do={\r\ +< \n :global DetectIpAddrDefault;\r\ +< \n :global DetectIpAddrFallback;\r\ +< \n\r\ +< \n :local PubIpAddr false;\r\ +< \n :local Url \$DetectIpAddrDefault;\r\ +< \n :local JobName [ :jobname ];\r\ +< \n\r\ +< \n :do {\r\ +< \n :log debug (\$0 . \" Trying to detect public IP using default serv\ +< ice: \" . \$Url . \"...\");\r\ +< \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ +< \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ +< )} \\\r\ +< \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ +< detect public IP using default service: \" . \$Url . \".\")}\r\ +< \n } on-error={\r\ +< \n :log error (\$0 . \" Failed to detect public IP using default serv\ +< ice: \" . \$Url . \".\");\r\ +< \n :set Url \$DetectIpAddrFallBack;\r\ +< \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ +< vice: \" . \$Url . \"...\");\r\ +< \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ +< \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ +< )} \\\r\ +< \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ +< \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ +< \n };\r\ +< \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ +< \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ +< {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ +< \n :return \$PubIpAddr;\r\ +< \n}\r\ +< \n\r\ +< \n:set FormatLine do={\r\ +< \n :local Key [ :tostr \$1 ];\r\ +< \n :local Value [ :tostr \$2 ];\r\ +< \n :local Indent [ :tonum \$3 ];\r\ +< \n :local Spaces;\r\ +< \n :local Return \"\";\r\ +< \n :global CharacterMultiply;\r\ +< \n :global EitherOr;\r\ +< \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ +< \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ +< \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ +< \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ +< n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ +< \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ +< \$Return ]) ] . \$Value)}\r\ +< \n :return \$Return;\r\ +< \n}\r\ +< \n\r\ +< \n:set ParseCustom do={\r\ +< \n :local Str [ :tostr \$1 ];\r\ +< \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ +< \n :local End [ :tostr \$3 ];\r\ +< \n :local Num [ :tonum \$4 ];\r\ +< \n :local Return;\r\ +< \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ +< \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ +< \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ +< lse={\r\ +< \n :set End [:find \$rest \$End];\r\ +< \n :set Return [:pick \$rest 0 \$End];\r\ +< \n }\r\ +< \n:return \$Return;\r\ +< \n}\r\ +< \n\r\ +< \n:set LogPrint do={\r\ +< \n :local Severity [ :tostr \$1 ];\r\ +< \n :local Name [ :tostr \$2 ];\r\ +< \n :local Message [ :tostr \$3 ];\r\ +< \n :global PrintDebug;\r\ +< \n :global PrintDebugOverride;\r\ +< \n :global EitherOr;\r\ +< \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ +< ];\r\ +< \n :local PrintSeverity do={\r\ +< \n :global TerminalColorOutput;\r\ +< \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ +< \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ +< \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ +< \n}\r\ +< \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ +< \r\ +< \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ +< \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ +< \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ +< \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ +< \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ +< \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ +< erity \$Severity ] . \": \" . \$Message)}\r\ +< \n}\r\ +< \n\r\ +< \n:set CertificateAvailable do={\r\ +< \n :local CommonName [ :tostr \$1 ];\r\ +< \n :local UseFor [ :tostr \$2 ];\r\ +< \n\r\ +< \n :global CertificateDownload;\r\ +< \n :global ParseKeyValueStore;\r\ +< \n\r\ +< \n :if ([ :len \$UseFor ] = 0) do={\r\ +< \n :log warning (\$0 . \"The intended use is undefined!\");\r\ +< \n :set UseFor \"undefined\";\r\ +< \n }\r\ +< \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ +< \n [ /certificate/settings/get crl-download ] = true && \\\r\ +< \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ +< \n :log warning (\$0 . \"This system has low free flash space but \" . \ +< \\\r\ +< \n \"is configured to download certificate CRLs to system!\");\r\ +< \n }\r\ +< \n :if ([ :len \$CommonName ] = 0) do={\r\ +< \n :log warning (\$0 . \"No CommonName given!\");\r\ +< \n :return false;\r\ +< \n }\r\ +< \n :local CertSettings [ /certificate/settings/get ];\r\ +< \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ +< \r\ +< \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ +< \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ +< \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ +< \_] ] > 0) do={\r\ +< \n :return true;\r\ +< \n }\r\ +< \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ +< ) do={\r\ +< \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ +< \"' not available.\");\r\ +< \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ +< \n :return false;\r\ +< \n }\r\ +< \n }\r\ +< \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ +< ) do={\r\ +< \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ +< \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ +< \n :return true;\r\ +< \n }\r\ +< \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ +< e ] ];\r\ +< \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ +< ertVal->\"skid\")) do={\r\ +< \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ +< \_= 0) do={\r\ +< \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ +< >\"CN\");\r\ +< \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ +< is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ +< \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ +< \n :return false;\r\ +< \n }\r\ +< \n }\r\ +< \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ +< \") ] ];\r\ +< \n }\r\ +< \n :return true;\r\ +< \n}\r\ +< \n\r\ +< \n:set CertificateDownload do={\r\ +< \n :local CommonName [ :tostr \$1 ];\r\ +< \n :global ScriptUpdatesBaseUrl;\r\ +< \n :global ScriptUpdatesUrlSuffix;\r\ +< \n :global CertificateNameByCN;\r\ +< \n :global CleanName;\r\ +< \n :global FetchUserAgentStr;\r\ +< \n :global RmFile;\r\ +< \n :global WaitForFile;\r\ +< \n\r\ +< \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ +< \r\ +< \n \"CommonName '\" . \$CommonName . \"'.\");\r\ +< \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ +< \n :do {\r\ +< \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ +< -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ +< \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ +< sUrlSuffix) \\\r\ +< \n dst-path=\$FileName as-value;\r\ +< \n \$WaitForFile \$FileName;\r\ +< \n } on-error={\r\ +< \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ +< e '\" . \$CommonName . \\\r\ +< \n \"' from repository! Trying fallback to mkcert.org...\");\r\ +< \n :do {\r\ +< \n :local CertSettings [ /certificate/settings/get ];\r\ +< \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ +< \_] ] = 0 && \\\r\ +< \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ +< || \\\r\ +< \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ +< \\\r\ +< \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ +< \r\ +< \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ +< \_Root X1\" ] ] > 0)) do={\r\ +< \n :log error (\$0 . \" Required certificate is not available.\");\ +< \r\ +< \n :return false;\r\ +< \n }\r\ +< \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ +< er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ +< \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ +< n ({ \$CommonName }) ] \\\r\ +< \n dst-path=\$FileName as-value;\r\ +< \n \$WaitForFile \$FileName;\r\ +< \n :if ([ /file/get \$FileName size ] = 0) do={\r\ +< \n \$RmFile \$FileName;\r\ +< \n :error false;\r\ +< \n }\r\ +< \n } on-error={\r\ +< \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ +< e '\" . \$CommonName . \"'!\");\r\ +< \n :return false;\r\ +< \n }\r\ +< \n }\r\ +< \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ +< \n :delay 1s;\r\ +< \n \$RmFile \$FileName;\r\ +< \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ +< ) do={\r\ +< \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ +< +\\\$\") ];\r\ +< \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ +< e . \"' still unavailable!\");\r\ +< \n :return false;\r\ +< \n }\r\ +< \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ +< \"_[0-9]+\\\$\") ] do={\r\ +< \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ +< \n }\r\ +< \n :return true;\r\ +< \n}\r\ +< \n\r\ +< \n:set CertificateNameByCN do={\r\ +< \n :local Match [ :tostr \$1 ];\r\ +< \n :global CleanName;\r\ +< \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ +< rint=\$Match or name=\$Match) ]->0);\r\ +< \n :if ([ :len \$Cert ] = 0) do={\r\ +< \n :log warning (\$0 .\" No matching certificate found.\");\r\ +< \n :return false;\r\ +< \n }\r\ +< \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ +< \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ +< \n :return true;\r\ +< \n}\r\ +< \n\r\ +< \n:set CharacterMultiply do={\r\ +< \n :local Str [ :tostr \$1 ];\r\ +< \n :local Num [ :tonum \$2 ];\r\ +< \n :if (\$Num = 0) do={:return \"\"}\r\ +< \n :local Return \"\";\r\ +< \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ +< \n :return \$Return;\r\ +< \n}\r\ +< \n\r\ +< \n:set FileExists do={\r\ +< \n :local FileName [ :tostr \$1 ];\r\ +< \n :local Type [ :tostr \$2 ];\r\ +< \n :global FileGet;\r\ +< \n :local FileVal [ \$FileGet \$FileName ];\r\ +< \n :if (\$FileVal = false) do={ :return false; }\r\ +< \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ +< \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ +< \_true; }\r\ +< \n :return false;\r\ +< \n}\r\ +< \n\r\ +< \n:set Grep do={\r\ +< \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ +< \n :local Pattern [ :tostr \$2 ];\r\ +< \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ +< }\r\ +< \n :do {\r\ +< \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ +< \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ +< \$Line}\r\ +< \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ +< Input ] ];\r\ +< \n } while=([ :len \$Input ] > 0);\r\ +< \n :return [];\r\ +< \n}\r\ +< \n\r\ +< \n:set HumanReadableNum do={\r\ +< \n :local Input [ :tonum \$1 ];\r\ +< \n :local Base [ :tonum \$2 ];\r\ +< \n :global EitherOr;\r\ +< \n :global IfThenElse;\r\ +< \n :local Prefix \"kMGTPE\";\r\ +< \n :local Pow 1;\r\ +< \n :set Base [ \$EitherOr \$Base 1024 ];\r\ +< \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ +< \n :if (\$Input < \$Base) do={:return \$Input}\r\ +< \n :for I from=0 to=[ :len \$Prefix ] do={\r\ +< \n :set Pow (\$Pow * \$Base);\r\ +< \n :if (\$Input / \$Base < \$Pow) do={\r\ +< \n :set Prefix [ :pick \$Prefix \$I ];\r\ +< \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ +< \n :local Tmp2 (\$Tmp1 / 100);\r\ +< \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ +< \n :return (\$Tmp2 . \".\" . \\\r\ +< \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ +< 2 ] + 1) ] . \\\r\ +< \n \$Prefix . \$Bin);\r\ +< \n }\r\ +< \n }\r\ +< \n}\r\ +< \n\r\ +< \n:set CleanFilePath do={\r\ +< \n :local Path [ :tostr \$1 ];\r\ +< \n :global CharacterReplace;\r\ +< \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ +< \"//\" \"/\" ]; }\r\ +< \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ +< n \$Path ] ]; }\r\ +< \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ +< :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ +< \n :return \$Path;\r\ +< \n}\r\ +< \n\r\ +< \n:set CleanName do={\r\ +< \n :local Input [ :tostr \$1 ];\r\ +< \n :local Return \"\";\r\ +< \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ +< \n :local Char [ :pick \$Input \$I ];\r\ +< \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ +< stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ +< \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ +< \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ +< ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ +< \n };\r\ +< \n :set Return (\$Return . \$Char)};\r\ +< \n :return \$Return;\r\ +< \n}\r\ +< \n\r\ +< \n:set RandomDelay do={\r\ +< \n :local Time [ :tonum \$1 ];\r\ +< \n :local Unit [ :tostr \$2 ];\r\ +< \n :global EitherOr;\r\ +< \n :global GetRandomNumber;\r\ +< \n :global MAX;\r\ +< \n :if (\$Time = 0) do={:return false}\r\ +< \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ +< [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ +< \n}\r\ +< \n\r\ +< \n:set EscapeForRegEx do={\r\ +< \n :local Input [ :tostr \$1 ];\r\ +< \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ +< \n :local Return \"\";\r\ +< \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ +< \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ +< \n :local Char [ :pick \$Input \$I ];\r\ +< \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ +< \n :set Return (\$Return . \$Char);\r\ +< \n }\r\ +< \n :return \$Return;\r\ +< \n}\r\ +< \n\r\ +< \n:set ExitError do={\r\ +< \n :local ExitOK [ :tostr \$1 ];\r\ +< \n :local Name [ :tostr \$2 ];\r\ +< \n :local Error [ :tostr \$3 ];\r\ +< \n :global IfThenElse;\r\ +< \n :if (\$ExitOK = \"false\") do={\r\ +< \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ +< \\\r\ +< \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ +< ror\" . \\\r\ +< \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ +< \$Error) \".\" ]);\r\ +< \n }\r\ +< \n}\r\ +< \n\r\ +< \n:set ExitOnError do={\r\ +< \n :local Name [ :tostr \$1 ];\r\ +< \n :local Error [ :tostr \$2 ];\r\ +< \n :global IfThenElse;\r\ +< \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ +< \\\$\") \\\r\ +< \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ +< r\" . \\\r\ +< \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ +< rror) \".\" ]);\r\ +< \n}\r\ +< \n\r\ +< \n:set MiniDateTimeStamp do={\r\ +< \n :local mikro [ :tobool \$1 ];\r\ +< \n /system/clock;\r\ +< \n :local vdate [get date];\r\ +< \n :local vtime [get time];\r\ +< \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ +< \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ +< \n :local M [:tonum \$MM];\r\ +< \n :if (\$vdate ~ \".../../....\") do={\r\ +< \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ +< \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ +< PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ +< \n :if (\$M>12) do={:set M (\$M - 12)}\r\ +< \n :set MM [:pick (100 + \$M) 1 3];\r\ +< \n }\r\ +< \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ +< \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ +< \n :local HH [:pick \$vtime 0 2];\r\ +< \n :local mm [:pick \$vtime 3 5];\r\ +< \n :local ss [:pick \$vtime 6 8];\r\ +< \n :local Return;\r\ +< \n :if (\$mikro = true) do={\r\ +< \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ +< \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ +< \n } else={\r\ +< \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ +< \r\ +< \n }\r\ +< \n :return \$Return;\r\ +< \n}\r\ +< \n\r\ +< \n:set WaitForFile do={\r\ +< \n :local FileName [ :tostr \$1 ];\r\ +< \n :local WaitTime [ :totime \$2 ];\r\ +< \n :global CleanFilePath;\r\ +< \n :global EitherOr;\r\ +< \n :global MAX;\r\ +< \n :set FileName [ \$CleanFilePath \$FileName ];\r\ +< \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ +< \n :do {\r\ +< \n :retry {\r\ +< \n /file/get \$FileName;\r\ +< \n :return true;\r\ +< \n } delay=\$Delay max=10;\r\ +< \n } on-error={ }\r\ +< \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ +< \n :do {\r\ +< \n /file/get \$FileName;\r\ +< \n :return true;\r\ +< \n } on-error={ }\r\ +< \n :delay \$Delay;\r\ +< \n :set Delay (\$Delay * 3 / 2);\r\ +< \n }\r\ +< \n :return false;\r\ +< \n}\r\ +< \n\r\ +< \n:set FileGet do={\r\ +< \n :local FileName [ :tostr \$1 ];\r\ +< \n :global WaitForFile;\r\ +< \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ +< \n :return false;\r\ +< \n }\r\ +< \n :local FileVal false;\r\ +< \n :do {\r\ +< \n :set FileVal [ /file/get \$FileName ];\r\ +< \n } on-error={ }\r\ +< \n :return \$FileVal;\r\ +< \n}\r\ +< \n\r\ +< \n:set RmDir do={\r\ +< \n :local DirName [ :tostr \$1 ];\r\ +< \n :global FileGet;\r\ +< \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ +< \n :local DirVal [ \$FileGet \$DirName ];\r\ +< \n :if (\$DirVal = false) do={\r\ +< \n :log debug (\$0 . \" ... which does not exist.\");\r\ +< \n :return true;\r\ +< \n };\r\ +< \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ +< \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ +< ory.\");\r\ +< \n :return false;\r\ +< \n };\r\ +< \n :onerror Err {\r\ +< \n /file/remove \$DirName;\r\ +< \n } do={\r\ +< \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ +< : \" . \$Err);\r\ +< \n :return false;\r\ +< \n };\r\ +< \n :return true;\r\ +< \n}\r\ +< \n\r\ +< \n:set RmFile do={\r\ +< \n :local FileName [ :tostr \$1 ];\r\ +< \n :global FileGet;\r\ +< \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ +< \n :local FileVal [ \$FileGet \$FileName ];\r\ +< \n :if (\$FileVal = false) do={\r\ +< \n :log debug (\$0 . \" ... which does not exist.\");\r\ +< \n :return true;\r\ +< \n }\r\ +< \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ +< sk\") do={\r\ +< \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ +< \r\ +< \n :return false;\r\ +< \n }\r\ +< \n :onerror Err {\r\ +< \n /file/remove \$FileName;\r\ +< \n } do={\r\ +< \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ +< \_. \$Err); :return false;\r\ +< \n }\r\ +< \n :return true;\r\ +< \n}\r\ +< \n\r\ +< \n:set MkDir do={\r\ +< \n :local Path [ :tostr \$1 ];\r\ +< \n :global CleanFilePath;\r\ +< \n :global FileGet;\r\ +< \n :global RmDir;\r\ +< \n :global WaitForFile;\r\ +< \n\r\ +< \n :local MkTmpfs do={\r\ +< \n :global WaitForFile;\r\ +< \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ +< \n :if ([ :len \$TmpFs ] = 1) do={\r\ +< \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ +< \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ +< \n /disk/enable \$TmpFs;\r\ +< \n }\r\ +< \n :return true;\r\ +< \n }\r\ +< \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ +< \n \$RmDir \"tmpfs\";\r\ +< \n :onerror Err {\r\ +< \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ +< /get total-memory ] / 3);\r\ +< \n \$WaitForFile \"tmpfs\";\r\ +< \n } do={\r\ +< \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ +< Err);\r\ +< \n :return false;\r\ +< \n }\r\ +< \n :return true;\r\ +< \n }\r\ +< \n :set Path [ \$CleanFilePath \$Path ];\r\ +< \n :if (\$Path = \"\") do={\r\ +< \n :return true;\r\ +< \n }\r\ +< \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ +< \n :local PathVal [ \$FileGet \$Path ];\r\ +< \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ +< \n :log debug (\$0 . \" ... which already exists.\");\r\ +< \n :return true;\r\ +< \n }\r\ +< \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ +< \n :if ([ \$MkTmpfs ] = false) do={\r\ +< \n :return false;\r\ +< \n }\r\ +< \n }\r\ +< \n :onerror Err {\r\ +< \n /file/add type=\"directory\" name=\$Path;\r\ +< \n \$WaitForFile \$Path;\r\ +< \n } do={\r\ +< \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ +< \" . \$Err);\r\ +< \n :return false;\r\ +< \n }\r\ +< \n :return true;\r\ +< \n}\r\ +< \n\r\ +< \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ +< \n :return \$2;\r\ +< \n}\r\ +< \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ +< \n :return \$2;\r\ +< \n}\r\ +< \n\r\ +< \n:set CharacterMultiply do={\r\ +< \n :local Str [ :tostr \$1 ];\r\ +< \n :local Num [ :tonum \$2 ];\r\ +< \n :if (\$Num = 0) do={:return \"\"}\r\ +< \n :local Return \"\";\r\ +< \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ +< \n :return \$Return;\r\ +< \n}\r\ +< \n\r\ +< \n:set CharacterReplace do={\r\ +< \n :local String [ :tostr \$1 ];\r\ +< \n :local ReplaceFrom [ :tostr \$2 ];\r\ +< \n :local ReplaceWith [ :tostr \$3 ];\r\ +< \n :local Return \"\";\r\ +< \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ +< \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ +< \r\ +< \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ +< \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ +< \r\ +< \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ +< \_\$String ] ];\r\ +< \n }\r\ +< \n :return (\$Return . \$String);\r\ +< \n}\r\ +< \n\r\ +< \n:set IfThenElse do={\r\ +< \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ +< \$2};\r\ +< \n :return \$3;\r\ +< \n}\r\ +< \n\r\ +< \n:set EitherOr do={\r\ +< \n :global IfThenElse;\r\ +< \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ +< \$1 \$2 ]}\r\ +< \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ +< \_\$1 \$2 ]}\r\ +< \n# this works for boolean values, literal ones with parentheses\r\ +< \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ +< \n}\r\ +< \n\r\ +< \n:set ParseKeyValueStore do={\r\ +< \n :local Source \$1;\r\ +< \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ +< \n :do {\r\ +< \n :return [ :deserialize from=json \$Source ];\r\ +< \n } on-error={ }\r\ +< \n } \r\ +< \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ +< }\r\ +< \n :local Result ({});\r\ +< \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ +< \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ +< \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ +< \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ +< \_:len \$KeyValue ] ];\r\ +< \n :if (\$Value=\"true\") do={:set Value true}\r\ +< \n :if (\$Value=\"false\") do={:set Value false}\r\ +< \n :set (\$Result->\$Key) \$Value;\r\ +< \n } else={:set (\$Result->\$KeyValue) true}\r\ +< \n }\r\ +< \n :return \$Result;\r\ +< \n}\r\ +< \n:set RequiredRouterOS do={\r\ +< \n :local Caller [ :tostr \$1 ];\r\ +< \n :local Required [ :tostr \$2 ];\r\ +< \n :local Warn [ :tostr \$3 ];\r\ +< \n :global IfThenElse;\r\ +< \n :global VersionToNum;\r\ +< \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ +< \\\$\")) do={\r\ +< \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ +< \n :return false;\r\ +< \n }\r\ +< \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ +< e/update/get installed-version ] ]) do={\r\ +< \n :if (\$Warn = \"true\") do={\r\ +< \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ +< 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ +< \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ +< es RouterOS \" . \$Required . \". Please update!\");\r\ +< \n }\r\ +< \n :return false;\r\ +< \n }\r\ +< \n :return true;\r\ +< \n}\r\ +< \n\r\ +< \n:set ValidateSyntax do={\r\ +< \n :local Code [ :tostr \$1 ];\r\ +< \n :global LogPrint;\r\ +< \n :onerror Err {\r\ +< \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ +< \n } do={\r\ +< \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ +< \n :return false;\r\ +< \n }\r\ +< \n :return true;\r\ +< \n}\r\ +< \n\r\ +< \n:set VersionToNum do={\r\ +< \n :local Input [ :tostr \$1 ];\r\ +< \n :local Multi 0x1000000;\r\ +< \n :local Return 0;\r\ +< \n :global CharacterReplace;\r\ +< \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ +< \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ +< \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ +< \r\ +< \n }\r\ +< \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ +< \n :local Num [ :tonum \$Value ];\r\ +< \n :if (\$Multi = 0x100) do={\r\ +< \n :if ([ :typeof \$Num ] = \"num\") do={\r\ +< \n :set Return (\$Return + 0xff00);\r\ +< \n :set Multi (\$Multi / 0x100);\r\ +< \n } else={\r\ +< \n :if (\$Value = \"zero\") do={ }\r\ +< \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ +< }\r\ +< \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ +< \r\ +< \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ +< \n }\r\ +< \n }\r\ +< \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ +< lue * \$Multi)); }\r\ +< \n :set Multi (\$Multi / 0x100);\r\ +< \n }\r\ +< \n :return \$Return;\r\ +< \n}\r\ +< \n\r\ +< \n:set ScriptLock do={\r\ +< \n :local Script [ :tostr \$1 ];\r\ +< \n :local WaitMax [ :totime \$2 ];\r\ +< \n :global GetRandom20CharAlNum;\r\ +< \n :global IfThenElse;\r\ +< \n :global ScriptLockOrder;\r\ +< \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ +< \n :set ScriptLockOrder ({});\r\ +< \n }\r\ +< \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ +< \n :set (\$ScriptLockOrder->\$Script) ({});\r\ +< \n }\r\ +< \n :local JobCount do={\r\ +< \n :local Script [ :tostr \$1 ];\r\ +< \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ +< \r\ +< \n }\r\ +< \n :local TicketCount do={\r\ +< \n :local Script [ :tostr \$1 ];\r\ +< \n :global ScriptLockOrder;\r\ +< \n :local Count 0;\r\ +< \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ +< \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ +< + 1)}\r\ +< \n }\r\ +< \n :return \$Count;\r\ +< \n }\r\ +< \n :local IsFirstTicket do={\r\ +< \n :local Script [ :tostr \$1 ];\r\ +< \n :local Check [ :tostr \$2 ];\r\ +< \n :global ScriptLockOrder;\r\ +< \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ +< \n :if (\$Ticket = \$Check) do={:return true}\r\ +< \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ +< o={:return false}\r\ +< \n }\r\ +< \n :return false;\r\ +< \n }\r\ +< \n :local AddTicket do={\r\ +< \n :local Script [ :tostr \$1 ];\r\ +< \n :local Add [ :tostr \$2 ];\r\ +< \n :global ScriptLockOrder;\r\ +< \n :while (true) do={\r\ +< \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ +< \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ +< \n :delay 10ms;\r\ +< \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ +< e}\r\ +< \n }\r\ +< \n }\r\ +< \n :local RemoveTicket do={\r\ +< \n :local Script [ :tostr \$1 ];\r\ +< \n :local Remove [ :tostr \$2 ];\r\ +< \n :global ScriptLockOrder;\r\ +< \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ +< \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ +< \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ +< \n :delay 10ms;\r\ +< \n }\r\ +< \n }\r\ +< \n }\r\ +< \n :local CleanupTickets do={\r\ +< \n :local Script [ :tostr \$1 ];\r\ +< \n :global ScriptLockOrder;\r\ +< \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ +< \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ +< \n }\r\ +< \n :set (\$ScriptLockOrder->\$Script) ({});\r\ +< \n }\r\ +< \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ +< \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ +< \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ +< ist!\");\r\ +< \n :error false;\r\ +< \n }\r\ +< \n :if ([ \$JobCount \$Script ] = 0) do={\r\ +< \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ +< );\r\ +< \n :error false;\r\ +< \n }\r\ +< \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ +< \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ +< t . \"', resetting!\");\r\ +< \n :set (\$ScriptLockOrder->\$Script) ({});\r\ +< \n /system/script/job/remove [ find where script=\$Script ];\r\ +< \n }\r\ +< \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ +< \n \$AddTicket \$Script \$MyTicket;\r\ +< \n :local WaitInterval (\$WaitMax / 20);\r\ +< \n :local WaitTime \$WaitMax;\r\ +< \n :while (\$WaitTime > 0 && \\\r\ +< \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ +< \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ +< \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ +< \n :delay \$WaitInterval;\r\ +< \n }\r\ +< \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ +< \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ +< \n \$RemoveTicket \$Script \$MyTicket;\r\ +< \n \$CleanupTickets \$Script;\r\ +< \n :return true;\r\ +< \n }\r\ +< \n \$RemoveTicket \$Script \$MyTicket;\r\ +< \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ +< once\" . \\\r\ +< \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ +< \_lock\" \"\" ] . \"...\");\r\ +< \n :return false;\r\ +< \n}\r\ +< \n\r\ +< \n:set SendNotification do={ :onerror Err {\r\ +< \n :global SendNotification2;\r\ +< \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ +< \_silent=\$4 });\r\ +< \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ +< \n}\r\ +< \n\r\ +< \n:set SendNotification2 do={\r\ +< \n :local Notification \$1;\r\ +< \n :global NotificationFunctions;\r\ +< \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ +< \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ +< ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ +< \n }\r\ +< \n}\r\ +< \n\r\ +< \n:set SymbolByUnicodeName do={\r\ +< \n :local Name [ :tostr \$1 ];\r\ +< \n :global EitherOr;\r\ +< \n :global SymbolsExtra;\r\ +< \n :local Symbols ({\r\ +< \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ +< \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ +< \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ +< \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ +< \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ +< \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ +< \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ +< \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ +< \n \"cloud\"=\"\\E2\\98\\81\";\r\ +< \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ +< \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ +< \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ +< \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ +< \n \"gear\"=\"\\E2\\9A\\99\";\r\ +< \n \"heart\"=\"\\E2\\99\\A5\";\r\ +< \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ +< \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ +< \n \"information\"=\"\\E2\\84\\B9\";\r\ +< \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ +< \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ +< \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ +< \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ +< \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ +< \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ +< \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ +< \n \"scissors\"=\"\\E2\\9C\\82\";\r\ +< \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ +< \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ +< \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ +< \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ +< \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ +< \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ +< \n \"star\"=\"\\E2\\AD\\90\";\r\ +< \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ +< \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ +< \n }, \$SymbolsExtra);\r\ +< \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ +< \n :local Special {\r\ +< \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ +< \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ +< \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ +< \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ +< \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ +< \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ +< '!\");\r\ +< \n :return \"\";\r\ +< \n }\r\ +< \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ +< me) ] . \"\\EF\\B8\\8F\");\r\ +< \n}\r\ +< \n\r\ +< \n:set SymbolForNotification do={\r\ +< \n :global NotificationsWithSymbols;\r\ +< \n :global SymbolByUnicodeName;\r\ +< \n :global IfThenElse;\r\ +< \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ +< \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ +< \n :local Return \"\";\r\ +< \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ +< mbolByUnicodeName \$Symbol ])}\r\ +< \n :return (\$Return . \" \");\r\ +< \n}\r\ +< \n\r\ +< \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ +< \n:set UrlEncode do={\r\ +< \n :local Input [ :tostr \$1 ];\r\ +< \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ +< \n :local Return \"\";\r\ +< \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ +< \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ +< %24\"; \"%25\"; \"%26\"; \"%27\";\r\ +< \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ +< \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ +< \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ +< \"%7C\"; \"%7D\"; \"%7E\" };\r\ +< \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ +< \n :local Char [ :pick \$Input \$I ];\r\ +< \n :local Replace [ :find \$Chars \$Char ];\r\ +< \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ +< ce)}\r\ +< \n :set Return (\$Return . \$Char);\r\ +< \n }\r\ +< \n :return \$Return;\r\ +< \n}\r\ +< \n\r\ +< \n:set IsDNSResolving do={\r\ +< \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ +< \n :return true;\r\ +< \n}\r\ +< \n\r\ +< \n:set IsFullyConnected do={\r\ +< \n :global IsDNSResolving;\r\ +< \n :global IsTimeSync;\r\ +< \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ +< \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ +< \n :return true;\r\ +< \n}\r\ +< \n\r\ +< \n:set IsTimeSync do={\r\ +< \n :global IsTimeSyncCached;\r\ +< \n :global IsTimeSyncResetNtp;\r\ +< \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ +< \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ +< \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ +< \n :set IsTimeSyncCached true;\r\ +< \n :return true;\r\ +< \n }\r\ +< \n :local Uptime [ /system/resource/get uptime ];\r\ +< \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ +< \n :set IsTimeSyncResetNtp \$Uptime;\r\ +< \n }\r\ +< \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ +< \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ +< ;\r\ +< \n :set IsTimeSyncResetNtp \$Uptime;\r\ +< \n /system/ntp/client/set enabled=no;\r\ +< \n :delay 20ms;\r\ +< \n /system/ntp/client/set enabled=yes;\r\ +< \n :return false;\r\ +< \n }\r\ +< \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ +< \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ +< \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ +< ee license and x86.\";\r\ +< \n :return true;\r\ +< \n }\r\ +< \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ +< \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ +< \n :set IsTimeSyncCached true;\r\ +< \n :return true;\r\ +< \n }\r\ +< \n :return false;\r\ +< \n }\r\ +< \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ +< \r\ +< \n :return true;\r\ +< \n}\r\ +< \n\r\ +< \n:set FetchHugeFiles do={\r\ +< \n :local ScriptName [ :tostr \$1 ];\r\ +< \n :local Url [ :tostr \$2 ];\r\ +< \n :local CheckCert [ :tostr \$3 ];\r\ +< \n\r\ +< \n :global CleanName;\r\ +< \n :global FetchUserAgentStr;\r\ +< \n :global GetRandom20CharAlNum;\r\ +< \n :global IfThenElse;\r\ +< \n :global LogPrint;\r\ +< \n :global MkDir;\r\ +< \n :global RmDir;\r\ +< \n :global RmFile;\r\ +< \n :global WaitForFile;\r\ +< \n\r\ +< \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ +< ithout-crl\" ];\r\ +< \n\r\ +< \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ +< \n :if ([ \$MkDir \$DirName ] = false) do={\r\ +< \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ +< \n :return false;\r\ +< \n }\r\ +< \n\r\ +< \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ +< \$GetRandom20CharAlNum ]);\r\ +< \n :onerror Err {\r\ +< \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ +< \\\r\ +< \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ +< lue;\r\ +< \n } do={\r\ +< \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ +< \n \$RmFile \$FileName;\r\ +< \n }\r\ +< \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ +< \_. \$Err);\r\ +< \n \$RmDir \$DirName;\r\ +< \n :return false;\r\ +< \n }\r\ +< \n\r\ +< \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ +< \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ +< \_not show up.\");\r\ +< \n :return false;\r\ +< \n }\r\ +< \n\r\ +< \n :local FileSize [ /file/get \$FileName size ];\r\ +< \n :local Return \"\";\r\ +< \n :local VarSize 0;\r\ +< \n :while (\$VarSize != \$FileSize) do={\r\ +< \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ +< 768 file=\$FileName as-value ]->\"data\"));\r\ +< \n :set FileSize [ /file/get \$FileName size ];\r\ +< \n :set VarSize [ :len \$Return ];\r\ +< \n :if (\$VarSize > \$FileSize) do={\r\ +< \n :delay 100ms;\r\ +< \n }\r\ +< \n }\r\ +< \n \$RmDir \$DirName;\r\ +< \n :return \$Return;\r\ +< \n}\r\ +< \n\r\ +< \n:set FetchUserAgentStr do={\r\ +< \n :local Caller [ :tostr \$1 ];\r\ +< \n :global GlobalScriptsUrl;\r\ +< \n :global CommitBrief;\r\ +< \n :global IfThenElse;\r\ +< \n :local Resource [ /system/resource/get ];\r\ +< \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ +< \_\$Resource->\"architecture-name\" . \\\r\ +< \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ +< CommitBrief ] . \")\");\r\ +< \n}\r\ +< \n\r\ +< \n:set ScriptInstallUpdate do={ :onerror Err {\r\ +< \n :local Scripts [ :toarray \$1 ];\r\ +< \n :local NewComment [ :tostr \$2 ];\r\ +< \n :global InitSetup;\r\ +< \n\r\ +< \n :global CommitId;\r\ +< \n :global ScriptUpdatesCRLF;\r\ +< \n :global GlobalConfVersion;\r\ +< \n :global Identity;\r\ +< \n :global CertificateAvailable;\r\ +< \n :global CheckSumsVerify;\r\ +< \n :global GlobalScriptsUrl;\r\ +< \n :global SumsDirAndFileName;\r\ +< \n :global GlobalScriptsUrlSuffix;\r\ +< \n :global EitherOr;\r\ +< \n :global FetchUserAgentStr;\r\ +< \n :global Grep;\r\ +< \n :global IfThenElse;\r\ +< \n :global LogPrint;\r\ +< \n :global ParseKeyValueStore;\r\ +< \n :global RequiredRouterOS;\r\ +< \n :global SendNotification2;\r\ +< \n :global SymbolForNotification;\r\ +< \n :global ValidateSyntax;\r\ +< \n :global CommentsInScripts;\r\ +< \n\r\ +< \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ +< \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ +< hout.\");\r\ +< \n }\r\ +< \n\r\ +< \n :foreach Script in=\$Scripts do={\r\ +< \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ +< \r\ +< \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ +< \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ +< Vados\\n\" comment=\$NewComment;\r\ +< \n }\r\ +< \n }\r\ +< \n\r\ +< \n :local CommitIdBefore \$CommitId;\r\ +< \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ +< \n :local ReloadGlobal false;\r\ +< \n :local DeviceMode [ /system/device-mode/get ];\r\ +< \n\r\ +< \n :if (\$CheckSumsVerify = true) do={\r\ +< \n :local CheckSums ({});\r\ +< \n :do {\r\ +< \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ +< iptsUrlSuffix);\r\ +< \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ +< \r\ +< \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ +< ficate=yes-without-crl \\\r\ +< \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ +< =user as-value ]->\"data\") ];\r\ +< \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ +< \n }\r\ +< \n\r\ +< \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ +< s\" ] do={\r\ +< \n :local ScriptVal [ /system/script/get \$Script ];\r\ +< \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ +< ];\r\ +< \n :local SourceNew;\r\ +< \n\r\ +< \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ +< \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ +< \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ +< \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ +< \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ +< iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ +< \"'!\");\r\ +< \n }\r\ +< \n }\r\ +< \n :do {\r\ +< \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ +< \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ +< e\" . \"', as requested.\");\r\ +< \n :error true;\r\ +< \n }\r\ +< \n :if (\$CheckSumsVerify = true) do={\r\ +< \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ +< \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ +< ptInfo->\"url-suffix\") ] = 0 && \\\r\ +< \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ +< rce\") ] ] = \$CheckSum) do={\r\ +< \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ +< >\"name\" . \"' matches, ignoring.\");\r\ +< \n :error true;\r\ +< \n }\r\ +< \n }\r\ +< \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ +< \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ +< fetch\" ] = false) do={\r\ +< \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ +< ng without.\");\r\ +< \n }\r\ +< \n }\r\ +< \n :onerror Err {\r\ +< \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ +< lScriptsUrl ];\r\ +< \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ +< lobalScriptsUrlSuffix ];\r\ +< \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ +< Suffix);\r\ +< \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ +< name\") . \"' from url: \" . \$Url);\r\ +< \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ +< \r\ +< \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ +< ut=user as-value ];\r\ +< \n :if (\$Result->\"status\" = \"finished\") do={\r\ +< \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ +< \n } \r\ +< \n } do={\r\ +< \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ +< al->\"name\" . \"': \" . \$Err);\r\ +< \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ +< \n :error false;\r\ +< \n }\r\ +< \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ +< \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ +< \?\");\r\ +< \n /system/script/remove \$Script;\r\ +< \n :error false;\r\ +< \n }\r\ +< \n :if (\$CheckSumsVerify = true) do={\r\ +< \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ +< riptInfo->\"url-suffix\") ] = 0 && \\\r\ +< \n [ :len \$CheckSum ] = 0) do={\r\ +< \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ +< pdates with 'ignore=true' in comment.\");\r\ +< \n }\r\ +< \n }\r\ +< \n :error false;\r\ +< \n }\r\ +< \n\r\ +< \n :if ([ :len \$SourceNew ] = 0) do={\r\ +< \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ +< >\"name\") . \"'.\");\r\ +< \n :error false;\r\ +< \n }\r\ +< \n\r\ +< \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ +< \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ +< lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ +< \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ +< \$ScriptVal->\"source\")) do={\r\ +< \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ +< . \"' source did not change. End of lines set to CRLF.\");\r\ +< \n if (\$ScriptUpdatesCRLF = false) do={\r\ +< \n :put [ :tolf \$SourceNew ];\r\ +< \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ +< ) . \"' source update end of lines to LF.\");\r\ +< \n }\r\ +< \n :error false;\r\ +< \n }\r\ +< \n }\r\ +< \n\r\ +< \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ +< \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ +< l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ +< );\r\ +< \n :error false;\r\ +< \n }\r\ +< \n\r\ +< \n :if (\$CommentsInScripts = true) do={\r\ +< \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ +< \_\") ];\r\ +< \n :if ([ :len \$CommentLine ] = 0) do={\r\ +< \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ +< iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ +< noring!\");\r\ +< \n :error false;\r\ +< \n } else={\r\ +< \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ +< ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ +< ] + 2) [ :len \$CommentLine] ]) do={\r\ +< \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ +< \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ +< ;\r\ +< \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ +< ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ +< \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ +< omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ +< ded!\");\r\ +< \n } else={\r\ +< \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ +< al->\"name\") . \"' did not change.\");\r\ +< \n :error false;\r\ +< \n }\r\ +< \n } \r\ +< \n }\r\ +< \n\r\ +< \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ +< \"\\23 requires RouterOS, \") ] ]->version);\r\ +< \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ +< \_false ] = false) do={\r\ +< \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ +< \") . \"' requires RouterOS \" . \\\r\ +< \n \$RequiredROS . \", which is not met by your installation. I\ +< gnoring!\");\r\ +< \n :error false;\r\ +< \n }\r\ +< \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ +< \\23 requires device-mode, \") ] ];\r\ +< \n :local MissingDM ({});\r\ +< \n :foreach Feature,Value in=\$RequiredDM do={\r\ +< \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ +< ceMode->\$Feature) = false) do={\r\ +< \n :set MissingDM (\$MissingDM, \$Feature);\r\ +< \n }\r\ +< \n }\r\ +< \n :if ([ :len \$MissingDM ] > 0) do={\r\ +< \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ +< \") . \"' requires disabled \" . \\\r\ +< \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ +< gnoring!\");\r\ +< \n :error false;\r\ +< \n }\r\ +< \n\r\ +< \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ +< \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ +< ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ +< \n :error false;\r\ +< \n }\r\ +< \n \r\ +< \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ +< ript comment: \" . (\$ScriptVal->\"comment\"));\r\ +< \n\r\ +< \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ +< Val->\"comment\") \\\r\ +< \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ +< F \$SourceNew ] \$Script;\r\ +< \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ +< \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ +< \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ +< o={\r\ +< \n :set ReloadGlobal true;\r\ +< \n }\r\ +< \n } on-error={ }\r\ +< \n }\r\ +< \n :if (\$ReloadGlobal = true) do={\r\ +< \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ +< \");\r\ +< \n :onerror Err {\r\ +< \n :global InitSetup (a);\r\ +< \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ +< \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ +< ctions failed! \" . \$Err)}\r\ +< \n }\r\ +< \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ +< \n \$LogPrint warning \$0 (\"The configuration version decreased from \ +< \" . \\\r\ +< \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ +< \n \". Installed an older version\?\");\r\ +< \n }\r\ +< \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ +< \n :global GlobalConfChanges;\r\ +< \n :global GlobalConfMigration;\r\ +< \n :local ChangeLogCode;\r\ +< \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ +< \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ +< \n :onerror Err {\r\ +< \n [ :parse \$ChangeLogCode ];\r\ +< \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ +< . \$Err)}\r\ +< \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ +< dation!\")}\r\ +< \n }\r\ +< \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ +< \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ +< \_do={\r\ +< \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ +< \n :do {\r\ +< \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ +< \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ +< \_\" is not available.\");\r\ +< \n :error false;\r\ +< \n }\r\ +< \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ +< \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ +< \_. \" failed syntax validation!\");\r\ +< \n :error false}\r\ +< \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ +< . \": \" . \$Migration);\r\ +< \n :onerror Err {\r\ +< \n [ :parse \$Migration ];\r\ +< \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ +< \_\$I . \" failed to run: \" . \$Err)}\r\ +< \n } on-error={ }\r\ +< \n }\r\ +< \n }\r\ +< \n :local NotificationMessage (\"The configuration version on \" . \$Id\ +< entity . \" increased \" . \\\r\ +< \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ +< d modification. \" . \\\r\ +< \n \"Please review and update global-config-overlay, then re-run glo\ +< bal-config.\");\r\ +< \n \$LogPrint info \$0 (\$NotificationMessage);\r\ +< \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ +< \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ +< \");\r\ +< \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ +< \_do={\r\ +< \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ +< \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ +< \r\ +< \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ +< \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ +< \n }\r\ +< \n } else={\r\ +< \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ +< \_changes are not available.\");\r\ +< \n\r\ +< \n }\r\ +< \n\r\ +< \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ +< } else={ :global GlobalConfChanges (a); }\r\ +< \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ +< on; } else={ :global GlobalConfMigration (a); }\r\ +< \n }\r\ +< \n} do={\r\ +< \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ +< \n} }\r\ +< \n\r\ +< \n# load modules\r\ +< \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ +< ns\\\\.d|mod)/.\" ] do={\r\ +< \n :local ScriptVal [ /system/script/get \$Script ];\r\ +< \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ +< \n :onerror Err {\r\ +< \n /system/script/run \$Script;\r\ +< \n } do={\r\ +< \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ +< ailed to run: \" . \$Err);\r\ +< \n }\r\ +< \n } else={\r\ +< \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ +< led syntax validation, skipping.\");\r\ +< \n }\r\ +< \n}\r\ +< \n\r\ +< \n# Add and fix global scheduler\r\ +< \n:put \"Add or/and fix Global scheduler...\";\r\ +< \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ +< ; }\";\r\ +< \n:local Comment \"Every Day Set Global Environment Variables\";\r\ +< \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ +< = 0) do={\r\ +< \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ +< ent=\$OnEvent start-time=startup;\r\ +< \n}\r\ +< \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ +< \_do={\r\ +< \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ +< \n}\r\ +< \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ +< ) do={\r\ +< \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ +< \n}\r\ +< \n# Add Update Script scheduler\r\ +< \n:put \"Add or/and fix Update Script scheduler\";\r\ +< \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ +< \r\ +< \n:set Comment \"Every Day Check For Update Scripts\";\r\ +< \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ +< \" ] ] = 0) do={\r\ +< \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ +< start-time=startup interval=1d on-event=\$OnEvent;\r\ +< \n}\r\ +< \n\r\ +< \n:onerror Err {\r\ +< \n :global GlobalConfReady;\r\ +< \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ +< \_not ready.\"); }; } delay=100ms max=5;\r\ +< \n\r\ +< \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ +< \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ +< \") ] . \\\r\ +< \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ +< \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ +< \n # signal we are ready\r\ +< \n:set GlobalFuncReady true;\r\ +< \n:set ExitOK true;\r\ +< \n\r\ +< \n:log info (\$0 . \"Global configs ready!\");\r\ +< \n} do={\r\ +< \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ +< \n}\r\ +< \n" +< add comment=\ +< "Lookup IP addresses for RKN list and add them to firewall address-list" \ +< dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \ +< policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ +< source="#!rsc by Vados\r\ +< \n# RouterOS script: AM-RKN-dnsLookup\r\ +< \n# Script comment: Lookup IP addresses for RKN list and add them to firew\ +< all address-list\r\ +< \n# Copyright (c) 2007-2026 Vados \r\ +< \n#\r\ +< \n#\r\ +< \n# requires RouterOS, version=7.19\r\ +< \n# requires device-mode, fetch\r\ +< \n#\r\ +< \n# Script description: This script is intended to be run periodically, e.\ +< g. once a day, to update the IP addresses in the firewall address-list bas\ +< ed on the RKN list.\r\ +< \n# It resolves the domain names in the RKN list and a\ +< dds the corresponding IP addresses to the specified firewall address-list.\ +< \r\ +< \n# The script also handles CNAME records by following\ +< \_them until it finds A records.\r\ +< \n# Usage:\r\ +< \n# /system/script { run AM-RKN-dnsLookup; }\r\ +< \n:local ScriptName [ :jobname ];\r\ +< \n\r\ +< \n:global dnsLookupReady false;\r\ +< \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\ +< \_true; }\r\ +< \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\ +< \n:set dnsLookupReady false;\r\ +< \n\r\ +< \n:local arrRKN {\r\ +< \n \"telegra.ph\"\r\ +< \n \"grani.ru\"\r\ +< \n \"xhamster.com\"\r\ +< \n \"lostfilm.tv\"\r\ +< \n \"rutracker.org\"\r\ +< \n \"lurkmore.to\"\r\ +< \n \"dou.ua\"\r\ +< \n \"youporn.com\"\r\ +< \n \"pornolab.net\"\r\ +< \n \"crimerussia.com\"\r\ +< \n \"telegram.org\"\r\ +< \n \"api.telegram.org\"\r\ +< \n \"facebook.com\"\r\ +< \n \"instagram.com\"\r\ +< \n \"x.com\"\r\ +< \n \"twitter.com\"\r\ +< \n \"youtube.com\"\r\ +< \n \"googleapis.com\"\r\ +< \n \"youtu.be\"\r\ +< \n \"googlevideo.com\"\r\ +< \n \"gstatic.com\"\r\ +< \n \"googleusercontent.com\"\r\ +< \n \"nhacmp3youtube.com\"\r\ +< \n \"telegram.me\"\r\ +< \n \"t.me\";}\r\ +< \n\r\ +< \n:local ListRKN \"RKN-dnsLookup\";\r\ +< \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\ +< \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\ +< ={\r\ +< \n /ip firewall address-list remove \$aListItem;\r\ +< \n}\r\ +< \n:foreach aItem in=\$arrRKN do={\r\ +< \n# :do {\r\ +< \n :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\ +< ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\ +< \n# } on-error={\r\ +< \n# :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\ +< \n# }\r\ +< \n :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \ +< do={\r\ +< \n :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\ +< \n :local newAddress [/ip dns cache all get \$dnsRecord data];\ +< \r\ +< \n :do {\r\ +< \n /ip firewall address-list add list=\$ListRKN address=\$newA\ +< ddress comment=\$aItem;\r\ +< \n :log warning \"Successfully adding ip to list A record: \ +< \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\ +< \n } on-error={\r\ +< \n :log error \"error when adding ip to list A record: \$dn\ +< sRecord, address: \$newAddress domain: \$aItem\";\r\ +< \n }\r\ +< \n }\r\ +< \n :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\ +< \n :local cname;\r\ +< \n :local nextCname;\r\ +< \n :local cnameAddress;\r\ +< \n :set cname [/ip dns cache all find where (name=\$aItem && ty\ +< pe=\"CNAME\")];\r\ +< \n :set nextCname [/ip dns cache all find where (name=[/ip dns \ +< cache all get \$cname data] && type=\"CNAME\")];\r\ +< \n :while (\$nextCname != \"\") do={\r\ +< \n :set cname \$nextCname;\r\ +< \n :set nextCname [/ip dns cache all find where (name=[/ip \ +< dns cache all get \$cname data] && type=\"CNAME\")];\r\ +< \n }\r\ +< \n :foreach aRecord in=[/ip dns cache all find where (name=[/ip\ +< \_dns cache all get \$cname data] && type=\"A\")] do={\r\ +< \n :do {\r\ +< \n :set cnameAddress [/ip dns cache all get \$aRecord d\ +< ata];\r\ +< \n /ip firewall address-list add list=\$ListRKN address\ +< =\$cnameAddress comment=\$aItem;\r\ +< \n :log warning \"Succesfully adding ip to list CNAME r\ +< ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \ +< \$aItem.\";\r\ +< \n# /ip firewall raw add action=add-dst-to-address-list\ +< \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\ +< g comment=\$aItem content=\$aItem;\r\ +< \n } on-error={\r\ +< \n :log error \"error when adding ip to list CNAME reco\ +< rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\ +< tem.\";\r\ +< \n }\r\ +< \n }\r\ +< \n }\r\ +< \n }\r\ +< \n}\r\ +< \n\r\ +< \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ +< ={\r\ +< \n :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\ +< ptName . \" is NOT SET! Fix It Now!\");\r\ +< \n /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \ +< run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\ +< olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\ +< \_start-time=startup;\r\ +< \n }\r\ +< \n:set dnsLookupReady true;\r\ +< \ndelay 2s; \r\ +< \n:global dnsLookupReady (a);\r\ +< \n" +< add dont-require-permissions=no name="renameLists " owner=vados policy=\ +< ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ +< local oldName \"Test\";\ +< \n:local newName \"Test-IP\";\ +< \n/ip firewall address-list\ +< \n:foreach i in=[find list=\$oldName] do={\ +< \nset \$i list=\$newName;\ +< \n}\ +< \n" +< add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\ +< ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ +< #############Script Settings##################\ +< \n\ +< \n:local \"IF-TUN\" \"6to4-tun\"\ +< \n:local \"IF-LOC\" \"Bridge-LAN\"\ +< \n:local \"POOL-6TO4\" \"poolV6-local\"\ +< \n:local \"force-update\" false\ +< \n############ use then static ip #######################\ +< \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \ +< address]\ +< \n#:local \"interface\" \"ext\"\ +< \n:local bound 0\ +< \n\ +< \n###############################################\ +< \n\ +< \n:local 6to4prefix do={\ +< \n :global dec2hex\ +< \n :local ipv4 \$1\ +< \n :local ipv6 \"2002:\"\ +< \n :for i from=0 to=2 step=1 do={ \ +< \n :if ( \$i = 2) do={\ +< \n :set ipv6 (\$ipv6.\":\")\ +< \n }\ +< \n :local fp [:find \$ipv4 \".\"]\ +< \n :if ( \$fp > 0 ) do={\ +< \n :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\ +< \n :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\ +< \n }\ +< \n }\ +< \n :return (\$ipv6.[\$dec2hex \$ipv4])\ +< \n}\ +< \n:local \"str_replace\" do={\ +< \n :local \"str-pos\" [:find \$1 \$2]\ +< \n :local \"str-len\" [:len \$2]\ +< \n :local str \"\"\ +< \n :local rest \$1\ +< \n :while (\$\"str-pos\" >= 0) do={\ +< \n :local t [:pick \$rest 0 \$\"str-pos\"]\ +< \n :if ( \$4 > 0 ) do={\ +< \n :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\ +< \n :set str (\$str.\$5)\ +< \n }\ +< \n }\ +< \n :set str (\$str.\$t.\$3)\ +< \n :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\ +< st]]\ +< \n :set \"str-pos\" [:find \$rest \$2]\ +< \n }\ +< \n :return (\$str.\$rest)\ +< \n}\ +< \n\ +< \n:if (\$bound=1) do={\ +< \n :local t [:find \$\"lease-address\" \"/\"]\ +< \n\ +< \n :if ( \$t >= 0 ) do={\ +< \n :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\ +< \n }\ +< \n\ +< \n :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\ +< ) do={\ +< \n /interface 6to4 add !keepalive local-address=\$\"lease-address\"\ +< \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\ +< \n :set \"force-update\" true\ +< \n }\ +< \n\ +< \n :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\ +< cal-address];\ +< \n\ +< \n :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \ +< true) do={\ +< \n /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\ +< ease-address\"\ +< \n /ipv6 address remove [find interface=\$\"IF-TUN\"]\ +< \n /ipv6 address remove [find interface=\$\"IF-LOC\"]\ +< \n /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\ +< \"::/0\"]\ +< \n :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\ +< \n :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\ +< \_0) do={ \ +< \n /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\ +< \".\":1::/64\") prefix-length=64\ +< \n } else={\ +< \n /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \ +< prefix=(\$\"pool-prefix\".\":1::/64\")\ +< \n }\ +< \n /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\ +< \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\ +< ace=\$\"IF-TUN\" advertise=no\ +< \n /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\ +< =\$\"IF-LOC\" advertise=yes\ +< \n /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\ +< \"IF-TUN\")\ +< \n :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\ +< s]\ +< \n :set t [:pick \$t 0 [:find \$t \"/\"]]\ +< \n :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\ +< \_= 0) do={\ +< \n /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\ +< [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ +< \n } else={\ +< \n /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \ +< where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ +< \n }\ +< \n :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\ +< -LOC\"] = 0) do={\ +< \n /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\ +< on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\ +< \n }\ +< \n :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \ +< 0) do={\ +< \n /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\ +< onfiguration=yes\ +< \n }\ +< \n }\ +< \n}" +< add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\ +< ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ +< global MAC2EUI64 do={\ +< \n :local EUI64 \"\"\ +< \n :local MAC \$1\ +< \n :local HEX2DEC \"0123456789ABCDEF\"\ +< \n :for i from=0 to=5 step=1 do={\ +< \n :if ( \$i = 0 ) do={\ +< \n :set EUI64 [:pick \$MAC 0]\ +< \n :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\ +< \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\ +< \n }\ +< \n :if ( \$i = 1 || \$i = 3) do={\ +< \n :set EUI64 (\$EUI64.\":\")\ +< \n }\ +< \n :if ( \$i = 2 ) do={\ +< \n :set EUI64 (\$EUI64.\"FF:FE\")\ +< \n }\ +< \n :if ( [:find \$MAC \":\"] = 2 ) do={\ +< \n :set MAC [:pick \$MAC 3 [:len \$MAC]]\ +< \n :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\ +< \n }\ +< \n }\ +< \n :return (\$EUI64)\ +< \n}\ +< \n\ +< \n:global dec2hex do={\ +< \n :local hex \"\"\ +< \n :local dec [:tonum \$1]\ +< \n :for i from=0 to=4 step=4 do={\ +< \n :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\ +< c>>\$i)&0xf)+1)].\$hex)\ +< \n }\ +< \n :return ([:tostr \$hex])\ +< \n}" +< add comment=Generator dont-require-permissions=no name=proxySet owner=vados \ +< policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ +< source="# 2. WireGuard interface\r\ +< \n/interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDg\ +< uMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=21641\r\ +< \n/interface/wireguard/peers/add interface=wg-VDSina public-key=\"o5IgCl1/\ +< G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcYQnD9\ +< N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=10.30.30.33 endpoint-port=518\ +< 20 allowed-address=0.0.0.0/0 persistent-keepalive=11\r\ +< \n/ip/address/add address=10.9.0.3/32 interface=wg-VDSina\r\ +< \n\r\ +< \n# 3. DNS\r\ +< \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\ +< n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\ +< \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /system/script/add name=VDS\ +< ina-prev-dns comment=\"\$prevDNS\" source=\"\" }\r\ +< \n/ip/dns/set servers=8.8.4.4\r\ +< \n/ip/route/add dst-address=8.8.4.4/32 gateway=wg-VDSina distance=1 commen\ +< t=VDSina-dns\r\ +< \n\r\ +< \n# 4. Enable WireGuard\r\ +< \n/interface/wireguard/enable wg-VDSina\r\ +< \n" +< add dont-require-permissions=no name=AM-Telegram-Send owner=vados policy=\ +< ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ +< !rsc by Vados\ +< \n# RouterOS script: AM-Telegram-Send\ +< \n# Script comment: Mini script for send messages to admin Telegram chat\ +< \n# Copyright (c) 2007-2026 Vados \ +< \n#\ +< \n#\ +< \n# requires RouterOS, version=7.19\ +< \n# requires device-mode, fetch\ +< \n#\ +< \n# Script description: \ +< \n#\ +< \n#\ +< \n# Usage:\ +< \n# /system/script { run AM-Telegram-Send \"Message here )))\"; }\ +< \n\ +< \n/system/script\ +< \nadd name=telegram-send dont-require-permissions=no source={\ +< \n :global TelegramTokenId;\ +< \n :global TelegramChatId;\ +< \n :local message [:tostr \$1];\ +< \n :local identity [/system/identity/get name];\ +< \n :local sendMsg (\"[\".\$identity.\"] \".\$message)\ +< \n /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\ +< \n \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\ +< \n \"&text=\".\$sendMsg.\\\ +< \n \"&parse_mode=HTML\") \\\ +< \n mode=https keep-result=no\ +< \n}" +< add dont-require-permissions=no name=telegram-send owner=vados policy=\ +< ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ +< \n :global TelegramTokenId;\ +< \n :global TelegramChatId;\ +< \n :local message [:tostr \$1];\ +< \n :local identity [/system/identity/get name];\ +< \n :local sendMsg (\"[\".\$identity.\"] \".\$message)\ +< \n /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\ +< \n \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\ +< \n \"&text=\".\$sendMsg.\\\ +< \n \"&parse_mode=HTML\") \\\ +< \n mode=https keep-result=no\ +< \n" +< /user group +< add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\ +< t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon" +< /ip smb +< set enabled=no interfaces=lo +< /interface bridge port +< add bridge=Bridge-LAN interface=ether5 +< add bridge=Bridge-LAN interface=ether2 +< add bridge=Bridge-LAN interface=ether4 trusted=yes +< add bridge=Bridge-LAN interface=ether3 +< add bridge=Bridge-LAN interface=wlan2 +< add bridge=Bridge-LAN interface=wlan1 +< /interface bridge settings +< set use-ip-firewall=yes +< /ip firewall connection tracking +< set udp-timeout=10s +< /ip neighbor discovery-settings +< set discover-interface-list=LAN lldp-med=no lldp-poe-power=no +< /ip settings +< set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\ +< 8192 +< /ipv6 settings +< set disable-ipv6=yes disable-link-local-address=yes forward=no \ +< max-neighbor-entries=8192 multipath-hash-policy=l4 +< /interface detect-internet +< set detect-interface-list=WAN internet-interface-list=Internet \ +< lan-interface-list=LAN request-interval=1m wan-interface-list=WAN +< /interface l2tp-server server +< set authentication=mschap2 use-ipsec=yes +< /interface list member +< add interface=Unet-ether1 list=Internet +< add interface=WG list=WAN +< add interface=Bridge-LAN list=LAN +< add interface=Unet-ether1 list=WAN +< /interface wireguard peers +< add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\ +< 109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \ +< persistent-keepalive=10s public-key=\ +< "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4=" +< add allowed-address=0.0.0.0/0 client-allowed-address=::/0 disabled=yes \ +< endpoint-address=10.30.30.33 endpoint-port=55055 interface=wg-nuc name=\ +< NUC persistent-keepalive=11s public-key=\ +< "+OvzAjLC45Td52hjkQPmpGvC3RGhZ+Q2CDMJ1U/D4Rw=" +< /interface wireless cap +< # +< set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \ +< caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\ +< CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\ +< wlan2,wlan1 lock-to-caps-man=yes +< /ip address +< add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0 +< add address=10.8.0.2/24 interface=WG network=10.8.0.0 +< add address=192.168.33.2/24 disabled=yes interface=wg-nuc network=\ +< 192.168.33.0 +< /ip cloud +< set update-time=no +< /ip dhcp-client +< add add-default-route=special-classless check-gateway=arp comment=Unet-client \ +< default-route-distance=2 default-route-tables=main:2 dhcp-options=\ +< hostname,clientid_duid interface=Unet-ether1 name=UnetDHCP use-peer-dns=\ +< no use-peer-ntp=no +< /ip dhcp-server config +< set accounting=no +< /ip dhcp-server lease +< add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ +< 48:8F:5A:8E:EE:A8 server=masterDHCP +< add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ +< F0:DE:F1:91:0D:1E server=masterDHCP +< add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ +< 00:80:77:EC:43:86 server=masterDHCP +< add address=10.30.30.70 dhcp-option=domain-search-list,HostName \ +< dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP +< add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ +< 04:7C:16:36:F5:37 server=masterDHCP +< add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ +< 10:2D:41:2C:20:C2 server=masterDHCP +< add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ +< 10:08:C1:81:59:5F server=masterDHCP +< add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ +< 10:38:1F:D2:5F:13 server=masterDHCP +< add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ +< 10:B1:DF:E9:D0:D5 server=masterDHCP +< add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ +< FE:02:52:BE:3F:16 server=masterDHCP +< add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ +< D4:6D:6D:FD:E5:49 server=masterDHCP +< add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ +< CC:42:10:12:46:94 server=masterDHCP +< add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ +< 50:CC:F8:85:96:0A server=masterDHCP +< add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ +< E4:18:6B:58:34:AB server=masterDHCP +< add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ +< 00:27:15:41:97:A9 server=masterDHCP +< add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ +< mac-address=C4:82:E1:03:49:10 server=masterDHCP +< add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ +< 10:38:1F:82:81:F2 server=masterDHCP +< add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \ +< dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP +< add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \ +< dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP +< add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ +< server=masterDHCP +< add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ +< MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP +< add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \ +< mac-address=F0:75:5D:1E:5F:71 server=masterDHCP +< add address=10.30.30.100 client-id=iVados dhcp-option=HostName \ +< dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP +< add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\ +< ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \ +< dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \ +< use-src-mac=yes +< /ip dhcp-server network +< add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\ +< domain-search-list dhcp-option-set=domain-search-set dns-server=\ +< 10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\ +< 24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +< /ip dns +< set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \ +< doh-max-server-connections=20 servers=8.8.8.8 verify-doh-cert=yes +< /ip dns static +< add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \ +< type=A +< add address=109.107.177.79 name=vds.vados.ru type=A +< add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \ +< regexp=*.vados.ru type=NS +< add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\ +< "\".*\\\\.vados\\\\.ru\"" type=FWD +< add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\ +< 10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\ +< FWD +< add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\ +< ns.vados.ru.local type=A +< add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\ +< vados.ru ns=ns.vados.ru.local type=NS +< add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A +< add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\ +< dns.google type=A +< add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A +< add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A +< add address=10.30.30.33 name=ros.vados.ru type=A +< add address=10.30.30.95 name=vados-nuc type=A +< add address=10.30.30.33 name=amster-nuc type=A +< add address=10.30.30.33 name=amster type=A +< add address=10.30.30.33 name=amster-reg type=A +< add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A +< add address=10.30.30.33 name=mgr.vados.ru type=A +< add address=10.30.30.33 name=prt.vados.ru type=A +< add address=10.30.30.33 disabled=yes match-subdomain=yes name=\ +< mikrots.vados.ru type=A +< add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A +< add address=10.30.30.30 name=MILLER-LEN type=A +< add address=10.30.30.30 name=miller type=A +< add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\ +< security.cloudflare-dns.com type=A +< add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\ +< security.cloudflare-dns.com type=A +< add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ +< dns.quad9.net type=A +< add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\ +< dns.quad9.net type=A +< add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \ +< type=A +< add address=10.30.30.81 comment=LocalNet name=MikroVados type=A +< add address=10.30.30.10 name=MikroNUC type=A +< add address=10.30.30.86 disabled=yes name=MikroYellow type=A +< add address=10.30.30.85 disabled=yes name=MikroMic type=A +< add address=10.30.30.95 name=VADOS-NUC type=A +< add address=10.30.30.98 name=VADOS-LEN type=A +< add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ +< A +< add address=10.30.30.20 disabled=yes name=garage type=A +< /ip firewall address-list +< add address=91.215.120.206 list=TRUSTED +< add address=185.71.70.78 disabled=yes list=TRUSTED +< add address=176.53.203.171 disabled=yes list=TRUSTED +< add address=176.53.203.170 disabled=yes list=TRUSTED +< add address=176.53.202.194 disabled=yes list=TRUSTED +< add address=8.8.4.0/24 list=YouTube +< add address=8.8.8.0/24 list=YouTube +< add address=8.34.208.0/20 list=YouTube +< add address=8.35.192.0/20 list=YouTube +< add address=23.236.48.0/20 list=YouTube +< add address=23.251.128.0/19 list=YouTube +< add address=34.0.0.0/15 list=YouTube +< add address=34.2.0.0/16 list=YouTube +< add address=34.3.0.0/23 list=YouTube +< add address=34.3.3.0/24 list=YouTube +< add address=34.3.4.0/24 list=YouTube +< add address=34.3.8.0/21 list=YouTube +< add address=34.3.16.0/20 list=YouTube +< add address=34.3.32.0/19 list=YouTube +< add address=34.3.64.0/18 list=YouTube +< add address=34.4.0.0/14 list=YouTube +< add address=34.8.0.0/13 list=YouTube +< add address=34.16.0.0/12 list=YouTube +< add address=34.32.0.0/11 list=YouTube +< add address=34.64.0.0/10 list=YouTube +< add address=34.128.0.0/10 list=YouTube +< add address=35.184.0.0/13 list=YouTube +< add address=35.192.0.0/14 list=YouTube +< add address=35.196.0.0/15 list=YouTube +< add address=35.198.0.0/16 list=YouTube +< add address=35.199.0.0/17 list=YouTube +< add address=35.199.128.0/18 list=YouTube +< add address=35.200.0.0/13 list=YouTube +< add address=35.208.0.0/12 list=YouTube +< add address=35.224.0.0/12 list=YouTube +< add address=35.240.0.0/13 list=YouTube +< add address=57.140.192.0/18 list=YouTube +< add address=64.15.112.0/20 list=YouTube +< add address=64.233.160.0/19 list=YouTube +< add address=66.22.228.0/23 list=YouTube +< add address=66.102.0.0/20 list=YouTube +< add address=66.249.64.0/19 list=YouTube +< add address=70.32.128.0/19 list=YouTube +< add address=72.14.192.0/18 list=YouTube +< add address=74.125.0.0/16 list=YouTube +< add address=104.154.0.0/15 list=YouTube +< add address=104.196.0.0/14 list=YouTube +< add address=104.237.160.0/19 list=YouTube +< add address=107.167.160.0/19 list=YouTube +< add address=107.178.192.0/18 list=YouTube +< add address=108.59.80.0/20 list=YouTube +< add address=108.170.192.0/18 list=YouTube +< add address=108.177.0.0/17 list=YouTube +< add address=130.211.0.0/16 list=YouTube +< add address=136.22.160.0/20 list=YouTube +< add address=136.22.176.0/21 list=YouTube +< add address=136.22.184.0/23 list=YouTube +< add address=136.22.186.0/24 list=YouTube +< add address=142.250.0.0/15 list=YouTube +< add address=146.148.0.0/17 list=YouTube +< add address=152.65.208.0/22 list=YouTube +< add address=152.65.214.0/23 list=YouTube +< add address=152.65.218.0/23 list=YouTube +< add address=152.65.222.0/23 list=YouTube +< add address=152.65.224.0/19 list=YouTube +< add address=162.120.128.0/17 list=YouTube +< add address=162.216.148.0/22 list=YouTube +< add address=162.222.176.0/21 list=YouTube +< add address=172.110.32.0/21 list=YouTube +< add address=172.217.0.0/16 list=YouTube +< add address=172.253.0.0/16 list=YouTube +< add address=173.194.0.0/16 list=YouTube +< add address=173.255.112.0/20 list=YouTube +< add address=192.158.28.0/22 list=YouTube +< add address=192.178.0.0/15 list=YouTube +< add address=193.186.4.0/24 list=YouTube +< add address=199.36.154.0/23 list=YouTube +< add address=199.36.156.0/24 list=YouTube +< add address=199.192.112.0/22 list=YouTube +< add address=199.223.232.0/21 list=YouTube +< add address=207.223.160.0/20 list=YouTube +< add address=208.65.152.0/22 list=YouTube +< add address=208.68.108.0/22 list=YouTube +< add address=208.81.188.0/22 list=YouTube +< add address=208.117.224.0/19 list=YouTube +< add address=209.85.128.0/17 list=YouTube +< add address=216.58.192.0/19 list=YouTube +< add address=216.73.80.0/20 list=YouTube +< add address=216.239.32.0/19 list=YouTube +< add address=2ip.ru list=Test-IP +< add address=wg.vados.ru comment=VDSIna list=TRUSTED +< add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED +< add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina +< add address=love.ru comment=love.ru list=NoVdsina +< add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina +< add address=pochta.ru comment=pochta.ru list=NoVdsina +< add address=vdsina.com list=NoVdsina +< add address=vdsina.ru list=NoVdsina +< add address=youla.ru list=NoVdsina +< add address=kupiprodai.ru list=NoVdsina +< add address=myip.ru list=Test-IP +< add address=geoip.co list=NoVdsina +< add address=comp-lenta.ru list=NoVdsina +< add address=128.85.102.70 comment=update.microsoft.com list=\ +< windowsupdateslist +< add address=wu-b-net.trafficmanager.net. comment=\ +< ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +< add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ +< ctldl.windowsupdate.com list=windowsupdateslist +< add address=redir.update.msft.com.trafficmanager.net. comment=\ +< update.microsoft.com list=windowsupdateslist +< add address=geo.prod.do.dsp.trafficmanager.net. comment=\ +< geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +< add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ +< kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +< add address=e12437.d.akamaiedge.net. comment=\ +< kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +< add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ +< displaycatalog.mp.microsoft.com list=windowsupdateslist +< add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ +< comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ +< windowsupdateslist +< add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ +< list=windowsupdateslist +< add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ +< sls.update.microsoft.com list=windowsupdateslist +< add address=fe3.delivery.mp.microsoft.com. comment=\ +< fe3cr.delivery.mp.microsoft.com list=windowsupdateslist +< add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ +< fe3.delivery.mp.microsoft.com list=windowsupdateslist +< add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ +< fe2cr.update.microsoft.com list=windowsupdateslist +< add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ +< download.windowsupdate.com list=windowsupdateslist +< add address=wu-f-net.trafficmanager.net. comment=\ +< download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +< add address=tsfe.trafficmanager.net. comment=\ +< tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +< add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ +< comment=9.au.download.windowsupdate.com list=windowsupdateslist +< add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ +< list=windowsupdateslist +< add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ +< au.download.windowsupdate.com list=windowsupdateslist +< add address=a767.dspw65.akamai.net. comment=\ +< download.windowsupdate.com.edgesuite.net list=windowsupdateslist +< add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ +< comment=licensing.mp.microsoft.com list=windowsupdateslist +< add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ +< consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ +< windowsupdateslist +< add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ +< comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist +< add address=cdp-f-nlu-net.trafficmanager.net. comment=\ +< star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ +< windowsupdateslist +< add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ +< comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +< add address=cdp-f-tlu-net.trafficmanager.net. comment=\ +< star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ +< windowsupdateslist +< add address=storeedgefd.xbetservices.akadns.net. comment=\ +< storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +< add address=\ +< storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ +< comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ +< windowsupdateslist +< add address=e16646.dscg.akamaiedge.net. comment=\ +< storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ +< windowsupdateslist +< add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=bg.microsoft.map.fastly.net. comment=\ +< 3.au.download.windowsupdate.com list=windowsupdateslist +< add list=windowsupdateslist +< add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ +< comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ +< windowsupdateslist +< add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ +< star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ +< windowsupdateslist +< add address=a2033.dscd.akamai.net. comment=\ +< star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ +< windowsupdateslist +< add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ +< dl.delivery.mp.microsoft.com list=windowsupdateslist +< add address=dcat-f-nlu-net.trafficmanager.net. comment=\ +< dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ +< windowsupdateslist +< add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ +< comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +< add address=dcat-b-tlu-net.trafficmanager.net. comment=\ +< 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ +< windowsupdateslist +< add address=a122.dscg3.akamai.net. comment=\ +< tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist +< add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ +< geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +< add address=e10370.d.akamaiedge.net. comment=\ +< geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +< add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=a1683.dscd.akamai.net. comment=\ +< dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +< add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ +< comment=collections.mp.microsoft.com list=windowsupdateslist +< add address=a1847.dscd.akamai.net. comment=\ +< wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ +< windowsupdateslist +< add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=au.download.windowsupdate.com.edgesuite.net. comment=\ +< 2.au.download.windowsupdate.com list=windowsupdateslist +< add address=a767.dscg3.akamai.net. comment=\ +< au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist +< add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ +< 4.au.download.windowsupdate.com list=windowsupdateslist +< add address=cl-glcb907925.gcdn.co. comment=\ +< 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ +< windowsupdateslist +< add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ +< list=windowsupdateslist +< add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ +< comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +< add address=ts-frontend.trafficmanager.net. comment=\ +< tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ +< windowsupdateslist +< add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ +< list=windowsupdateslist +< add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ +< list=windowsupdateslist +< add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ +< windowsupdateslist +< add address=e12671.dscd.akamaiedge.net. comment=\ +< download.microsoft.com.edgekey.net list=windowsupdateslist +< add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ +< list=windowsupdateslist +< add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ +< kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +< add address=e12358.d.akamaiedge.net. comment=\ +< kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +< add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ +< tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +< add address=dcat-f-tlu-net.trafficmanager.net. comment=\ +< tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ +< windowsupdateslist +< add address=a1856.dspw65.akamai.net. comment=\ +< tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +< add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ +< list=windowsupdateslist +< add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ +< kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +< add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ +< consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ +< windowsupdateslist +< add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ +< list=windowsupdateslist +< add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ +< list=windowsupdateslist +< add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina +< add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ +< list=windowsupdateslist +< add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ +< purchase.mp.microsoft.com list=windowsupdateslist +< add address=e110219.a.akamaiedge.net. comment=\ +< purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist +< add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.153.5.141 list=windowsupdateslist +< add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=storesdk.xbetservices.akadns.net. comment=\ +< storesdk.dsx.mp.microsoft.com list=windowsupdateslist +< add address=e16646.g.akamaiedge.net. comment=\ +< storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist +< add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ +< software-download.microsoft.com list=windowsupdateslist +< add address=download.prss.microsoft.com.akamaized.net. comment=\ +< software-download.microsoft.com.delivery.microsoft.com list=\ +< windowsupdateslist +< add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ +< windowsupdateslist +< add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina +< add address=87.250.250.50 comment=YandexDisk list=NoVdsina +< add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ +< displaycatalog.mp.microsoft.com list=windowsupdateslist +< add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ +< purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist +< add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ +< purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist +< add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ +< cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +< add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ +< comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +< add address=a1996.dscd.akamai.net. comment=\ +< wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ +< windowsupdateslist +< add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ +< cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +< add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ +< tas02.sls.update.microsoft.com list=windowsupdateslist +< add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ +< cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +< add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ +< comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ +< windowsupdateslist +< add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ +< comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist +< add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ +< star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ +< windowsupdateslist +< add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ +< paymentinstruments.mp.microsoft.com list=windowsupdateslist +< add address=10.30.30.33 comment=amster list=NoWG +< add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG +< add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG +< add address=wg.vados.ru comment=VDSina-vpn list=VDSina +< add address=80.85.244.9 list=TRUSTED +< add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ +< disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +< add address=185.71.70.78 disabled=yes list=TRUSTED +< add address=176.53.203.171 disabled=yes list=TRUSTED +< add address=176.53.203.170 disabled=yes list=TRUSTED +< add address=176.53.202.194 disabled=yes list=TRUSTED +< add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina +< add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS +< add address=dns.google comment=Google-dns list=Trusted-DNS +< add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\ +< Trusted-DNS +< add address=time.google.com comment=Google-time list=Trusted-NTP +< add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\ +< Trusted-NTP +< add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP +< add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\ +< Trusted-NTP +< add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\ +< Trusted-NTP +< add address=cp.vdsina.com comment=VDSina-vpn list=VDSina +< add address=vdsina.ru comment=VDSina-vpn list=VDSina +< add address=ns.vados.ru comment=VDSina-vpn list=VDSina +< add address=vdsina.com comment=VDSina-vpn list=VDSina +< add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina +< add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina +< add address=10.30.30.0/24 comment="Local Network" list=Local-Net +< add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net +< add address=146.120.64.208/29 comment="External Net" list=Unet +< add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina +< add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina +< add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina +< add address=10.30.30.30 comment=miller disabled=yes list=NoWG +< add address=10.30.30.33 comment="Direct connet to DNS servers" list=\ +< Direct-DNS +< add address=109.107.177.79 list=VPN-Server +< add address=10.0.0.0/8 list=RFC1918 +< add address=172.16.0.0/12 list=RFC1918 +< add address=192.168.0.0/16 list=RFC1918 +< add address=8.8.4.4 disabled=yes list=to_vpn +< add address=myip.ru disabled=yes list=to_vpn +< add address=10.30.30.98 disabled=yes list=to_vpn +< /ip firewall filter +< add action=add-src-to-address-list address-list="Honeypot Hacker" \ +< address-list-timeout=12h chain=input comment="block honeypot DNS" \ +< connection-state=new dst-port=53 in-interface=Unet-ether1 protocol=udp \ +< src-address-list=!Trusted-DNS +< add action=add-src-to-address-list address-list="Honeypot Hacker" \ +< address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \ +< in-interface=Unet-ether1 protocol=tcp src-address-list=!Trusted-DNS +< add action=add-src-to-address-list address-list="Honeypot Hacker" \ +< address-list-timeout=4w2d chain=input comment=\ +< "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \ +< in-interface=Unet-ether1 protocol=tcp src-address-list=!TRUSTED +< add action=add-src-to-address-list address-list="Honeypot Hacker" \ +< address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ +< connection-state=new dst-port=5060 in-interface=Unet-ether1 protocol=udp +< add action=add-src-to-address-list address-list="Honeypot Hacker" \ +< address-list-timeout=4w2d chain=input comment="block honeypot NTP" \ +< connection-state=new dst-port=123 in-interface=Unet-ether1 protocol=udp +< add action=fasttrack-connection chain=forward comment=\ +< "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \ +< connection-state=established,related,new disabled=yes +< add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \ +< protocol=tcp +< add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \ +< protocol=udp +< add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \ +< dst-port=53 protocol=tcp src-address=10.30.30.0/24 +< add action=accept chain=input comment="udp Accept input DNS queries" \ +< dst-port=53 protocol=udp src-address=10.30.30.0/24 +< add action=accept chain=output comment="accept WireGuard" disabled=yes \ +< dst-address-list=VPN-Server out-interface=Unet-ether1 protocol=udp \ +< src-port=13231 +< add action=accept chain=output disabled=yes dst-address-list=VPN-Server \ +< dst-port=29185 out-interface=Unet-ether1 protocol=udp +< add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ +< connection-state=established,related,new disabled=yes routing-mark=\ +< !To-VPN +< add action=accept chain=output disabled=yes protocol=tcp src-port=443 +< add action=accept chain=output disabled=yes src-address=127.0.0.1 +< add action=accept chain=forward comment="defconf: accept in ipsec policy" \ +< disabled=yes ipsec-policy=in,ipsec +< add action=accept chain=forward comment="defconf: accept out ipsec policy" \ +< disabled=yes ipsec-policy=out,ipsec +< add action=accept chain=forward comment=\ +< "defconf: accept established,related, untracked" connection-state=\ +< established,related,untracked disabled=yes +< add action=drop chain=forward comment="defconf: drop invalid" \ +< connection-state=invalid in-interface=Unet-ether1 src-address=\ +< !10.30.30.0/24 +< add action=drop chain=forward comment=\ +< "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ +< connection-state=new in-interface=Unet-ether1 src-address-list=!VDSina +< add action=accept chain=input in-interface=Unet-ether1 protocol=icmp \ +< src-address-list=VDSina +< add action=accept chain=input connection-state=established +< add action=accept chain=input connection-state=related +< /ip firewall mangle +< add action=accept chain=prerouting comment=RFC1918 dst-address-list=RFC1918 \ +< in-interface-list=!WAN +< add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \ +< new-routing-mark=main passthrough=no src-address-list=NoWG +< add action=mark-routing chain=prerouting comment=\ +< "Mark Routing main for NoVdsina" disabled=yes dst-address-list=NoVdsina \ +< new-routing-mark=main passthrough=no src-address=10.30.30.0/24 +< add action=mark-connection chain=prerouting comment=\ +< "Transit for address-list \"to_vpn\"" connection-mark=no-mark disabled=\ +< yes dst-address-list=to_vpn in-interface-list=!WAN new-connection-mark=\ +< to-vpn-conn routing-mark=!main +< add action=mark-routing chain=prerouting comment=\ +< "Find routing over table r_to_vpn" connection-mark=to-vpn-conn disabled=\ +< yes in-interface-list=!WAN new-routing-mark=r_to_vpn +< add action=mark-routing chain=prerouting comment=\ +< "Mark Routing main for VDSina" dst-address-list=VPN-Server \ +< new-routing-mark=main passthrough=no src-address=10.30.30.0/24 +< add action=mark-routing chain=prerouting comment=\ +< "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \ +< new-routing-mark=main src-address=10.30.30.0/24 +< add action=mark-routing chain=prerouting comment=\ +< "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\ +< Unet new-routing-mark=main passthrough=no +< add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \ +< dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\ +< To-VPN src-address=10.30.30.0/24 +< add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \ +< dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \ +< new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24 +< add action=mark-routing chain=prerouting comment="WG for all" \ +< dst-address-list=!NoVdsina new-routing-mark=To-VPN src-address=\ +< 10.30.30.0/24 +< add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \ +< out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\ +< 1381-65535 +< add action=mark-connection chain=prerouting comment=\ +< "Mark VPN connections to exclude from FastTrack" disabled=yes \ +< new-connection-mark=VPN_No_FastTrack routing-mark=To-VPN +< add action=mark-routing chain=prerouting comment="VPN Network" disabled=yes \ +< dst-address=10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24 +< add action=mark-connection chain=output comment="For this router" \ +< connection-mark=no-mark disabled=yes dst-address-list=to_vpn \ +< new-connection-mark=to-vpn-conn-local +< add action=mark-routing chain=output comment="For this router" \ +< connection-mark=to-vpn-conn-local disabled=yes new-routing-mark=r_to_vpn +< /ip firewall nat +< add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\ +< yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\ +< !NoWG to-addresses=10.30.30.33 to-ports=53 +< add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\ +< yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\ +< !NoWG to-addresses=10.30.30.33 to-ports=53 +< add action=masquerade chain=srcnat comment=\ +< "Nat Addresses for routing mark r_to_vpn" disabled=yes routing-mark=\ +< r_to_vpn +< add action=dst-nat chain=dstnat comment=\ +< "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \ +< in-interface=Unet-ether1 protocol=tcp src-address-list=VPN-Server \ +< to-addresses=10.30.30.33 to-ports=53 +< add action=dst-nat chain=dstnat comment=\ +< "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\ +< udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53 +< add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\ +< Unet-ether1 protocol=udp src-address=!10.30.30.0/24 to-addresses=\ +< 10.30.30.33 to-ports=44333 +< add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \ +< routing-mark=To-VPN diff --git a/MikroNUC/20260710/20260710122001-Binary.backup b/MikroNUC/20260710/20260710122001-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..7b1e0ce1c7597d7f3f923881454f69b313c7b167 GIT binary patch literal 385044 zcmeEv2Ut_f7VhjMKthqKh#-b0payn&qM~#}>CG;tLL?AO0*DR7h8=tFz4wmo*n7j? zd&k}t-nVvk02R;izVF<7&wJN=y7y!=WzCv3YyGpHUY*2+8EmNY( zvL#5UphKl5kj>uEMXe@BugXgE&yl8O`^%JRmSkU>lMTbYIf~|3p$g0%%0U}gLsa4G zSmPlyV##3h0N0e zLufPkyd~rzpJ$pOl!>A_=?KFJ`Y?nsq9_PsSXv^Cfm*=D6k%=@wT6x`-@s@NuuG0G zI*jaNDq>)cG{nH_(GUaGry+)k6AjUuVF=M^h;3?U<`K0j`L#x46le^iAdIeYry)y( z(Z5tyR#r7>s?et^v}_xMx!K7Ca*3EPZKLRJXGp#r_8BJ2YdG0;c2e1eM~&;@k~KTu_}4oxR`R(5T)|~YLPV zW6>NJR51sE{=kMJgoY!8Mj(VnB80{ugh~)X3WTt9gfJCCs0RYEMwkX6l#LKFLlwkW z!yHpB1U&%ipb&vb5OQmR5W|{|5W_)^5QCD25X004RG2+H%K)vUhOb#r zZU90(;fWTq>foYBh#}8Gh+d*VC>J663>iXs2+_-MgnA)Fe@I0rA0ay5l9a7JP^>T1 zG5{e$0S$yFgUBy~5n>b$L5N|ZL{-zs1|c^PW;c6JpU9Y`u!QiSkTBooo<1p&p}xZq zaOk&sYR45VBfx^>m>En9m`-sf2tA=9x@ij0b+=|3l_I5AOh~AN7r~E8=ESG8X{zG|b;y%sCuYi3 zp}8q3>A{Kq;c@b$pnykI@jW8iz5UC0FSH|XXQM(;)@isA)hV>OMo{s626!&Zlw_$uv}MXPKtN#L0SmwffR;O%ZbLjbU=E4_^AO6AwD$&; zLtq|v6wLu-VN{opgNh+U=xZVeU>|w9EZbkERw=UdshVtPe@c`SWHrCXmVtzZxtG|GPJ3Z zr^<6w@}TdkfhMb}vBi7g?5b)&1yC~z$VksR{@!Z!a_1_h9ShOrUL`pV;C2(N?8>Q zsD)kvWC13{5OSkw6%skWwlWkbQ%;t#saeJ(Ppi@^*tHd+LZOOEq9I0&R+KqvwZKq- zpuUPS8WgxHBSehuKBGn%Q>jFjk&`W~t&|Crx;%hR^vAP5R^5_WrX)*}rqBW;SIgvj zO^z%bq#HirHSXaknv;bP))OJ5Lx_-IF!dRL#=&?h5Tet~5K_Vyu-ah#8CW)4dI00t z94-%PRx9MGdaWugO`+AncbI_21q$3@%>lp;0}QU#q_HG~snEe-!)F|MhxrD;13obD z#xxAPF%Jy~BX5kurqr5TQW+ zFJ*}KEk(3iD5{eyk!y5;#MMum^Mgd0C^97~HB2FxHQF4tLT7XU)KrkhG|UrY8s>>H zeTqmEmZ+GpYQ-2a*I=H|Ngz)%iaw}JH>k>uP^1)8T?Xo}wG8FwWndoHT88@bGC=$H zWhgK$Y1L(n&I(C(7N{Ih9dc4Fz+FzNW*ACq1ZyGE7Qi|L6a|AqEJ2JW8&=H-7UqZz z&65nUM97V<0>GQ4&{r8eqj$kbf>x4e)UR&9A_R&7{u>rq7*ZfrcCLV#rBJ1%OEp@i zOp~QlrR8WPVCtFa5*<^PF3Cz$$eS^<)e4DD!PF{rdWlxg)Tb+$28RVxmBrL(;AF~vBOr1gxeiL06gfKZmptnJ1V>Sp8B5aQk=713BG*DnzeT1+E1|^S< zBZRpkgf&7419$^)#}^^22|^ePR4`#r5fT%=7lc|Mgg|YBW2hBEs5L?;5FsoGAq_xnj-oh(FdPg98zF`(A0avwA&P)hze0oP+6#;V&v! z6=K8+lu?)gUuX!ydQqN9DrHzVf?q*{5dE$fu|8!4!XnZY){oSa)&}p?DdJ8;r>&8} zNWZ}hHW%)M3+w#ADwAPaZ90hQ57q+=0E4`nBSha~L8uCPTsQ(rA^vWK5WV|jguuWc zWP`xK*n)vUj&N}Tst&`&86k$b3qthz^$}_axdRb80l7~?##2OjL}3E&jv&Nnc@&=5 zAao4wOb}5+nWm7v8C(*eLGlw{BOO*F9aqXAwB+{`4%A+fphM8qdgM#QzJ_q#Ig-m~{ ztgMuh>Ccswm2xr-UN9M%{#sdCsV36^RE%|&S|OB#MRSHzLE-JDAT)%E&=@L0B~*ht z@}wecEEQoBs0fY45W{2~hUkw?5PA#f>m7y|ocECWfFb%RGXjeF$yc;(vgA~oE;Q{811AW`kWyc+C@S1Vta)4Pz=S~sE7`HcBdNt?m;#D z9iZBj<_LLF4fz^FJ{m&aa7T#ZLp4weCW$f>JaWZw0ZHTxgVYGJ!jbT06kJAA5yNa8 zq{hRAg&{^uKj@=B^aIBb!-0(%sGSHI22-o04`7l}OLqO+c}n@8<*5zfz|B(VS)_ye z?`JOcpT}IE)dTA|Y!ncMwumt5LEkGa(U40G*u`B}1bttLy8Q^nsde>;Co z{(1cU4+*bzx<;?d)>J75>EFRytcE3{gKhoivDf53BffUovYxD*Y_&!rH);p@-@#!@ zO%4NM`Jd&m18`Wb$;+zAW7*%q03cx?8ckz#vImO7u6F44;KBw7WFz}@P< zoy7pK|9LDn{m-!2B{N5@R~cB#`nRJsVhhDTkJsO=FwFl=D-0_V1haIR5;fr^%hqW1 zscMZZ!x+6OAeY0ikTj+%h;%fEN$g*7M$sHsSUop_3mqXhbJ!x{uh-`%;?AVk1e{}r zP=YC>z@JPZJQjre2v+ulKeo_|@LRh3<&;F(6 zDgScwY;ePCCGuRkKN0OR`p>$N%z}G26wNWZ28}LtD@6D;2wzDD3gKR7P=O&;4t9uL z7~E?_;DGS3*};=4HybSD8HZpkug%uMC>i{Nh7UNOpb_|hgUSjSHpf6|O3g2gfn)%fjE-U!Jokh9;VM_`T0jMH^hy}sEB=FLi+_&`0vFn9C_1v2jq;(m6`fEME z1I{IOYaITO4gCOQP_U;|x+n}Ih;)2t`vI(!}+Q8IKP zZ}g>E?LysKuf1ov=g72EZ|!e9A7h}VSGPt_TDE!O*z)9p(Yr2tS^_onXjO(*6O$YQ zv5>zSEC>x&4c0dVK@5;Vt0t(=CYvG7{lDH4c8u!sSdIdepT@5k?DJ+*3)T3y>B(U> z;5KC2T<$kmA5_<_@8ZOWLB1)f>F&zn4EqL>7>N|Nj1YEwc;aabFF5}D5N7e`-<4QkU zt5K@dgaU-mO>%m{{U(a$)I$&{fmsbZBAlwUQU&HkssNZ)beL8UCnd~BwF)#$euEOU zC$~aX2N*$XQ|gmS1DwGyRTtmFNp$NC>;)2I|ALN{XT*Lu}zm9k^J* z1)>%p%5LE9a|3?30b{B>a)iKuB7^9loTbZ@vVg-zGfcEJ4XupIjPw>QqXz2e4SpA3Hv1A<44}Xu?uky_<(oUC^E4`o@frKyGeI^ePA#6 z`s<8?q-1A7}H=2jA^i+ z#x&RkW4h)}2;dQitPdhp#`G!-^26p81lEZN`-3GT1Q?JIgzgO?GKiirusZM+2E$kk z0&3qBg9y_1#VA$9FtW8DicxAQ29bF~Ym}cAqkdbALKxesV$`1%qt#N3R#lAlvtlN- z6f>zRX2LOW@`t{eep?Kto1t5#KPzGOvl3=7ssze0#(s^$1|nfhLndPyhTfQlG9a~$ z5Tcti!+IFgvO95AX4BbT&S-?@P!SD< z1SBV#qS%1Q#DoZQ6cQ7VpwZ}=9m56@5U81bs7Em(gJy-W-meKlmQ!E-^h?|?zn+$1lB7jDv;(lxkoMB2$ zrkUDPk`vihxCMMMx2Hj`*fw|__)4`WnqhVf!(AP%IDA};b8+I+$R^+N}<-#(4GaHzxiHSgS*p9}VKm+cqkYRa8FukK(5h-A%7-p1&9>^^r$ zKFV%m^yb!nZPN2c@Jq{EeRi53j0X~ZYiNyOl{6Zaf|=shrqtwy_VC>Vr(#$o-Vh$t zq1B@~%s)F~UzPGYHl-#Xsc8t8Q}A9flo z{{Q!(9|Kc-BtmY13N}xvlu6`#DUNgaLM|J}1u}_*$Ca=-Yzc=W7b(O-99Qy`Qn5@a z;&YTZMU5(!_<7YGEy5n|UW(j%aWUI@7{B|MxXkV-fTr9dW>ad0^g=Lr>jg@7*+ zh`A!XC!jh~;b~w;9_R}->`_ZjOk^08B#l&(bx>?Ts47hrqR{G@ky$c(6q_87mzU=! zSEZ?B3a#Exrpaso8nh}`gjyq&sF_3qAwj>OQTHT*DqXJ!@%f5E#RD!X4qU zg}u%9>|rx;SA!~ctSa#>lR!1&0ydj%(9EEkx$GKW{}Ut>VeU0Mj+r285oV3>BFvmp zgkk7*i(9tZ>q{1#o!@?0+`KUsc_oMEEiAV?F{v}gU>?K9FOI=CC%zBar$X&#-X7(C zZK!D=8o)Sl!g=7X8^>Gp48MI|dC+8iu6MmLeP+2%>{q_I&3yXh^Q(JXicJ*-ZM!xq zb^Ne=XSvS>eL?SDQ#%e$&+6jAX}2q8_rp$^cd~co+3fm)y&HUKNvKT+&eELv=T6Vt z8FAaY$D3)~50UilBg#@YG#|8U?y|N~{aT%jO;zW1o6}A>cGgw*`@ zY{|2>0o^th%rDuy+M7bf5H??iOTM!`L;lS6P_M`FQ%*;1SH75k+u3>V?t<^YiKRJ?npI*L2Ws*4A?e zE8gsB)Zyrs%o)A)52pAox7~Ord(PbBQN>foj~ttQd%3mC&hbktW#{gibw4|Q*UZk0 zm*+;`NqjR}_Nn#aD;tzIq{{QBvw}vwVr_h!*LL>I4!4_j+#TrgjO9}l)+#?~T;nM> z3)?IaK7VmOzk9vwD<0N4p0y&>QRE+a`Bqq~CR+uGC!5EazV~~$uYIIi;#U70ZDp^P z&6*cxEPk@OuEV2?!}e?ysc(-}53iJO>xH?{@Z_f9vX_8xegsZt$d=;7?gQEOv$M zirc#M^^+->-O5A72d3~+N13-g@aWvciJ8~Ic7lSavYmSp!;H4`_k=d6=kIjN?+N{T zLjQ9obTuO4ad{#Mt`PHhJeg1=lX3)n1)@=L^I*kHZs4*%G#pFObN@e6g4<6Y?a0 zl742dvk`Lp!OR1c`UVn^kZPL6-wLTBIKKd?dPutiq^h)L>uN$ODnP1`Is~MmOAy-q zBdVg$F)USU04skZYB4C72u@N|VnSk2Vw)fiU%4MR15kFdOHRYhVM?!nqu=aS`0{m%ttuXB!Y* z6C-bo+Bbs3Oo~cmCL{(i4GdxehnOKj?7vjV$KKmWV;60gX`YoNr0mc1?$g^YW%$cC zAJ0FyHD<@e<*&L2)y=+Qhdz0mZ)`8>+;3g{_?{E%^az^JneY6m&!_GCcY5L#DbM%4 z?l<|4!&`^wql;}`)qA|${RP|IR-!6tysg)z$&K#xQ!dX5ov1ssqVjoH^WhysZmn3? z-1>E!FBdX|dt_Iyho8R^R?*MnYstfSGuQa}sm~(AlM0#@?|)-IV{+Y=)Q5A$S5=mr zJ*(@rkD3q>+;`rg8U5~;MJKHep1NcY?T@?}=iA&pVSBSl;nWu)*(Y1)W}J?ST<+QJ z538cD;Y*gQ#~+g>1m}$VFzr*fZtK=a?lo$(wSY0@VZf(>1re&b2830F72!o#f84HW zMNh{~F|3k;p&E;N{oumg%7ZtA*H7;76)vMT-1+Rd<2S%6#yyEyf8zZ+S@*3!ecEdG z%+zs=_y^=hI0?LH^>7DMdQ(%(#Keq>Ri!9+t}%^av>tdm?rHpvV?*kv>-E{q{rxpE zUG_JNAv~}u7i9>K%q5e+T1od!#_y&TtXCp9FpKbD=z1es3tWr~=kVunhp>&+Xw}?b zszZ$jKpjk)0O#Qrri|`G+F(Pzswo(5W@?f)z!Jl7x~VB7DAg%S)idgM6O(|TB`>p& z`b<_$?yLX0`%~jSiOW|WSA5+z!*s^*3!OrSK8ub@NnN>T|3(w0U&qsxZQssma&gVX zm52S>wz#nPou=6L3*Opu(DuEX`;0ehwt8qrF83KqPFUA**4?eAUf+0NU2*NhzO6Re z0SsE|$;q?)I60$FPU~={J-fdU8?a89>Dyqfl972jtK`krPyU$0{w^tU>{7p>OGJsY zM|2I(>~g?+(15c3BS+4kp77v6@l#>nCZAsXnb@ zb_@!fZ8ilUC@9n_2--tRc;3N%^IOw#_`fyXZ%ya_Thsl2py{fyxlDv}_)4)-Cg3aO zN|~51<;o-?nM^1W2&G~PUnG?BIYOaW$QAR2Vz!Vc;3{PzHdl^I1suLaOknfcY&C(+ zYqQY?Y%WvsrE*-rk@5vNN68aPq#{1fk#V>(nGzQW0Gs~{$m?gwd;;n0G$oy#43roU zq*e9SWJxShR6wFkqu1-?61Bn##Rf!ZLM3u}KKMInC^Adt*A%>-5gI1(m~?k4w0f0N zC6nkC%%B{7x<;$g=QCNqhS}va+7f{!$A<+qF*_YFyV|GL*b=xwYXR)dA~Y<5Di(kW zRt>6HRaCJeIN$k24})KHKVC#xX+Y~3`VIx)0|tHzj>!-c-QJAk8rvSX1zc=qZ(hwj zb_2XVJT$krt--@);57APvvGd|koNgiP7=OSF)qeQXDRqfg=`L&ZA9?@3@ZQ1`?9O2 zl>YKlN8Wqq!}aICFO2N)$bF#wqW#Peti_<0_XkJL_I~_skaNtO4Og)#P~f3VysCF6FX*_YS#atg)qeeQkaZ_>vs9aUt1cT?-7)PbMo?HpdWN5OTA zy_=jIOpZL>yM#8OMR;G1)oY}5KQu~}DHv&6fAiUOF5NeXK2b)VID0MJ?7DfYCtdp< z>ic<3)5Hbiq^fu?6G?;60VA6&4VmO|V@2};)9U!{cUk(VtLvs&vv70qiI>HNpWAgk z#(6qe8sf#HqlJO*x z-9;6?{$_*$>_aH;htM6wEo;X1szZ6rrwul9lRKtSB`^E8FlFbk<}ydeDu!-&zi3A3#Yg_9u5>CtsUNA^APT;0(&qyuXUo@x zYcH&Ncj3DI(L|g6!^2Nc{-5culgB@oET=I;~AIm?V zN_$c`aQQR}YopDZizNqXy1-{zuQ^L+Kb^Ha-EM0817qx(GZyR!{c2iQxM%uZ&irSh zhZp6qoAr12LU}ydS zz3`7(`F`z#6R}J7O>diIy1$^`IlA?2mx}(5TUK;?S5|Lb2*Wb^-QtW5QwJ%I^e(=A zJ9KB4_m5rP5|Kv7hs54hBGM?I0Y9%Lpz7~w{&y;)-_!i}H2<$n^J<*N z6;iQGCX(@`JS8p{O8Hz|%vK7)!G(*&3W0(z5pWe8Ax|uqb0so~m@O75)uvsm zqRJGUh#UX1nFh@DqrK09o$}StAQK|dBz7RZrMKDay1S;0 zgNSth8aOO2itUaw4LZ%~r<`JY<6e-*!rt}I`DLt(YVY(@t`QJS#Kt)sHU}4Sg`FI& zIAVZcs=*%sBj?<1Nv-;FcqB&m(5wA@4*?+si z_BXrlt`bFZkL3=YEe<=gVAdsTzPTq z^Jv$}9b2929&_Ks=UHUFeYBpciN^tvs}v1_9(ai_aE zEmmDOy1+~Y^hDm~xrKmKfcN$KrD!tk8;KVY+3 zLe-0wtaLwt1uU9hDLvI@=7?_EHN8UbTy3uau~<HfM9aXHH|8E;{^Fd}jHT+0!h%DSY3xffFBmd^jVy*eU${X5QQW zC&be(iC)IPk8K9v3$%sNPY4>s2)=$#?mt!5zodMAPwwB7`@c51t05O(#uxDfA~~P0 zaMXt2P~5 z1-VRd2#FK0>*ux@LeYO=(gBM792pR}D=zApl_5%PLi)liQDQ)hB9GZtq17q!tx!~e zA;k<)>GK^?Y(P@Ff|;BcmXMT?oS0;UR6c;Vh^GLxh$tw`c!N*u8(j9+LF_^&Wjn$l zcBazc5VJA79LF4x*FEo_A}`}+>lzX4rd1@d5)y-IIK)(%tZJ9ocR=j630`D!9WSCD zAfwmV*G&A&{3G#8oJ-|(_*7O+<7a7t@Bzg&U|Dja(HTa!H?L+S+kpsd(#-5FYVeco zin|yPT-{pP%J##X!QZL&UR6E$Gv)$7W8*ldrjJa7v)Q65AK5>L)FR4{`wl6v?~r0n zDWYJg&`#kfsI&J9ef_Bw?X7a39rr#PwK8s?m)(s&V4D_Bk3TxZA*ppKx1zs#MrFO3^>@UN z<}X^TJfuy#;-*|%HoX^hcU<#_$6j15ofTEF+GG;HQTtAtD^Gk3*xYQ>yQFJ}9@sUH zUKKTbbC+owHZuc`6u9$N^>2}`#6llnG2w~Rx!vDS*qJCS(S^L`>`i=rWm$zjMs+Y_ zWcTsc_Z_snaf`F+*!ULly(XrOC=W=fuso%*cD8=))i{Hj`93S+lP=_5|2hkmYkm82 z2Fa3#?X%i5J_&cSUvajdaPgC_&DH!aSAs6sU0xb#apPj)aK?D)=#9#gUd6`;ZCTrT zf!O*IW!4kBsEK`FXP7MQR&U_3EorwO+Rr@Jx#(=v`e&Uhuiw+H@Myt8yZFg^M&!lF z4h;&%3GT;_tMj^XKbL67(!)ifhz9X-TWEdYS*)I0fT= zhhV>u22mScctv#lL~|Wq);PRv+<Ny2Z{Loh%*uT2=RAY4M$X%PhV=U-GD3auZW#W^ylI zr}9+1OFK{72j6Ew_lCUGN?gO>mePV#fH~eQCMNa=Vdprgd99rANoi5v}Q; z51kHMUB9lp#Limhz1YdP?_SJT*{j`7+IRnB@%nC@t?s>A9Xami4@LYpZ%>OS`U$%RAcJZ3@Y# zymviXX&ZlX>Z+%Xn;!NYJMwyD#WjA-}pDE&S4*TNJH+ zIxuZ;*_3$w+O1OyhgBBza_W-bw!7cBz*SMgCe02Xlpdi#z2 zeuw>yirFFM#SJeU7~L|YN5jSSulEb6_fq=tNXe3~groFKWtF28Y>pAD|JMKi5mWVB z|NqwizxDrb{r_Ll|JBPmg;30uiKRG4DHlm3Y_5XCmT}n}jz}VtNpTUIEf(;&QXx+) z6NyD)0Z$5>9ppTLj4S8Kq;d|ioU09&R4wP2I9n+f$ho*uCgI8?e6~cymP%y;9 zaV|#=yBdBC-@}To_LTxS*lVsVz{6f+`9V6_C8mGxmSpZ0m`uXo>8yffAvJ4xN4Z9p7xZkbcLMV6WKDRtfTk}Vt|Mp*4MR18l85f6j7zcjm1sfOO3!nV@pCI8UKiR#u_|o>_TP!|X z6u6yvv2&;HHMeVnQr_e12d0;vn)vR;u~Qb?B%R~K`_E#{E*~wkbbM--{r2P_zrcYr z9<~n3Y_am}0*8)*UNfm7+e?e$f~i|1x+3^|c@)uWQ?GXHj~Uy1V%se$j;Uum=8 z-_mvmYK|5)9pMTJ8?7vTrEYE4_B2bp*PJm~_oi4dveknp%1oXzEO#asnf!WPM7IENz^D3oHMj3beW z6-t4S%a-GW1*&c4)UZH&KA$g;%9I>FRLke`Wn2jlSIYSkDUUDY{QNgB5!`?2H!s(I zb!T0D6dRDJmuQtLg{nP}XWX&u(*RX8!GYo2inN`gAlF8-oIt_Z7<+OEJv#WzTpVNQNNZmhdp-sZD@Z>jJa$N2g+)Y~5 z?nAP+J;mvRW6zFHTz$;+`)9V z^3fED{$%5#K-uec+8$0;Q;(F@$vGzcJYv|MjxVJJsq0e}_=m-tqjNjC=62)lemE&* z>hSe13KksSah1dFJND$wRND_3%Obm+o;u<5ygRbajNFYW(p&BH4JVZ~E~C>ro|;mp z&i(6O_C9S?^0L~i_Jf=3=iBf4T5=jKzJwR->z6)Xx@7K&!+Tp{{q}cwka>SF?l{eJpUq9$`vY>dl{RzxzG?jhm|foeJys^#48m|7+8~8q#rO3bss&OO;|dM=4gYagJEbRZ0~c zHlNMs$hcCDT#m~mQn`XH6NnUiE?X=Wam8#tPcD@Tm3#uy)uwf;ARW0a@7HZPxDNgl zApG?fy*)P3KmQG~;l+mVvRit=s)}!Z$zTN-tDeMgU=8IYLiDrskEzbUk*e_CtW5YZ zGVy|3;=Nfv`E7$^NKl+EIw*z}62#)OgE{;#J}wN!h1Lk+OK30IgIoAJk9knX)NZtU z-(9-`sGp)QQ#S2rJj!xF|KXpQcD!p(OkNIKbUe`U<>3=W_MZit)#@jWjz{f}^ctNx zwcB#Z?ju8cKl-}EHnZD0ae0SB?K-XRojKTw`RX0@b)Pk|Bw^fMw`&cD@VSe$6J8%b znUJw-&$56&rWY3;=r`Wu!kEVe(S0eyS5+=+A}>pi6$@{4?cS6AxLL-SbKITl77QM2 zGkJ*R9RBD!JEBUDuk58f-??$U>2C|S&!VlnSgwwbU-)vI&&rqOvZwt#zdVmVJyn<@ z5A<{y5ioz?)s~|-TUFE*<}UUt&3M;#=CzWc!QFJ?$X$DPJo5_Nv!J=+z|OFNP4^63 z*{g|P<(#I0i_87rmN&3`QGW7Z+q>88uf1;BKOeDoJ?m1jF|lh|z~r^;tER4AW-BH= z!d~W`@4B)lMNzV$v|Grfqz%*ZT&Dy^9JyH9bIiw;it|=8R_8uA^SQ%8!K;pzO&U~I ze28158uHxhjf^RYnvt?=?9@YB%*w;xC67p5I#==4arg1QPx92L%p}1*);&Lr*L#HG z%ACgmcLp>Mecpgm)*#{GqmFOZ>^L;*efz$Huk0vSk674l+w$VMU&ppE-C8DF z@N{H$w`VNpE$4QdtYn8CP+A-cIajoM=Z<*i1tkYRu1T=J8B86y=)>#x-k9L^dgNl;;{&dA zi=4W^N1{F2)^^mO|j$;0%|snZIlPq%%R z)7gCNMSa8lA3jXk(=RehW#eZPeE9$xBJs;h_UpOWQfoPDiT&_ai|=}>b*&ucEec9z zbTU2EVIAvA3(cEL-Q&K{pPhBTF{@dd^S zIPqob^ON+|;>=@aMMGvJX$ARQhj9I-S^a5C3T-$;S0yMj+q|?q5+jjDxNUjD9e56X z?OC_MB!2pS@8e}IJ4OUJ(o!yNX7#wbzLR=v<@jyoBm7es19(@m8lKI?rR6gsXhptKA0iT!0ez-Mqt zouH|9&39g8Y(HP=EKs}^znYit*K5L}!LAWI`@Bi93~19knfm;|(%Vw3?##mAE$4^K z9vHMVVn(K`>GJN@Ih&);y*QRHxV7c#>UOt-mo^MkQS`_E$m5qry??j**6XDsA0L_7 z;l(IN?WFh(_MFOQw9{keS)^I4p7L&9SN79okxkya3>?<2N#w8$Ei>JAN}6)nz~`sF zxU9%P1JaM24nEWIk7c>fI4>s`9($b}QsH>|Sl3A_Tr*8B#ME^T`vY|d?h?G@ZaTc} z&k`1bbi4?AVen7V>)wfrD~@PA_B%+8yH~wH%JOI04_0VG*mY$1Q54(gTNL43HV+qe z`lUMl3N&p=i0ja7)8ow}-r^m`dk=MsC^8*+{=p)e&2qQ(laIY0n%_3I?z?BUybJce z9zqkJdR+H~H_UCnWG`-c4!2x8CC)GLiIdCg9u4QGKRGn`(6;s6C})*D<*h>fM+~!) zn0PKSsqA8VJ@PeoK|P)IeEPXvz3QHd(re2iJe_r4Q@TH~!IKBA5FE{|uxBma()9DL zHYWs$$!i22yvJNNASyv+<8 z=lZV4*tOjTe_Gi)sjg>tvtM2_ZK~nQ^d4`2T+wOKyB6n4-fL#&gwZxmnEc%U6F*t< z9yVo1?yfs+5B6Cx;)Q?F$t?O@fhlEqfh)FZ^M?)#ug>&Xv71)u{`T#TwISG`;S~3! zp-wL@c6cK;H-9&MkAo}i=@I?gf$xLd^mYwDnC5*QbMZi8tF9L`f22J1Y~%6Pd-xuk zBafUzc57R-;&{3>*w-?3@!N=F=i`-tiI$R$+g1W?!%#d}crQ?Uj}{Zj}1;TD9iAv*>OwtIelhDBF!&)o;5+pm@Nn zul;&`5IauV*29)qGp(wqa0Mh>Ha@~ zbcvVV3WXAxT&Wa`xI&3kF5rqd0+~c8!*N_F5lKZ-wuE>swM4xNUe zb`9OW=RvDck;l(mPm)f&c6p#>!mZ%c*LMTf=4VuH-Cl;gy|x!APdA`U8nz+Z#qrek z6-x_GEO5dTrk!^7EIsf zb)C8AxB2fL$t`_(!ljqTt_7WOwCqB1(#;)|J=tcJ{-Y0!vE8|E$mCP;BfeOgK6vdi z^svQrZD6Zcdqe9d-Pv9i8Je<|chlzi@J=t@2Aq$1dv~l=;I>Y(tmdx8r{em!`m#+f zo;>W|{zgy(+wzA|@2-533T|X?d{uI*Utd;ABTtXUE+zWFxtr^roYM1sdVbFB!|$)o z>vi;8y<=yO9UK0|gz`@P$LhM&f+G52;rr>yd682mUu-kx)ibLDc|7ZaJ|h@Qm_vuF z%7k6KZg`x}-z{-?)uiiW+r#rtb$U9JWjE*YtyY21*=9?pVo92d| z_;ktHvFNt=(StLsG7}H0?l0s{@_O(zzWJELF?%OH6wB^2X0azz(?mgKUMpI+D8IF7 z{d*a^^NCwtIoEb3ya;>J<>RqQg$EyWxjJ%Nz<@`?cdywY>t2UXKj-4z>EQFu@gp|3 z@A_e3|GU?BjGwwgvitu0&LK7nI(l4q;`nLwo^hja#omp(8%ORP9GIa~eSE#R&H*cp zb=`okk?Zd(VzaE9EpQ!|e=c}}FlE+0?wtnDKF57jt=g?Q&1{giJM`A({w4c*=h^Zz ziX+!Ct-5X4@WwlAO`Ue@?2cq)Nmd;B&}l}>?ASB=&T@Lb8hI#v>a0qyMsrS-G#;qV zKWbspdDLB}-Jt>Nu5>qVF)occE$D5#yzqrXa>};cI`!yWFr)wR{ps6N>)-I1xv#h1 zEv~X>m-X2@y9Wi=3wS?9J?q}Zxsy{re7bzcgxdaQ@%*c6N{g4i=ifSb#gyaq{-%a8 z!@Dr?kJw9362~0g$r|RZ^DN#jR-?0BYYx?PcKvZ<6Z5`axj30UI(W?*_^?$PMfl~^o{$$^CyN~-*+U-VMn|4kD=16>C-1qz3Wn$F|4O- zX3+?j_ReLFXT-^mHx%}Kcm9mL&DJZ2p3Qg0yJ~_xR<@$gUf{6jLI-eIIDx~WE?$Iv zB^?&M&*Jq)j93%&-Fo(yoDF~FuxP|?h&vO3YRg*H=U;j&&S*Lf{i?_?D-8GFtbevw z!5q|GwYn>1X~>w84NVS~oy#e4zAw(Qa+>qiny+d~FFPDE%~d?Szs#A%b9b1Gw0pkr%?PVRJjcaXP- z?W0%LdH(fpbg92JhCer(4RE#8QAmw)!_p-s2}C=);bmrrR*3O9DCGa>%xl-z6?1qe`)`HVFqtS0v`8m zK$o_rhI3+A*f{IY%r+ONAL?VvTc`A1_k7L7Z{DIRvK`j z;riAK&o5jss@I)cimYe#n;exjoZ7b_JS@IrJ73!mpX>r81d7 z$Y*odGC8i4iew_Ln5$$hWg!wJQopI6k+ zIp1wr&cb$$Czr5~E$ZJg(Yo*X#<{yrH};*=cKY42^8Qx*ir1G8v>4j=!!6PM9z}-+ zFOKyL_GR{Y?7T9rpOb#Upv9|}iq;?8$S=6cUi_(IsOyX7;fI?fPuXOr=Ikndxxv4y zonWuZ->Y)V!w)o7y4TE|-cOSC; zT|s#&=<)J%t+#c(c6g#X7^N28Q?yvt&0*5vJp1szPQS8L zSdca~VSL|=uCHi&>4z*nzU^}Po$3G8QlXh$R=v4)317CikC|I{FEjC?o&Z)y!r)4|W9!NXg zd1aHjPd!ZD_s9xKX-IEfnl;gW`;}#tD~Gl{gJdPkf?~V%>bfb&Yr42imsvX}f4!T# zK1B4T&g{aOv(HtudFe}W2)v9+G>@u@YtO(F{NAX@HE`0vyK*LcXb9Z#^n^*)==e`s#%>&w?j0y1lTn zRag4@`_=Ee_Il}aAtiF5w{vpggQ3NtGBw^(VBAmr zzdmKEH&pU@Jh>9*356UbTZwZx9GP6o=7@2=LLgS+0=AT=;0pO%F<*p>q#TZn!{+ih zY`Iv;kt;YNrIOfCS(_^RbL-0u!39BVfiR5A2?`J62qC!egPCEVXgDpGVFrhmW@l&n zljlUkdG+u)L2hY)1BNe=>BUrd9?hvsoCs-8T-_0xL!4-jDG@?x2%!vwP!>W6PQS{5 zgQyWg`Eb%HLZ}cCCyK&rUePdw&~Sv%2!!CUK{Sdy2!0HC*gG5q4+p>pAcTStLcz#z zW-^C7P?}HPh2*_C{7$naTv`#wzgJeaChvi8USB+BIN%q;AH)gphBK#$BZ1AKlp|S> z@xW>)@;e+{jk%Ct-~d}VX_Yu()dL|$AskEpn#TPEbA@6>WBF=aw&is}u zl#(2^o(CsZbKznQ7vf~=rf|$A`Ds=oO`Lsg1KH}qMU3E3=WjnE_yen!KM*Hr3*fIl zwfyzc|J$QU2kHEk0cF6+=ERu&y`yPIjwVZyCDZ0-!yB6Z83PM)q|3_8X2~>}nK@Z1 zy-J}o9+zx9fgA4KQ8dRHp(Pk{M$sHNupMOV2l28(6__bPuu+;g726sz5(mB4g;e!v z>?R1gnP%rm)hZbw@(#uW#B~a7u0rdt)euY)04=W#QHzw0?CbS!whU1`(`Qb=sV;VSMOw(%|%I<@~^Jor+P%&s4!`r_MXS)NT zrg3aO&d>7xAq%CtFYpsLeUwV6U^o6D8?`DMLz1b}E3~1CT(=)`(W-LMqE$&LKN4h8 zmBBPqrB*AnKV~tl&SGfk$1G;mS<)n0Nt(j1iW1;09HdUK%3>?mWJ*+7ES*B4m8G+E z3O$^AO`IxE3WZ^$Kzz9L@7|4Ys$b~_(0*C2sG&+5ZBvTP? z$cRBk3S`WKjP`ghoa@~_HlbZaLTqxJH{J`!t7x?QmPWNor-wmTWoK(NYLHbRtO-dB z+?$|ijs-%+6lCt|I?3GC^$uDP9zH25<_TEsZbrvcOYD*Of#Oz9$16$2r>=xr$3p7(J3O+LotK`Q8b6r z9Wl%>8^pk7YOjSRRbMZ8bh!ejg9-ZkS#PvH#2AvDl`XQ zpb|@{ge|~Xe2xfjQQfS0Y*h^wM6)$(pw+Cwgdf4;3aX33SR4ELV^Ndui}Gr;3L^6J zqNYC-7FgU{MMqxtzydwhpF$+j$o?50;fL=4U3g81i&?>Ap;M11`Bn&1gFHCaIVH74PGbX9COnd2Ai3%Bw ziQLS^IK0^&UQ|HLy8smZV{yv2#cA#1f;hDm24f)C=-IveGczPCa&cy~L=8wH;oiWY zw+(9=b7DG>pp@*ZL?V$X(~RKHk1Pszu-Y`RSSIjWHn5by0%Bq0X4|1d^Kbvvfpwii z@2|?%vy>{eUZI6L!Egb{gAd#tzBMC+eE~44<@;+jIeJxA8gVyvrLYTG7VceuVVD77 zT4IRd8Vl6eqY4IWtY=WnFoVgUV+a+RV~Bw)FvKt?m~Da~U(0BYS7ikQG2vo`Az$-o z4zsd?Ztm(D56l4SC33k|XB>D~Qo_fP7;M950I}3G7*QHRP`J_rA-XR?nBh){AZGZZ zImK`XO9;I+0208mV84y*r8g&w!ySq{62;9Cg(z;0jKwR7-T<{aS-L`=qgH5JB1CBD z^(2KbbQ{UEKSF3GnFccr3u^eV5keQqbQ%?*^#*z{Kg_TUVgvUwVKEEDuzDgyf02Q~ z`kl1BKt_|WT!l8D87j$VCMv34o)VUotI}$+G8I{RW{O0sl1SAG9ScKl&HZ)xI=v#( zUnkS5vh~b9Ol?jUGboyT@ll8-OQ}k0@$JL#oGe)jWX7UDv_X&pqkS>O|6ki)a0|s zES+AWRvYrQV0s#Ie)|-ttq0T+wS4opnZHW3f9*swYa=>blA&M*YgO_z1EW2@WwbxA zIa4F|4~k|*#z~2M1dZ0;JskccaST^rXJb_$u#-Nw*dUzn7Ux>z!8S>uR-|bqnaq%M ziJlp((ZjI2{hXSl2v)F0PtamT(qedYu?8g%xCr@Uh+e2^*@F%D<_uztA6yF~#+X1l z5JIYjq7VbSgoKR#Fv^lFIWt%y%gD)Q>J(XWW|pSLyPfqKW>~aDrS^k9u)gg>wdfj( zvkc-8mMKxGNolPc6kW?70Vqkpv>4Ux_iF~2{ZxctjmxkCwOa?a?po1}y0?xQtZBeH z8pbhOqt)wR;Q*F#H94VSg=9>F{snCTpEL}fM{__^TO)*l-UT~S7a`0MA*?<^;0M9L zY?z@6Kwu4UbP&6-K@e=4J&1%{og>g z2=@&rn&V11Ve65@Ob#t(jw--aNern4LKuhySh5Zj7=FZ{g47w7taYGGTe4v=xdtl% zqX|;OKu)l8yaA+K;L?!H;0D#W6K+-lJAkz`uM0a ztPw&Am`uiLVq7)C9TrT$i*^)5NEc9J5H<=_WG_=>WwZVddv6yTS+<>r)xEbRjoKPZ zwk0P4WMlW~x@z(ct5_uamz?S=_TLP3huxiK_gu-%zN5pcL-Gu(&MBR9ifrEL9w4y; z$g(3lfn)n2L5v_llmM~eL^1LbBrkqRkU&A+@)iV0UTr@(F$BoLw|@4|sZ%7o?uF6^$qP>!of7vOZq394busIHKdC7AQs- zSbt-j`WyQu{f&K-{{Ac9#&5DF(4vIafY~uW>rcYvR_lZPH>32YTdjY!-TEH|27aLP z{nGu+xWNr#((9fb!Y$0H2xjG@rCdFKho?s)A%L7 z@%B%tQuNI<{!?M&&%)iP9-)gn~(zjZze+W|w zTvgv{wSEqZ8=JK6v|4{CZkr!N(}rkhwOaq-cUrA=NYz%W_1l+Pt-tq6{QECoYPJ62 zKjz=RbE(z(T`&*0!7i~I49{P^)M|YR27|sXwOSJ?^ShT?t-kd8*DkeMPoWvWU3RI} zdM^9rf9F!G^`A?bfA>aX;wOW69fy@8bms+hK zLc3_STL0iutMzk&w}0!u`*!OeUfy2)<<>v{JKt*k2|@3Am6X*7tv@1<;Zdvg!9V?P z{+D#rYJKo0hyOCKNBO{N^e_pV zmuCITd@sY#R~sK*mIBG^$xbnFe?Lk`35thrU|Mi*9;5|cn5Y_0_RHl6Ut|aI!#J%T zLTDv;M+MQ`0~9(`;x?4wE7=fcfialWhLp zPU?G+d9`SUdH*Xr8s3h49*<1Dz2$?X(ya`Q-_}W9PXs>;veo%K9(C?U=rvlTvR7Z$ zfTPBMI^O1?DB*ONjN((XTJkW&@{go(sZ@PX!ip{*3qHEk`vNMi=w9hj52$kOb< zM7vq1@!8FG1q9Qles+q%ZuZ5w50M&rNVEMM&F|X&P2XIze_WeWkihRV(D;pFA;@2a z$S1O4^!00V$Q0#>K#;ugmJ!j`;zn!%n3MWDB63hqKeDh#ue2$w6&tWXQVd8KIt z$?Ie=trF>~AH96JK8cGmF}soe`pVGMFGTMMn1#!N6)kRZL2vnNlu8F!uIoR#>BGBdfFgK1# z?9+0eElowQ${Jq78os)WhD|&i@+7sXDjK9!v|i<9RT#UPXzfxBEEg_p262roP^^cPmh!)MQ)JTtsbn#lj{hnKGg zeb4Q(KF3T@jWbI4nWdZ!gT+y^-GD{r1(>re6q-ysm$Ma?r9va?o3kokHMDxM0nKTU zmVhqMfa5V|W5FQIjsBpOY8=g;OSM-SAF`NgcxJGa`6|cQczb@U!r+uGDfY`^(6Eeb z4_HQTNqE;7{QZ1986{P61>^hhvcZC!huNBpr!mZk_4GhSV-(5M=DcMN1zp!U6+DZW zQJ9uFgPCW%Odb{m_yhN|T;=&_c|WNJhh{n%V&R^lh~dE2I`c1<~C^Jzjx&yna>MewIK?au3ol@n8A8 zIc5#0gv5*vt7=lNFE1B)*(G~)x0nVtgkiG(sHj`9&GC!L@cy&U9`R7akAbO! zYk?QI*90UpXkTWSzKJj;k$Llmx%^(9k4T)DK6NAvT#0b??S`YsHR5!}TwR7ohHr08 ztP=)5%-%E|RcY3#aM5e0#JKvT8&1 zy^x=i?IdYs_D->fJV*+9(>2?09+%T1G0E$AP>oJab(oeW&%!nqA{k?}XwuS@hxtj? zmDvr31a$IHw1Ro*+p7?8oM$pxx~kzf9!4Ur>vP0FPl|kkh|4~jUGjhz6Os3(A0;c- z_xA_!@Wx)Rw|e8&+Dfl?a}dYZ*W#7cm3Vb^cssdstJmAVzQ1>8uz&l;>V9uEzSX-O z$2W#IZr;3U(HvM(f<@XlZU1krp$ZS}XG&6;<(ak4r3Vq?4o~!88RDF(*U<5YOqS|U*tFq}!bZkJ>!m6;u0!Hhg0Jt9k~ zZ7Hsyt}|)yWD1_z$`lnTu*-V;p@k@<3+#NP0WrBmizc5|lWEn*hR4KZ=NNp{yz1PI zhH(}1?n|DA`LdI-Ugd*gv~OOrF;jZs&*s$(vOxp0DyqMr`Zvs^;yqF9H$bhjcQ`8pciWe>5FFd6r5u`dh`r5bg({h|yQ7n^r$W2R% zzte(jSaAH66^4e@%qx{vZNt}aG3%5oCzx5wv&@3yWST!b_TpHS4d78Sc-OTzMNriL zzw!o2pNRKeS6&nMoyTG}$E@ASO0RJk+8%T~(GKHF=OnET^J&!?6r*p32N9u=J*(~X zM~I}hx8m_vk2-dEL0UuM+3*Y6$bVDrRZhXmf4TM9ed$G|yeei2XYH z(bX$OIe<3wIgS$S7T@2^u0l6SvZ@c~nZkjE6Y!D?InZXSZNVw?((txA(4eh2W!IWQ zq3$&g0M{Q8I4k^3QCe>o2J;_Ju;B=!s%(JRfB)>IHi=;D2igAiioUGhvk7Cle8|^eZjz{Tmqb;+u(eC1}ZkD{R=*KXL@prtJPl*gS7LwzUSvLI7Fh{*O z8}`HZ;%24JV0`2OZVdBUIT9nj=J0tu+90vrrw+K6AhHz}w`@AzbImR;E=s|f=78g% zy^p{9-DWDe+w^*IW1(|b^$d`vU}>?jOGgR{PnlFaIQL1R>D)C}9hH&xCQ4LGwgIZa5zA|;o0|6ec(EqrZ+_{>7r)EEVg z^85Jz;^M{)V0pv3mxRC;7Z*R|p!5Ig12uj8c{P1J$WJoZ1I%Fa>9x{4jR!~ZK~nn0 zkN+V0XJq_%`pdsV#t%e|!1(dA&Bl*^WlobYe|+@8Rr67!li5BWVcOo1elYiWBV{O5 zu1b&0vwT`5#giSG?a~-q=8HMteBqTj>!H3b0<%$D$w68jPWKR)w_GNBaapBtwz9T7 zMqFQ&9(8c8ASv=vq76$j{a{20T93^zEs{Z%7pDgP1nf4C(;>7SY@>x`4NWW-<8)BuI}gktE`}D6lk_O6`757Y99G=%DOlJqH##L)jc6z}^aW0W}mbo@UpflJ3(tR^6fst#|$w3hhlMWic zCgSMB%gbq2CB=R`NS061{ZzZAEv9tO29Y)Z)Hb-2K6*e{2b%1R<7{~xXYoN&yi@I~ zDq6~ToOHz5!Tt%}1~{{=nz9u#+CdRNXPbmnHZMJ;fjDHObQHbf-~;m@fp5>`qoEnf zvZk434^y}UrKuETPP+Afo5$5wG zK2BC`33C{iW-m!HGfa=uVKM|Qr&*PoAypbw+E%&F^*g^c$j1>uNA1zyop=y+QPmFf zZvR$yWfjIHyXdN1sRchVeyXAie?Kp#<8Z+pr^!i`Ptrkmaya>Z)nDzcUSC}!d#lD( z;goS&C4&k!uQcm_Wumwk2PT(>2W4(v_jgmXPxSis%`eU?WTJ68Dfg1-t+!2fTC9=? z17=CiHwZO6Azm+B`0U}B2;muVnkB_~1uY%%po}Q*3Mrd#yv-`Vu#%#!qi(x(3i@vQ zbLCYhtBYYT^f(_TeWD0*Da!+gv^A#d;tWYeal7m~T~QBEKVN>;-eX zU;}PD?`zP4m51aOQkYc`!9?6OPcjpm>%HqsII99fZ(PxeR{V|QQ+(kCOelm9D<{by z-A|KYK>JrB=nM+Z|7X5L=p~|9p_>G8mmg>i zgkIV|ppX3BUk@AnKx`~Rx?Snjev2=#>fl$J9sDF+6Fx)T%`CdcU@>3{~8m>#*E zaK}g+wpxTKDH16Xf{4x@XTx$`YU3mtV}o9)h3j#0BKU~->lYAA5q!?J3|pnR*f}mG z4R(>xGS4RAI${g4_re+`e9Pwr>=Nx6z^ru?8r8cPNbOi1mzjfcbW*{GWiDzAMT@XOdRu(huBT_y>`69AWT|LrIK`<^b=T?#-gOW?kRHv! zD6C9B8*d|Ipi(a^M_D+(a($_jMP3{Bh7i10xPzA#yx=XtMo?MP+>2tgGu_`$Uz@g~ zl&dhrFN)Cv?2TYL<(Pb1^L|oPaJ@HkD5=;r_$57bqh&<-LUu~?XyZQlHHp<*x26vQ z%GiiR^^H2uu-DQf=bkm+h(D7cIHyYSy)(T1HC(PuCjAC3LW}!HaN_SGFp^C zg0f166ia|0MEji62t@@%i{@(+k>>f{4fIVEk4Dj=`ITP@0C;IADD9;Q{OK|h--Znn zpSsX#;2!P4`FGd!7WM3hj!wL&6mI~X(sLrz9jU%clbYvPPWq`7yyz6);Jx)}(rokN zN5v>O!4PMnAi^dQ1zL}Sz!S9blZ74NnFW*mW!}nE0;|uF9_S^W%}!0C%;p*O3=4kf zf(+V*X3$h#>6?{sDm83uCm$!(A*M1d%}J4G2L_HHbDB>Je|AfXJ!a>hH56?hJ;&)J zy91RmJ|9mW(cs7e<-tj&CKd^vO=@-o;P8~Tz6NJ5UX;n6rDpDhVf(%uR(e~}FbICe(D zYXrnK?a$lkqSfNm1%3o(AeC7}YO??s^VZP$sQyZ?H!jUMe%)W`G0XJMFOZ61O#9iG z#2GazQl=iRjRj&2iOusz)tybzJ7yNd4p(^RI3>)byvuxIg2h)S36*8L)3r!|m3mao%^QqX>!j*{Uz3z&yRq2qCY zsp3Q3kaFj~3DqE|mgFD}uBN_f*a|PRV@ZPo(nakq=b`{%VJAxs$Sw@DE%s>3mwEN@ z;Tc+#Y>y18MX$gsqR3xB-tuYpu*G_yP1m|iUYBWEDM`DLw%r2pLXzv^`|P%dc~V}3 zMWWUPQ1{Zbl@ozw1iKG!QaMnzxgVeu7LNg@I~iW_*nqC`U@n7k7}Ks16w$aK^GlX^;ra|`ZzK3>^{kCXYz%6{65y?c zCWzfT--5+Qoa(y~XT@?;U@l;)0evx{htQK1NhuK?mT5skz`N8E~xC> zJMGXWm^A}*b1wEnC@zZoTCIOcFdsragK>`^Yz~KnQJRVMlS3RJgV3tR_7e#%@U=kj z@=

2S9wVzPsT0pzSd@h)lR;7a@cfn+=*~7OG9#NKctRchiCWqo-Oau)^-Vog>1h z(yH_~q;?F>ngA3^)IB)gz0>=Tg|unQQ~RX*OuG-Fve=5*5jx95Xfwp3VqjrX-qHMc zq+y;b38TfK^(J9%D+MbbR7c7)p5L1ITz1q;S zCSq6P9vg<|A$Xv!Z)#^Ab zKM0zQ)SClw#NC!~e0Lzq`t)-;VGs6kJnFCYa2TPJU}pMlnIfT|W=(WA+q!m)qa;~k z5@aZ(ZSoR1ptJnMY+W0hDlL*>x7(#ZMoEli*xk*ZQ%a4KbTl%1I5#1h$6hkZPnMW? zNZ%~R@yMymx~r5`FTgP+ewN4N!@~j5^k7=VaQP4@`_pWIKb)2TE|HtBK*lN^+$v&D ze=(m1x4-~ACScu8wn|_Fii=ZKj1n(jqbfmcJTMo*A5W5)Iq=NrjM(Gl)LvKYC*F>al}lShful%wxJ0jsj6Kii`1gKE zJ*R)x^PKuBlJ7wMkN?3RQjpjG*8gV|0ki{W05OUqZ3n{lPyx|l2Vhn(tU-8{&%%2fGuaL9{jlxE2l=bKQI{RO=s zZWzy!cz9|xbhvK;E`Nv7pFF92jzJx&h$JEVElQ5_vcgIqCi`iY3{6V;NI}VRC=pRw zY5><39NgRyWAPkktF97PSiA|ml=L&@sN9*3%g=GN>r{74u1l`(yX|CCWm{mLT5e_1 zl@`EwA0&Iz15r=cU87HtaEHH9Yv!tMdg_&U6>vPkKo9~yDVh5h+ODA|$4OD7L!6km zL`=Ja#aVc8-W44^sSa@}hPk3yfZ=AzP#(Y~;$MihDoi<@;LzNn8N?apZdxL+p)@DS zXhh*bTV{yBwaOF;Q}$58*OI|uZaS!7h8`j)I4p^WWh9VW}ToM8FE z!+S42=^j?&(N(J2;d4BT=ulOIQGRfM{KaH7KnzmZXA!x?z45^MY)IqaG+~_@SNVd& z>w=S@5-!&qy8_v(jXa=h6ij5VFu+ImnGT12l4MB{kDljpeALE2pse+)`$g{$3>`hh z{D_(w$RJ8A>nBd_RFVYNb**V(pXWzOwly@-?X^3-+c$5otzKW>-27zii{Z-Q{^!qD zw{K29**tjggPVWh`0z<`{nzf?%1-mii9bkf3JGS>QfH;tTf4covevuPySWx^n5)tC z8`rP*)~;W_L1Qv6O2o;)@RrYJd8N0p2FMHyO&hqtL6J`ez+z9A6SRx4xOvLqpXIBJUzGq36oXqvCt1BJ` z6f6EIVGL9=U3Ipd=P+}vo-}=;bTE*j<|+rR5WfO(9p4EkQ(iN*j`@>=!hsreC~3*UnK|; zC!6O&dXVKsQkvh~&x=9A>4koi7-je%qCF@BW{Jg#f8)_fd|FC}+TRj(h8gkFd|F9| z9F{LQGM(mT8=EtE##>FG%#qWBVD2!Xjq$rdMjpbez^Cd+wWI*aP@XOw+Z;Kmg33x*tVr+I}m zqH-#wK6ENfWt{&PjXdNl=A@Z=E&b~Cx|3vOTBXN`g5QUgfJ_rads^S$mh9|&YJQNM&VpGU z;qbCd_ z8i!O^&QrHUJNdYy=R1ayiwJ6ETomys+~Ay^h*+K1MvP3dv}Hp6n<4laFF#P$W_Iei z1aV5Lv^Fxfs}9Y=vgzD4Uo4^~-c<>$3{-!dXOki+VOhmup(82bd{1zSq{ec}r1&f? zD-*@j3i2eMR^1}qU-JIUM?<_~)#Iw6V|CW5Mp7ouPR)RlmATEkcpt;Z`Q3QS=G)8J z+s<3H4%_iM`EgQ=;?u~yT7qTwz1sXb`cY$}ySv@ta+gj8QLo&*K7NxJwrpXssr@@@y_)1O?YZO?dFS3l{t#n%eoXxQKe76d?PkN|nB;KZwB;x1b@ejOIPsnolfO{1 zVY<#DE_O%GoJSYa(z6$j>14W#pq@oP2>DFp3#BXe<<9{5NZP?Dq?ni)fal=#Bpp_V zW*iqsNnv&)59nr`lP`=yK(CrIJ;2e2lZ1E=Hr1z+O4-R}Ht(r`7yq01VBs|9?^k>; zkQm`_Ac_i_JuJAtC1!kwqE{4qB`-h&+@U%y zuiACEpT2$v&iQrZGN;#86~ZXy9X@cKa0yPrW8V^&nE@CFG8o?a0{%(5q8!^u#h?O} zsUNfyn#(~opQL=aDuqqT{0eD;OHe100U4_Tuaz7`buGizoRS@mjHI_#?=0_MUmadw zi-~C}09@?(<|ihaW=C0mLRo3Tuas&c+MHIDt^wdckC^1^#y=9XWDdxJ3E1{dIkE#K z@@fecdcF1DjrHD|>8*5ox4Jm)MUE_t6bhDgZwb#CBq@{~J|za%pJ()OTu5?Bnw9I= z8M)EJO#dJ)HnX8dMUzIpOk`Y6$7T1+GN+-sI@Z*o$B@rH@1eza4v_>}^DpXK(=#i# z`S67zbC?|8%j1GWjBFo4IOiU|(^+R!^(vCsvvs_qZN&az9jH~fKP@(k!J(@Y^y8o1 zZ0hd*v{202PJ;%7+<1Uj-QKn4t#K2T9^j;u8&iWl&KvQJqs05>TiV1(H|ML`;k?gm zz3?*XGBXzgy;sn;vp>(h54;l$>;go2SIthE!H8)&KXy-){l{du;bQ2%c%;0YX6b{t zN?_I6sp2tC(E0H`;u`uSsWuB-eVq=dyINEAZ?2-KdN``2m>DLj z)?r};-Qd&Sv*b9{+{iM+^nNEP(s=Zk^1sxY+xt8zHem(}S_?De%9`+MhTmsDxEcZQ z_onG+h$;7KJbMDiqJp4cKRr4?ezq#Eratlq)1pW+@ijVfcAcfBh z^0$v3q&{ltgoIc9*%%Y(y}+NJBtBbzk)^L!ALRZLcu|ZVW&>XS3Zr)wh1VRfh0pSV zF9~3UR2P?5*7qktEh86}_Z`*zGG}~R^}mr<>QP?It4rVSoxaFY3`q!AhxIvT{FoR}=*G%0DZEmA; zH1g-g1TUoYigSK8k{w7 zLJT@NZ*9TrR(3t1lQOO!%NX3Z;=md-b;_6QoTztq_ZXLBet6kzX! z&=d?9-g<}0NA82Nrj8okU}78rUzO(Xf(>QP-0ijl*ksuLJAdTDI-2SWgy7SQz}7JvU)1j2AgtFw1TT{R?3gq?k^Q zWs4Opp0m*PG%DFq=`^a(eh52qD2wwIMT?dt$+0Q1+T!GVSW|<>y#Rgp8 z_&NDyHO1P#(8&{@448hTP7?zP3V0M7ybmUYzc3HvHO0<9;xV{Zl5y-8qtPI%Df!kd zg|urj8YpW%2&qU_51<|@!7>vVF1Es$;kcD0Hg&qtrkY|UM3mP+xCQ>k$r11^#7Xc1 zRn9@&l4PSB;K$}>cz7f@3L`}BiZ6IoKQb%4YNgaqGBA$~i3mB9@d%#*I-7{ZA@@8P z=TT5&rI5op`3Mf}wXJgD0<2mT0f6ok{@nF9Q?O1`00qSKPTY%{4VK9{yo*&20CNtX z5~YHdlPAdDhg98h@p%g>WL|uy8-N7G2G%3jmU5Q{+Y>0+of@kbn6uQw1ru<^nHKDT z6bR4ohR%iY1rtMz~{ z+qoNwqG!2{))hUP(vG4koe^w@Ek+el6|Jjg)NRY*SPmeb9OH{u$H4W@za zI?ATwi1(bl$Kn~fYcHx}p3kVOf%DSHJ$2zU_UuNB+foHm=SDhuMmOCxH?a@``jJ_M z63O@Ig`KJ1?$&@bFE{uxo%vnj@;C=lGk)|Uy&3G_!whah>_}e@JAUU5H`E1Bwd&TA zuu5+Y@T91mJwElRyq z8MLx|2H_xYazrZle(Sm@yjB&X9^;wct}G;NI!rkujW;w%>zeSv!{h%eQb#dr48Vtf)8z_7Io)LDE(Sye_G$V9XDU!>)RvS+j`c0eCVO$&Ga zpl!}@Z;HH8+g09F?hLqQmUr7@2=k#~t8d5d;F}<^AJM(z7{NBpcmG5db!u3@wWW{voB$LX zo*A{XW#b8n?rc0EOL6d(U0J4KgDvQ-Ym`)Bo*`Dz9N0xLN%~rZ7p7Hy`K@ciBr*;?N%+yX- z8#$+Q%J)B@o2Sm{`#x?47*t-@e%*$iqfg^v2$r;7$A&*7=q;qspkd5XU2syStMghw zP@303lN7yBJ0v;1hE%GevdqdngbM7QaGk*@Zn5sVVY;H2dB)&{`>9Lhna*mY13a_5 z_J%jxNW(nN8?Y?p&fO>*;n3&>=odgpHCP#_n&4!%HHQ@brRj8734XFOLspJOkvS9B zy)Ss}expE2V{>3^z`cln5BalFu#pJri$#L3kj~gHm_|AGt`t?%pDs9^qRK@uX6q8* z&6g*eyKGeQX`x}D#vVjv)&dDJYh&!_;ju4;LkZJ$keztVT# z>#Z%GJt!M+;!SP6i3^R&0vPI)yw#jHmbK!-r-Yz=5&j$T@0fRFdpcj4UG?|xXy~u`TRhUtd9aM+?m!_=+S#iy# zW4>m6wP#+@X{>&o;!Rx_yTYeRHAzGGf0|_u- zEg&pg4071yg#Z9%a5}BuGgW>D;;ygWxqj#7t<^g>$S%qj3LTwy;st?YWVAR;26_la z-8-rU)79c`N6}tUJy`raUJxRuePq&;6LAPm)ZcaAlj^pl^s;YGj~(JPPSd>~U*>!M zu|qySW|MC6{i!q}G~mo`a#9bq=~NlMvNrEK%hdh2fbX5V(IiGFGBNMIiBcFPft>T( z53-zg(_z1%#aCjOR8uH-2?r?O7%<8YQYg~Yqvs*SQ5(A};O&CZMUSa;@p^71HGILw z_i-qnBrc@QqTDas4$AN<1fty1@%B|S9q_j;wiRfv@)9?W(uRf%kXjOm)#Ew7saHpA zKk{yr4W0UNL7Tz7pOnUf^3{sH+;-73w|&kSBIy|%L3y9-p6XJ{CQ}TZ!DTnoXHYNA zLeG5Uv8YvU*4uMxsJ9E}b|0N?818CkCq+D4*)YkfX9?wERuJtj_Gyve;t{*ix69I& z_?&Ke_e!iflJ^JY4QS1k5R$PY@&ZPo{Madg5Ytg>8G~KMLYr~+J-BR0a#F70wgBEW zk%-(j0m?xb%mf&^=ckk832vL$W!dJ533lP1B^kg`mrz3qK_HYaAECU`Oj~*pV5My$ zQTc+4GjNPOBv0j2KS)lO7}06gm+swMiA}dHFd&C0&1PN9^AKtP9wn!dY5yQOwWvg_ zid90~HqF-7=v~k>W7VsQS3f5KcCa{9_E;E1 z7zDF`)cRRYc|>bH5)V^iI*Y1isGjZ|CDqfhBfC}AdaTN$H)TN0hvI0`ghlx!yn}IM;Z&ARhqjRX$}_Opk4P8Q z_FHj>@2DSUN57WuA)p?_@nycp=ls=>T63r(jFYqPX@K#1Z397*+y>l>{z3ncTBvI~ddnXL-sa>Bs^PaAK10iPab|WZ zR#>?Z;3>DN`HGdg{+*i}bWX5;=hlWf;cVmmJ8K(!IHiAQMdgsTwh-;E+EL+&2+bk$s4#*|a~)4;WVsb*KZsj-$;t|ooET+zY5?})Y>O+EaEi~ah zh@1D$=~}OfBUoM)uusWao6zoIL>P?nEOtDDBn{NHVQ60GjwHNXN2YBuVFRIP8>A zP0TCvvAMl=`}WP=?a+r*yT3HJ8*@;MI(oA`jf{>w1^1wySDmh5<^4b3^&V`<15&ie zNlUpG-Wb_NJWr%=#Il6!+Tjr5y?Hjq;O>atwO=HFN*jXPjF6 zw5*b`qS{9$3pkIwE;OT$bDts)(&Hr4#+}J82vM=}ALRG0H-<~UaS&ewky*t;fdA&E+vIU1_8`L~AtF`XDJC<0pFIn1Y{A?}RGk31}S9vxDXcz7ZelA`)N zM*MGZ+b}#=foJKA`DWG29<-DeJ9ne_i2PV|Z6|mjubX_aC$5#TkSjB&W2i-Kp{d=4>~T6p7KvHr%-z-G3}c=&i7t zN8E$MIL+wzeKT37$jU#+$CFV~B}-LD?APQ^Kny1{yXLA13iIDLVUUG8*<5 zzQTrW29>6bu#C5!gJ40N{ozalMqs8~CRS>P)zx?aDQ@T8YjIds9prrOyJ~8KCh9PT z&Tz|&xtm;>xV_^)p17;2uWArh4Xbe?&z?Fr#n(7#Fp@`>X_XhJSJdWjZI@MU#z(*h zuFCLD`oZBLU0&~|P7&Ah^!WK)*_Rp7*3Pp}IP?3juV5!hN@A!Ps4h&RFJAUKcV2x26PDNtWg6-X-%}+nxW_3g+{!u4>=JeJ zFuOcih1bXsbS5Eeo_gRb$nYVbKOn1knP5+)x=@|fQ+ONo?QwcR3j=rorO!5Q?W?>o z*^Vn@-kmi$s|`w(71rR~ZU(B%JTxqLfcD$mMP7s#2HUrEEdu|!2xoN9vvsPQghoF@ zU$aJ<$UM%?7(=Ry{{4KK4OJ^^T5ycX1{+>5$g}1mCYq7hEdX?LV}#d~p*B%ffWY+o`Tgd!~%ST$-~ zLg>a*)E2ZJ^0K8rhU(){?zz<|NR4Zd9b16t+?DXQK9^tx#kNMarH~t_d~MOh$?MZ2(6kLhy=q&UoUP2;k@ERVi#gi)4EG}#_ZelwsCfV%3?J+SCZlX@)?^cQb@Q3Iv z2gVqUTHspRr*?+eg~PazjGLAYxL805UgCT^QL2LBLe;tA=S7xEY#Ij`sd^<#v{Cxh z4p9YbnlsBQQ>MOWbXd}RSO{RuL zBHVulmF^WYV?6vP!aqul_mERq;S~aP=i-{F z`UK)uc5)TE{CO2>LI>i+)XwdQ{|0?|XSZazTaew!guMubUt- z#Rxy9i<4i%+<{-LS=ly^iAmB|{HlK)=KK3z+SaJIbbaZ@(ygW2ODnyoR(N|Gy=rVG zce~K0COUUl7v1l*#d=K=tH^9k8=viM`<<2?H}y3gwOH=rKODL6@I#{or()FdA7G7JN`(2O-(dhN-I7{~8Vp7DX(`-7L9wd`Nl^-XA&BqV#Z9aSYZ1Xo> zJbv-ni%%Xtz5o2l=MV2k7aXqXtU$)Bs(MTi(Ac)`uB>{TblWVnx1l+#I?Y~Wet_Nu zY%)GF?d?UgV%8L0%5-_+Pft%z=fT(Wremc(9mC=LdA#mbyiu?C>8E~0qO6`Vs|udL zH6G8DS~KQGtyEdgl)7mQ-EBtL<1t!!;V{ap#E%xVDxWWmluijttL8c)2KC)=2;S_! z`SjEJoAKDJg|*7k+%&iB**Oh`Y!HMmsaI+r#EzcZ!y*6s>8Jefc+CHnrMAekyMBhK z^xWijbqJ!YRm|%8j(tcG)OI=`&E5=i4t8;YKG&!KS|tyd_ds9^s@)CF*z9<6`R;Mm z`2s71g>@Bq5?1I$3s%@2USYlgiqB(NB4}_v(Kv{J1h-^@<9XAp_iYAd9KY_b;Lg7= z7o=!0HnB5pC|*imUepa6$SoqEc~U|rPlfPvRlYNTN)Nxm&KA6bxXMRFMX1{kz!3~o$bHd?ZVhOfW0OuDW))aotD+C^Tn-5V9Yq8;S?~-517iknPCLku?0~K_DUP5#m*BMZccM7- z-3Z+*wKWkMK{k)h=*GM{nUR^&Y7H|yeZEG3;aPv3Fg(43@0`#+cp|oso{uN{&Xs6m z3hPotIsfzVVe}${tm*p^OP!Tqe<6jqWpW&IXT!9_ z{crBzLQsn!I|yQ3>CRyWB`t0BC6i?F-YCru994lm(Lm@^LT33#eEJg)O(dS$WP0C- zZ~1|?=6;dH6cUMsO}X3<7Au{I3v1j)|6A$B8ozod>$>Ro{1@$Kj4P-!s>-XsS_a<-!s_e1qJn1)=6Ep zWh+1Pcap&L0+;Iev@)mNS&_UQ(*3~cq zBGgaq2cP~3L3Qe@&y}!k8Z!x$S(eQtsF-sEcn;s*{B`2mOkgYKu4$`LL0CN>nY4f5 zj!?~Xw!QT@sQmE-D~nki*52R(-Makvmp-h;j!=`<)bz0WMJrB3s*Qqf4}MhSa?Uz* zpag|}n6huN`J}cO(lv^Q*ogo|tvjw_XPSXy@^RbKdVGfrA!rPnQ%Z7UqdbH-8Q`Zm zWUV*`8tW@D`&Jj{u(B*b>h|CdFdf8}l@k=izn z!&ikoz@!{Hb{e>I1-RK4M&^<|5DP1&32C3CFoMF*T!gdj<2`TLi(v(8CC6ZVc8SVay8sY-@K-uk>5HYAT$wJjsirlFsx1 z9Z8%S%2rb@nNeCLMLaTjrYE*Iso!BzCZ#_;wZ3e4xQ~1>rO03cOg5ZVs;^{cxA|a zQa(m_K9#+c(@{lPLRl5jKv+G&#lf)dZb@k{2(A&VurJV7jQZq7RfLjG%AF$Rhh3|- zJY2VpZCIpOjh-{6%r*f6Xo4aP+p;|dEn^UzoTDGnVr6xMu*m)4E#Z!a;+H3RJX?WY zyBgqk;3vR%=Ptlllyo4%5#0rt4P^<2MF#}WqKa{D)sxVxF3&33C^bn zq`@?xr14wR6z7>;3G0&M5ZRVYb-x1aNT+Z_?(Pmh+THEq zpM`~ZG&zjl>?KwFrWm~0-R&;o{hQew2vA8wo6+MOoFyH~eMwJt^j1nylC@JSQv|DZ zHH+z7Z?GcZA(I4R@R^sjuWn=0aE0wm5@-UNq6Z+%6xPi1V(pYuWcci=Ha=NmE^jD>F*svNA|xnC_>i5 z$fsZci#8mIGf&Y*B3CQBXnk2b^X6loxgxxueunb%p?B|_Q_6%iHFpayg$7#<*bd#Z zwGhcV(Eg|=zHy*Uy->!;xAuU8zcD~I4N6iWIp^9vvk-kAkA`$l!#B1A@E2Mg5pzRR zcy&_(C)0bqLh&!`+pw&G5@O0bL0nxOW(0!iX-5cx6%ZEC7PeManf%{%c1-a|9M(CVVB2|<+N`H^CC0bC;h&uE5b_qk zwKjy^DAzfEI_3>h6bZx`6UG-8?RW_-XG{l^pcCs@Xo1e^5_i|vGk@` zoB-(DmG1axMq^4=>gKGPwJsTnzn1Uu1>H`wl`k>@PG8axCufMVI}|l|dO6NLfACC( zbY>zvat7mhIyg$I_kiS#39|~ee*?L344L~RmRO%m58n&(?71J;+$*=}d%d4RKL@n?Vd`^CI)IW%p?F z=0pg22C3wZoKARHp7T(VeirXOn`0`{-UDNy4AbS>$Q=DGsXxYZv9?&3Vzo};HHA*V znr1q(S^S`2>c?Km1S)m0)ZErqM3^VO*i#}X+- zUlk3A+D1mDiiCe@s>3)_XawSN7UU%)Tumx?cs-EW9K|DRQk$&ux3x00Dy$Opxs_E(aU72fOeIXq%Vt%NT(acC2MS@- zBHV~@EP6?w@0u`?3StaHoni(Yq9~%iAW7XzUC#As|9H-<2h*-=kAU*v>+k?{$hw2m zU_Kum9`a=^Tx1{+vOy}Dx#PG1^$MFmb0U!+0k(g~ngzoIzf+t6m>beXT6PPYv-;D* zmW4dKs>>=aaAIOi%L~gY&jtyM1Y!ZJxf&eJd~Asdw?rVt6n0iaWa2j`aY}I&ID~@; zd_L+*HZOZSK)~9=tzME1{ad|Ap=}7cumY-99^PDoV_Gm*-^i}wqeS2lw?)EecjLwjLlfu=|h~h;Uga#hEKuB0gyH_ zCKp9;Kx7scRnldp2IEz?iwI!3A<6-8+4erGtFPdBhYpMT}fy;oOSU zjN(R}g278}wtV=yDq{Y?>`>mD1yQA=crPAI%cvjiKI-k>d9=HEYj;!5e;e3!;$qyP zBP1yDaCP_gquqNwjRAt!DLfA{tS`*A-l68G)S_1#T3%>7Y5nVfbg4AIWQ zoz>lYZWay_#?r&p-8-ARcigBB(W^px$8Ys8Jvi(f=c6hcL0Sw(ep8QjHyz1v z(IOenmb<=t@4Ceqc#wyX>$`UxU4fy}1t^^~JL*gl8XeQ`o$I@|AK69_LFP5GwtL4- z$~fNxaZL{M%m;RD_nt%0WLh3hQos2%f6~iAT9$c1%LkKlfA{vP?YkTl`DhgO?&zf) zr=#SwGl`1|SIux4f{_%^V$J@L2HeHY0=1H0%B8-}3ELC}SF!h?h zb9>hZWfB)hqr@A9H}mBrNd||Vy?8Xra~~0_yPMu(dmRhMf-yBbVTgv=?mYL~SBTggu$JnUL+NL?H2IQQkp^ zR_O$&7}uS<3))bdW^NG&$YgRokl{jm_-OauZ7gWacU@>c$_rl}JF(fIG?a)Ol0F&) zWgvfp?=H-TUjxs9NcUTYz0Db`6b&`~QIl+}YJ3V=^lS(i#%*xzSfuecOsTa}&~`#f4;-~ZK@ySuM`^qXJ3dHc1VqZdvw-7C#kCi-q~6AsAl_8!nbt3Cc_h5uRQ zf7bY)>-^6R{^utDW5pOf(RWvG^ZPse54XO0kN>()|E%%LHGa7!FByQfhg`%8J!$qj z19pS!+~7JlxXul(bCZkQ;v%=W$Sp2%>!D>We@uAn7V-+?o^)Qkc&`Ln(R zbt1Fn%H?^&<{9*g4Gx{u*kBHJlM6G*gpZ!#lb~<`8Y~B9&x}4I{Fx%#KAr-H!){Nq8;omi_n) zCauTS#Eq)$K61^*;7Wkv8#C1rmsOMH!6;3#igX1&UD14iL&WTynq?JNQ$8#bm8aR@ zu*kFY$BEuUY@HV%(;0{bQM`O>*uzVL+#0Q4Ovs7rbe-T9jwyegw|rdRib`2Yfmd!0 zxVB20VW3%X;E{Y3=sF-aol;xxW3x7HqBZU>&`hFskB-M=)x_`&!3OIt+*qO;Ifm(w z4k7~OT~*L(NVdI)P&Z5@CPzr1pYavQ)(5oed_d>aJe6zNoEeK26d|jL21n^2$x2Rv zi~RT_++R$`FK`J-EvxdJSx3FS9J^+yY*hL6?VAz{;bE7JV!-X=+()gC*CH9w4VZam zo;|-$df@#}pYe?-0xKE3Uf;gyP#!LMp$T0wDHd5i9nu<`PN0!@h=#$$LHvOkRMc5< zbiOoUb-s{Sj9i$C{S3#MHiaSq`i4_=UxPZG>DR;Z5;})h}wm- zx(7u(NcO?UVf$mY72?VGUAMSvlveQYC~gcb{hvVu^~2F6D9Y2~X=1T@JviK{DV`*Hm(L zyc0gWEIv_|M<%M>waTGtgd|3{9z$N>qiB>nKTHVgO`0Tb5b|#G=}J9jT$if6WSueF z^HNEQYFM-6^j?t+D2=@+t#kN}2e%$IH4CRg0zVj2X9E6{nac^x4ap)g%b?~bAs0F3rp@y~ zG-MXXK>&`6mCJ)ohyV0Whs*g(ohMokXH76O&v|2F1%aCl%2|Hevb|p0L;$_}f zh%{0_&L6Q<&{62-S2pv3YGC83lfM)o=Q{;IiqseBTN7bkkyxbnZsSNl~VG29C#x#r%(PF@Vi-P)!R?((kznrL>EaUnXRk z1@aHohmGbpG+^HwHZ$DCnyH1+wUw1sJR0#;EQI(bw; zf5q@(T=<*L*;ba~8jvZrU9^Nn8(_G%!p$1@EceCSfA-mp-b zL5Qf_%7pHeP(&OxO`(aN<#}a(<6&g)kAW(GhH%mo)#TInZ+P-9ZICk*OQtGl6N6lc z`PAm9A!XZ(ZDnxDSF9^WEfdc4^pgfY@r|f_?t?Ng&;T}vbd6D#oJa_boJ(RjRC3IO z;oy*Z5NVa4WJ%GNYO)#WM^~>D<-qKnn$P25UgCHPu5KWQzFYJ(y|PzR%m^DNM!Yq= zm%!M}7aOE@rE{5?rL2W#J}?<^t!D|Y$mAlPav)zHB**C>+2+GKy3Zcc%MR|pA}s+d zjMxwv9BQk-L1EJ|VGDpI?*}>g`Jl8Qw6TRIj@_PR7&uST%qQFoHmX;|Bu4 z(g&x-NC@FYVMBdHA#fvjIqyg*RG2EyN6U02(*E>TnXQ>W4*vZ5XghN-%3FM4~j~*7ZS~VRn5enaoBcvQYmz`cb$VaK_DB z;%v`yXIP^NR8FiRYtSA&vLwd`Y#%2lLfQd~ zI!uOB9NQ#EkAqEK`yrUf_;#FR)z?VByGLmByJy=FoNK##bbE!vf`dfct)oJ_6Kp6@ ziV$I!L4T8clnzcKQp5drJ9qVyuax7NLl#fbPzsw!y1$vG#=T{$v@%QZsI+RTuguGZj>Hmc|o?fx=AY>nYSt2LKQH93k+t- z#3h}pOv)uOQ60_tQndWC9+#r$rCA^3*)i^Is){%(5u(x`4{zZ5 zn!`lSI*s73^+9HSK}% z;EcTXc$jU{UUYd@qXDhXG|StCIgJ~>5QPmt0g+nv)h)^av2Y8EQz?834FsrFD}0Wk zbL?@uMTh~p33HChVR6A}2C&P1U(Mnh)-6PDB?=%utmzdZcEhprB+b(DaK-~im0%IJ zB9}MF#4Kz(xD^r0$?NGYCE~#28xir$Sps75BSq|jJYFrA01C}@^P9^?2%Bp2CZC^3-&$L-Eyb}nIU4q=O} z4ijDE<2akfqtWU2&CXFe5f7W(dVY=7l0I~UYbMQfALuN#GX&w&20I=?>XEG?9$zp? zmYB!MN%M%@GVx^U<6OX<5vp^URtWjI5Q?Hs_C1)Rc)1UX(S882r7vD>*5sveU339^ zBTQJ7o7)|?>rD^HX?uQQ1dT_*84!z851IX1OIC|{^F~KNY7^ZWH-HzkV&_G>s-likvRD5dhqb-u_idc$^<5VuuW&DW5hPD zZq}*tLP0}CQN;H0;pvj1oh~iK`8=fIYDVvTDObBoKpvkHhp<_r1Iw>BZ?KyDbJI*5 zUa>1U<|Sn6qYoldBK6pqNYfOpN659c>T>IOUu(&Y?Bgie!}!D3C7+xUSS~ITfLPkv z&lx(+Oq~}2#b8zQ>U@JZu+l}I#^Hk(=*Y=yG!L*YC>~^XF(v;nF3nz&WG05<5UyfU zXOmHx^li}BSs=>HzC-8gAQnMUQ~A!Ia*u}+kempQezW-(k4Sgx_js}cB5g9nA$$SX zq|PvtnN(Fv#82SG6J^C`@Y9I>nXkeRV*n{oByzf$UJW67?ZI^6oT0K^9BOyD_g+gG)=W1K#67-L}7%jP1mZ(pwHz`|x?btF31XeBh+GMRrQnFo` z%kqx=%6lyoJ0e6Fa+3Cl)MIBiVADV-5!~vZRf$ZuR@lmS(3Eyq+j4^<*`L_hku*{J zXd4cRfj0`cAl*5*El8p6&-QZR%(R#Bxb&+T3job~V6b4D*_?e?NTTP|qb*r*rk|dM zT3_S(#Ra?ZL&e?Q?(oexA1*F;8@6>oZs7fFGS>%AGFs^LKOS;Wdp0o55w-I&a}|)0 zgcWF*Dw8)3u50Q>KUsT2FrNzzb$jClIgE!VBqj4zG0lv{4gx;XgAHV@a4&(f4L)a} zMm0ACFXHiC#$cBr762L2>PU3^bcsL_xAk4M;CjI+{#L<(HY1-yoQl?9 z-jXkVskO7HfS?Bl7vpS|gWf%xu1ts9!M#gsC57F1vgt~s4f@lp!GdnK>})h*)H~s& zF%RAX5E7xwzN@_NwJM9Jj$*d9xi0-S?c2^>7azE#0mS?SPF6fhAe#5gHX;_2vML&^ z(!RdqZ7^MBI)O+#b(%F^aFiHSRpIzJPDi-UWp>ZfsP*Ep6YN1gL#z&nx#|g?Ike$w zpD_d>z$TLMD4Kxu47>sKu6rj;HYXE48Zy=e-i$&ac?)XT>HKBrFGO28H0_A<#X%P^ zV^`^XEoaIGN@d1dFe(N0NQHNRHFwgcJcWf3l*`;Wj(@aZ-%p z(JWu*Qi{rh=m}+xLk3HC3i{UgjlZA=C$LYOA%IQ4dX_&f5hC`YZu|`?f z{NB};1rc6xDz>$Eo~*~oNlDbmjJY&%kya+qtlh(iNMeDO&OC!qQrx0c@n5~P>aMNe~U=X8qeXm)_gnN`_ zu(Hs->@XWH3U4>EO^7?&yE0D!6yZw?CR{FV{k>mTGopUUlt<}g;sqUPO0KJvm6djW z>1*8<+6cK1FO$O!PG*xA%UXs?KoECXThZa7Mixesv-Av~%M|UE`4$O~}1QGY)wB1Q69@)d} z7(`1h61Vwr!_nwR8-6`oTdgDN{;<)Q{kGzV^3BoF*FOEE6BW36i+4e@-67a=ZcnTM zYj?>oeR2NPG_mv5Hgk6?1n_;iDoNXTg-CTdajh7!PZseCse>FbJ*F zyoL0n9L;^c^&2;G-yr*DkW2syd5SP#k})!|bd>tDJVr2$ryJJ|mY8T9eV{mxX?B$5 zCt0*eZYKUj$JN-B&7LExW=E>*50m42IGwLaly)=q9EnObOpfnQ3*A$b-n!|XH494N z0~gUfgnZUNRm@y9$o>|O%t=C86yZ%S>SMIR0>{`FTO_RyQYL<&uZS(HRl40n&$T(B zcG<1yMytc`QQ0g>rc0M?$#-q?*6o_^6>|) zKWbI2R_mzM`rxnq;pUg4R_lYm`Q3Y8eyjCIANE z`Ke=^h1qYluKWqFnWWV+fBrjHFJJYe8*$d8k3+{Lq9d(kgqIVJEdmYQz4&N(jDv(< z?8Qf46lMIYE4}U-{kPKVPNoR5x2Kw;bBb^!+oJ|May?Agmog~HOZy2!K zD;EY#if&xK8t8D&fGhI+@>R!$D00uTAX#b6XO!OgsLI@#&~7j%2%23q=N(D`%+qpj zC7csr#txR^EO9On<9+btQ=DN#>z6MpX*0QcG!YTStS>JYdD$gm>lV}HYCKtvHf$}< zYj9bW9oNlvoW%!8@vG?&q(ra?-pSH{E9E0JbXju;=Bn@lWb%l#5tpC4LJl@qhS}e>=rW{QCF*R*IGQSNxUu2ZL5^CH{;wk+fP@ zzN?7U)DIu(P-TT`F(_a;s zzTM0ne!kWeIK)5smdwQ<&#J9QCOS^4LrNCuzkh0?l^)hU{kM!HU{ z%Oq)$0&*EmdTU2|l1wLk{`;vph^yozKIOkZ`C-_>y&@eRB!G{9bsjvSOpP9pQX~LX zAoXC`qlRkGXzLpvUPe+Dfs6_TP}(l+*cjTNJ`@ZZwsbYgi;9}!zrz~!mbM56V2CCg zzxLAu(sPS=+(8P|{;iw0w@r~8q-9l{;_wMGbSzJOxzZixgQKMAra7*s9;QXVjH`GB zq{cF-HL)`2&nTr0;^HVtCP}fES3a5j?@#_CBK?2=517pUZ6UKu&1Cj-emkJCKl-*e zqA~75Vcd?=vg+HyUx+HS+?^CTC1@y%fq-ob2|~O=!?NlxL%b|^z7I#0qe3k#3js99vXK?>k zcjXS?v;ksXkj@gHPoYLcNbqnp(bSju9+~{$3PmHZ3(-ZsGHQP_?)h>rVu11YVKviB zZTGfwT2{%}9wGI@4`u7)!3;-7TAIgCo|~PA&##zA>1(qEufYj#QDl_X2vE~qJ)0n9 zzw#vbnOpux@lj$}z|n@^H9KQE@}d3a_TqXpnqiQ`!ZT8q!gt;AXFZpSdYtsLyiQPL&!tpyswFop&Z|EyG8vP5KGNy|c&Ggf zaL(8F?woTHBx!u}bmWS8E}RPC+1jcT(+M}sMhZ!CNN;KEbG!;vRRG2PaH9+Y=5Nf{*#@kZ8Y*ZBuy=>Oq zum=AT`~3PaaE$ZPxMYLGzf~aMEW!AFR1P0uOvZ&Md8Fjy1YG>TLfQ z)tr`lV-U`|D-(8+9`I#MocE&GhVr5oZInfeZUy5gvf-T?zuf|LYI55Cd+nHKPo^8< zItxJ({lSG+R+munNRq)tEO%s7477&B->sU>oNCLmjRik|DZiuKP0a&Jam9iVGZS`j za1MY|$-gZIm!ewLHj#RXA^tEfW~wI%wG060>;T+-TZIq?OHpUfD&DiL0;Y7NtXxV+ zw1~x#AO_`(^Kzv6AoIlJyYMP)ZB7`&GWk}@7-Bl*{d+{|ApRd;w18r|+c*ZT@<6&c zIpr!?!{G%MfP|gjyd)Eroh@+#yeuX9j^wV7jKG!I9}O(O)Z0i=dJ1u zY&FzVs%+`ZpWPCxIeoQM#*cE}P>$6xCw7!@r6V0;63Zo3%aE2hr1BwHG0kC%)RPyT zvY9?O18lZyzqDBZNy%IISrdL>DTpzzMv@)N0I*&_<>vhOXLAioBRoYP)lQRl z;V{N#u7%rLHr)DI%I1oy&l*1RtV)Hi_O598I=}M|+L~d&Qc2N>} z1%a_@q9DrVQA`~T;%@Os=%hF#hID{fesl%|Cu~|2iQZ_=tLQgUl8R91jg7!W*#yo& zk{CAOglSApi}G-ndE6j|&3V9wZ`;e~bCYnx_aq)EjEs~rl^>|SNVOiNI!?VCS?al~ zbVhsjjt6PpD|DTsJmA0Q?Z?~drnytopsv;3$PGQG0o7Qc23hs4DDWZCxb0R6WU_s@ z8PVqCF5L6u&tcjr*H$C&eb7qg7|i zxCfkjtFd`D4$i6`P&1Gci}$DMZc6s1wxZTUjeNuWRwEP+OK=g5Iu{%16)snhqf|v1 zEe*MyY{mmuXhJyxrh>y_xY>u7Q7Z%=uBJ1sip>dlcC4%$Odt0k;T)yEIV~_06}r{2 z!yBQzviTa&cIRv0)dA;$`DW~%Pw8-e6>Or(dPj9;#iItd|PhJt>e5bmT2 zEJ<4bNoXWbCR?+mH}ekz^O+#h<*;QUWHm~5{rH6{!L8G zu+<77Lf{l}P)(yPWQT$%%&S*(l4?6TkvD+Cf$7xhuOfK^93{C(Ld1OtkXkyAP`8QV zy)n!4tFAxMh+JfPRCR!faoG!__$*QwFgkPx=Cdcc%!I(?)-? zr+g?v0^HrszHA@eg{ns*tr6&s6KLck zl>PK!(GM@NMhcwKDlPy(lth`>Jq%+XT#~y$QZXJq+$XN*bG13!=!gAHWt3^X?tPA> zX#$avBL#5Tw~*^Rst6xT1%x(?vcx>~Sthw*dD4(*Cn?2fp4^^FS)$LD8*w_=z%93f zb)^-}ifqe?B5xh@<~oQa%N1AgLXytSoGg^E_q9%uqwtf`2Mn@E?4?wyWhRIMRv!0~ zq|xD4=jEW#OfsR`XqL`d;ltc@E_Py9mfzPOeu{}Q@*WI%`&9u1v%D1}&Cdi^e@nea zek7=LK?dKfVf6^xG}X3~A5BG^Os%=C$jiEHTV0@`Ke*_2LY#gGpALVF{un#}J{l@I z9b*AC+xGFk80IxwQzqLxyyhJUbkDoBb}XxdRr6UqR0lPni+aT|$Iv?GL{}fE+%0*r zF=RkNVio1IFTmAs&{2|5MRuF^^}u)WR%FOosOIrr285ziGL$mLVS}s}Tgo+OKizxOQ4M={+ zMfH3E>3l0;(Dv&^l3s?j4W9(9NCaq~tvP>M3Y37|w=J{qZD(d&ZrnL9KFF})#j9}0 z7`GFP-)$zqs(RqZa4^8WS!0WvG}01h zp{U`dJ(xm?S%e9JVo_K!z)PPkxwpv*sET_RokDJ?j^jE>Wdjz%3|{QXb|7V|bB!*F z`S5=@op(2ScES+T)-P!r7%W|V?W8Scl=?+Jm-oEVr$)rIb<6g}D1f7MOd`j)i(8@>wdA&W4(P0QK$C46m%nPaY!;+VC`B znKIAsYAxF|k0MX%G|I$bJ8o+WC*6k8J2uU!DxEffaclcOWc%)-?7D~CXwTjewAGng zrZ!-y_nBh2lZ>}iZ@b`H?+UUVlfCK%Op6GNH!wp%tU7)joa5bCuJ*~`F!)c0b;=P! z*e+C^(==WAVOb1{#eTWl68mgNj!xq(tf-+qw_qXDFa_|4qEV!yCo&}f?2w5t48nsV zr@qtIQ#XStsFL-t^bMV$gN&llJ*L*o_sV>tXLjZjnMb?j5db`lGx=G{D0(?3V_NA% zPtxf`RtJz+)a@Ch82xObHYy|#$wO4hL@fNK}tfS6Jz8P9qmB=EgKp^@o`zg#d;xm zueSA2Ca}@`WYNcTTywR||rmO}b?VWUe<=2vnjSplTl9px12`$;Po#Y2r z2%0b$rBcIIg>m}Zlxa$Z0Ayfy5E78kNiB`Y{D|cLE(}HD+Ho`-C2Tz7QeXug~Pc?%bA8+f__Q!8#B7P zv-r7=Y>xnFB%slI|Q5ij!(uM=ceWcMQg#dbNeN$KBzo1etB#Ov- zD7}zWfp;ljwy{^2=cAL-bf@x4Cv$3vmBz3Ub_s5()Jbdge;Atw?m`pokn`-Gym0=b zt>5i=jiS@7)2&LjgZn~rsx*0amnd#rLx}=Bt?LfnTBhzXo#!YVG?W{;GY^MTe~=f@ zt6gQJD*6S^I8JpCA-giP8MgH-q(ng3#xhTgDG^f;1pjQquMZLQ4B4UW9 zw869y%39!i%y63KD=GOLogVjYV^a*i+vq8|AY@`+Sb?WrGHD=L0q@N9AeGB=v|3&e z?)jEmiz5LMY0QQdPPo#Bf;!Cn>}qPtU??2UO6A@NQL`dpniwKSB2BV48IQJjp8Rp* zd>k^9NI4O(WlsO8bvFz>t|gjmt;Mx9tR<;ZpQwZhkc7!z<-;w9PLlz0Tz;0?K8@pB zP#j%#LZ=qHA>@%cHTz-ec>tY&VRd8+9LD=h7{oy>Xw1c-XJ1jA8f&mRJRLSBd?>m| zzf$yvymnK^Oa+#npr2D00hO18t6($V04pnoSC|c{=M(2^P)JNZAJorzE~%K(%b7rn z>KB?tLgzAM;o6RD^&Yq~6YlFi2jNfhRtb@9H5|{!r)S~e_3+Ob_-7IR$-_T=@X!75 z&pG(#upMfkPqr5x-2nd-;GZh|b1(dJ5Bzf<{8NN~_UX}CTT}J}08V*gIEBLD9H7wD z!<79fjR$p^2O<;OalU`n_u!^RZFazi)vxm)EAVBL5J9q@kGT`Le3W9%t4?U<(V8lz z%xS@ut}>!&OerAp*>mU4aqtSe$C&lGbLUjyTlpqF#&y9Vn8?Tt0^rK6k>G5F!zcsL z;9xbvepzl>>PhZd5Je`tD;&-Sp||4skV%th0~j^8gybKIffC)x>@98fq{Ah9+Yw}X zhMM|~0Kp#S%GJ_TQwa`|kv(lX;?!*#^mIqF(1UT8hJvE35%~zO8r2uxV1nHwxo_Cc zmlTAy5D^c17o>?T@uKAkS=)XPgT^Ll*35S@Ud`WgA603Vj4y2aaFe~6+A1GW?C1Kk zXRV;e)G?9Ip27WOiA+f5kUzlASTtin9R$j81E5f5TNH*pd-i%GAAun`>H2f+rMujk z(hF(-Sxb7-mGxY;@|YlFBahkK11DYor01_0w3let@ccClGhHt#q!XEdK~k>);SB=* zl4>LU1>JK)R9x}(rZ_AH4~*w8VV-%F`Ls#Pc*)w36)$YLm}J2m&BX~izJs=Wa^V>K*T3cUK8y?^E(whZ*9hAd*< ze4R@CUXT#gyeJAnyinZ8h%!+?rJ#9P#D)`zI0!@|@bT2GzM3hPpg~dRSOm+<0@;AV zZk~z0DGGAG@uut(*NbwgBnFrOo9I1z)>+6Sl^DsMRYYe>$P@GPGh~6IAUx~U@u-pH zlSPremXFDwH4O@Usbdi$ui^S|bi+VJ_F9a38iyL>7#+YgFNpCwWB>X z1rZlnX|)&bWa;kY-HFqM#qkzCUFEs0=5vZDf&Abk1}^;>0rw!2jiD*ui3)g5sq+{c z?&pWid7JLy(XI$Szy%&{D{f%!D($g_nTrAjLm(~$l7o$oZpsP!T|trFLNB4WluBai z^gHMLPQwYCg<2!1ttA9NlJ9wu#rW7?9eIAuCFZ7!#9((=YorcY#*5beM#U!W-Pmi= zyV%MK7Fi2FBLwRcyE)pNSTtNGibcE;h$s$$1xS}0RA9#pWFy-TCzm3dFRy7W~bMg97m?5kaRPe z&y>>=Nx@b&)HBo$*w1ZNRID9x9dwr>pMz%mF#LdDbI=S^rMR1U zH;NC6UVu3cP&i~O70}Mjv5g*qT}lod2T>df@I-?C-SAYXi8$d~;L&uY2z()*EAuo>GevqTa%E*4a*722psgH$c(dgO z%M#)&U_!bn008L!uqZ`+d+nd3m5DOr*pY%N70yQj>*SKsGN)qa>&(0o))}=8iQgRl zl0C%bxewElCyK}|=rIs8!r2Yy_ldy;!`6!22+}PLl{S6@HEtT=3>1elDHW zvOOg1na`!OnxAWWq+Zcd=RvC?i;gMF8H>}RgH8Dy*KM=*iArL`hw5A*WXYORJS!Po zR`BKT>=WX8$J~q4;KPP_d4LJu z>I3Jt^oYniDu}1-g%udfscV?0WJ{XIud)+iD1cvz8det1Qjy{Jzd&X`K3#I^@u|WQ zEX-Y?gY6Sd$7`5ediKh1V^y`Ue2uvDE164QWpe2!rgj4vkm*l=V}JYkJ1DW1+HYF+ zBiBHHbEh<)6lEq3#Ke^2Vf%}p1bMhRQXCpAjskSs6{hTEci!_e?H zcPa8>cMR=EsO-Dq#jEY5Vl8M6EV=HcyAE%edVz2Yuw)`X1@#)EcId(xU$N?}!(lEc zBHRw$y1;c65!KtEl+Yk(M51t*9`$J+PwYYF(sVi$qz*+T+Mr}QU5Su*0Gn~QcO_uS zh5yK<-#S>_{}Z`;6zLZ#a-}eO_@&$y^6dXsNhYP3-1qc=}d^Q(5VGLyoMYc3JHdG#~j3!@!LxFfz6J4$} ziq|W3++4FG!BB+0fx${e0z?Kl8G=x_buZR=u#r)*H|mGiTpxLFyy`;si3_Y&v|FMU zgrQrD8=KJWiC_a>ZAb1H{CU)AG^q5jydZ=$l6V!0azNE9u&Y~6=rrBf4I^w+E`l0d zAoR2wZb(IJ^X;hZG#Z;Cg6qs2bu|p6A@+$g*Du0=m7>U1L_sKw=iTB;QDn>YtjO2h zWvAVUA*~mF=z~_&Y_KSDgD@m4hQQU}hNaRN{$I9V7|rD+j-aONUWSSyHzW$G=x{!0 zK`xKeP;JLRZQ~+-27brHA(+KsI3Uds4HrdjSQNx5U(h{W@{~Elr9CBhKMvj6MZLhy zT=ryBU(O*UpfN%N0~sSlksA>OF%vYr+NK=c!=M@XHb_7Ku#U#CqeYP$Rcmkze2P5RyBvR@R30cF z811qQ;DFSqn+{@^DCv69Nk(2Ib(eZS?inuva;*c|dRT;Gd6U3X3k7v;Ll*$zT~dVV z)Yy(FQqBgb62H@;z?!NH@Bq<$MWE5^uLlBM7Lqy)`d6p8T4Av6)d56Fb?7sX#0DHv zUvd#->?=&84#^r{4-dpk- zP?iuc+eP)-yBjYb#}OyaJIz)DKyX%Qo1?%0SF*(+MYg$FAXI>rVwHbD|CyzS$*K$( zPeotd4tm9Xt@)KK=Qzi_T>1BJ_mtXIP|ng*ACu>&;yC}rt^Q`6F8re;ctc`s`= z-m1wysK#c8%($oXK6}s5K&`y9$ z%BvFx z16gHZ5* z3)#`i)!6X_0%*XhIv$wQgX6Z-?nWY`US`~z!Y(IYGsG}6+lGN9EHgcz!lPm!*EzmC z^+QKq$=;BdNju-1L=7@ml4ZN2~-vT`UEg`$S*gflsn`=u$ z!x>;~4Y+j|-jq>DTqU3n70%log`h2(HbFW(4M{|t*5fxe#e%UA3wpD4Ic#q86h&mx zS&yN}UVSiP$5}XB*sTDyo(gnRYoX3#;g$*Tf@SU!rn1eJ)o z>=&WC+>XGc1_oS%B3D>)K_)Y?^~;O}2TT+u?By*bHw;ENj=R1aI*s|jsOykI%*NB@ zAgsCcit#J`FvC8Zjt6tDRc(T(@#w1K`z~lNx(-FE^Rrj*71)tzIdN^3+r#-asHL3( zFYMPKqG7V+C%G*M*T|i5E{frLwsYvOIR}}zh1d<7=imS^02HBLg4hg?;Vp})@taP~ z7N;hsPtA%ZLP7o{3}RKpVfr#ceiLxDj1-54ie(Y4d99XPCm<`V8>Pz2Y?|_Z@Wm`TxGB*W*}$E6}45jwk8_E3N2qV2%)Td?0Ag` z9nhMcX5l0QcFpiEWT)VE=Ga@)rDB|R95kKStI17vEz{FNR;(9uHvUkPbL+`*%rQXf zjEQq;%==uwjI%On!Fv|*pX-O~;%hF$0?&;NcCKGiK9Rab{qSxVnmEUP`ChTUE^a(M zeRO{E)bt$u(c7!{8r0TA!OfI(kgkxie$sDGdAJZM#Ov4dAY^72j{o1cSA_Ri!w zUILLP8IC-wlJe8sY7m0yAYV1FOE-RIuFJ&T`9O0Nqa#=!U^2!}vrBVW;eWc_Tyh~V zNj{rB72WEFST)A@b!KhlbPIIKxDA0C3`GD?yMdT<8u~*<>-WnBDXgYTVbX{B1^8<99wgTVvW3H0o zXf&uybr%i;*WxK?I)$wy1nQM_7t*w}E(Q8+J&4QV%oyHel!F(t#jH}dz=+7<8&y## zlj<)u19(}Q@iZTT`V5x=gT6`vTdV%)y%2MdjMsP!EbMg#RS9Ulm}piH;);S4`!GRe z5OCu7R8CXQp#t|P$fIkZ8`8TH4(yQNtt`rUu@aQe(bS-pFWN2GloHEX5jq+)TM&!` zm2r#J3zo%F5UQ-HgZ z0)R3YrGs#NsMTSZPlcwac7x}09*KTg#a+f|9@v-z9{`KN0%&Ta(nKOhGX&Fe(b}l? zYjTS)`RGQ55u)rpA~6^N)HS(tjh{hT6S+a;bV76${c1m^3xD zR59Xnz}YN>os)9CUwD429fK&m5=%|-&O{YX zbuG=bj?NbhsCLtRalxNNJ2lZm9Ej^U;K(-8bs7@jUB-AKYrhFEBE*D);yKV$ z*O=ioq%9A~=>-)AFXX0VKok&a!4L%Gk7gDZJWk<5YO!3aLrkKzWyX${tyj$9!6~h5 zjtVapzU$WEOeySq_k642)w~$eTCk`UT%QYvPJQqpNjU7W8F(T`EPW~iZJ^-u1BBT>9ibG;lyHIiV^3H+mfSPWzg_@unMlRL-HU42w7rd3*yBB11Qd*kXWuLaxQ3O$aD5M1MiXA5y#%$4+e(V)l_XBo3l9 zgd5{HcLBJ+TZgWpxnWWWbSMC<=;xhtmR*r`>P^poPCaNko)0PVS&=16LqIK7{a1}S zO))F7M091TLRnUb-Mz9xc-=Z2%t}*3yvRZs>^fkz3?Cf{>YHSN*iFU_oaBa(adIVzR+jxGV6$UFn_>c`MX+su$N`M4+ zL)ud?n=q11lL+xh*mahIFb17Y;){Nk7xGA27S3`Ejw5>*84Q!^$ToaRr+h%X3pI0E zbtz^c3a;QtESJa=PRB%UYy9=Wfq$fKb?a>TpkPG}6uSiW@=0`p3redMy~wgqmLfz* zHuXRjIkT1$=`{|j2||?|tD3_e2Td}?zBWOBDm~V_}UGNoW($L zOQdha?z>QKLE5{7QrvFxcD1d@i>68nf8_dcKW0FJ*1yzv=g=V#{n!q5eT*n(Wn=#?&ZOUjWZ{7)Bh@6N5B_Pl=3!)D$${+fz(*#_ zup{|&AgwC0s1$>Mx3Hm!gP9K_!_uJPghzLYBWDF8cjc~n^TEz2LMmq5#;}t?66dTP z3GB~|&s~HqiaHk^aTDuK=t1ZfW(Hw`HFb1?^BbbrZGj>*52s2%H{yNb`Cd%-Ti3;^ z8-h_0LNx}onjLvb0Bj(zI4A_Dqe4q<8vj-&oOi+%H^wLtET<79GG3zK<6P`wgq$`x z^$EX;T-R46Q`VV;kbyDa`s-d8_;_lED_C^v!ep~>3|(7o9M}X15`HG!1_pc(S^=#0 ziaYN#qK9|hiP1w;G$#q4(mhJPa+%ag3`+818wgwf0YAc^-sni!#If0KQ<}9nw~%Oi z4*Z{Bu0?L#4~|v55Xti)ypCR5$}1_#P%uZCWhI?0Bm+|1t#J9dJ|Izdmp$LDi-rSA zM3PQSKJJDXegej0{tmYyjguje!bKtH1K6kD+N4(8O73S+CT*-TM^_YMaB2delT%0d z07fy1gqReb`0yg(h>ajzbMTr%+{~~Y42M&(T){0JH0o|BT|&gafR_?q=mr4WK?ng; z1#=Q=Q5D%z5&vhfyH1*rtRL~reM(y3oMEu+3|PS8!yJNh_8H!Ddm|2WQ{gDa+HOnH z1id_HjK^TajkBkwwwsAD#zme^uiPO}AkEs*B$Lw8Ye1lrVVEUZ-t8rogtPT)#J(}N zZtE9=2+QqkZb>1W{Gr1p=N8fc+#v@6VoI6b9*IYuWS1EsDG0X`L=e@Ku*9h8e5_KK zy1oG?>Y!99A-A)Ky1VW+f)*ZZ+KL~iVbsX`!DDkuNeP_| zI;kb2gZfQ6Wo7hQch|j|OQ}+RomWHNUoATrkkKPN1tX(JW;Y~2Af`I+Hd~-sp;eY= z$#QlblT_@SFGya&vZ(TRNek+CPDTU&2O~j`bHs()mMGm#!{|~iVmIlJBERm2MQJB+j$NNv@N;IusG--AgQO9xKprW4vX~X8_kwysmuG2m zIwlrqfkLc}z^Ma!1%E!vWz@%*M*Sz8Tezg ztRN^-nsn=D!7rqJ_ShE?{+O=dy~kcKyKzk9>MkWZ?y;LAffIu3#7w;0V^@?~DSXVW zq%Q4z%RTn1%@AU-V`3e^?aGPvILwi@*QldQ4gItfIkcJC61;*(sTTJ*2+d^)kS=b# zO{i-M$3)IZLEU5LOzyz85y&x-liVG?pg_py6rZ+FQWx$He768$U9m_7w0FNtPPag~ zbVXkq9~0_&d&T68vVH1q?Bdmw(rF-a$pZm+GzpRewK$jYrsHlr(_Wh7i%UoV&a{^r zUTw0aOmC5sugSAOyJiB^rvW$D?M;q_d6wjdPulezUGUT)jFIdIIPQHy81ffbmf>F) z;>=haP~Kw}vtCJsG+a7WQATCe`pNXXp!c!cQ`7y*TBI58fTD~|&u_=BAkm4g7|(~& z#ptQSAU=3O!96D(FgmmWcZ#B_M@gu?Vs3t7MwG`mqN@YCWWe_+*n4OM5YLYNmK4`Nc#d_bd9j6=)J2v)=P^StK@~)Yqa&k!<3;py& zm8{OnBn_RdH_&owYtD*0K=0uJb+*x}c3T;RNe+&SZQ>~@P>bSdI}BlowOyml8N*6p z-OvEixB)HgrfzF!ngDt*i8;atlOMXz7I%JOIS6_4f@2o%tS_{j6_}GO1250SDHpnp zHew-WM-p3n1XBGCQo%g;VHAR}yF~MbV^Cn;z$}QJTFt8>JME_P7uzz0fejr%+fymS zg6$B+1;e<4(K##jg22GdZD&#f_(_tn_#{w>0l7&YIIAw~PO&h=98BNq&hIqyG2SKy znqX#W-KKD}&eyuIGi&-vHt6^wLf*mVXw|nw8{GFn+s;sIZL7B*1)lNPKywi-G>lb~ zDJDU(V|?AHf$NWeylX%uu1zSy76+(3T7-%CPV$uLz!Jq0M2jr?(N#jEYQ4bYDP}V! z&aEdVZqg7}?e8MHtaap9yRBp(f=KesZl0#Fg)HfmWKOh91}N#yA% z8+|44KF&u%MNq@NQs-)8C>EqhBL%Kw?h8IAAy7&mC4ZZ&`5YV?<)fx_YYY)AoHq?9 zAWUW^;_PTZVb9F-0kkIdvMdYUQdz?W@dnritLUi{Zc1%^TtTvOQ|&%-9MeK zjiw~Jqp`rybsR_Te4klQwJ?`4_0lwOi#sJ5vngw7I&g0-Qv+7$gD|(Gh8S*DAswn;EV(tO9l3B0 zfE~^c?c_S-8@bA??TU9aVnCUo)Kge8Jmwm9opAwk0QnEK6X~#fiuYaHk1822iBMJ| zQY;~R9bhYQmX6wslN1_C?nSQH=&&)WHlcZ1n`w0`LqWz&A#jvRD4pc4NnIKdP*oI| z9(4xA79n$9@EG4DTfJrYlFsEk2O`=Kq z17L}n7#LdOhRjLQR;m*byuY+J--Ouo>?@wzizpyhJM-99J8T7!3+F>^x`Q&a6#0VR ziQyBFhFD4waU29_g)W4fvHFJ^KV2p4zGad~LV?4w=Q`#0$CG)oxEm%owOcEpQ#TSd zFzO`P;CeB^&S0*_LqnGod7chimSe&;E#-}RsE)u+-7!C4`RWI7d$s3R+Fe|RH z$!WTdalnC>TobslA{OWAhS_n*mv$N=bn##p9>Agk5^mj$3aE0Zm^~N3EmfVA3rtGp z6sv5a-6Ldj8OzSs17z-;ya?0A;yj$~1CVmAkq@^smP_ntgA&TP=eRPC11fjab`v!- zHiLF32}sq?SZ;^V)||LTEvqRiugIF1>2oA$Zk?(%_oIx9OK+I`8(d)0O173U;rn4H z51-KKx}~Hqh^-jn4G|UdUvgdFprXd6?2X)gc$7e%G6G*9(6Un4k||OO52?&5#VVzp zkv=O*tlV}|h8CbxF*k zZw#z5lQu$)*Z|YmrRx#WchylHqyW@>VQFPw+TRH&QQ1C$?mxvFEg*VBzxu-$K}z%Il57)Z)5z3yG$1=#I?@`8U>efWBESQ~gz1>dD_b4TN37yL8VUw^%rpO~8$ zbMxb~^WysJuU}m77a#!U)iC-^VJ3=+@lSNKu-SNG`WQD=-c>&Tfeem>A9D{@!XWE7 z<+NBL-klcP#DMegYepQX{} zN2)kV;iMd*;v$K%SLM#58My0ixQTa~0}m%}pka%duCIQv5=cgjw;Xh$AH^)y_{XOt zoD|Y+6@#L+pyU8O392Tf8IKnoZ3ON5i6DyII=OgKW{K}7<^*)ZViEJ3YtWBa#g0T6 zv|~3Uj~y#sXwRS^!|AE?XNuJ?dtq|}^4etKe6H@MW`!UCXHipuIx6_H)UA}1QaU_T zCxsNjd{&1cQ~*Q16-p90a`VjTnPY|NiQDH3M^2rZFU*h6-F(ov*Gn#T>KOr%laT5A zhm02!=NrUA*0c{6vc@>_L`*3%f$dr{Qn4c)o6%EK7n7z=&Zsghn<$(i^-)<{{Mv5m z0?BmH5k4}F!;YayFN0j6G=|k{cv+=W!ggRnX~t%-PPRhqL~BU+@~8?kS%`M46L%&= zazfiIucRT?nMtNu#ZX1g-rVq!Y{P7BgP}vzTM$9sk-`iVIcv7ux~)%#K-IwmldL=3=XMds zEe#BV1&IZJ+^-vB$Su;bJ@)Z|PA}dktp!}e-4TR@V`eQd@-(itcD`%HDC*(%F ziOcw%v3BDIt%Xb*H~VD2BuXDk6eU4QX{22aj^S@J)K1ncJzqGY8NkUEW+1T65JUi0 zBmD%H|Br)u=uv|ksDMf(_*xwAR3(u*TP0PWqGJW9(+*1ADMdd^inxXB76K5ouw5!& z2gL%_58!sgmd+-x5Mw5ts)HTO?nKqHR$1bdR*DXlQgR;T_YIEm(P;L{=BYjdlQ*@Y znv4RCA1t8Ud(rkH)Kx}T18p!|p{kV|bV4rg zM%|Mo|I&3lx*Occz%%ftHu(-Q$hwz8S2x9w^vF&O?HNn^x@*O0`XG%@`i%AruoELe zaEX)OsjlF;py?_nz(yGOD{LT>ZD*?zP%Z|HWEzJ(z;$s-=f+?x3SLPpI!h;ln9P54 zfyQoYQ0haSiZtzt#OtUNNT)6B>cqT7HJN6hr7k1EDCUA0v9cB!78vo|y5;_m@v||W zIHbNMhJ;hPl-HG(Ims58 z0^Wxm3*lW3vf!s>XN-X^kw96$1%vdp;G1N47~06LfykLTatl6L(2)!Tv#L^;^&-K? z!;v>#h>KoUu_7!sFa5sSO>6zE+`*mj8otHtqG{%FGtOr29$2%pAyAB&j#O>;ap@e> zt@rOs*9q&!-W=U%*bvJ$YvSp}Py`eBPue`O37bQ30G8R9$^_bCSDP={=|blgd`u_V z+FG{AWQWv)%yOs3R0<~r-imlcvNZ^h*ec3YDoOhv(fN%)N_k=DCR33e)+EW(k1>3+ zCJv>50VS{`TXiBXq$UITP?jR8_H}8{FM9!pF>rXTN1hX~wz%QpQ`D@^D26oj_E6_~f~* zGwO&KWGWc917UUCwiUoeLN>UL9&G-Q6s z9`hYzK=maj?1PHay;3LM1DIt7b3lR#-N8;!Spw5w^i;*bfS-j@bbu9b(Ip`~BXY?F z@5C6s0!1tlzvRU1)|(=Q&Tgw=T5ldiwzQeZ{A-t=L*psXZv*e@ll*!ZA{8;1b5 zIKe0S1=RVja(AHo@y^aX_FB1HpD1_h_*CJ>4LGlO(u?BA+^_HYz`x>tt&V*g_v=sc ze!bk>uaC0Z!^Tbg1Y7sqvwHW1Q4KC7xz(u$cu#`T2AORLyC+z5u9Co4YK{qcg1cXM zP0XzV7R6~G%UV!(qo>e-`9Lp9DH8cwpQw~dqlHSTGD47uL&$KRgZ~!8_F<}R z3hlVseWW1mmqNHYS}Y%cS61V=6^#uHgh5o4Jq*-?+Q9Ng0pK7YicRpvkre@K_|(lR zg{SipS;>^B1{joyorQA}+TBAB;F1A)0RAK>ARBIqd)ORFv;{jAIDokKUct{)bNQ@K zyVF5}NJnQrOMP((Awc**5UR@#s3aDKZo%~+?mGzgI=T&KvpQTVHQ_3?^VMOiIw-9v zoJO|<5ZAD`XHV}&r$dUFF$$4Tk9i^XkI?zQ;9&M)N*EC%yv`w%Q8L;+9WJ~4B;Lz~M=>7x6v4Qa;M~_Y1c>KiVO*fyMnm#pi z%k13z>058R{f_54OSQVYyt3-uwbp3*LF;*86t~wm&TrmbQ1&kzS(!v1LA3;RM`hTq zEEWwIbWAVaY`MWQ5Gq~uV}Nx=5F5|u%4jZU`$TRMZ{nj1IQ(|A^FWiV^E`>DfDbB| z+MQxx=eQdm2_3(-YCt9tZ7sXL-%`SKMvT=0f87mZs9WeqP>7=1tPjJKSKagKyIn4K9(*4H-baj1g;D?de}sl!WDeVrVJIx*!l^b8&j*H4cO$&b z&AZzbdJXEp$Gq4LtDt-ni>XKJB4|N^YXskmt%l?IiqoK%9R~-(6nUi2!r_v{q#j=d8Lo>c_J#_?u(~l75>LUJ?%`XV!+A+YyU9?M)7U)Ujs zm6-3wWzz=j&SSURMk!nt?Hw)&Ddy5AkUxP$Pq znF|5iN|J&h!7nlvP56=D$QG#RcUX1YK6N~eq&fH1QcMUnB*aYurrFu#(O%5Dr1(z+61L>YD zP`be?p=YTK;;Z0pl75`~IyK#nygvYtA)pN!#UXZS%2UuOs&_?!58T;z#bV)bw&vBt zY@flO?VK~ouG1JlGX*&;Ou(9KQhvgSxZYA2^Wb`;v25tbuVn5=3cJFv(L)pV}m zM60kar2b2Q(Fic6!xI7qOO{cN8luxN&Emn)Vd()jzm;2yt8)b@S;DcbWT}Rcy_zw-bjc-6+K4(en!r>e>Djb%r`b16(RGzUpFsXwQ zJCY8a!rkMA=Pq791{6krj4dn_7jMusH+V5b*PQ~- zyAF5J1x(${xsgkYE8HRCC%`Tu89(5)2Bd3xz%-!-kkisp_65!KKp(7XRghiZ^o#U+ zBz#r0nIvVM*F*V%|tR0hMGEd zB6u`aB`8<37i)%F>qGw$D0in^W=nJ?^swDiZdZo%e-rKQ6xA1*c6H)nGM)%b!3YX* z_`_fWS&^qCjZO!wvBQ;q+b7DUQi=SqebCVAs!)JU40RT}^$8sT(@?$G?L`P8dAklM zz|y@7&^Wh&fnzb$2QdgZDyVk03hwVNYg4CpRb&Wv=lM~~SIUI2N6CaRXJe({`s-#U z*sJe&&RvkP`5Mju%a|EpI%D%HZVDM+S6(^5H{`h?93G1Fo`bhqVQ_vEh7oJ-W_A3w z<7ZD!&dpCu(=B?{?AY*dX?Qr>v&&9qC#Fu#PsmQnr31xsX|z}#9W9O?*khMB9hKc3 z*flseO--s9l}o#y&P`L}x2w@BrCpCdS5~d}(6}NSmj_37KlGq%J+%9I&kf1OmC;>~ zd_qlnXtXjkI66ACzkuKNj|}diH-&}K(&+xu{=xm_0)9JC8QwikPbjREM@k1uqx*-4 zD+T&`VCcZ^5p_Z#stj3Dl>1^D&=y;85*h_ zJ`{>_;ZO;k#I0A^UyGE8Xy?mL*9n7wsk_Uz2*BeJ7l zcyi@vqdahY_LnE@;|yzJE6fekNoSK3ZkM}LHI0CZ!epxFANXyG*|g*A6`5e^h&RxgoK=E>be`R>PZRLUq@?4w*%?5fWa21?}O)H)k6^mL0qVN zA&;mZG=delLZG_oMj~2m79#I%w>mV%$DISe0B6MEsVV!Y=n>(YT*k4pa(`C!nk77s zTqW`RSOd?M!iKxl_87sJz)_61yq6IC>OUa_|5rxv73m1>aW-TxAlpBAwT& z3$N*{aLwb$S$D;%*90@E9W5cQvpsm}`@k~frHXdgsAjt*POrHk;EF*m)K)`Sn5?Kr zaQ8yIYA+za2Cww=5KQHwyvGIBPcLV-N0Tu<0-C@@lMAg3({ibJpm?BI8K?}26(@E# zoK5*#S&mat<1B?T3mSzkBw;Jk7)j3L#QglsoH&r2%x&(HI6b*5 z(Bql`I(E1_*a3tsAgB7O!0OZm;K1{WMN^8vW1=g`58Iy7Ww3QzDTq+LY|CLK)Lqmg-l1~N>6@4YHt+o#o z;WI~rt==h=44!6eQpKZ8QNyo_g`Q4nBcC;#O*b?IQ9ZDE?0_lQcp<6CnIVe02`xEe ztP!4^9?iZa-=UjxlP|U4V1ayPZZ&8(>LOYVHpZZN+>WYz)-~JHGXNe3d|!&dpykz~ z`?Ctc+0>54Z#zz~z=>Ob#q-a@9bHg5F^k6?Gf!7i^Qnf^WD|8IC>(8gt{ zMg8Pcg`;Q}znjJ9Bhtm^&_~ zb08_kh>%cd6>3o5s2SAVYP1@JF|=!e&IQ~bbuT4>4pfTek^RMTsgx8$)L)M^CV^D1 zr?wxo#IxBkiFFIeuhZh1sqr264fFk6sWqYv3CQcj`3{pCq zLEDcbtqB%Z0?<&GJ*%<7AXJNb9mMIbx&Z-K9dKGL9s&VV47;{0$L#6p-I*?DDbD1* zDHTh_a-mcj9I{kspuso@wpaHYlI0sK1733l@UnHcD6@M}3CywrzjXt-O0Z1~9+74i zWKmVEM{x=mBYJj_H4wXG9;A?k#hf+&AlmC{5yW{aG!3tONF+Fj0wu!@`+EWfF^Vy(nneQLjwX7zWt^B z2hwyPtsjDtW$S1d@`9)*2q>-2W>gxKhiHc-U5Q`Vs6Uc5qDlut5bV`XEd(Du2I zg((26ub`NW>w0=+@ z@EsL>*ycqLL|AD?#-L3bS|(R9EOFcS-3BJ0V*0WmHU{DlF0tRLhpE8#;vg)H-*&um z+wny!RSeTjxWk=5vu$72J`Gydlr(>m8e?T+g{K6^a>XcCh&ALou!w=C+gx(Pv>ECS ziKb+C1`r(GH!-VQCBZP-VN@WcF`5;?)PO)-e?5!vTY+fbiPKsJ?bxu&vI=6|gH%dV zhLt)>7B*D{h1X7DIVLT0h|B z{En((LI?GYgX`%|w(LRG0^N4ej1#Yltm+??F?fm6N+-d!Ckzz>y`_cGVx?3#hPEVo zPO}GlRL94n_?Q=pEGdnkR^e0X@pRazrXRD%u?U``puhSK_N0AKHvL#$$|lp>S-ADs zoaZ|xj{nzT!tpO}jbrd~a%+%APtEs=>IHmydeQVG`YaU0l(!ZJ^WK^&Cn56EB{e42 zD}6n^0?JYpN+X5AlBiV1O8dvkm7WU(qNi7splSu^Ul6N~*u4E@zho z%Z=P*;tN`T25S?F2h^*6uxK3Xgj2k@Nsk78?0CK#3hoU`xfoZZK_7c4@d& z4(r0X-~a~=Ngf5yo{pRqcT8LBF}cTbYtkcq67fIDJD9yA%8xD_O%iIAa^`!+l5x(`7s$2*+sD& zx^9A%siV%ayThVHr=01G7^EL6*uW+MG%#ZG+0%Fq_w?M6F?6j{7DZn5H6Y5Rq5Z?7 zBY56gOdUZ8`m%j+h+epj$gT1)y7CrJ$5?N43((k$Mip~DRKk3C4$i~1{km9c$GEmQ zf45!~HwIx7{K1iM&&Na0Cio?3%z#5cT(@~0c&pL&4Vz#=;D_P2AB>D&E{U`hbsIVO}C$2dZ(`FWN{tC}pz($S|b| zk(c#OqSNUBs4u0r`)JFRi$dw`T-K*2Ay}1#qnWKXB}|Q+IkAX>c330IO(+3gGhrFP z?n*NZ(%*x7;#;A+er$S9WU;MYS^4{!q`C@e*ruYZbX5iy^;OJi$%4apW_IG%v&W|A zvWw(0PGJYcb(ld}Ov&Ou<_i}J)!h84+418O+X4kxm~Xb~Aj%OzxaUkr;GQHR7-P>R z@W?$}DA0(?`Kg&>le66c2g=@&k!4UHn|*s|S@$Dsri9}_w7osXgaQru#P%pK7o(FD z-BaoC%APX1F`8~`Qki6mAmEZpayPEMLKea5zt6A@p7fB-BU&vu6X7af~c2mt;^b4iMG;hiFr7(PyGP~_FY@ZDs zf5nZ?vMN*zqgrbByW!DWLUDiR%v$Y6BW+N`)s8K6Kx~Sb-oikKEkTN!ET-O#7Bud) zRyf(7}%m#kWHzio132>4@p zHy?mJ47H7+Pw8Q@-h$?e+LI$<7t+s-UN7j!O0?)msId5pITWxLFpLI^+DWa47I|f$ z)?HAN>DpyV$Y2TyO_ef!KtI6i&r%896&MGedKG54Zc9vUr|l<7!G zQVMql6y#q6Sk%)bKq^D6y1R5bP>P~eCv@vHnc3;}8%O8MwUyy`^Y+>uxA?~nOb;KK zXpOj)()z78-7>#kIzDyR=K6`#rD|5VejRN@nP6hBPr0NYW29oZyuVTsPNNZQxOLS6 z9FwJDX`m!pZWwt{?D}zG&2?K&!&`T&9yVDx)D!n_kgWcqJr*yE31n;!gD%W=V z4DXcY7m{e5)}4Z8_nFpd-Kiwty`);Fb*Qp|_mXR!(&0mz*qbum1!eY9e^zR*8AxVnDJq-j!;5$uiPwPaH^=@+8(>hY<+;MVyS}z^h?LEC> zxG0WI&-L6RU3#Ij0k+^7X-I+-g$>EYgYqS5gF<0Kb)q)HA{t|H;Dn*GDRR^k)xY4w z=v1GSTN@5ba@(q26F%4ClK*6bJ^C!>RuGX zZR*u>in9$o8nA#PMO7@VUtR$ZzIjRuQSOf2GXQctF`{zp>E@fUq~ANmr^HUOxY@#B zRbIUd<`x+xwhLwF>qZ_WhRF0$(b^!bk_RE->PhiLNcfs=GYB^etKQ0LwNffg_1tF$ z7@V-Ssv|C;OAbyP2p)N{i&jYiY+H2EkcSXbNmQK1YQ@)w81L4DcqWL%8Ls99O|wPv z_fTixmJzZJJv`3mxD8d)qD{5#hKok8u3tBM#Xe-WV0E5R6aap~2;gX84la;fxn> z7?}OwT2)2X37aEB);#ddycrk8S0Hf7qrf41I#iPFquHTpZgjbAhdb@=evv)De`K5P z;FQY_I>d=pMOO7jC0etm{ixjnyTq+qbUG$*N){U1VM9lsSG;(&y;Q6P&4Ji!E`^a! z{4-+W1EJe+oyd&_8V+3iF(A*f4j@GAGyv)V0Fe#g1LZ~Bf_-oi0oAaRe^C84cmWuR zbi9*$r0J}=kU;I$;vn2iX$;GYcSh4y8bHWM%(N$ zRD#$o3Q8!F^D#R=Bq}47^3aeGP*4HT+s0?7C#R2(iIc$w2C4+YE(4)vHxLZ13}Gbn zW)6gc{|AUS7C>pSs0@$Xe58o}UtDu^V9mMin7Yh-<)&=+cl`)ZntyDNn#i%3!6OAU5Z1GifPD;Iulfl&Q&?PD^)F2ZX zJOzmbXTLq%8X%ko-s(X5O2o(cO#lpj4W|zv-^1Ql+7*W=Hnb|xU7#xiNbRRd`rOQO zcZLFLo`c}ub%t$DLL_r){eW~AE2Y**|KlDMGa>nLSc{J{V^E9Q6yqo|Aq@f5U5fMAUL?a1n_-0x06uFleu=;(cW*J(mH- zl#b-6g7Th(BOn!_;o=T9-URjs24cE-v%iS{>u%R{Ze|Yb>Y3*diwgC5Ob@+2KbnH=?IRfDKLjIXNe={5Ni9XRVXGoW?!V(W*P zv`eo*{^2#pUEd9zI0$chnoLA|f=v6|SgAN0D}wU(&0NIE!Q*&z>=BE{F;o6mI4AMx z=|{&NX>|l?iNEz!nVLBchGdrXdX=wvD+C1sUu4&TPRsfMmf@k^)XTR8;Tol!V5X*i znI3>dSFhluNnqa4wFDA~BY5Um!{8@L!i=fo3PW9zq3gsf55h{9t zo;T{13784-NK1f=poYikjY(i5yrDvkV(7(q!naU&*9VBUv>m4mI3x*4mx_!OEE@Cp z6QDkcG0Y&=?~QM)z(oMAFS27pL#3f1J;U*h6=11E7H0JyNI>SJZrPq*l+qXL_#_a7 zadlzG@tV2$@!9#512%RufChA5I)dq-wsNq?jIv@jhYGOfX!}V2AN`3mFCBmM6YLR4 z%?3rw9x|V0>7$gOF;1v}ZBE@6MHWvk;W>W&JC1|TGLuux?$FmgQI#g-_%cmM&Sb^u4m zN-}-P1O_~)2gmuxc9X)OkqDvy_(x?3n8DVmR=dcN$P*UL-qVTlVVVbEd$-_Q&>!rv z{ZT!=wEKI}=!BJ|v*FsQMf;J&RZnlC^_IMYH3fDMNWB4kpG7F|Oh=)GMbR`EznYHe zo%PyvBHX+iJ+kW_ToB|~VL1&~I7p$s{S5Lc&AJfIUItW?Log9%sUxDH>-uq2&7PT* zS#yg$Gn8?2GbYIICgY}utJuQ*u}Y8X0rgG(Fg1U=2clQig!$Ps6S}8cqAI)=nGrY# z+e8He4s2ZN8o62BUFSc0W`Zb&qC#dLb+@srK5nXssyNVdQ`3WP%BA6+o0`sf_^ndv znJdGWQqNoko(+!l%ngdF7#i-G8xmDf8SOa%FQn9s>p1}}QW6t-PCyT-DF!_!pwrZ3 zfu2bi=OWcu>zM@DR7|;N5+Jgo!#$G#iH`I3Ob&C4{fB#c&dj)OxY$Ei3=_cwyQnbM zGfo*wlQTdw(mpQrOmMCf(2Y{ddS+D8(#*{^r?9V~nnU_#hO!NLA+E%nKu>+P%b?H1eWp; z0N}hD-KoYb0YW+p203Jx1t{I8yWDbdrOw$ERv@YkuO6?CQ7p*DqKN^3z27i;@J+)! zRiPk!AYC>6#FBv}K^k!pSv_?nLrV6qs)iQ+ES)eowk*DaPguF6C#aX<&w5-LblP;I z{?4!yZhW;_kl$b|tlRP%6X!{*`O=sud1#u*FXim;4>c(@AvqT{4^qbwd;{`Mzz=pB z1}43175E{*7r_N%L|l>;rE=^`gd~GxNvVU-Qd`JCJklUFtFt7^pm2|gammZlrH8## zmFk?-9;-^Rg9>1y?Z*XRxU3Y}Z#a2ev|ZJeGS`YdkTA~wD=f8_!cx3YiONzYiUGH{ zum68lT8izWsK3Sx)iV)+u4KMf-0ASyoQ2P4@-3^1K8b_moizB zj&H#XY9HW`T9<0k*Qib)oc6|R42hJEDT+j1tTRlN^2ktG^l*G!#^Rw! z<;?7<+wTx_6Z5BMwhYK~fE0`0iNF_|K|6$M3vTE;4REJ;HCN|&R~J&R$>`GNrlZw`?163%rzT<0a;anb7gqk^=Soq z9~|j2{0V5B;=1ehI`o#}(Cha4APk;%X+yULLx_u%TN%1E(8qzQ3%fd#X!Msi7g(S7 zfmh%P<5X6sOIk?LKn%}1>jT!#LKYMGh>sYAGzX{|>V}6oz(b|mDonznT_iuKfd>=3 zNmyv*9qslK%)#=Rc6$+~qdlqJ-WujH_gio1&0Sk<26b`6d85WAvA*l!-t}S!M?3^+ zsnM`Juzh9ooWTyB#v_8whH4UxCNcTe`k|D?F_<8 zp~o5B~%Ics!&nbYzRW~b%t8Rl!C+ozb_Ugfkr z1v7t-k}&TCB_?(Cz%U=W#DM;hp$q4~T+*Lm9`-L+16fC_P^=(&awdb@<)>iJWHPv2 z-o)PzUY5!H)Fo4u#{tbmFDu4NkS@#;cb@!QU`)0EhzAI4qUR z<;yY|zB=xbOr{L5l%52zTm{gEk(0?}F1rN4z2uV2&(Ho$F8hu7v3;wB>`TMtj`0Cp~^t!jd;^QA~dVhBP=+AxUIpPIdFU&fAf38zklb@lW%!XWhDQe*VX$*hHm)9 zGo@AUqksC+&wTRa^p~FalI5RrPF{NNH{W>Vnisz;bL~r>`(MBNuC;HUd*55{yXCd- zA6fh4cc1^U_USkN&)i48J~rXJc=~bw_@tM<@Yny-tH1WPmz8h7@2zi2TbL`5YLKZaC&o-F|fD){XV^wej)g<;@w#8N!8mBGx56 zyX34rN12S}60FWO>dE#i^fN#9r7x}j(MJ~h9`)$wXE(^MlRTAHD2>ul(Z6H$MA~Kk<9s z|H0CWGmm)JZJ+$uJFjSc?E{m8zjxW2ez)@We`x*dFU)MX z3kPoh!usof^T_(0g~DZ@`=^6{{d0ek|KPR1x%q{l_w>fc@49OJ@t^;jUw`%+e)ZXr}v=Qq9P zyMOll)v5AR-t+Flk)Jtn?+?H8cdz-EXMgq5NB`iXc$;aL(hsmK`3De0nGF8-A1s4R+ z2Y3I|@^^3f&WGDWf3r4Ru3h?vKeYD6n+lhF<)7d2sV6-7y#ph^c-g^MPM^N@6Yd>P zdqdCLC%rg;On3M^%wT+8+gU!8=vy$e{=O0 zUi`|ZegEtmt~j;yp)daU@8n)^y7;;Wg3(X^x6jv}_*czaR$lYw_x?=r%D*l@|K-jb z2EOo>R~^6l=l||!uR8K`_djq${*I@Advf(#%m3-|zxusL)xP&jM}KwtiYK4F`DtIh z^zz>NY}|Lri68pyCs#i5vR``E-`#fC6EFSb8=T?`U-jhwnfc7quDbu%CSU%UDzG%? z4IjDpEhpbQ_U7UDzWLYx^65vf`2H872OoLa>pt??8@~1WU;CF|Umy40U-{&3&K$b( z9UuS0zxvqUe(!B7)35y4wJUG`{jY!T+)sY?86P=V|L^bqiCXW+f3$V}rSXsa-IwqE z`w#!`zqt3uzItk7f9?AJ^1+istDm}d^p_uf*{RA~-ulkRHs3t+mFLVov;52VFQ52_ zPqt4#@)JM*)_1;n^z}dd;kSQ%;SYc9z~5}V@7~3C%}oY*_kHJH|F4I-~ZmDzk1|ZUwq+%zjx=sb60$1{geOW@1OGNPhH(N{LBv>@BhX#+Hd_@ z^zzxo^63{|{*2>azUo2e10NrJ;Oyk+_p%2*_FFG}{<$AJec!h}b3^5-cijEe+Wej0 zjqdt#&-LS(Oy-4|uMU=vwf}JClmB?dAH3Cl!?Uj)uKhu||4X0$<_CV|=WZFj>pQP` z#rWt0@A%0-`t#p-{CCS&{`Kb{{lM~Hjz0J9jZ5Bj=uyRy*L?Ke)!%>C-QPR<+b90~ z{*CVjAME?-+aD-B^-DkXx*u=9=ndjc&zS!BvDxPw9r)wcvz~eE>qEc!nvZ<>Z6A7R z@3%%~9{1%-U;CZ^{$D=)T?FC_2gaZJ?va&uJoC>7|Kz3lfBfQ|?x$96{r20|?|h7S z;NU$U{Q4JuYv1gFFMi|x{6Br?S6Z+7m-}CF&o{?k_k^Xle#SZS^FQ#NiRXO(o6oBp zc=4yFZ##R(TD<>BFM7-$4}AXb>M#28-#+F1&pzd4zx1gu+&H>C`06MA;Y(ls!aw`d zkAD7^Yv$&hnfJfw`A08**E|3ApIkSS$-Ll+mG>O@=x-eU!MXBfH|)Fh%gz7&lFz;U zgKwPv_Dk}wT0j5x_dn%3zx%oRN8kF^@Tyn;=>9ui*Yoj#zx(*d|LXr^?_Gc+$&$mc z!e?eMnD72ScenedXLm8XhemhfH$dIZ-8O&*rgwlwZ+By6XZQA+)m0DOHB(*HQ&kNN zmP;Nf^K*=_ts`|LC7Gls>8My+JcTVwcRcbG$2(FwnrF(UXYjPXie2ERVFecLUv1^}hKs^JV7C%=fSV(Z~MoZ-4P0fAx*?zxvT{{p$Kh zhkodre{BD=wLfm{NNugpZsf|``9o1gU|fJ-@p7@bC)-s z`P}cl{`pV;>VLNV1ON8-{U5*dd)*EQmEW`X&2N40zxYpo=jOdTfA*o;fBcJ`U-ovGbk3_S)U={*ll8{?GoGZ-4y<&B>oQ{kP9f&VBF8)my*(sTYQRAy@eP zkN@^B{qRQrJHP9v%HQ_|{mBpg;q(9IE5D|^dHMA(|HF@+Q2w{$U;dwn`rSYHKaiig zbmrn$e(Be*{=ic=^tXTK>B)!x?Jxcv{h$1P`5)|*zwy0417k4$>2J1+Z{_`;_)ot6 zk48WBYve0e#-4M&^*{dR*cX2N&E0Q(xd z{`3o?Dq2PpWaxRx%kEL>redOv*xeVHh=W%zu&oh?*I6{U;l6Z)olOg zfA(wNVLxtM`{pwrHUHJZ%#VM1yfXV+m%sM&AW`pHy1v~8 zpU;nT;X}yp!2QJU5k*m8>EHu=PCS42-o1Md@#jA_1kX37AFe8&Rg|+;<+CHo!-}Fj zswfJSIgQUjP9Lu-Cr3`fACy|o!LMV=yC;Vqswx+h^YG_PRk<)cy{1%^0_X+`Fx_`A zB-)2@9pmFpX@3;j9}e0diM2nMXrIQ$4{bvqupb2N4@Jj660|=WZU4kvyYp67)Aygm z5O$E#I1YYPG>-a9YWsG){fCr|X}Am+76-sO1S00{?k;)^h+XeXeAVFlOIYFFXF=e+ z_t{Zg`Qz7FfwvV!`LJ^Dr-zgYrK{=LuGhY_YuYX6?u#mh7QDQ?pw2C+m*>@$1$B8@ zU0MZT@vRe)1%L>PctTNdC_sOJdZ%#l?hTz#?v0&Q-c?R1_r~76cT)L~a_{8OdF9^8 z;p57^v7h0t%XbVyM?I}D>89#NFxGs?TDOak;CQj}rTI@XI7#JvKqGz8c@ z3>6hct^gfkg&Vwrny4^@qmnDZ$e_{~dWPE6$F6{Eq^Ut5X^Xm`9b^hKfw5cfX3@hWT=Ggc%&s-3{ySM+V z%}YqU??P#KH%^&pMcHQmezhY;H~hIF<-!=IEUauTKdLB&UVKahBpXS0n6nPY8 z%Qvtu!UGO~OMHicuSNbG7Uj#(09zd8EPoDz{|(+I@-QgKdD##1GBBra@V;OuKgG*{ z3i1VB7Z&>KynR@xd;B+Slpb#fxWE!G|A?X}KgOTKhWcB)JP^=N@V*{b6y?wO^CuKV z`3kQKeB-P9_fv|Zyv^GI^4#Nd|B#|6zr)LXSW%Q80`96P%10DMxy;KyqbSN}`0r;G zMfsQfH&GPj=lL8jD2nn$c*%LybG!_&h>QF;u!7ISo}?(s^HTf3%YY`~GodKTpY!s7 za(}>ozo;n6w_p;AqPzra!N>VgMNvM-=RT<@N}vDEO7NUg6lIgQlT#GsYy3Ch+@Eqd zOe>1=4*w0TOu%hcQIvUT7|EK&(BaJ{ivTe;tQaA|C%xKWbpeO&7AQ4YogbWX3`Qi;VUqsrFdU@%*++!Pa=;cy;aSX1yWzv>=x?G+%3J9zyX{b+g`BtCi}_l_jWf zo`ZZ+G+2~sp3*yzqq$29(=*V~LqTO3Dv2gOCN*(VGj^yAS&5;6GeH9Yp49$j7(Jef zYV*+2cy()Oy}TTU5$uHmf8(Pc53kadK{YE?87te{rfvFr(8al>&6S(YdinKIbG^J# zM);12G66`}LcT6c8)8A5* z3#W3rW6)fe8m9KE3aEw3yB8h~fNweNEWY~$FaKn2M{{$Q*~*E9zhmV9QG&{kMJkI@ zAHiNf%%z>`vnUF))0g957KcNJXZhPr_IB*&PN6i#3+&R?c}00=M0r)&m>xm71@s4Y z-lSZ}w>vrndFMQ;*b#&RLm5RG0$BxQ6wnfm zalsRh#V!ViE{`k9*nhZp@7@#q^+`n`4;=?r4Tv-5%))Zo;|BF~S0zR9Y~5+Y%}W}j zY}ug}X+hKg#4hwYj_;6LP9Ocnc4>=fy`CkqW%Tf_C7?4;%|#GtO6&E;b~1P1r4DDqmp0 zWC1j_FpmY`&|k9+m3)FH)C!iD|2u(OvFC@vFkWY0JmY0pzfx*!HW5MscD=Hs60wc& zO2Io|<vWr*`4&}4W_oVE+hS9J z)QXzxtE6vR)bp}%jY*FhA3=pY%X3wc%RnfN*l zn7B);0k&Yd_Z!B9gu7mH1qg}AIzncF)$E!!A7G?NxS9itpqRy*kOeX^-(cfrK8Q&P zlNU^r5(iZgvSw6PJ*-eFCJF+kN-`jE3R0AXv7qx{w*ZM2EANlWxbv#g4vlpNBWch+ zmOC_-2G#aO(>WZqx=UNwdK#j#6$+(~VB&%f76izccoV#jfgd{{Bqm3xL`YftfdMQP zpL~zJAGWO1@}BYnNJghe2kAeQ;?&B~fJYrL7 zcx2b~J5b<~=8DoVt+D zA3)gU70A%XnHC{{*wTXp7h{MCoXg%e+Xs>B-}y_v#=s6j#7AE6=&?b(U{uLTG=2 zgSvctLFHpO+$Z^497^zR#P9Y#%HKSigAmRfW)?HsIajwFJ8b1R`*)NT{ueK>0~h!P zD>hR!xgI&BTuo(#FN8`=TXU)3X;a5-Q{2K}u_R^~0Q2a)a3qZv)`tZzWcVRi;SJi# zf<4ASX|&%Xo@4dF;Tbs;;c2OnQ?l&lpycS5(}#rhc<-waW4*y_D|ONm|S< zdDQRsB5IDn^9aK_9GH=Hq=*_>63_#X(-kB$EDS<*@Q%^Sl@yu^%0_AA3ZtIjEhC64 zKp^-m!RY|?)oAZ2%nt^Ic&^6U_q#ncXdFs0JXX_?9S0C&--`>23o8B*a@ip15agn3 z4-kVQOagi07e@y1Lojp!VAQ>5pMz(22MAjiG<{II_$NJ4u80-DWrjSu!8h;)$g?xz%P}sKM7|Q@$GR@2%J!hA?+kI=2 zP)Lu|b4`zCF}d|5aeCC|H_UP(cHuSzkbJ`H&dAk9qgp4suIWS0LDME{&Qy$(VE0Ub z1Y^3yIBa(3oN2cs%z?oLahoeF37Dl*9#%xkRzpO>qKw)MV=o72q5}TJo~KbQR!E`U z7{x8*L0uQr23^h0&Zx7qGvj=MsN8ci5Stg{=9b2ojtEdxiSPC)(xv_vuudW3A+cUM zei&jMK2Z6%#7XRYPV4n@x@MUzmu7cqE1=jD@JMs_qI>h-<7&#^NLN#?rIOPNX;QA# zr?fYpk{%zO(vGEV&%IH$pi&Ql-ZY|HR0GoRsk^Q5aHE#%>_V>RNdnXc>8fF47HL7@ z-*m}wZhQQ4YRwKW$600o4Q*&qtE8lE$eJ6YpsYN=BbqA<(=#z@4Hh^;vxi$4q{1NO zM>7dVFy|$9`^27`LZm>49M9A^CW>CS&9-ECW4FzyWCG4@nqBH^z!WApqaeiB+&1-9 zGLh5!p6_&FPx7-+c*@AZS60-S@;YHPNJ*uV{N*`j#7HoY#RYXCzc7Oggv|rT6dMJD zE%ZojUnOtzQC+-{YngTq%)b1IxlP_67f5!S#AlrghG(?Mn;(P7W+C(tLiLVAGH*nt z@n&$<5n!ZLo2QFsA06*u@YVyvxU20>F*Jls1$@YO$;mCvrutjA`!a>*x|-)xJU{}T z5E*3F*>@7b%IF=)jHk79Rcq;otpZVo^YgQZE1nJ>2_ymW!ZjLjl0e#Nt4qZbbQrq(crBK!F@xu5RIp{D|Ih zK|Tv@UDFF2SYoAIzXm-)2@vsu5_5%VJbNG6C~b%Wq1ZU22w`p*TuW`hCqJ8=BrRZ5rDT#E_BxJZIbA)m$p^en|$~=b-B2wA=Id zNKf;;UB@*(5#0egZiMrv!wa!K#{4GcFE0w=i80IsXAhQ94Hp@kN^A;*0II13?sb6A zMrlJOfI|G=fMzNIta}e~+0^|lhCmV|oG%X_M!*_U7PtU)A=mfZ9AfjrZMD>q|^DEu7?L8FV;D;nc9m5Al$N3X!;?v6l=bh?l2D7bHJjOMJ*xLz8p>NSdcZ!WOgksh z0Gy)sZE?ygAIGxkBLcK0ucTRsQOOf*2qz zTW3Vuvjh44kRto8oVmHVRckJ1o@7JEB8Ij=qlX zpttQiL(2DX%p6jlR#*@_$!2XQ3laLujBSCNO; z%}A|KqfMtIB$pU{1jEBoMesai;$aEtCmev2q~IPlhVN5&w2TreiJ%N`l6y1^Ues|W z{k-qMi{k}S!*2{c@*72qj}TtQ#9j%6Fec8rS(A=Iv& z35;OyO&i~i5Y2Motf&{BuZn(TzvL6Hqu=(7 z7E}oa2}e*%#d@g;2T!F6^ZDlRDNBP4ooBl!?}AMUV3>o}9uoryTB{ZtS78lBQ{aOu z<~vegKJfvhH;S*p(3iJrwNjV0&+ zFb^?p7fy>oS2t_Skvs)0&O;i#DaIM6fOA02M?_8TE+n=p(SYnve)f$F1K5<~wli-+ z^(RDi5e~qbiOe_L>6p+NI>|u%44mXV@nq^YRY}#CvZ0j3Mk7`)x|q^#CFXMUooYO7 zr~0E{r$X!rcPacQJM0n4(l%W13MML-S|(oSsDpgT7K0rL!Flo?d4tX3&A0}|8l7@I zNxIxeg<{1cjQ_sCHh@_!sDN?7u}ccW7x*BdlZyEpWyIr5T9l1Yno0tP(ddHa2G!!! zt`g1@V&#A&R089Uy@*qpN(3>+3Nr2~voMuR0FM>+W-$>~FyxZ^7E5sB0i|PFY0=LH1=P@?*MV?@-sj3rVsBYc6Q(j@>TWMxE*|_3OTC+U+fm8V#pzw(UlTzEa<;+@P(7 zbDP?;(=)Tc(8gc6(P%QCTNr52a>&FWG@PAhpG0FnNEm@l=!_T%9(+fI@?Si~xLs;I z#Sq3%C#^$I2G*fj)3Qt(#2lPzWOPU8Y^TyV+n0s*%=?m98}$7e=WW#5&O-8cY7ob^ zOq;SRjCd{T#(0=?N*14t#MBOU<4^Z)5o3+;yg|T2M32dWGx_|&fxfjNcBtgO@r#p} zjJ^Eyd5~a>E6tC|!R`gPhK2VrN#&N=svUNfB8Y?p`Hg{Ib;GDS3JQZ{*enRiGFx4< zt67$#XPGT<%5$bFo7EE1)cQ)ZS}Uz@7MUBa?)3J0n(Ob$E_&?b;(YaH~9+@(wG=R2X`)p{O5_V46N$KgUQ9zEkw!ms16ekAypBIATqg1dDKBM<>A3X$1H$ zM);wufRvy>zYl)0R@XssVozjOHf`S_8Y4e0Q=rd?OTB&<#f^T?ax}vWZov#sx%ZHu zxJEpfWEb=KLI?+mU?Hn~wyW71L>k&42Bj#h7;T_3)EJGyg-xVLF(JaL-i%)X26RSk_Csre%R{P5fPW$Gx42t94%-=RL)#Bs_qDF?fBKdT@D0wo5%vYg3PC zE+w|(!|i3-9yQ3NR^KPOW)qhheK7!t%`)vh(lUMClXNr=pKSEFUf*sD;X^v8e+!T0 zgLe?S(`>t%PMbaInvS88!kh=d@;m)*%hpVbqB#e+$1XL%9UKe~rrn4A#5TPS0I%Oe zcop&<(YAf+Vv2CD)AzxDgLr1!)~v)yJ`954Q{oK&4Tb=4=R5mI2mv2W*8?vF__(`W zLnSZq;t(i-cj<=pQ!yMY3g7X5(=0IXkP{&X|EYo2g%iq)l8ki1aCG1$z@_7%#luER z*6bgyH)@-ewdTrF5JUvE(qoE;jTSfzi;Y6=CK*FKY_uR8LKMDGD^=Hv%cbUxa^q@q z9r_Gopqf`pHMXY|t5r!(6FopSQ_;`_4`->mj_}x*bH*|!~tVtQQ7yO?9MM!hBY=VhF(#FBp zN_ zu+?hlbS~~iAg#V>v2!h-YTdYRId3!O4SG~*+lcy|g|JF46tc{eJvInH#o$y%QDS=& zNe)VTJ_{WwX7*id5Y=XieqA*l=lu+fBfY#ck%yT(#T7=fEQpVok8`CIWV+vQV$ z$=R1mGJ>-m!1RP$Q^-bDk~xs`idr)BQb|TE`h#GOqKkmPsU*Wd9A|^9WI~H8%tW=g zBo=V)o#1k~a{Fjj^G72@*q;Tj!QJ@_1CKL@6-c5jHZXE$t)N#IJ6-Q~(SP;M^-_Da z^2+9o*XLhb>s{V?Z3)j9&zIJV^+tI)AP4B~47D`RH+7Ffo_={tIRy?K7R}m@!Geh4YXdp+c;(aPbLGK2>cut9u8@|%eC6x~-aAPM$?;UFyX_a0-47<@+*F>ot` zR9Am;krjaNpuiX`3cdWjVP*e2?H`n9?0dzhhmct99w7n8;KHu(xO#Tp}dD7&%YO&F2d${@JD6T@Cb* ziN)!BUd2BGHwO8#VPsI~=M(8TG^nKT)Hq?O2ht5=rXsON~F(+^2QF;eaAJsIo=b*JjgPhczon2pL1zMTjT~(-nt;y6lXBBjgr2n zwM@(O_d<^Z@lV?T+lvM_EOvXEZ?YFLI}Gn<%9IIn@bM2XJ^;t|0U07?Dk((QRwc0P zX#@+;Rs16iF#Bw%uRJ(_;U>%HjR<^i9|V>Ib;pGW>|lWJSY>mi)GSr5Lxbb=E(C8F zuC^Ou@DOGhV0x0%^K-D1Ho-Wn^}>+ZVCx$SJVU?9RG?T;8w*xCdH@Q6?ZO9ow`2OWC#*35#lr&9Pg#VHZ8J0Z0)*cOIGaKOSt2mwN{BH?0Z9Q9x12a` zVA*|$Ve!cDjG-!`zc=tuO^yN`M)!Lr(m_HoNSh4y+_vUBZVv81^i1Dz!@y8xTn7gg zsPuG7rJif>@vAguP9m}Au7k5w#dW-G^ z@c57>cr;VS!^whX2ar?nKKzw{b`-reYggN2DUxEOmRZOzfNwUVHm1WRD2UtW_d`kS z4@5zZUrecwA~1i2f>htH1OmuZDnz!Y`a@d-R?4Ju8ABn(pD!Xadd)yIE|n$aXpN8D3dd4P9TSKik1(| zgnuaW-tjw>Y&dV3mZgzZr*9i*qKgT0ya#ZilGH58RXptkEwcX!pdbx!9pYf%Vd=O} zrF+h29+w^Q$cO46nyP&pPlIe~kc$q#;18>%ZkB-BSEN)mSxihuVXR)inkXpqf&G%o zM0o&^HhAqtNE}qQ$9e9C--X-_zZ+rk7AT{SNctIFdvQZP_oyL>m91!244sdMQu(yLBzo)#`~_7?P-2TB{|bJ=-uc>i~UE)C)7cb zE09hAZ1q)+6=_6}SzJV`iI9l_?Hlh0cmcOLiXdwL#6VB4XqaInu8yy5w2rfRW=(1jKWKA3+2491G47J_|R=C<=ZD8x8D1 zLJmE}&k^7|C=kk_aDENq>Mibp4&OnsQJ7eUm$=PKz;{sM_zl{sHI@gJc?eQz^D<20 zP0#oEg78mlS=w#dvNZj+*P)s#fS`IlIBzkI#6Wv=%6=@3vVT`dy{vUX+L|pNJ&?-v z8b4LgT##xZfr^#&%`Sxl1*dh3>fl=BQyosEr%2JVfI{Kg0Z?mA4>B`sJ8qZ4uBdAk zizJ441Oo0m9nCc$M4p{d;A36uQdh$yl92xqvLIPh+o9}j$LZ39Zp@}IwPPAoHj}b{ z%jP3ql96?af6`3eBNv%J5}~%!Z+8gJ)pyY22(wP0sK2ARrqhR96U;V+v>l6C-hXMa zh9rDK=zJ?fE{eS5a80%Z4-axpGn2BeS$f}Md{k>WI|I(0Qv_uc>RBQ>HA-};ylD<( zX#BHFxnvA2WEK`L7gYQch|=Qh7T(Uy&8qkZi3wX~)#m2r;Kf|d*Ly0bqqNt3Bl)zqY?g@}dGntgO6(X`E(Q!#TnW%NeH!}1qA6NLkg{ZN(E?H) zgYcmCYl9Shk>D2YSq2U)?ptPA9r3 zSRBJQM`w4Br?I!Y=;&8xe2%xbOBd3A4T*Lvk<={jx9yuMg<+qKH>Qhss%^30tZ zE7f)xbl^wV%8m8nQnR+X*@(z3$J?fFX{}If8Bt(s2eIUon6agWxzsqth*UV|7|fhD zKt?V%3UX((6r2jgO99-Oav-vZEbWs;B;DifLMWHA=J{7vr;_cAPxR0TuSP&5d*l^Q`&U6L=5wSjQ zL*w&CH(_yefn)$r*|^dWQ6={?k&Eb+EE?L}sFats>OsWT+u}X=Sr-k+jOjUdjOkW|)qZ#m?_(NUsni3T-0`-f?P`0n+cfxAU{KoW8>OXs zxlxK24jI<4#IP_y4(i!~62%#ou=S?|t_4hJBuK$J2WGrE(0Ndw88K{6WM>Uuv2EY5 zJs}tH1W5QD=u4qP2Lw+iPr9E8xmVBWb}7v&Z0M^^Ra&*tlR_>yo8! zrBaWC)IUlWeZjM>ZFos3buga1g))4Y*+=U`3&c zLkPdod|@1($fTkY2HtR!ggKUsknlyA89qiqer`scn?Whvuw}`gJqO`ldVUeIW)r;i z74mV0tpJLHzsRhtU0_cHyb?)cy-qH{(L)zJo*~g9Tn0dm7kLvGQP-GJ7v^T5Po_zv zaNH~m9_i=G9J{^-CLz<+6&OX>>I%pRo3+N31zsM8fY<)Kk;!Ha&Fi4cLuQg>ATBk- zB0&-|Rlu%7s!Z@B5!uIH1Y1b-@*A)TU3-9t$#@r{J@T%%_c?oz9Z18A_MTo_g$RtT zTDftPU(qLAvZ3)4ZCBgYZ0)inv4xc%PgWLp%8800cN+?lRi6*VQ`UOG;sOR1rWb%f zTToF31l*>pD9?qgh<72r;j%BDuUVeo(K*snX&g!9BIKP5mL$0WN* z8wL^ZPcCn)@N5HkT@z1E!0u!m(R#h>64A{H_k1;%>p+Gw!_kABLGgekQ2_L%ap+}b zNdy@|yK?TiCwQm<+$<`h4n#Z^tGc;SEMuw|s46EeIkv4?>_W?P(8pG79dg=;b4(}= ziQI*_G$s!!9;Oytk0~eOirA~uL)3zLa<-jFPsvENpian|hNU1(OKftX)N&s4~r7x6+Cg-u`I3Sz+uu3C0)(EjlrPQ01hSspoO7Y z4+}eSRwx?2??Wcwu*r)yfO~+Qb^tRB$Wa2{AT}6_gc1YgVoLBf0m?0rrs2;GIS+CQaWIxCA# zCPL+*oE+&UHvcqypI9hNq(2;FrV&;p4k~$OP2vxz1fPycHHcS&?5Vmwyjgz@HpMf56sad;yu;51ks6V)4;P z1juo-+cotLNWAA)mcndgA{8EgFDI)x83g1*ty3#YO}N25Rsrtz4n$b7mx}UY$A-c4 z4kDLQLiPYCdjj$;@T7jc+`jFKJ7A@DWd&SLC;8Y$artVwQfjW3inU6)vWAn8Dn?X~ znS36NmdRSN;mNgFQlBRi9o^WhT`RFHfqYURvkG916s9pB;+=IuKpvvn(VzWu@hm8Z3(?E1I&%a?w$d%we1tkFK+v`%GT9 zQ#`jG3`ANjIhE!p_}3$<@v^a||LU@%e*IiqL<|I-yRsiurVk(x=BOsW+sW#Q#!i7Us>FkFF!Rs zm5(j|QfeQWP;A)ItlM;tf2j+Q{^<6u<1!~T_VVcR-G|c@$tRDov|0=ZLar<0Y?;3= z_%aG-C2-n}#O|<*>cQrQK1K2CA7gSL>m+tbJmQ@J}%blH#Tc4La>oIsVamNUO{4<5bYXVnVr~^ zV0iJ$i9&3cu!r*I6D9bT7-sSsP(o~e01YON1h<%m?p@N-0EZwvEZPN}n=@a}x zbf5h(zR$vUik%|e1z*Yw#c#R``h|Iqi9sBF>-tFA*7X_gxh9$qHZO$G$`Wi}5PgP@ zsvZRq1?`YwdMJZJmOPeV4<`eh`N(5=o5tOf2LV=7Ian?_)=Z9_5H$8A5T&%My+rAyhA~l#cG+<`#nI}(2ILp z+i{TGe8+XcpTT!wiQG7?NvV=wVQVP9B}WmICFQVh;f4+*C8m!k&IQLb3#%w6UHcKE zvc*E-vWkC1Mvt`35AXTdPkxkeQ?eW-WEXC!;=)TnpaNUe5S8%V0BHlZv#I-A0hwTs z{Ql)Y@*9d|>3Uk6eI_%mfr9*@S4!*aH&@G*W)+e@dL3%i@mA+87bCXDZc)qH+cs^P zvV^<#J{SH7U#^6PE4g!rt`I-Xw>tPvp{sPStPiIm3?DA?EAfw`lhm_mc6gB!OEfQN zYBeqB7Ri9SXvMZHQ9pLB$CR-5+4e5_K9bp8R6dw|`D!3BB!~$o%JL0H(%WX!$Sg+o z6ASr8*jyK-%{7Ja_rdP)^eu%nGVj3>eBnSmh#)6Y^Uv>-5mz=hJ%p|;FT*XS<`l*% z0TG`pu56Sm8^!WEw0w-cl}wJO^bUk$c4=W6jijtRXq#dAJ*j-XyT_6xVoP|B68;jW zx1m=CEAdIaqq!dSuk`)xg>Gy11z`2my-r=Y?Don6SYu$EiLA10sIn!IJ%Pe!H*VHn zT@Ms+94U@#P8#W%$hf3xLX{4y$-W_{!82RT25LRRI!n0TvmWIEo(y0D^~PB};Ty(^ zhpci$fn@-t;SqG{#k#0IfZP{I8{_yK?__|*hVqZc%Ewg(Ht{Tf48~Qcbv95<5K=)0 zr&tI0Fe=fkaL!vyWt9t$gt9n8)&=GvA{I;;8du&OB8sA%QQjT8peREbMHzZd zQIzKuMLDY|L&p>admK}glgdR!IXN_>ynB+Q$xuJb4_@~JW95TRIW)!N#1mv({YUeDc zZASg&7))j9ECt^9I)&**30LJ{!?QO2jyb{M#DKd*-U-U(^#qkh%0%cCZq^B@8OtTM z8tjT=N|Z*hd~mpW0On!g0YV+-PV8#t0I0DM;9o%~*jj8~Tgc(}2u>I}C`+_}H_?4V=ZON#9CH?l|ZboIj<#ag+zvec{ z^Vb)>o0vtAHzO#G_bQ+LMS6{Ga>GVT&STF~jl*VmdbzlKwbWdxm9H~b&*u!&>uJ8; zq3$FT2_`+e+w)zmXH0r~p5?UdwtV$n^h6U5m&GaKp_;lX0U|O3Xh|G@AF3roYUxlQ zg+q23o`>p1Ubx|T6p_YPmV^l%mgP{*>^p5CnjESn`R>0{;o_ki!NV)%dbQYCzFMj^ zG1p)j5obIsCSS%Eo^r2o6V0Ip@M#I|X9ec7tp_mdiS_bQtyI~lH|v#+YIAvWV`HmQ zZrnUHs33EnAeGR|_mQC48>M37YN@tStRA|_?~s~2^-^w*yu|*4@qRd^;bwjLYH4L_ z9VOaB0R=7^6oWp+ZjfzihQS2T_06?rx!Sy5tQ~s9aKEl-FIcCua4}oCQr&7mTc{Wu zYH%|7j!w_bZy+bwC~a)kZZ_A;8|A~}@wzmwk;3!>v~+&6%DBo#X(PC7@=yay$3|f= zJX8~#(tyVKO{Y2L_;R{dDy{?IS8JOahlafD_kQlR?5c2Bf?qJ(v!d0jrQ*tc@K70Y zQ69>DH|~p#wxwy4%5t5q&#jtEPI0>T+O)_^3KW1%HC!p za|?KlEE|UK6=LONp@q+nHCb;IYmLS_vvA-X<#PsJbPRisl#=Zxywt;@6uT62xx_B9 zO&RF6=JQw356EX~6 zd63O27oG~|#>N=9TEWa1_kzgIq%ZzKP&v*f3l4tC%2KzwtG%_?)$ZoH$RDs<{FQ#* za8S1)<)%kC9aKLc z-crnEdKNs?9;6`l+N4)QW2~;3~(!4K9VDRuOpZ zd2b4o;G^Vjq2V0D=l4Zb@CnT}Dw!8Z z5PIY%2X#0{(8EvxNm^Q&jg?zfaZ4LOB(W_J0gyrgC;&50QfMs{^*O|t5YK#F7sN&O zLTXlt!w!H6dn6?D`18iPBw)v1g1Qoa#<=3P<3vUwd}v8a6X=K|0rf?N(xGlMj+Y^E z3*`U^37iRj41&=IT!MsT{Q;MVTHQH@ep|T&A))m`Sa4NHhRg{-c*_eVGb}BRYL!nS!B5|Q>7+*#18eeuY43bc-jZ3hqQpWDZ2R*pkHzh|zLZm;&KyL44w zeEqdGu2+D%)KT=k_Y{sD70t%1OO*FFg&#^JzY>;ZP)Za%q4^w`6P^qde?ZSd;?C$ITwKNu6a^t@kK3NP~L*6sb65)zZAqB>Z|s+tKjH4chV?2nE1@ zE%hzS>zIB#fqK~8U_%oa1jH?TVfhHVJrn?uGsVNY!Upkmikc)4L?v+mQX(SpB1xO4>49A)8Zg6P8?%+EdA&9J;f6Q+&fbSIl zZ#C7D`*iwJ8k&m^w#O~}d35Bzn1=lSd4T-Tk3jr&{1+j9)EW<_NQu${OcH zh;diDYdEfL+HLAGYQft)WB-uE1`gk&bIs?{xMp^g9YG<{zGmNLK^T=_C{#C?<(e^iW=k%!2XrpcDk0@AsamOlc*M zv#R6(E*$Sq;)5!=Z=Q;+B_uro6=Xc22fBECPzuA8gRUb{I1Vnh-!A0yGY1}lg-lo_ z5=%^>nqUcgd4O@``@I7z`p9191M+GABiu$|ior4~Ad|BMC+*^jb}Kk%I*o~OG@JR5FXHg!B`mUSgv8^$_2`eyTd z+Gg|DxrmMv5xY#0?<@PJ=SO`eW-ZlOqzwH>#u**xcULdfrX6o(m0bA51lk3qYR3V$M88QY4;-UloKQej-t zWqB$OIsj_fA%lS0s!?ev_rBP8kk~qSdlY?om#$H ztgMwbN<4(}k&SYtyqS#NIMy|7(~+Gc#~@e<&YwY=JttLzeT$6-s)Q2l(0yEXdx<9` zfbWnpwVo+7>z86VSK3~Yl z9$`Gr^WZAVg-1lzU7RfY8&3Y{9N>jC4)8w<4gi1^9N;S41IjP@!`xZ?Vn7~_$oE(l zh3A_si{G$S>}qd0HmT3Vg15V-9ZjCf+esI+1P-VY8bv7=h8m&V6o7GRDG4ot8|FTw>lu*PU@N+ti;&Yofdi{ZB#%p4me^7~NwlYs*L4hZZ*jsE5L zx{e{%Ap`jHLz=t7d$PKYcc*XqzJrt!Xocu3EA+;*QYp&`RmTy_;aAp+D?Z;i!S+`8 z4k&oEd&l>|1sW~^1=59ldl3>I-xWqverbLBbrDiNJE~h|&!gF3_>$IlGI)4&N}Nce z#82}JY=ZU$HI~?D$c6wW*?6_lAYJNtTAPxV>)fXCdLRH~@ zI0znT1XEa8m{IW$EDT3wq?kfLG0cR`cEiNJ$p|MHl5ov|PZsXRQKfg5!-Qj&Ya}h7 zaL^8B&SfeGe0n{0mZ?iS(dZg z)NIGz>%uLhkOqjq;$J~6U^@I+57LzAjs@tks*V<@HjtTB>c7G1>%;XCwB4EobBnns@}7 zsBKj$rCPmNsuY*jOL(3H6=dUI7@YPH)WC~uO3mfX&1+?hBZ2aAc(TZ1&&Vf`pui>d=tk28h@-vP@CWeTtwCaqXcaLR*u znoiDMu-RW&7Z}vh8PBCO#`9G!0@w>ddX^iGdwUyhy$>^-6W?(xl;Cy8w!vNxmt^&N zOmY|8B)0Rj8A!I4u)XxnKi$*WUWn#T82}%oi@0<>e|b@zo4>pe?9?ec@u6^4%5_Ar zMhrC*?bIP`An3aZ7ceGz!v+U4>@3zG+tfXsQSBijOn|2zGB?!uH0O?vvG6j z+SV;?b*6-BNxCgRXiv82OLI)x@`D-=FoG>InOieA<~+~q?HYb%YjtMNe5-!_mRW06 z+jllr7hh#;FXl=P=rE3c&N`$gkqq1;Wp)(^CFj;^#p=~p*JXi( zmzQzi*uwm59BUb4!d=Vw@Q{m49G^dwgZ z=W$M+M-?;b5L&gE<5^?|ZXJiC5=CkqLWH zM0!fmaMUN+sH4C$r3qdU_Y!M86RuAe_pRdn)0{lA5O>wLO@B|&i%Tu4c`Sp>L$%U+ zsaP+uXk>By9Um2yx_Y_MUG=Y5SEfsE`R2x^Q)_9n^LL6Hog1&uEG%guW#Pi$(L`h?XApPy0)~61X?dG*Gdgwf)atsOB_!AETVjUt6HkXcAdy3 z?!LC7&+T1XuNu3%T4P$9zV5wVug`QB_pYz)&M$64w~qv^G>g@8v$1)tgje*vDy$e9O?9qU4eXTu6HhAgK82+KblmOqFfMFQOOH%d!aH#e`P zF|bf4J8@)(1~4hX(ay1`VT#EX0J3#;< zFy{+64@hD1K?UX)7N*5cmIo4W{m_Nt1b?t!9Zz@7o?M4Nh-$1q!u>8%udEnF*UzNJ zI@s?b5Oe=9FrQ!FH|QGXh3Wp^Qvmk${h~16OBYI@otsWH7#qljg<}8l{Y`ZNV)&09 zYkrui9;u7{rz)ul>DNpOEgftZsO!Z!wZvzRZqax#&7$$8apptA`W1Fm&$0SGT=xdY zkl;FFiF>{cNAJTCCj6WG)bNPzgh2ymVri}TG2}rZ+{iprZrc@Z4FfE%!Rx~PxQHC2 z$8zgK#BGGb3XP-T8`zuF*t`GFxQZM)#2cYIHDF;E z5$>qx4?w<1u8I4G!4Y`Qpc$3JV@NC#PoI+avs0VNv_Y9 z2UK1@NcrU;-Er`6LL@j8HAY8Uug8{xjU}97bd38=PE0FyLDcVe8GuNzklBeWSY&;z0fQtm2=v>0Mv9oIWOokDue5G+I2B?fV;g z5it>Z%h%@jI=5fxY}_bcy|%TmHt(6!bL(@}o1Is0%}!(T-Si`zaJUhBXJm@WW1O(o zeVf+O4quo8DSOj}W|Su@rPmtE>zi9EP0VT?kf5YU$wLooJ{qqXGdamt#c_TKO1X-c zo;(#+ZPd2vjnYb!-N=q-_uRxJ`|w4rm?6Mo)?wKy7Oj$Q_>5S^4&u^i6=ORJbeje! zx&Od=$&I?Kj<~{=olS&Br;+#3=p=li&Y;`q?(S}`<9EZm38W;0A};oCGILEzTK%9o7nyp@yP97D=TW`yQnKB*F}Tu0y9Z>JBwj~@GSM$vsiuc7$q9bY)kgXq5z)bQog$EofbI@+UH|Llkgzstbm%(ApZ8Z zllg*37mA)J(tmDvkaw1xY+y(UWr)7#ViXxnFgRP1WC#)X@P+-3e1-i$3ddW(JYIMp5~czr4G#+o3wiM24>z#{9!6G=Thd{-+XoS+?;jd~ zb7I91>AZn{=rR)=4(^gWhkP9mIdZnYy%(^-vpX7OQ`b8*3(p19JjqN#a>+63>sW^2 zs8GEA***!0;D!S@Bp*_au~0EN66_cX8la+nIK{NU>AR%YacoK)ysYiE@ASxy zsR`>A*>;^SGF-T#t?xs=fW8M<@0s16Mak7hqe`k<4X6*I41t{L)bkUF?{Du-c^%1h zTsmQmAicjm=qCCkP!UDrF`Nhqz}?`44_7FSFlO@kIa#(#kVOpLSomj%e%K})6$NO< zZIG}Sz^uOyeto-_B0xPPxy?h8oZ$2O-VuF&xsJa7X%;;J-zodR01ZAZ*OC2Jt4)2j zh2hVmQx$}AjQxju_wGHxZ$&(*DC8T0s<3fER~7sh%XQRe>5Rnn$2`fA_$TfQKsu%k zA=51JMH_bq(k%uY`n278%bvfyuoxv=9DHQ6 z8oY98#5e&>s`zJc_9Fq{_;u4jgyIx{eIxz7`oNb=!Z{?TuMH%p5tOurtKOKn%@KBr zCpW95%8k-e?X?us?@6ae?Oob(@5*`kBTK%5A*1>=nn++jhQMt%$V%a9D^^2~mbRcWZl4+Z&N7%vej z_`y7wPm+X?1JCtBRX&1?NZQl)zd}*ONAmsC< zTlXyFLfdL=Zj{$*#Rdx-Q{2GbC4B{s5RU6n{Eeyw`78rp}I$10H#rJ#FINEtu+~ z(TaHaYb&TSY_y^Z$=@D$5;UYNr^cCHl*qs3yN+$@UJf9XHChFUnQ~Yhos$;QIO!a} zDVi;bV55Bbn9LNi(jfShr-%W02`YxyK|40JeGkMe14JeYDJ5}AL^oZ%ZzePhiQn>0 z#W%kJO5(W(Cz)X<93R&^RKFc+7!a?{&RqmE`-FV{L1UT17$^pD=s`<_{4uW7aHtM2 zKnp(`cB}FI@CMF|Icrk+4#J;C*+A4ULn3;WP{IAhV?os_iBLXoH^SjmQrfEV7ZCzi z1@ee74&=RR;9ew?y?B~X>Nr6&WiC$lyt6EkNjO$irum?}(TbH~1di_$M+%Ez7sQPg zw8S^wM=C*im0=HVc<&6{@P;FKphq;z0;c=aYGWNzpfwHKYqGQjrrq9f3}!&=nH|TX z@`a-jLH8L^8*&=pl|@ahXEp`(u)$#yA!iOv-ltHlX72+=$)hiTS&k@Au|y#!=Y|#K zUXqoZ4U2z8xGT=*=-hQWjk|t>r;%ih3+`H> z{;uQR&hDB9B}IcQS&k05x?*R&Ju?fdG-Xp?VuIWy9*U=CNc_0%U@kB4z5hfgg-YkW z?8rv8-mu{f;CN{eOOnS$vQnv&D!5?Mh zevyf^S(2HZol$3Jaj0SQTQ-=YsO=NKLrIH5CI)kx8`7$5afpW2I+v_mU9OTk(h8sd z#VpCpUsmTY!$b$QYMHjwG}!$>Q(?Bcco&sMl^>5vJrt&A)WY;k*hk7i=S5P76wbl! z2R1}a*C9t1%nY(Un6^*dZB3_;^4upL^)U5fIxp|I;gd?E8iS4P_nOdR6QRGOSt^;xvth<|zl&rQlJ-&8Gd)}wjvD|Y zehwDMU|q-NHkCejlt847X$i0PESV7Y7V7Jqwpo`0&J1v?dvXxVlC}cer@lHcJKd1d zlQf}?wu6B4edd>|>rUVHr+OB>JLT`>bW1b4P@qkHX6_bGZo^3pSjIKar^NJ0hq`FS zAFr;LUTZF|7t46N^(ZtI?oPuGH2eGKzMEM@;XB;Df*f^_<|Y}P_hgz~4Mqtt#Ni%& z^O=Fo=g(u-&>!Wgte_9E^;9i-S4i*FBjB#&O!5ry2-c3{JN*0r(9N+mi`g=H>SB{4 zn&-Pz>mmceh4Q+Z>yyTHZ<49tjs=&IbfnPL(?(RQ_M&DPQl!jC5_3zM*@C>w;2_qv*{V-}ORi}$F#ZM5WkAX3@T z^;a~GrR5==(OjxoNWi^aG<2uCW@AN}r3zEbc~qLf*2gCtNd2ez1N1Hcvl*CT9tnzz zxXL@BbL|PE6}Tb{2fi_1XUDu_KX)p|a4+(dgD1uqM}}|U$fz`&u&EFEvmkTmh?0I` zwWJ#Gv5IfCFg=C27sYCK(!P64dnhv?hg-3 z4LP3Qb}2ss+&12W(PuVIE&1(Bj6&Ifvm8ufk6=$paHle+AcH#@sO~#1*){zRFRmWjwo}?ZlAdjpt;s3MW z@}#lm>HOTB3V%>j5kLYi%NVW{bLipCK`NQxBam_y!Y52~h(Z_6U!X~(Xf|xg(>t`Q zP4(K|oj`OQ&{DFf=R3V-+tqa1>`~Wr3}#gUR2l>vj&eA^nDm(?oG6*81PEOezhhyA z6s038`&V9JbH=iu&js$2z?25Q6o(L3A`A)}@jBh6XTC*Ml9`^H@1j!3v2efy)2JJp zifza<`TU|fbHD}5N!BgK8a-A?mV*h)Wd@@XA23D>GyL+V_PPUcLCg=G&^^-uZ3ul1 zd0qLp+>V5DVUL`QBL(BgH=sjNH5V|0NGmDbamvaD6{c=^jxE%+`|g(Mj1Vvkj4QR( z1b*|m;LZ~wIe!{SFB&0mhH8oAq8B)xUm$B}gs{Xai|68-7_`-IM=Z34M#04fFne3G zJfXLRRVvh9wVd5txw=|@jTax#J|AlnFkD4;#yb`-e6vfNHr?}HznyIspJ}WJ+5?~r{(wrb1o#Ah_K(%Rl6CXb!;9d8nFRX`W!?1Sl{3AerAUbx6d z1+QGX?NYCUt0&#vjo>pOsrQ~r3L?Z)dfIfIzHK<$+bZdHr1r2Y6)Zx2b7!&neE0dA z@wZL3#i-0@@wlhvhbjKP%8q2j(u~8xoNFz(itE95oAf?yJ^+r9?Ke@z5z;@3z zS%N%=4J=;ST3;6@79>9@6~r}ang*oju3ak3znCmPK_=uHT}^L#t`6UjH9n<$UJd?B z)HFQ*2sHs`$ib7*JRI4fCa!rnmP3^_d)TfCx4HrJBjB9KPvL)&shT}({XS{{l4CCi zPZNs*AP+9;>%AtD4XJMw*VhlOVD_3wV23RamXCv5#cP-RXh|8TT6;eA;%gxnKvF+M zN1m^Bdri~!s0)#2z^w5RO5jf4$0y`1u+gS0WIkWW;{PO{SMmSIqO!*OJwrR7ZF%I? zT6v>byGgEf0ROj=!l%FIMW^dxfNph(GKlLvA$29z-&HphoNhaED_F@(*P+Qm7 zzvm{&gy&BLn6#1`4}!sSUa(Kq-%pj5Yi7Y8v7Z(MvMhB%Ei zJtyn;X0gl+3>qTeE$EkAnt?h7Z*2xk8$CCxcYW5uEY7UAGcS#D7Ul%cvMyNBv7K2q zx1IUywyU+-Bbbfr?eK=6qqfUR&oR*L%x86XuO~xbPV|?BYt68oIRF#0OR|3>lq`?6 zI|mTJ!36N1!)ZY4wqxIwTb~d5b$Y&stu5dq&&l$YT!6{#m^S6FaT(0E%X(XYrX8=h zErDYZTJUC>#+)3Mb>Xhpl5ot|U=WYFPVEMl7h78LS;Fg@EgrA7;RC{(V3UpO{V zC@{#}&6>6tYoP!&cU(TWLIEIUP4lHIOk=N}2{RE0QJ8@$o-WGFz(BY42|*T{6}*va zy}aBYNG@b$6S&sZa%C+>$7{7>r9tYY_0n=LCIQd%!HO3CZ6h33P7h_cRJ zkE%i)$%=w^EJ+KLO0z>e6((_4c(udFaoc4>xaYA?-?bugHGIU;QA~`6Pl|L69~R8~ zis#rM+J`fPk2ug%NhTtEi=$8YfMS=d>3J3$+o>dDup>9Q3Sk?cu2~fH0HG8~izGD8 z{nki;euArqp?2xG?WP$4*0y6Apj%9Yh1jx4=V*j5E0wgmB&>*Lo&)t`rl>+E!DI#~ ztpgD6I|Ee6XtwS6c-rS>ROtmF8SwtdsN{{HFnq$Q?2~ErP0KIa8I=?SQHxI|MCMrA zye>c|qmm4taVFjXA(_5uK#6RYtTCH7$!4RgOvrb|>t(17T2O|mr-`>6(-`;;9PgJM z%W0$^<@&YMZ)b+h&X)))(Xc3*wcS+EGGx#md zFhdO!6|cnXGTSC#`%S93bzgJ+4afF78C6zw0Mflq!*ML%?8ROoprtj;Sf+g&km8Lu zLkMPinoTWy8VoLu6#FlG006$|>AWflHvwhA+62nSz!we`KACNkTE?ERQbD%OVW z(Q(0H73K;_1!6PBQY=ajO0c~&W#L_I_tidi0cQcm=_TrSENFx&9f65Ln6YBU3N%qf zZ4w01b&^kIov1v2gP0Gl_Pq1Z)ghy4;f0Ba4C(irCCxyb;C(%iI+bMVjpFvZ7pr8`C z^8v8!_i>O#{~c>C z2Z33tVE7{AI+10J9gBRFuLWvvRE6?zR{J~qf}Sk8qsq}*T5 zmH+j5=FbY>DG>(gVQwEzbv$>ST}yK@ihfM|*5i~p#$HrKmp401FnoBg-CEy^MbE&5Lw>(@&(7E*65ETOPGHnd* zLT6OWhqR-)CfwRwyq1ah!_@#AS=`JP%L`LxL-eLd z8G@a7FCOuz*0reTS$nLI0 z*NujUHZ4kC?yh9(*syF_T#ijzk|onph$}5AJG7KmM~LEzVn|kqa(Lyn!x7%YwruNi zSOOg1pGRfYtJfDWw!_u~qN+NNKQsUQ|3ClyGxJYb_Ti3Dh>G)t4zY80H)WO5(mm(c1)c(Ll>%qJB#4g+cZqnb1U=2$Q8XwD`Ql3)1l}q|FH(f^ z9K(l1DR`?SeMpku4snhlM;E=fpB{LBe0o5(wlbo5gihe$@Z$emmiYg1A^v5-Qv5IY zwktNY8_iZDa`Lp=Zh1IT7KUb>&WHuxrY%ktOw3(dBpEt)ZDmD@?Uam@g`{Pi=fYsv z@mO>n?(Hh{OdNfd;1ZH&4_sympV4#Y%edjZTmjJtT_kUmD2P9ChK=i+dH8l5hHuB= z3i?(Bk0FE}L=`F=07ePSD8=N(UeSzw_q%d~*uW_pon|L0uk(&{nN4z^wmxnKbvvpU zeC1oFOM~a>JDoGt%55*H!wUFEWl?Lf@AI>9*zHLBYum1_A>?C2q#<5>IMkWoE0S!3 z9bJp*3SrknJ&^iKFLKF(w-Ouifz$)I=nF`BL934N&%?`#^I5XuM}+4t4qQqKu19e- zvFU9&*fCD$jj;Vr=!@jBRp@EZvnHKLs&d$^l0H<*3mBpku5Bkv-($ag0&~0j<;y-y z%Cjbw)J+ zd3bk)3*sfaR&yd_J8+`NcHv-QsTHQjJk3dxsIM2)#ivHw;%ZNetXRoWj%t#is@*V? zMOR~`V(MDG4uTwXbM_#O<@7-{B>MR7eF@MUd!IN@nsRBK;py-VK|6TI;?eXSu2H?2 zNjsWfF0|CK=q0>TX(V)l$BKxRr5UoA0aL2LZhDa|Ql+J4g3{8B)<_MO zR`@GLhlr6lBr65wIkE`qX#DKdTMo&Ur#wbxwdk1k>-piRCSxC(}1sgnOldN4Fk7ua9rZR z6%Ya#x(k7x(UD=yJ2NUEZ@fxY0GB(<3M4Vs-UNBjKM4WO2PK3A?w)PKfjrCF-iCuz zLtaXstcH$-KD%K;9sm)KC2O&KWp=*3_$93kPlaKlQYbi0(;u?$&^dHW2?6VUNm$am zU3Ry?Er7&J_xSkmE&#H-=9&gTR4QynZIw!)d3kPSQQXSf-cFrZyGPEAqE1gI8%6oE zD->Hfy6EyT_*{4I;lu%nKfS4!uBEu975&K$glV;HL5@fX-pjNtioznM21zT=XM zh9t3G%!IAEjF9!?D2c(GRE1K^;gy0)mQpa#FZ4?(UZg^BLpeR3ots!RsGSKtKwPV? zynUr@D-vMJIYUyh%pCLK{EC++d^s7KN|4k6WFZ}W5lF1cJ;J+OyRNwsn4Y|#K+{Oy z?r30_cq#KP$YCX0+fY^N#7~qh%R52GOF3}$wW=6VCc$XeizMFmqGQUQVHwIBNf9DO zy9@f+?Tj=Kn=$5Uu??#Y8pP2BjBHc`pua5%`Fl_;>6|XRJ2F9HoY@m3#*+(Txam}? z@Qq6C%^qC#$Vu%VALni*+Uu%`d;vc_PIQ2;Wc`JabNmQ@&Gv1#7Or_NCl(Z@uqwK! zO;g_9-cCwwDz1|jt5YQxZAduw3dMWZCV&kn)!vP$1RkaA ztk+Y`))1ei*~23Xr64z2L$!hsZ<=40PAJlf)C=jL>Whh*zTJj9W;Mo&^3)oB!r>}y z&{)$W0?&*1)h2RK)?;ZUkw1t04gW*vK>5S1?_^3VB#Or`3U=0Tt|>H5w*rSA1*1T~ z0Olj7&7dCY<$NL&@Siun70FMx!CyDS$f|SSu`!8~m>Vw^6Ai~tCU0vE#j2l7Mw?rW z<*B9F#g(;-vsY&z42;t?&uU?rbqy#xEfezty@Xi3LHId*4@wg5ewzI)#eO4S&x-Fk3IooOXBLp zqK_4zvp%{!GqLp6{G~N=9lg4A6$OjSTlI^YpCv8~Z8Nyz)(gV1TZ z>igZo9wy3_iZ7WPt(|;e)5#~gRd>U*HnCmIXxfp9^wx$!BUxJO)ofm==I9150+3W> z?V2ODAGD2%*@zVbRkLZjwTf|&exsaigQ0+sGJ$m(uH?|tVIWVnU34WCoEplYMv_P=_?h4ICBi5JbSIgHV-hal z6P!-zI-nI2c<5mC2hr6hiX`Ft?>cUV=wbS0BRz$v=|dzAOifH(o>`loCF8+B*z`7S z9N)uaSQ<0RQXKCksa0;0*+=IlmRDw$q_mD1d|;kFLi$YzL4Ca+B)G1@c($E;PcgeS8Y!IisHw?}5)_NGQw{qf?$h(EvXj1AW= zuU2QyEtIw)xCAU|XV78k+s}-P(Uw=f(R#D-_F`jueEQPuiQC26-LdsMZ=S#FU7NiP zSda61EiEjpBmh1lDtA`2LBF+0Z`Vh4BkjCMTw@tS+u`cPM;7 z;fN|}n22*d%5wpAYm2K(ml9cYH^Xt30o*P#Ju|s_Ne8dD;i$Zj$D_-k^qaC|^R8>P z8HPvMb0d|_smbyO8_lVpwc=fxA04x9Z@uX?&)*u}v}@~c%?9r6EB<(MYqdOQT|kQo z?v)w3R7=9uN5x*-&95#acZ5-)kORB#NDeaQ%HIoN#%VvdINPzIU zabzuZWc9V8^|5Akgz7mxxdx|F%QLi2B$H#CjwIs8MDn$k>)`b3n&nWnk#phd)rpna z1zI4Hd55&Tz0IBQHcg#QQ1bctnW^2zjQa49ITqOY|+vg5VhNG-CRBoH|Fyf!gCO?s%zTGkNSzYMXIpIt$*TAp;P z^uF(dd1%9{Bg+64BbV-E2|7pjz=}!;qojDuB&wrxq3X61lsJnV5?xm+mTC2kS0haj zI)<}wbczaDnpwPhb7i3oO{1OAl+2dKls+sdzIuX6TDiKsc70}P_TtU8#hHC0A&bcL zA)$Me>-xv$Cf-_Gnps}GxLv%5)O1qWhnRp3O=mC{dX=r4KRxsrlpKV~#Hgi+u_%rWB+RQ^@ z|M2sU3t97y>&N)oqCkqAb>QMsxs}@tajQCkfZCq-i47*gC~Y(E|Tdd+4J{ zpb0gyV!X7M2Fi1{%_Ic5#|xFj4ln}omUKWU#ir>k6R!eJ3a@%-o7t#X+G8^IvXMW) zkBT;omyM;FYpb(MGt(8^Q8+t=dl3z3G*XEU09ZnXj(BC}Ce9@uTy>Sb3LvXX2bd-5 z8E59NlY75f%ff72GzK6^Gf%pjc^TLHn4xXpNT|5|3^!znX24w7vW@DFVVR8vEC?Ux zB8pC^dC1ptjeI_6(g`$w!#B(zazfKJHtn5?0-4XlbIr$xj499G5f?F`7!DryF=^G5 zDt5&0sUO|0Hz&K<}oajj;}{Ry@utjEbl3xvNh7Se;i4?hL@aMl#$d2vJxp!NAjo;y@FY}{4q2To|` zv501E7;usTS8(Z>h}Q^)Oy9IN>>)4Emn3+;L2Y2{CE_MZ?!@8<|2#a=eI$$MzMzN>4vffj8XkNz;5gTA=M&%KLx%z_>d>KY*6oTRZ&>BALs9!Jn+KSS zb07&W$y}M^I0TWWrhsS0#<6t(j|V@Tc=ciS4tPaS7IDkB?TcG-bNGZlRe9)pRVmj;aR#}#jGO~3(pg? zv}L`KKBl(4y*(r`0V@-{k6?-%5}n5t%?Gycg>Ve8qZy)V*h=O3FotJSKQ=@f1=IJ_ z@c20}x_EF%`nykzB7~jQ4DwWZC9V;Kw-Tdd-+6jO~AG5!?CN@|(A z!|+28h(ZZ;hZSQ|Rc`&K>soN$N!gj4zK8?s2jswh92smiqENA4p9n~9$=l-~@sFx4 zc?Fg?4RIlokzY3?{6gs4c5Ty+tc{kBEoUfn$O^agU3rBA=ViLt*K{M#4VzJ-EMV$* zqVPjA`$QJAe_ArT*1ps*qV1Kdn~@Xxwv(u$lnhHP7Xzl_)f|f-H^F^V1lWKcCHA45 zRhv)*8u@Wm@(Ja*!Xg}O+4|8_Z956}N;;M;7*4OY)T-KaxlF_oI~ZxUp-uI?cPp~* zMal#RBHfv>;uyBK^Svf=jwn?;^}+iPu~}RTW&d%g-T||ii+d5;9ZSIMkLq> za7!gWRp19+JusWJ*DQ{+dFs%p+R?UcyGFF_VIJPZ{xjS^)Phs$lzdTTr%s@uT+N$N z_OPA3fTTbshUHAXRW@9o>}4zt!GkcOXZfA@H8<8Pv<2dBC4YLJvqQVFPP#Fcu}nQVX5l_utynw8EBwMLC)!DGTa7DE(}$WH7PJY1 zAm)zF#IglV3^O5V;t4>UKv5+*Xd6LNz~fb1janZs8Um~Pl~LfjZk zx}F|zcp)&Ir7Qf5m@4Q+NHL%}=9(fOG^sIO&r`)Y%fu!TyXKhhwW&<6L2NM7XA^pg z1UF~t4SHf?w>D0aq*2KrAjO~=IzmbnI5S=xFIDJ4=Ci{Ox~JMYsf}WYL;m$X7a`=a zyW_B$6#OdPq^?*aV;$l%!VdNW*>*6v327hro~v(I0o-|om|C{N=E$8w%MV@CuZ*Jp zNBAFyr}ddETK~&});VxVMy&d|G?vuz!cG&m>2JY&klr4-j=jJrevK4g$xVuSaBT2 zs&RfM<4^>Qq2}VlLBB>cMDCy2C%H=zKR~DeQg);DpW!Z0`oDZEQ^e0?(z>QMG`yA* zHq2(B<-;j^ezVmyD<#zZm= zJmlMvM#P#O=KxC(T7wgm9BWyb*ed74hQrtP+l8~DX?(R4?aRjNm%T7DaIX2omDi`F zt(FH+dYFKQi^Xzf7<=60JgpO3fPi0^ARV>?64QN4#QDn|wUus~C`e1qvD8lOCsvol zX%W7|L+vPjq!n;qae3}5PCt@;N&w+8*fWVexiP4ztFtrnD;+^iYdd=fLM&-UoAwSs zJgsUYKuoNzTo$K0(iMvBMe#CsUxC+IG29XUH?%6oxYD$c$x*MwG}40gqL6C7W@AZL zB@@Pk*fF`Fqzj7PC}kVJb9$)=I-)eY zaq2mRXW>zCf87BVPLmO_@s~QXv2K6h##c-_PSCy%**}Wx`ys5bEmayy`$dCdJ4GLF zDXo9RhKjA<=7tKq6B7<;{A`H?c&h}D@W$uKb(CvIII#=k=e9_Uw@Q3mB&IF>oFy+G zkR>@yYb@C>F>rWZyqv|0zmVod!A-))CZE9+ge^npE7HYgxD!TplWTcU{ghuVqLGd} z6)^Q15ah)J4$v@mIn3|}Jj*gT@D*P!&LyVCK8K&^z zN{XNqe54trG@~*N(b1laI`dHaD#^DTUBtKj`{LXExTTfn(toz2YrI?se$jl=Zkeq{ zv~318+r@Nf%hs9Ym==3@ewoeU7hCX)R)XY}3D+oIR`NO~MT_O_pG2F(U__JZL)Qt*<+lV>UDpoRrdQ3EEm^&2*i7-3%

AHB@UN@xgxW z=hCOcWlefGU362u)(2N z?UaaU+EL(Gq57K;qm6YZWI~RyL$C6`nZ>}rDj8Vs70JTzm4yvCVU)Mm*KG@o%(vp$ zX1J4&ygVE|!XuR&C2*ePx&SrD+cl(&BWDfY+qQ%CRs*{m$)Q9_O_j9}C`nrb<6Au- zP2^g?%*63Vtk$;BFVpOXYs%TCvbHIVXlg|PjH#Hir+9dLq&!xkM`GN=XjmE%OK>1m z${X(wI3$shn5e$@od!XWBuWwm|Ia?nCD1IP%03k%QFP0m`{n+Bv8<1GLK<*R|7fOK zS=tB7i3(_3_oyTp8FzTbyOPCtH`0tJsvvpK?7)4YWj4r>)ynepB!))MwG}(oY`@`& z&2(+6T(Uu;paU|O#LxlxOJ>tHOdpuV1dMpET8hiYz-9CRmtm}&dI;D9mA4TA5&HLa z^p2;`*?JlFnt;#;3ZY$x&J$0@9^G<6JMi4RjFF2@X4qu?a~kdGCj zjaIYjnoc8z{g_N1$6<2{(jPC_TkwQvH5_eb__)lVMal!zZ9bSz%EWwuBDs9^C2^+} z-WmLvZQF!{MmP+@#T?#x!}2^ovV(#sM`Ou8S@fZYz^hrDDDNv2&?N&d$5zd={P>>X zxs4rT9#;zT-KbMy-->bF!7`f>dh5_*?IGiagPpIo8MWZeF>F~ISkd;Xw`?miYIcON z)N{`oO^@6vX(8*Tg(I7mSLb)NQd!s~a~Ajf)txOn#8z5yLE<*HoO{NmZTp7l8ukt? zKF}428(z~s%k^U$J8evN$MB*JJHP=6%O)V(rW+x@7+KTn;sPVsebaE(cZN(~Uw7b_ z=^S8gDtk0rgmmtEF*+tU#me5os)FWWxl}BVG&`NU5P1|kR@4`P!JJejk*rpU8L}-= z%wQGmyDgc076fJE|FI!?!P>|>hs`5-=g zo?X5EM@kF&)76-oAGFQY>@hLPdi#iK`lUc#%7o zC31g5C_l2u44G>Lwpq(NQ68ED-GbVXcNrzmvPc*yv$pg`wS{SXwvdwTl^=;&g$(Q< ztz@+N*j2+ZjE=Ole}8fOOm#~487`Jaq?G`ou+wxUiyW2w;WQPy1CJY*rbEio!9EVf z>jRoJ>fD21UqxEPzh{niasc-z)16Hn+cpD!Q*Vu~ThU!X4X8NXiBcSj^(Lg3E_C9U z-P7a9F=`yA*S)GGZcj-&m5Q_IetP0iR0&?WCZ^|R=Q9dAuZgZiL8nwEdF(k^L;Y%& zXXGUYdA<~qhwEcFW%y}wYX|}g}ch+sO*V1Z>+4%ytO#HL=MN+E-$Pu zk?)^4myVf~L%4y9S0|RQK$a$}sv|%4H+PJuRvzc#B6Lq*FW^91rBEP~Fjk-wUZ>H% z;}@3}=2vFsr=>TxLj!`B3hBN!*#h0AR9Bfip`L*63hriNZI1kK#pUXljYCn{wp)@E zMW=2_QsG2EiwnyumzHLh6#?n_bkAK$5>nZ864JBA3$9)417ff`!4EyPeA@S>)}Q)B z0Pb?an6~!~GbiNb8MHYlIi7uX7xzk7mTn)LU5Vt`b~j(S`56vb=0u#Ia35779*6EMF*dFTYurkEDCPgU$oj z67u+DRGqy2NYzTUUCH|nM5^Mm=}ensmq*XZ zId%uUKo|VT0}8F=AWLfE?{%E!bu(O=E;l{3A5S~7ZC4}D?~q8iEffE{tk#QWQ||{OwQ{FX>#zIpbOOuY)`2{lJLXL@(Ux_ zTNkHhjG7&8MxL*ewz1`yWVjMnm0`H42HtjPx7n(+F|Faatvh_Zxxkq)FDhi2kzMzK zo!E;SO%Kf$ma_bs8QIb$jlRGnkVlLpR+jd}F(p=Q70w4mEg+<``FC|zJ2r-~0hAdZ zBtr-h;RQ~W1gTAm>}^FFE|$iyIWcyH4#>mBQc-PLqv z3E3d~t4BIb3;UTqZy4D2f|?)LVF*Ue@C@EntL~Xziak`Kt5((LUME7YX(!6);}8Ll1X*IVWNMyu|) z7s%(_noGM-)})&TeLa8lkPw)D_oH$>S{ynzG?HJ3<6A*U9sJtF>VYCGT|RU9rOD?5 zI`CM`lFxr4PV1=>rHIBhX50@Q?^2W7*|5KH+pdOAB&HWt?Au69C=|Sd8{sl15FIar z%tEsewc;L~Gl%L;en!7dl-4+5#;RECz_5ej(@D5zdK*kg70PL}`I=RzO~ixSDjnh^ z6DQ+2JtYRQ&J;*xr6yrxIBlfeo^e0~B;*Wt`llvUiMZ^hC6Z*f5Whq+?p`lOAe7SL zK`EVUp>lX3E%d7=JB>;MEOD82!fX8_Z%@7@_dH9fK48{uH#)m*S9LGxy`^Gtlsw(* zd8E7XIFEkUun}Aw8>^09KHu=}j*hR6PPfX|$ke($wGdvbZZ^2z@+apemS!iWCzD=< z(L(8gx^wkU!e1x(gjBUBCCLs@eckS-yyk0JWaYIia4si@$s>2oYSp>ZVer;6&1sp8 zd9%40yt!Sv_4c*e!tmv}dCRNT&rRIA7+h`?@4h9R%+oC)l48(S4V-?3^u93IY1r3b z;*PkCcBRICEkit1o+R>t{p>k9X3Mc6UTZ`vwV|4tS{$ViT8M{UfP7CYSA!yN)2p=_ z+WOH6o<{`3a*1q@r?c6be+^D>dE2$55wO!hexz2#?kE_a0rh$EfC|5dqB3T~4kCW> zVr)8mT#R&jB+j`4!u!(@>^t0lR2s-r0!S)enj@c1!%3s%q{uJAp(}E{z=x~W0v#`+ z3xOE9l=o~peHbzS;)oAyqe^${&AB4p0@W#tUR#+nr$ zL_4A7wbasMdwt!e9|fkiIYiZ0#>l-SPozt2I@P$Y$0S0XYAE-?Jj$yXRhOw-W zLNi;!1`NUR=>+&i>td|`yVK`Fal#by;>Nm5zEyR`b+MbhNULp(N!CE(78kn!jA%{v z_L^7Ynk1pXn!r0EuOMM(?csIKYgszy^*(OX=7mdzb0&7%In^-3&{)8o0?S@2uxw-A zj<&sE)0m4ld?pRp99HKYY;s1R-8x<|CTdN`t%zy>g>nO_>=@E|!~{P^T8HkV#2K^r z%ptb2=iox%GW1We+f?|EmFg!afDRQ-_OebZo$8z%+AD_ATPOo})y;=~?vxoGzC{!t zUZs=qitJ@>hfa>Yl|2XSL^iGmitf_krLIKSOYxz+DP0y0x}eM^9dzZ5Gtj(>75*eX zm(IIHT#4dJ6^_*ovj%~3eL$0TV=lBG@F0kNb8h>KZcRpF>%5I^oq=26N{ zoubu;PeaqvPD`+7g{dUczx{`fFk}MM9V8kvdd-(>onCHR*hg?$1`2No2^A5XjALO`PR{ zijmT+MN0`FaUi0B7jKAP@k;?N5nIW$KO)1{^1I2~EE`3^7GQBGZ*y*@L!uy7?|`{-{t zTf}0q(Sb3{x#G3ScRS6w%mn zT(z9VRo^SPN|rCVX`&T*O*4Ww%9?GwLUaS;;pTe7+ZL{9bv~PEICq>NW~melN$^88 zTlccA^HAn2<#pFvYlU`zNz;cbdaovUPJ&M`-F{F@be*BAPWykFSCUK0uMjuWVh1hAIfPP0$PMvkBrM(d$?k(S6q4o|GBS;RUih?N7E zcRklw9_~z*qMUf!hjez6DSCNo^5a%*MiZfLqJO%285{T{I%f=ZBvK$#eSaU9K#ZydO;q;60AmcJff-pF zWdWLjmfXk}X3Fq&L3Se|9+;jK-`(1GkM`ZGeZQV#4EyVQ1QJmje2;I9tDD4YE z&n^(k`-0HB3xwe`gnq_Y%dZD!jq?e9F9`hO{Q{dSp9D^i@{3|56Q01Ipc~Wo^J2)S z&b-GMyC49(mSgOq`2J9iv1#!Q*Yh6|-+yxd{{1(^_hb%v=gMDa>|Mrwjh?^4*ryr$ z24lHjWi0nK#s=+Zo0(TgKvJ0#kwLEhZ1V+OKo=6+NOoP~E1#K2_W)av%tiFqu} z><$Hu0TjHGQ2MF_r34SAyTia0Jb(dYD5FYu!*sElnwgae45+NYoyywJeRG)&u-&>- zZ<=nwsiBJ?)|Ui|@x~&!lwP^qQ>^sH*232s-|PJCFaK{nt1tb|=XU;w|KnRmKJqi) z@r4)u-@o+l-*9hE_5G7)|HCuC^&{Wg{aYh{^zA2p=I%Sc_fP-lAN%m#zw&dVuYA|v zzEQe;7e#V!Sow|Z9~4ENN4Y|Hz9hcE(w`LHVCg~e4VE4j-$xi@-xSsD)4oBfS4A2W zC`S_rdl?StBEQje`HkUjN#y<6lZ>6uVa*;?_9$bYhR|VueE>*-@c)L)U0k>Z`v;nCrK{#hC+jdWw_eYcXk7#n$# z_N@_Pc3C2;#F6#jPz1uxmr6x}u(9IUIUsD$8USghX5Gkcq!D%$73F-6;V#C|`Jv(` zvoX}&hM|uu3>C96G%`}0e5>>ZQSjFvl*Bj0~&4$ssAPf${3ZrA6GM10Nx^*95f< za|FKUg(&=vms9xt$OG2DGy0Edtxw{=I8+?W#(z&6{wEdw&kqe}v2qrLPE0M%3JjMy zh93eLg~O6$YDuGmd)A>dmX7e@EQz4=L&L)gL8nOay?dXrAHUC%4Bgv?E}a!i`$gC6 z^o+n(216eXN{p;hir_LkOs_#_T%ABN<-IYDveGwcgBJ#igw#8tBdH6+!`N`8h<{o5 zxh_V8sp-Pf!kl49#0(V;PDzK(OyYkx@Mw7dT(}-#f{NDliF$TuSYLa?s9C!=Y}yGo zY1N*OcUr>^n>o?2Eb#3O6GdIk&6OWx?A;uDmerhav%tekd4Z-ppke&av2GUDs)>H> zZ)^U|(2UGXdX;DgytA>jtpF2u$Aa@8rueW{C6(a4gWik27ODu4`HWs&y`K_@JdUY7 z$fTE=jfpyNNmKYV4-DwI>IM(Mc;c9ivGQmU`i}Oef~$o+P)8lr3nvDA?@)=hym!za zN=H2qE|2{gE_I@RAY2~*GhFJpTzU{;e4-7P9~H8Ew?Xzn#PNFx{{i`23~wdOiUTi% zSFm3tZckzV!`n=8Y>id8PgSU4Cm-cJ@fvd*0vcpVdR zK7qmRx0(%ODE%;l7ZJ@ca%3?lF`_?^<;r`TNi4|9zDQI4@c$gx3+RQY_{YIt?WmE`)o z$cZw+?w0}IAdg|#=(;Q z#~6b_xBnDlv`B!z(Zt$@<@4>B0s`TaLb)gDb21zY1zPx;=TrZvc+jdAFB|tgB0t{W z!?mYRcd<_D2wW>AM7+px`0F>D$#N3E*P)2X~XdM&i$&PhYy zRa6ktbqiZn*H%5Aj@`1|nx}XLoB{1!i4j7Y6K)D0m{@p$41ONwOtH50DKa85_Ss&9 zV^!zgyNtcf82eutV?V_h`#4XTv-myigrBbpA$gZE_6lR{+Zbb?VvKzUV+>0s-^m#J z>x|`ofHC$r7-O)l!lDj-feCjJc2masr%y5VU4oomXRQA(kkG$3&^I9>FEQ5t4~{c7 zD^+RVBmVv%BELd*SpNIpweOz=+4kX1%&=DdtN7#l@%U?Ma`Nr?a|aKXvb{?% zY8r?iLfS2}=7pa}vd`i1w-83lzVE_YtJ)9x-y!m2h^%8t^IP#}6%SK|E#c3rI123C zc872aYra^5@3A0HhZ&Yv%hRr4cO+0Ks*ubah>b)nkutWC^pp8>`Q6Hloxl0Tp7Iv{VbL-GdOi#LuwRNfdk@**f%O6vb4T)~no z(H)r0T^Qp3{sYLh_lzN)@5m5=+1x)nJl~NW0<(DtX22@>AQsUHJw$>Sr)yqRx+BJW zA$a&0Na0WeWhgX2v7Baku4`K=2BU(A!8QY#0pLY2cAuyrPYWmabuvBFJdr-2YY1e7 z20v&uR50LJ&A@87QNeMOs;$)w+QM*oHtvU(V4+jVuzY|Rr2+C1>8|ZCO1G$C=R-QK zrG`Z)4Rtg00}t>de2lI2!1Qr7JgEfakWI#7*iOb)y*n{Ts9ect%WpO9rp(?RzhRq= zXrpty0|(2h%I*1Yx9nCN|D;|%bziCiiPrH1HB*s9M)qX+83~dVfS#Ug66gc&!F?~{ zz+_v|kurj`Ye#jY9+m1IJt_>g5Gw(KvLrx#f`m%TaJUM!Yq(9NW~)xsGj7)%HBmuX z)c*Xo6WH~Z8K@dUJ9O$z-w(VyJB7OK+JUK9g7T?If*|V%Y{XH`bw$=t$Q&O#G?Weq z*5$i#oErRuL`t#6`Z15$v{fKTlLw;lP&R48Axnm`=LEOqpJ>3QQxmJDV!)M=Xn+=} zBNIHB^dy>Q!!tc|>BHS)F_1x_q6C3?5+G)%X!71_QjQ9@PBkBJkM5KnBy0D`0u z0oy{n++6whx-maK&gRM=xPNbe8F=*fAnZ9AHhBMD+uk=!ppW$Mnb9A2v;Kj<$XHJg zcFp1Oue(`)CCAvm?Pl0JcyFNh-*vMA_WRwef25bOKNK0{4m-@BkIYRhugom{n{GCE zc5HmkE6=#sM{itz^X-wj+avbf(QDT>C(6y6cQ&s#XRmrUC+23xH{YDTcHxh@6C2I` zRq{{P!v@dJES$S}*(`4_Z;yS@3rZh!!ix*#Xeyk2bM@BP=ES^d7i+g0%{lMl?1g`c z^6$2m!i5jkt`=^cGq=sj8*dlp>+a>H4_2qlilY;jE^lc~GRc<;x4MR5;k# z_f6d7Ad~VSzhIimBn9g5eZK&SCmd4B)ZlU7_dPhOy-q<93D&KA)by1ylL@6721;{DVT41m z;!!d)K8)kRV_I7*&sQo9v{fx?-E<=}RIy-{V6;$g`uSU)qX-0ITgwz{l_|WZRg+Xb z&|`8q!y7-mA=;&&O?8!Ez(K{5?sPVe#lqRrA@d<&D&d50-?gl|O3NVlNT1p`5B8^JcX*V62m~y5g zsksszf@V~?$w?`CP|8s_+Rn;F@-*(IUtXA-L4)AzK+U9p+c4b7`+>7%Ms{NGrYd{ZX6URZ zxIPTq21ramqV;$j1xE3A+dK%p69wivj!6oGxI{LpqN2EcP+mi^UL07}rGtysxvl@*m`IU-|FnXdwZIEOPzg{L6qajQ@*nMrUmXpeXhKxfe)y z4nk&&(>I_I7~=U_JC)pW9jlSDYM}-^oVy#4HAR27{7@atpmbrit-C=&Ao+r}CWy6; zEj3F-3OeLb^Ash3dZ6|<>@YMNPF=Ada3>>DY^di6UC&e82>#rTe60c)xg-?JQbR2i zM-{9D8r4tKMYf*88kV!I0j2V}J;JmsJ5-5*8WCZc)`mi%mVqyQ$=?1`Q4HRH%I3;l z3}OIIt)8RRKdhf;9pHhe08lK8LJVWzVmYjt-t2&)6rC<1gazZFqbNk8j80JMj2Rc>MQx zVBm-Chh zGLiiN9O8#J?PK_9^uzD+1+*MQG39A$S<=hOV9nky0heEbx4o$8uZIQ8^uwm|H?%TU9Qs^gRZc3}mM$1h%DiWuRKsC|D2kVXG<*E6Tz#1lHq8KRSsZ zdbMgRq#l$h$sUKs@u<*NDzJ>HMsnp!=7Fk$Jk_Y++kxY6=ypQ%tB5pfTXqoPl0}sj z3YLmp3!|WA(e->1w5(|r+b~Sm)v{{!;c8bRlj*}}9xkFzG!Hb`@B*_Cd44?Zp>HUZ z&qoy?5CDa{cI2e&egFcE+-|8!4Ri+zuPbX5Iz@RL7x#wAwxI!Wob7IfMaHnui^WU& z;Uthegte?4{##)T>yq^A&LKVDo&l@LwK}<+v?HsqT`!y4b@3VkpRVI}p@|!p)}|Kb zFV0?~-Jd*F-gdWW+MB7lnJd)k< zu8TVUpK?pabMW){bO(IlDx{;hFr7~*W3%0SM5)fVO$8HQ^ z1JgB4-PDQ)5KEyo(qmLOq$t9L8Ml2{)gqgwrErga(V`N2>r!zE4H@DG`I@cJu@V+L zG&_#D?S*+dWi9$t*_(MrMAt&g&o@n#A_=;s?Y&FJG&{xw9b?cwSrgcH;))_BZ`a`< zBOjTP=}A#bC30MmD$w>JLQBke|WIfQcc_;K5bZ1g_Jt$4XHlYs56v-0!fp{4Q#)#_}1ub_| zMoC(gw9{~`xMs=LQ>g?vPLb?45t#=iWf0MAk83E7>QPxS#H3bEF=C_6h|*xmW{O~9 z64@3>k}@t{8ikaRz@j_NnC|pa{CIg&rpKn==9<}3mJbMmuoVloHQ%HS~Y(^KYjbj^chNC^?BF3^89Egw0Oy0LBTraC9) zX%M-I%r$*#2=Yn9;xhZj13Bha=pq7z^+OD->B zz~E@pK+%v8uQk|PzN($D2+Cy$vfS%CJWxZmr8c!Xjk3a>u$-?|<3)Cw3(zHWSneMF%URywb3phOqY&QHF_6zz$vXsD=gkr67M2i<9l zOtL0GD;x|Yb)0^&dWd&_Zm#?eWAApcCz+;%4AG9ip`cY@*m?MF7kgi3bY-+yEEb;E zFDaLZ2V2s>J{006#dJCEcrq6v1%#!co;I+{3pfnU} z-nL5@Dc-^S*@u-+i*^y{FgAErHpTS)Q0*+lHp7B#hC2u?1h(%D?U>C5G+DwbHvf>D zS&2R{9s;%P^`Jfk37-#zTb|mwjy}+$BoNS$^x`4IAlAej7~B=w2@4Fjf4N@GKHbe# zHVl9G!FGwU1wRNh`3-pT8}upDLzc^Lyk#0JILU9=4CVJ3Ej=dkGQ6ODV;&^K$Fy(E zg=9FqlE`m3vyk5t+V>^x8|tS_Gpl`H(Y`V7l4<6(@6Tx8pJj}_DDd++EgYvhWZoar zzJFNz{yW{e>TDiZ>7jFHJ?dFR zVY>uHNoaI7<2gV(iEvdqxdMVCkAWu<{+vutwSwc1fu|@uQTiDaVRZ2#R2C`%u2}}Y zKT!mQ7ZCmf2!Bl$LE*T6ci^+_;bREL(bl-Clpao72F@aUECC0uga%6O;TI78kEkbpF~tH5%u>FwJ0d<3yG+oK-71NTwlNy z6L4}xMDmk}`pY8fCkQ{oiM(G#f`62m_ooo`k44lMDQ`KE_otEIh)9sE?UxV*#Ri!9 z=|rwCBkH?ELz21vKBE4Li25>o1geI71$bTuw9jI}sH-$2iGcX_=MY^-^jA0$z(Rt| z6#Mgt-B7W8GcI`Kn7kTlxaYhyY z%SiA&dV*fZ^;=N_Ex&?9-zO6#s_@nJDwLB|_*K0MU*%OeqgUZ;dKD-^pRm;=D)DQ2 zCBB-d#Mj#^F`TT#uj`fgInUWczI>hPP0`o9E@ek!Xk z{vlHQu1N8l8FlzAB={$Kf+JyIxn{C6ejBO&sZ5oq!#CUOkm`)z(d+Qdj5>hbR2?Y6 zky;p~>j2JEb@(P!PV;UnP=^*V|G*FL0e%j4pa+_=u+PJUh6x6aYvG6Y$9X!E3^Xc# z5qGA-ev5UQp;nl;%`nQBhj1JIk@&*MMtINiW8PZKMsUYaTSgGJS zvC>KwQpVUVUI}{N;^t*qDaI*Yxr0D1=%L*R2QTKxK_eFEFbf!j7C#7!DBOf`zu{O& zJ|Pb+\"name\") ];\r\ + \n#[/system/script get \$expScript name];\r\ + \n:delay 2s;\r\ + \n\r\ + \n:set expSrc [/system/script print where name=\$expName];\r\ + \n/system/script print where name=\$expName;\r\ + \n#[:put [/system/script get \$expScript source]];\r\ + \n:put [\$expSrc];\r\ + \n:delay 2s;\r\ + \n:set FileName \$expName;\r\ + \n:set FilePath (\$DirPath . \$FileName);\r\ + \n\r\ + \n#:log warning \"\\n----------------------\\n\\\$expSrc = \$expSrc\\n____\ + ______________________________\";\r\ + \n:log info \"\\n\\\$FileName = '\$FileName'\";\r\ + \n:log info \"\\n\\\$FilePath = \$FilePath\";\r\ + \n#:log warning {/system/script/get source=[/system/script/get \$expScript\ + \_source];};\r\ + \n\r\ + \n#\$[/system script get [/system script find name=\"\$FileName\"] source]\ + \r\ + \n\r\ + \n#:local gettingScript \"\$FileName\";\r\ + \n#:execute script=\"[[:parse \\\"[:parse { :put (\"\$[/system script get \ + [/system script find name=\$FileName] source]\"); } \\\"]]\"; \\\r\ + \n\r\ + \n#:execute script={:put \"[:parse \\\"[:parse [/system/script get [/syste\ + m/script find name=\$gettingScript] source];\\\"]]\";} \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n:do {\r\ + \n:local fName (\$FilePath . \".rsc\");\r\ + \n#:delay 3s;\r\ + \n#/file add name=\$fName;\r\ + \n:put [:tostr [\$expSrc]];\r\ + \n/file set \$fName contents=[:put [\$expSrc]];\r\ + \n:delay 3s;\r\ + \n\$WaitForFile \$fName;\r\ + \n(\$FilePath . \".rsc\");\r\ + \n#:delay 2s;\r\ + \n\r\ + \n} on-error={\r\ + \n:log error \"\\nERROR \\\$FilePath = \$FilePath\";\r\ + \n}\r\ + \n#\$WaitForFile (\$FilePath . \".rsc\");\r\ + \n#:execute script={ :put [/system/script get [:put \$FileName] source]; }\ + ;\r\ + \n#/system/script export \$Sscript file=\$FilePath;\r\ + \n#/system/script/export [:put [/system/script/get \$expScript source]] fi\ + le=\$FilePath;\r\ + \n#:execute script={ :put [/system/script/get \$expScript source]; } \\\r\ + \n\r\ + \n#:log warning \"\\n\\\$expScript = \$expScript\";\r\ + \n# \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n#script={:put [/system/script/get \$FileName source];} file=(\$FilePath\ + \_. \".rsc\\00\");\r\ + \n#/system script export \$src file=(\$FilePath . \$FileName);\r\ + \n}\r\ + \n\r\ + \n:log warning \"\\nComplete!\";\r\ + \n\r\ + \n # :execute script={ :put [ /system/script/get Amster-GlobalConfig sou\ + rce ]; } \\\r\ + \n # file=(\$FilePath . \".conf\\00\");\r\ + \n # \$WaitForFile (\$FilePath . \".conf\");\r\ + \n # :onerror Err {\r\ + \n # /tool/fetch upload=yes url=(\$BackupUploadUrl . \"/\" . \$FileName\ + \_. \".conf\") \\\r\ + \n # user=\$BackupUploadUser password=\$BackupUploadPass src-path=(\ + \$FilePath . \".conf\");\r\ + \n # :set ConfigFile [ /file/get (\$FilePath . \".conf\") ];\r\ + \n # :set (\$ConfigFile->\"name\") (\$FileName . \".conf\");\r\ + \n " +add dont-require-permissions=no name=test1 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n#:local runningVer [:find [/system/resource/get version] \"(\"];\r\ + \n\r\ + \n:local runningChannel;\r\ + \n:local runningVersion;\r\ + \n:local ParseCustom;\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n \r\ + \n:global runningChannel [\$ParseCustom [/system/resource/get version] \"(\ + \" \")\" 1];\r\ + \n:log warning [\$runningChannel];\r\ + \n:set runningVersion [\$ParseCustom [/system/resource/get version] \" \" \ + \")\" 2];\r\ + \n:log warning [\$runningVersion];\r\ + \n\r\ + \n\r\ + \n\r\ + \n# :if ([:len \$open] = 0) do={\r\ + \n# :log error \"\$SMP Could not extract installed OS channel from vers\ + ion string: `\$runningOsAndChannel`.\";\r\ + \n# :error \"\$SMP error, check logs\";\r\ + \n# }\r\ + \n# :local rest [:pick \$runningOsAndChannel (\$open+1) [:len \$runningOs\ + AndChannel]];\r\ + \n# :local close [:find \$rest \")\"];\r\ + \n# :local channel [:pick \$rest 0 \$close];\r\ + \n# :return \$channel;\r\ + \n#}" +add dont-require-permissions=no name=01-Amster-Init-Script owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# Amster Initial Script\r\ + \n#\r\ + \n#:global GlobalEnvRemove true; /system/script {run Amster-GlobalEnvRemov\ + e; };\r\ + \n#:delay 1s;\r\ + \n:#global ReloadGlobal true; \r\ + \n\r\ + \n:global AmScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global defOwner \"vados\";\r\ + \n:global AmFirstRun;\r\ + \n\r\ + \n:set AmFirstRun do={\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n #:global ParseKeyValueStore;\r\ + \n #:local AmUpdCRLF true;\r\ + \n #:local IfThenElse;\r\ + \n #:set IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1\ + \_] = true) do={:return \$2}; :return \$3}\r\ + \n #/certificate/settings/set builtin-trust-store=fetch;\r\ + \n #/tool/fetch \"\$scriptsUrl/certs/Root-YE.pem\" dst-path=\"root-ye.p\ + em\";\r\ + \n #/certificate/import file-name=\"root-ye.pem\" passphrase=\"\";\r\ + \n # For basic verification we rename the certificate and print it by f\ + ingerprint. Make sure exactly this one certificate (\"Root-YE\") is shown.\ + \r\ + \n #/certificate/set name=\"Root-YE\" [ find where common-name=\"Root Y\ + E\" ];\r\ + \n #/certificate/print proplist=name,fingerprint where fingerprint=\"e1\ + 4ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666\";\r\ + \n #:log info \"\\nAmScriptsUrl = \$AmScriptsUrl\";\r\ + \n :local Scripts {\r\ + \n \"Amster-GlobalConfig\"\r\ + \n \"Amster-GlobalFunc\";\r\ + \n# \"Amster-SFTP-backup\"\r\ + \n# \"Amster-BkpEmail-and-upd\";\r\ + \n };\r\ + \n# /system/script/set owner=(\$ScriptVal->\"name\") \\\r\ + \n# source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRLF \$S\ + ourceNew ] \$Script;\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n /system/script { run Amster-GlobalConfig; run Amster-GlobalFunc; }\r\ + \n}\r\ + \n:global AmUpdRun;\r\ + \n:set AmUpdRun do={\r\ + \n #:local UpdScript [ :tostr \$1 ];\r\ + \n #:global ParseKeyValueStore;\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n :local Scripts {\r\ + \n# \"Amster-GlobalConfig\"\r\ + \n# \"Amster-GlobalFunc\"\r\ + \n# \"Amster-GlobalRemove\"\r\ + \n \"Amster-backup-SFTP\"\r\ + \n \"Amster-SFTP-backup\"\r\ + \n \"Amster-BkpEmail-and-upd\"\r\ + \n \"Amster-TG-Bot\"\r\ + \n \"Amster-TG-Notification\";\r\ + \n };\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"updating \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n# /system/script/add name=\$Script owner=\$AmOwner source=([ /tool/fe\ + tch check-certificate=yes-without-crl (\"\$AmScriptsUrl\" . \$Script . \".\ + rsc\") output=user as-value ]->\"data\"); };\r\ + \n}\r\ + \n\r\ + \n\$AmFirstRun;\r\ + \n#\$AmUpdRun;\r\ + \n\r\ + \n#\$setUpdExist;\r\ + \n#:global setUpdExist;\r\ + \n#:global ParseKeyValueStore;\r\ + \n#:set setUpdExist do={\r\ + \n#:do {\r\ + \n#:global ParseKeyValueStore;\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\\r\?\\n#comment=*\" ] do={\r\ + \n# :local ScriptVal [ /system/script/get \$Script ];\r\ + \n# :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"#comment\"\ + ) ];\r\ + \n# :local scriptName (\$ScriptVal->\"name\");\r\ + \n#:log warning (\"\\n\\\$scriptName = \". \$scriptName);\r\ + \n#: log warning (\"\\n\\\$ScriptInfo = \". \$ScriptInfo);\r\ + \n# }\r\ + \n#} on-error={}\r\ + \n#}\r\ + \n#\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run\ + -count;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;\r\ + \n#;(evl / (evl /docommand=;(evl / (evl /foreachcounter=\$Script;do=;(evl \ + / (evl /localname=\$ScriptVal;value=(evl (evl /system/script/getnumber=\$S\ + cript))) (evl /localname=\$ScriptInfo;value=(evl (<%% \$ParseKeyValueStore\ + \_(> \$ParseKeyValueStore);(-> \$ScriptVal comment)))) (evl /localname=\$s\ + criptName) (evl /setname=\$scriptName;value=(-> #\$ScriptVal name)) (evl /\ + log/errormessage=(. \r\ + \n# \$ ScriptInfo = \$ScriptInfo)));in=(evl (evl /system/script/findwhere\ + =\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run-c\ + ount;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;(~ \$so\ + urce (. ^#!rsc by Vados \r\ + \n# \? \r\ + \n#));5))));on-error=;(evl /)))\r\ + \n" +add dont-require-permissions=no name="Download cAP's Packages" owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# +------------------------------+\r\ + \n# | |\r\ + \n# | Mikrotik RouterOS Scripts |\r\ + \n# | _Download cAP's Packages_ |\r\ + \n# | |\r\ + \n# +------------------------------+\r\ + \n# https://github.com/sebastian13/mikrotik-routeros-scripts\r\ + \n#\r\ + \n\r\ + \n# Set a directory path providing the required space\r\ + \n# Add a microSD card https://wiki.mikrotik.com/wiki/Manual:System/Disks\ + \r\ + \n# or setup a RAM-Disk via '/disk/add type=tmpfs tmpfs-max-size=20M slot=\ + ram'\r\ + \n:local dir \"/tmpfs/capsman-packages\";\r\ + \n\r\ + \n\r\ + \n# Set Package Path if required, set policy to none if using 'upgrade-cap\ + s' script\r\ + \n/interface/wifi/capsman/set package-path=\$dir upgrade-policy=none;\r\ + \n/caps-man/manager/set package-path=\$dir upgrade-policy=none;\r\ + \n#require-same-version;\r\ + \n\r\ + \n:local installed [/system package get value-name=version [find where nam\ + e=\"routeros\"]]\r\ + \n\r\ + \n# Delete old downloads\r\ + \n# /file/remove [ find type=package name~\"capsman*\" ]\r\ + \n\r\ + \n# Starting from RouterOS version 7.13, drivers for older wireless and 60\ + GHz interfaces are\r\ + \n# part of the separate \"wireless\" package. The existing \"wifiwave2\" \ + package has been divided\r\ + \n# into distinct packages: \"wifi-qcom\" and \"wifi-qcom-ac\".\r\ + \n# RouterOS >=7.12 is required to upgrade to 7.13.\r\ + \n# https://forum.mikrotik.com/viewtopic.php\?t=202423\r\ + \n\r\ + \n:foreach architecture in={ \"arm\";\r\ + \n# \"arm64\";\r\ + \n \"x86_64\";\r\ + \n \"mipsbe\"} do={\r\ + \n :foreach package in={ \"routeros\";\r\ + \n# \"wifi-qcom-ac\";\r\ + \n# \"wifi-qcom\";\r\ + \n \"container\";\r\ + \n \"wireless\"} do={ :do {\r\ + \n :put \"\"\r\ + \n :put \"Download \$package \$installed for \$architecture\"\r\ + \n /tool fetch mode=https \\\r\ + \n url=\"https://download.mikrotik.com/routeros/\$installed/\$packa\ + ge-\$installed-\$architecture.npk\" \\\r\ + \n dst-path=\"\$dir/\$package-\$installed-\$architecture.npk\"\r\ + \n } on-error={ :put \"Error downloading the file. On a 404, note t\ + hat the package may not exist for the specified architecture!\" }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Script for setup routeros script system" \ + dont-require-permissions=no name=AM-setup owner=AM-setup policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-setup\r\ + \n# Script comment: Script for setup routeros script system\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:global NewScript \"script_name\"; \r\ + \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\ + tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n#:global NewScript (a);\r\ + \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n#\r\ + \n# For run from terminal:\r\ + \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ + eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ + ut=user as-value ]->\"data\");\r\ + \n#\r\ + \n\r\ + \n:global ScriptUpdatesCRLF \"LF\";\r\ + \n#:if (\$ScriptUpdatesCRLF != false) do={\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\" ] do={\r\ + \n# if (\$ScriptUpdatesCRLF = true) do={\r\ + \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\ + cript;\r\ + \n# } else={\r\ + \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\ + ipt;\r\ + \n# }\r\ + \n# }\r\ + \n#}\r\ + \n\r\ + \n# /import verbose=no \$ScriptName\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global SetupScript [ :jobname ];\r\ + \n:global RemoveMe true;\r\ + \n:global RunOnce (a);\r\ + \n:global InitSetup true;\r\ + \n:global tmpfs false;\r\ + \n\r\ + \n{\r\ + \n :local RmMe [:tobool \$1];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SetupScript;\r\ + \n :global RemoveMe;\r\ + \n :global InitSetup;\r\ + \n :global tmpfs;\r\ + \n\r\ + \n :local UrlSuffix \$Identity;\r\ + \n :local UrlDir \"certs/\";\r\ + \n :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \ + \r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :if (\$SetupScript = false) do={\r\ + \n :global SetupScript \"AM-setup\";\r\ + \n }\r\ + \n :if (\$RemoveMe != false) do={\r\ + \n :set RemoveMe true;\r\ + \n }\r\ + \n\r\ + \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n \r\ + \n\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\ + \_\\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\ + \_as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\ + t YE\" ];\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n\r\ + \n:local MkTmpfs do={\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\"Try to removing directory 'tmpfs'.\");\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/remove tmpfs;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n# \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\ + et total-memory ] / 3);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get tmpfs;\r\ + \n :return true;\r\ + \n } delay=222ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n}\r\ + \n:if (\$tmpfs = true) do={\r\ + \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\ + \";\r\ + \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\ + \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ + \n :return \$true;\r\ + \n } else={\r\ + \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\ + \n :return false;\r\ + \n } else={\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get /tmpfs/scripts;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n# [ /file/get \$FileName ]\r\ + \n }\r\ + \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\ + \_global variable tmpfs!\");\r\ + \n# :global tmpfs (a);\r\ + \n# return false;\r\ + \n }\r\ + \n}\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n \r\ + \n /system/script run \$Script;\r\ + \n :delay 2s;\r\ + \n };\r\ + \n\r\ + \n :local Script \"mod/AM-Certs-By-Ident\";\r\ + \n \r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \ + check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\ + rsc\") output=user as-value ]->\"data\");\r\ + \n /system/script run \$Script;\r\ + \n :global tmpAddCerts;\r\ + \n :while ([ \$tmpAddCerts ] = true) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n :delay 1s;\r\ + \n :put \"Removing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :if (\$RemoveMe = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ + where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ + \"_RemoveSetup\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ + \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ + \";\r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ + time=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ + . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :put \"Normal removing temporary global environment variables.\";\ + \r\ + \n :global SetupScript (a);\r\ + \n :global InitSetup (a);\r\ + \n :global RemoveMe (a);\r\ + \n } on-error={\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$0 . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/729/f42d43ae\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 00:05:03 01.07.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n#\ + \n#root.mnuc.backuper\ + \n\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\ + \n#:local Script AM-GlobalConfig;\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\ + \n:global MkDir;\ + \n\ + \n:local FetchFile Manager@id_rsa.pub\ + \n:local localDir \"/\";\ + \n\ + \n\$MkDir \$localDir;\ + \n\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\ + \n" +add dont-require-permissions=yes name=MkTmpfs owner=vados policy=\ + ftp,read,write,policy,test,sniff,sensitive source=\ + ":global MkDir;\r\ + \n\r\ + \n\$MkDir /usb1/tmpfs;" +add dont-require-permissions=no name=CreateContainer owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local contIF \"veth1\";\r\ + \n:local contIP \"10.10.10.10/24\";\r\ + \n:local contGW \"10.10.10.1\";\r\ + \n#/interface/veth/add name=\$contIF address=\$contIP gateway=\$contGW;\r\ + \n:local contBridgeIF \"Bridge-DOC\";\r\ + \n:local contBridgeIP \"10.10.10.1/24\";\r\ + \n/interface/bridge/add name=\$contBridgeIF;\r\ + \n/ip/address/add address=\$contBridgeIP interface=\$contBridgeIF;\r\ + \n/interface/bridge/port/add bridge=\$contBridgeIF interface=\$contIF;\r\ + \n/container/config/set ram-high=768M registry-url=https://registry-1.dock\ + er.io tmpdir=sata1/tmp\r\ + \n" +add dont-require-permissions=no name=carkeeperbot owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/mounts/add list=carkeeper_configs/.profile src=sata1/carkeeper/c\ + onfigs/.profile dst=/root/.ashrc;\r\ + \n/container/mounts/add list=carkeeper_configs/php.ini src=sata1/carkeeper\ + /configs/php.ini dst=/etc/php82/php.ini;\r\ + \n#/container/mounts/add list=carkeeper_configs src=sata1/carkeeper/config\ + s dst=/configs;\r\ + \n/container/mounts/add list=carkeeper_app src=sata1/carkeeper/app dst=/ap\ + p;\r\ + \n/container/mounts/add list=carkeeper_scripts src=sata1/carkeeper/scripts\ + \_dst=/scripts;\r\ + \n/container/mounts/add list=carkeeper_configs/sshd_config src=sata1/carke\ + eper/configs/sshd_config dst=/etc/ssh/sshd_config;\r\ + \n\r\ + \n/container/mounts/add list=carkeeper_tmp src=sata1/carkeeper/tmp dst=/va\ + r/tmp;\r\ + \n/container/mounts/add list=carkeeper_sync src=sata1/carkeeper/sync dst=/\ + var/sync;\r\ + \n" +add comment="Enable or disable ip addresses based on bridge port state" \ + dont-require-permissions=no name=mod/AM-IPbridge owner=mod/AM-IPbridge \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-IPbridge\r\ + \n# Script comment: Enable or disable ip addresses based on bridge port st\ + ate\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n# Add this Script scheduler\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n:log warning (\"SystemScheduler for script: \" . \$ScriptName . \" is NO\ + T SET! Fix It Now!\");\r\ + \n:local OnEvent \"/system/script/run \$ScriptName;\";\r\ + \n:local Comment \"Every Day Check For Fake Bridges\";\r\ + \n/system/scheduler/add name=\$ScriptName comment=\$Comment start-time=sta\ + rtup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:foreach Bridge in=[ /interface/bridge/find ] do={\r\ + \n :local BrName [ /interface/bridge/get \$Bridge name ];\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName ] ] > \ + 0) do={\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName and \ + inactive=no ] ] = 0) do={\r\ + \n /ip/address/disable [ find where !dynamic interface=\$BrName ];\r\ + \n } else={\r\ + \n /ip/address/enable [ find where !dynamic interface=\$BrName ];\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Use Telegram to chat with your Router and send commands" \ + dont-require-permissions=no name=mod/AM-TG-Bot owner=mod/AM-TG-Bot \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Bot\r\ + \n# Script comment: Use Telegram to chat with your Router and send command\ + s\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global Identity;\r\ + \n :global TelegramChatActive;\r\ + \n :global TelegramChatGroups;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdsTrusted;\r\ + \n :global TelegramChatOffset;\r\ + \n :global TelegramChatRunTime;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramRandomDelay;\r\ + \n :global TelegramTokenId;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global EscapeForRegEx;\r\ + \n :global FileExists;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global LogPrintVerbose;\r\ + \n :global MAX;\r\ + \n :global MIN;\r\ + \n :global MkDir;\r\ + \n :global RandomDelay;\r\ + \n :global RmDir;\r\ + \n :global ScriptLock;\r\ + \n :global SendTelegram2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global WaitForFile;\r\ + \n :global WaitFullyConnected;\r\ + \n\r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$WaitFullyConnected;\r\ + \n\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) \ + do={\r\ + \n /system/scheduler/add start-time=startup interval=30s name=\$ScriptN\ + ame on-event=\"/system/script/run \$ScriptName;\" comment=\"Telegram Chat \ + Bot\";\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramChatOffset ] != \"array\") do={\r\ + \n :set TelegramChatOffset { 0; 0; 0 };\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramRandomDelay ] != \"num\") do={\r\ + \n :set TelegramRandomDelay 0;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Downloading required certificate \ + failed.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$RandomDelay \$TelegramRandomDelay;\r\ + \n\r\ + \n :local Data false;\r\ + \n :for I from=1 to=4 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl outpu\ + t=user \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/get\ + Updates\?offset=\" . \\\r\ + \n \$TelegramChatOffset->0 . \"&allowed_updates=%5B%22message%22%\ + 5D\") as-value ]->\"data\");\r\ + \n :set TelegramRandomDelay [ \$MAX 0 (\$TelegramRandomDelay - 1) ]\ + ;\r\ + \n } do={\r\ + \n :if (\$I < 4) do={\r\ + \n \$LogPrint debug \$ScriptName (\"Fetch failed, \" . \$I . \". \ + try: \" . \$Err);\r\ + \n :set TelegramRandomDelay [ \$MIN 15 (\$TelegramRandomDelay + 5\ + ) ];\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Failed getting updates.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local UpdateID 0;\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :foreach Update in=(\$JSON->\"result\") do={\r\ + \n :set UpdateID (\$Update->\"update_id\");\r\ + \n \$LogPrintVerbose debug \$ScriptName (\"Update \" . \$UpdateID . \":\ + \_\" . [ :serialize to=json \$Update ]);\r\ + \n\r\ + \n :local Message (\$Update->\"message\");\r\ + \n :local IsAnyReply ([ :typeof (\$Message->\"reply_to_message\") ] = \ + \"array\");\r\ + \n :local IsMyReply (\$TelegramMessageIDs->[ :tostr (\$Message->\"reply\ + _to_message\"->\"message_id\") ]);\r\ + \n :if ((\$IsMyReply = 1 || \$TelegramChatOffset->0 > 0 || \$Uptime > 5\ + m) && \$UpdateID >= \$TelegramChatOffset->2) do={\r\ + \n :local Trusted false;\r\ + \n :local Chat (\$Message->\"chat\");\r\ + \n :local From (\$Message->\"from\");\r\ + \n :local Command (\$Message->\"text\");\r\ + \n :local ThreadId [ \$IfThenElse (\$Message->\"is_topic_message\") (\ + \$Message->\"message_thread_id\") \"\" ];\r\ + \n\r\ + \n :foreach IdsTrusted in=(\$TelegramChatId, \$TelegramChatIdsTrusted\ + ) do={\r\ + \n :if (\$From->\"id\" = \$IdsTrusted || \\\r\ + \n \$From->\"username\" = \$IdsTrusted || \\\r\ + \n \$Chat->\"id\" = \$IdsTrusted) do={\r\ + \n :set Trusted true;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Trusted = true) do={\r\ + \n :local Done false;\r\ + \n :if (\$Command = \"\?\") do={\r\ + \n \$LogPrint info \$ScriptName (\"Sending notice for update \" .\ + \_\$UpdateID . \".\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=([ \$IfThenElse ([ :len (\$From->\"first_name\") ] >\ + \_0) (\"Hello \" . (\$From->\"first_name\") . \"!\\n\\n\") ] . \\\r\ + \n \"Online\" . [ \$IfThenElse \$TelegramChatActive \" (and a\ + ctive!)\" ] . \", awaiting your commands!\") });\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && [ :pick \$Command 0 1 ] = \"!\") do={\r\ + \n :if (\$Command ~ (\"^! *(\" . [ \$EscapeForRegEx \$Identity ] \ + . \"|@\" . \$TelegramChatGroups . \")\\\$\")) do={\r\ + \n :set TelegramChatActive true;\r\ + \n } else={\r\ + \n :set TelegramChatActive false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Now \" . [ \$IfThenElse \$Tele\ + gramChatActive \"active\" \"passive\" ] . \\\r\ + \n \" from update \" . \$UpdateID . \"!\");\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && (\$IsMyReply = 1 || (\$IsAnyReply = false\ + \_&& \\\r\ + \n \$TelegramChatActive = true)) && [ :len \$Command ] > 0) do\ + ={\r\ + \n :if ([ \$ValidateSyntax \$Command ] = true) do={\r\ + \n :local State \"\";\r\ + \n :local File (\"tmpfs/telegram-chat/\" . [ \$GetRandom20CharA\ + lNum 6 ]);\r\ + \n :if ([ \$MkDir \"tmpfs/telegram-chat\" ] = false) do={\r\ + \n \$LogPrint error \$ScriptName (\"Failed creating directory\ + !\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Running command from update \ + \" . \$UpdateID . \": \" . \$Command);\r\ + \n :execute script=(\":do {\\n\" . \$Command . \"\\n} on-error=\ + { /file/add name=\\\"\" . \$File . \".failed\\\" };\" . \\\r\ + \n \"/file/add name=\\\"\" . \$File . \".done\\\"\") file=(\$\ + File . \"\\00\");\r\ + \n :if ([ \$WaitForFile (\$File . \".done\") [ \$EitherOr \$Tel\ + egramChatRunTime 20s ] ] = false) do={\r\ + \n :set State ([ \$SymbolForNotification \"warning-sign\" ] .\ + \_\"The command did not finish, still running in background.\\n\\n\");\r\ + \n }\r\ + \n :if ([ \$FileExists (\$File . \".failed\") ] = true) do={\r\ + \n :set State ([ \$SymbolForNotification \"cross-mark\" ] . \ + \"The command failed with an error!\\n\\n\");\r\ + \n }\r\ + \n :local Content ([ /file/read chunk-size=32768 file=\$File as\ + -value ]->\"data\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n \$State . [ \$IfThenElse ([ :len \$Content ] > 0) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"Output:\\n\" .\ + \_\$Content) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"No output.\") \ + ]) });\r\ + \n \$RmDir \"tmpfs/telegram-chat\";\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName (\"The command from update \" .\ + \_\$UpdateID . \" failed syntax validation!\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n [ \$SymbolForNotification \"cross-mark\" ] . \"The comma\ + nd failed syntax validation!\") });\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n :local MessageText (\"Received a message from untrusted contact \ + \" . \\\r\ + \n [ \$IfThenElse ([ :len (\$From->\"username\") ] = 0) \"without\ + \_username\" (\"'\" . \$From->\"username\" . \"'\") ] . \\\r\ + \n \" (ID \" . \$From->\"id\" . \") in update \" . \$UpdateID . \ + \"!\");\r\ + \n :if (\$Command ~ (\"^! *\" . [ \$EscapeForRegEx \$Identity ] . \ + \"\\\$\")) do={\r\ + \n \$LogPrint warning \$ScriptName \$MessageText;\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=(\"You are not trusted.\") });\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName \$MessageText;\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint debug \$ScriptName (\"Already handled update \" . \$Upd\ + ateID . \".\");\r\ + \n }\r\ + \n }\r\ + \n :set TelegramChatOffset ([ :pick \$TelegramChatOffset 1 3 ], \\\r\ + \n [ \$IfThenElse (\$UpdateID >= \$TelegramChatOffset->2) (\$UpdateID +\ + \_1) (\$TelegramChatOffset->2) ]);\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add comment="Script send Notifications in Telegram" dont-require-permissions=\ + no name=mod/AM-TG-Notifications owner=mod/AM-TG-Notifications policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Notifications\r\ + \n# Script comment: Script send Notifications in Telegram\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:global FlushTelegramQueue;\r\ + \n:global GetTelegramChatId;\r\ + \n:global NotificationFunctions;\r\ + \n:global PurgeTelegramQueue;\r\ + \n:global SendTelegram;\r\ + \n:global SendTelegram2;\r\ + \n# flush telegram queue\r\ + \n:set FlushTelegramQueue do={ :onerror Err {\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global CertificateAvailable;\r\ + \n :global IsFullyConnected;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$IsFullyConnected ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"System is not fully connected, not flushing.\ + \");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local AllDone true;\r\ + \n :local QueueLen [ :len \$TelegramQueue ];\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueue\ + \" ] ] > 0 && \$QueueLen = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Flushing Telegram messages from scheduler,\ + \_but queue is empty.\");\r\ + \n }\r\ + \n :foreach Id,Message in=\$TelegramQueue do={\r\ + \n :if ([ :typeof \$Message ] = \"array\" ) do={\r\ + \n :onerror Err {\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl out\ + put=user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . (\$Message->\"tokenid\") .\ + \_\"/sendMessage\") \\\r\ + \n http-data=(\$Message->\"http-data\") as-value ]->\"data\");\r\ + \n :set (\$TelegramQueue->\$Id);\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json v\ + alue=\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Sending queued Telegram message failed: \ + \" . \$Err);\r\ + \n :set AllDone false;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$AllDone = true && \$QueueLen = [ :len \$TelegramQueue ]) do={\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ]\ + ;\r\ + \n :set TelegramQueue;\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# get the chat id\r\ + \n:set GetTelegramChatId do={ :onerror Err {\r\ + \n :global TelegramTokenId;\r\ + \n :global CertificateAvailable;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local Data;\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl output=us\ + er \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/getUpd\ + ates\?offset=0\" . \\\r\ + \n \"&allowed_updates=%5B%22message%22%5D\") as-value ]->\"data\");\ + \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Fetching data failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local Count [ :len (\$JSON->\"result\") ];\r\ + \n :if (\$Count = 0) do={\r\ + \n \$LogPrint info \$0 (\"No message received.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local Message (\$JSON->\"result\"->(\$Count - 1)->\"message\");\r\ + \n \$LogPrint info \$0 (\"The chat id is: \" . (\$Message->\"chat\"->\"id\ + \"));\r\ + \n :if ((\$Message->\"is_topic_message\") = true) do={\r\ + \n \$LogPrint info \$0 (\"The thread id is: \" . (\$Message->\"message_\ + thread_id\"));\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set (\$NotificationFunctions->\"telegram\") do={\r\ + \n :local Notification \$1;\r\ + \n :global Identity;\r\ + \n :global IdentityExtra;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdOverride;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramThreadId;\r\ + \n :global TelegramThreadIdOverride;\r\ + \n :global TelegramTokenId;\r\ + \n :global TelegramTokenIdOverride;\r\ + \n :global CertificateAvailable;\r\ + \n :global CharacterReplace;\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ProtocolStrip;\r\ + \n :global SymbolForNotification;\r\ + \n :global UrlEncode;\r\ + \n :local EscapeMD do={\r\ + \n :local Text [ :tostr \$1 ];\r\ + \n :local Mode [ :tostr \$2 ];\r\ + \n :local Excl [ :tostr \$3 ];\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :local Chars {\r\ + \n \"body\"={ \"\\\\\"; \"`\" };\r\ + \n \"plain\"={ \"_\"; \"*\"; \"[\"; \"]\"; \"(\"; \")\"; \"~\"; \"`\"\ + ; \">\";\r\ + \n \"#\"; \"+\"; \"-\"; \"=\"; \"|\"; \"{\"; \"}\"; \".\"; \ + \"!\" };\r\ + \n }\r\ + \n :foreach Char in=(\$Chars->\$Mode) do={\r\ + \n :if ([ :typeof [ :find \$Excl \$Char ] ] = \"nil\") do={\r\ + \n :set Text [ \$CharacterReplace \$Text \$Char (\"\\\\\" . \$Char)\ + \_];\r\ + \n }\r\ + \n }\r\ + \n :if (\$Mode = \"body\") do={:return (\"```\\n\" . \$Text . \"\\n```\ + \")}\r\ + \n :return \$Text;\r\ + \n }\r\ + \n :local ChatId [ \$EitherOr (\$Notification->\"chatid\") \\\r\ + \n [ \$EitherOr (\$TelegramChatIdOverride->(\$Notification->\"origin\")\ + ) \$TelegramChatId ] ];\r\ + \n :local ThreadId [ \$EitherOr (\$Notification->\"threadid\") \\\r\ + \n [ \$EitherOr (\$TelegramThreadIdOverride->(\$Notification->\"origin\ + \")) \\\r\ + \n [ \$IfThenElse ([ :len (\$TelegramChatIdOverride->(\$Notification->\ + \"origin\")) ] = 0) \$TelegramThreadId ] ] ];\r\ + \n :local TokenId [ \$EitherOr (\$TelegramTokenIdOverride->(\$Notificatio\ + n->\"origin\")) \$TelegramTokenId ];\r\ + \n :if ([ :len \$TokenId ] = 0 || [ :len \$ChatId ] = 0) do={:return fals\ + e}\r\ + \n :if ([ :typeof \$TelegramMessageIDs ] = \"nothing\") do={:set Telegram\ + MessageIDs ({})}\r\ + \n :local Truncated false;\r\ + \n :local Text (\"*__\" . [ \$EscapeMD (\"[\" . \$IdentityExtra . \$Ident\ + ity . \"] \" . \\\r\ + \n (\$Notification->\"subject\")) \"plain\" ] . \"__*\\n\\n\");\r\ + \n :local LenSubject [ :len \$Text ];\r\ + \n :local LenMessage [ :len (\$Notification->\"message\") ];\r\ + \n :local LenLink ([ :len (\$Notification->\"link\") ] * 2);\r\ + \n :local LenSum (\$LenSubject + \$LenMessage + \$LenLink);\r\ + \n :if (\$LenSum > 3968) do={\r\ + \n :set Text (\$Text . [ \$EscapeMD ([ :pick (\$Notification->\"message\ + \") 0 (3840 - \$LenSubject - \$LenLink) ] . \"...\") \"body\" ]);\r\ + \n :set Truncated true;\r\ + \n } else={:set Text (\$Text . [ \$EscapeMD (\$Notification->\"message\")\ + \_\"body\" ])}\r\ + \n :if (\$LenLink > 0) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"link\" ] .\ + \_\\\r\ + \n \"[\" . [ \$EscapeMD [ \$ProtocolStrip (\$Notification->\"link\") \ + ] \"plain\" ] . \"]\" . \\\r\ + \n \"(\" . [ \$EscapeMD (\$Notification->\"link\") \"plain\" ] . \")\ + \");\r\ + \n }\r\ + \n :if (\$Truncated = true) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"scissors\"\ + \_] . \\\r\ + \n [ \$EscapeMD (\"The message was too long and has been truncated, c\ + ut off _\" . \\\r\ + \n ((\$LenSum - [ :len \$Text ]) * 100 / \$LenSum) . \"%_!\") \"plain\ + \" \"_\" ]);\r\ + \n }\r\ + \n :local HTTPData (\"chat_id=\" . \$ChatId . \"&disable_notification=\" \ + . (\$Notification->\"silent\") . \\\r\ + \n \"&reply_to_message_id=\" . (\$Notification->\"replyto\") . \"&mes\ + sage_thread_id=\" . \$ThreadId . \\\r\ + \n \"&disable_web_page_preview=true&parse_mode=MarkdownV2\");\r\ + \n :onerror Err {\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority \ + - G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\ + \");\r\ + \n :error false;\r\ + \n }\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl output=\ + user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TokenId . \"/sendMessage\") \ + \\\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) as-va\ + lue ]->\"data\");\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json value\ + =\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint info \$0 (\"Failed sending Telegram notification: \" . \$\ + Err . \" - Queuing...\");\r\ + \n :if ([ :typeof \$TelegramQueue ] = \"nothing\") do={:set TelegramQue\ + ue ({})}\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"alarm-cloc\ + k\" ] . \\\r\ + \n [ \$EscapeMD (\"This message was queued since _\" . [ /system/cloc\ + k/get date ] . \\\r\ + \n \" \" . [ /system/clock/get time ] . \"_ and may be obsolete.\") \ + \"plain\" \"_\" ]);\r\ + \n :set (\$TelegramQueue->[ :len \$TelegramQueue ]) { tokenid=\$TokenId\ + ;\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) };\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueu\ + e\" ] ] = 0) do={\r\ + \n /system/scheduler/add name=\"_FlushTelegramQueue\" interval=1m sta\ + rt-time=startup \\\r\ + \n on-event=(\":global FlushTelegramQueue; \\\$FlushTelegramQueue;\ + \");\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n# purge the Telegram queue\r\ + \n:set PurgeTelegramQueue do={\r\ + \n :global TelegramQueue;\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ];\ + \r\ + \n :set TelegramQueue;\r\ + \n}\r\ + \n# send notification via telegram - expects at least two string arguments\ + \r\ + \n:set SendTelegram do={ :onerror Err {\r\ + \n :global SendTelegram2;\r\ + \n \$SendTelegram2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3; sil\ + ent=\$4 });\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set SendTelegram2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n (\$NotificationFunctions->\"telegram\") (\"\\\$NotificationFunctions->\ + \\\"telegram\\\"\") \$Notification;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=testIfThenElseAndEitherOr owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source=":local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local ExitError;\r\ + \n#:local IfThenElse;\r\ + \n#:local EitherOr;\r\ + \n\r\ + \n:local one 11;\r\ + \n:local two 8;\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n:local Test; # [ :totime \"22s\" ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n\r\ + \n:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set Test [ \$EitherOr \$Test \"\" ];\r\ + \n:log warning (\"\\\$ Test = \" . \$Test);\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :local IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set ExitOK true;\r\ + \n\$ExitError \$ExitOK \$ScriptName \"Err test custom\";" +add comment="Update and Backup send notification to EMail" \ + dont-require-permissions=no name=AM-Backup-UpdateEmail owner=\ + AM-Backup-UpdateEmail policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-Backup-UpdateEmail\r\ + \n# Script comment: Update and Backup send notification to EMail\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version>=6.43.7\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Updated: 15/04/2025\r\ + \n# Website: https://github.com/beeyev\r\ + \n# Notification e-mail (Make sure you have configured Email settings in T\ + ools -> Email)\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n:local ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :if (\$ExitOK = \"false\") do={:log error (\$Name [ \$IfThenElse ([ :p\ + ick \$Name 0 1 ] = \"\\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);}\r\ + \n}\r\ + \n\r\ + \n:global LogPrint;\r\ + \n:global EditSchedulers;\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n:local SchedInterval \"7d\";\r\ + \n:local SchedStartTime \"03:41:27\";\r\ + \n:local SchedComment \"Every 7 Day Check For Update and Backup send notif\ + ication to EMail.\";\r\ + \n\r\ + \n# Function to add or edit schedulers for scripts, to ensure they are set\ + \_up correctly\r\ + \n# How to use:\r\ + \n# Call this function with the following parameters:\r\ + \n# 1. \$1 - Scheduler name (usually same as script name) [*]\r\ + \n# 2. \$2 - Interval (e.g. \"1d\" (default is \"1d\")) [**]\r\ + \n# 3. \$3 - Start Time (e.g. \"00:00:00\", default is current time) [**]\ + \r\ + \n# 4. \$4 - Comment (optional, default: \"Scheduler for script: \")\ + \_[**]\r\ + \n# 5. \$5 - On Event command (e.g. \"/system/script { run ; }\" (de\ + fault is \"/system/script { run \$SchedName; }\")) [**]\r\ + \n# 6. \$6 - Policy (e.g. \"ftp,reboot,read,write,policy,test,password,sni\ + ff,sensitive,romon\" (default is the same)) [**]\r\ + \n# 7. \$7 - Start Date (e.g. \"jan/01/1970\", default is current date) [*\ + *]\r\ + \n# Notes:\r\ + \n# * - Scheduler name is required, and is used to identify the scheduler\ + \_to create or edit. It is usually the same as the script name (\$ScriptNa\ + me).\r\ + \n# ** - If optional parameters are not provided, default values will be u\ + sed.\r\ + \n# This allows for quick setup with minimal parameters, while still \ + providing flexibility for customization.\r\ + \n# Example usage:\r\ + \n# :if ([ \$EditSchedulers \"my-script\" ] = false) do={:set ExitOK false\ + ; :error true;}\r\ + \n# :if ([ \$EditSchedulers \"my-script\" \"1d\" \"03:41:27\" \"My custom \ + scheduler comment\" false false \"jan/01/1970\" ] = false) do={:set ExitOK\ + \_false; :error true;}\r\ + \n\r\ + \n:set EditSchedulers do={\r\ + \n :local SchedName [ :tostr \$1 ];\r\ + \n :if ([ :len \$SchedName ] = 0) do={ :return false; }\r\ + \n :local Interval [ :tostr \$2 ];\r\ + \n :if ([ :len \$Interval ] = 0) do={ :set Interval \"1d\"; }\r\ + \n :local StartTime [ :tostr \$3 ];\r\ + \n :if ([ :len \$StartTime ] = 0) do={ :set StartTime [/system/clock/get \ + time]; }\r\ + \n :local Comment [ :tostr \$4 ];\r\ + \n :if ([ :len \$Comment ] = 0) do={ :set Comment \"Scheduler for script:\ + \_\$SchedName\"; }\r\ + \n :local OnEvent [ :tostr \$5 ];\r\ + \n :if ([ :len \$OnEvent ] = 0) do={ :set OnEvent \"/system/script { run \ + \$SchedName; }\"; }\r\ + \n :local Policy [ :tostr \$6 ];\r\ + \n :if ([ :len \$Policy ] = 0) do={ :set Policy \"ftp,reboot,read,write,p\ + olicy,test,password,sniff,sensitive,romon\"; }\r\ + \n :local StartDate [ :tostr \$7 ];\r\ + \n :if ([ :len \$StartDate ] = 0) do={ :set StartDate [/system/clock/get \ + date]; }\r\ + \n\r\ + \n :onerror Err {\r\ + \n # Check if scheduler exists, if not - create it\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$SchedName ] ] = 0)\ + \_do={\r\ + \n :log warning (\$SchedName . \"System Scheduler for script: \" . \$\ + SchedName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add comment=\$Comment interval=\$Interval name=\ + \$SchedName on-event=\$OnEvent policy=\$Policy start-date=\$StartDate star\ + t-time=\$StartTime;\r\ + \n }\r\ + \n # Check if scheduler parameters are correct, if not - fix them\r\ + \n :if ([ /system/scheduler/get \$SchedName comment ] != \$Comment) do=\ + {\r\ + \n /system/scheduler/set \$SchedName comment=\$Comment;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName interval ] != \$Interval) d\ + o={\r\ + \n /system/scheduler/set \$SchedName interval=\$Interval;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName on-event ] != \$OnEvent) do\ + ={\r\ + \n /system/scheduler/set \$SchedName on-event=\$OnEvent;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName policy ] != \$Policy) do={\ + \r\ + \n /system/scheduler/set \$SchedName policy=\$Policy;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-date ] != \$StartDate\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-date=\$StartDate;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-time ] != \$StartTime\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-time=\$StartTime;\r\ + \n }\r\ + \n } do={:log error (\$SchedName . \"Failed to add/modify scheduler for '\ + \" . \$SchedName . \"' failed: \" . \$Err); :return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:if ([ \$EditSchedulers \$ScriptName \$SchedInterval \$SchedStartTime \$\ + SchedComment ] = false) do={\r\ + \n :log error (\$ScriptName . \"Failed to add/modify scheduler for \" . \ + \$ScriptName . \"!\");\r\ + \n :set ExitOK true;\r\ + \n :error true;\r\ + \n}\r\ + \n\r\ + \n# Local Function CheckOSUpdateMode\r\ + \n:local CheckOSUpdateMode;\r\ + \n:set CheckOSUpdateMode do={\r\ + \n :local NewMode [ :tostr \$1 ];\r\ + \n :if ([ :len \$NewMode ] = 0) do={\r\ + \n :log error (\$0 . \"/nFunction /\$CheckOSUpdateMode received empty v\ + alue!\");\r\ + \n :return false;\r\ + \n :error true;\r\ + \n }\r\ + \n\r\ + \n :global BackupAndUpdateMode;\r\ + \n :global OldMode [ :tostr \$BackupAndUpdateMode ];\r\ + \n :if (\$NewMode != \$BackupAndUpdateMode && \$NewMode = \"updateOnce\")\ + \_do={\r\ + \n :set BackupAndUpdateMode [ :tostr \$NewMode ];\r\ + \n :log info (\$0 . \"/nOk. /\$BackupAndUpdateMode set to: '\" . \$NewM\ + ode . \"'.\\nYou're a good boy! ))\\nI'm launching the update in 5 seconds\ + .\");\r\ + \n :delay 5;\r\ + \n /system/script { run \$ScriptName; };\r\ + \n } else={\r\ + \n :log warning (\$0 . \"/nFunction /\$CheckOSUpdateMode received value: \ + '\" . \$NewMode . \"', but is may be only \\\"updateOnce\\\"!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n :error false;\r\ + \n}\r\ + \n\r\ + \n# :if ([ :len [ /system/scheduler/find where name=\"running-from-backup\ + -partition\" ] ] > 0) do={\r\ + \n# \$LogPrint warning \$ScriptName (\"Running from backup partition, r\ + efusing to act.\");\r\ + \n# :set ExitOK true;\r\ + \n# :error false;\r\ + \n# }\r\ + \n\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n:global forceBackup;\r\ + \n:global BackupPassword;\r\ + \n:global BackupSens;\r\ + \n:global updateChannel;\r\ + \n\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n# Installs patch updates only (BackupAndUpdateMode = \"osupdate\").\r\ + \n# Works for `stable` and `long-term` channels.\r\ + \n# Updates only if MAJOR.MINOR match (e.g. 6.43.2 > 6.43.6 allowed, 6.44.\ + 1 skipped).\r\ + \n# Sends info if a newer (non-patch) version is found.\r\ + \n:local installOnlyPatchUpdates false;\r\ + \n:local scriptVersion \"26.04.30\";\r\ + \n:local copyrightUrl \"https://www.github.com/vados-dev/\";\r\ + \n#Script messages prefix\r\ + \n:local SMP \"BkpAndUpdate:\";\r\ + \n\r\ + \n:local exitErrorMessage \"\$SMP script stopped due to an error. Please c\ + heck logs for more details.\";\r\ + \n:log info \"\\n\\n\$SMP Script \\\"Mikrotik RouterOS automatic backup & \ + update\\\" v.\$scriptVersion started.\";\r\ + \n:log info \"\$SMP Script Mode: `\$BackupAndUpdateMode`, Update channel: \ + `\$updateChannel`, Force backup: `\$forceBackup`, Install only patch updat\ + es: `\$installOnlyPatchUpdates`\";\r\ + \n\r\ + \n## vv FUNCTIONS vv ##\r\ + \n:global WaitCheckUpdates; \$WaitCheckUpdates;\r\ + \n:global MiniDateTimeStamp;\r\ + \n:local MDTSFix [\$MiniDateTimeStamp];\r\ + \n:global Identity;\r\ + \n:global IdentityShort;\r\ + \n:global devBoardName;\r\ + \n:global runningVersion;\r\ + \n:global runningChannel;\r\ + \n:global devModel;\r\ + \n:global devRbSerialNumber;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n\r\ + \n# Checks if two RouterOS version strings differ only by the patch versio\ + n\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.2.4\"] # Output: true\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.3.1\"] # Output: false\r\ + \n:local FuncIsPatchUpdateOnly do={\r\ + \n :local ver1 \$1;\r\ + \n :local ver2 \$2;\r\ + \n # Extract the major and minor components from a version\r\ + \n :local extractMajorMinor do={\r\ + \n :local ver \$1;\r\ + \n :local dot1 [:find \$ver \".\"];\r\ + \n :if (\$dot1 = -1) do={:return \$ver}\r\ + \n :local major [:pick \$ver 0 \$dot1];\r\ + \n :local rest [:pick \$ver (\$dot1 + 1) [:len \$ver]];\r\ + \n :local dot2 [:find \$rest \".\"];\r\ + \n :local minor \$rest;\r\ + \n :if (\$dot2 >= 0) do={:set minor [:pick \$rest 0 \$dot2]}\r\ + \n :return (\$major . \".\" . \$minor);\r\ + \n }\r\ + \n\r\ + \n# Compare the major and minor components of both version strings\r\ + \n:if ([\$extractMajorMinor \$ver1] = [\$extractMajorMinor \$ver2]) do={:r\ + eturn true}\r\ + \n :return false;\r\ + \n}\r\ + \n# Creates backups and returns array of names\r\ + \n# Possible arguments:\r\ + \n# \$1 - file name, without extension\r\ + \n# \$2 - password (optional)\r\ + \n# \$3 - sensitive data in config (optional, default: false)\r\ + \n# Example:\r\ + \n#:put [\$FuncCreateBackups \$backupName]\r\ + \n:local FuncCreateBackups do={\r\ + \n :local backupName [ :tostr \$1 ];\r\ + \n :local BackPass \$2;\r\ + \n :local BackSens \$3;\r\ + \n\r\ + \n #Script messages prefix\r\ + \n :local SMP \"BkpAndUpdate:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` started, input:\ + \_`\$backupName`\");\r\ + \n\r\ + \n # validate required parameter: backupName\r\ + \n :if ([:typeof \$backupName] != \"str\" or [:len \$backupName] = 0) do=\ + {\r\ + \n :log error \"\$SMP parameter 'backupName' is required and must be a \ + non-empty string\";\r\ + \n# :log warning \"\$SMP parameter '\\\$backupName' is required and mus\ + t be a non-empty string.\\nI set '\\\$backupName' to 'default-backup'\";\r\ + \n# :set \$backupName \"default-backup\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n\r\ + \n :local backupFileSys \"\$backupName.backup\";\r\ + \n :local backupFileConfig \"\$backupName.rsc\";\r\ + \n :local backupNames {\$backupFileSys;\$backupFileConfig};\r\ + \n\r\ + \n ## Perform system backup\r\ + \n :if ([:len \$BackPass] = 0) do={\r\ + \n :log info (\"\$SMP starting backup without password, backup name: `\ + \$backupName`\");\r\ + \n /system backup save dont-encrypt=yes name=\$backupName;\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting backup with password, backup name: `\$ba\ + ckupName`\");\r\ + \n /system backup save password=\$BackPass name=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP system backup created: `\$backupFileSys`\");\r\ + \n ## Export config file\r\ + \n :if (\$BackSens = true) do={\r\ + \n :log info (\"\$SMP starting export config with sensitive data, backu\ + p name: `\$backupName`\");\r\ + \n # Since RouterOS v7 it needs to be explicitly set that we want to ex\ + port sensitive data\r\ + \n :if ([:pick [/system resource get version] 0 1] < 7) do={\r\ + \n :execute \"/export compact terse file=\$backupName\";\r\ + \n } else={\r\ + \n :execute \"/export compact show-sensitive terse file=\$backupName\ + \";\r\ + \n }\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting export config without sensitive data, ba\ + ckup name: `\$backupName`\");\r\ + \n /export compact hide-sensitive terse file=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP Config export complete: `\$backupFileConfig`\");\r\ + \n :log info (\"\$SMP Waiting a little to ensure backup files are written\ + \");\r\ + \n :delay 20;\r\ + \n :if ([:len [/file find name=\$backupFileSys]] > 0) do={\r\ + \n :log info (\"\$SMP system backup file successfully saved to the file\ + \_system: `\$backupFileSys`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP system backup was not created, file does not exi\ + st: `\$backupFileSys`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :if ([:len [/file find name=\$backupFileConfig]] > 0) do={\r\ + \n :log info (\"\$SMP config backup file successfully saved to the file\ + \_system: `\$backupFileConfig`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP config backup was not created, file does not exi\ + st: `\$backupFileConfig`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` finished. Creat\ + ed backups, system: `\$backupFileSys`, config: `\$backupFileConfig`\")\r\ + \n :return \$backupNames;\r\ + \n}\r\ + \n# Sends an email\r\ + \n# Parameters:\r\ + \n# \$1 - to (email address)\r\ + \n# \$2 - subject\r\ + \n# \$3 - body\r\ + \n# \$4 - file attachments (optional; pass \"\" if not needed)\r\ + \n#\r\ + \n# Example:\r\ + \n# \$FuncSendEmailSafe \"admin@domain.com\" \"Backup Done\" \"Backup comp\ + lete.\" \"backup1.backup\"\r\ + \n:local FuncSendEmailSafe do={\r\ + \n :global EmailGeneralTo;\r\ + \n :local emailSubject \$2;\r\ + \n :local emailBody \$3;\r\ + \n :local emailAttachments \$4;\r\ + \n :local SMP \"Bkp&Upd:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info \"\$SMP Attempting to send email to `\$EmailGeneralTo`\";\r\ + \n # SAFETY: wait for any previously queued email to finish\r\ + \n :local waitTimeoutPre 60;\r\ + \n :local waitCounterPre 0;\r\ + \n :while (([/tool e-mail get last-status] = \"resolving-dns\" or [/tool \ + e-mail get last-status] = \"in-progress\")) do={\r\ + \n :if (\$waitCounterPre >= \$waitTimeoutPre) do={\r\ + \n :log error \"\$SMP Email send aborted: previous send did not compl\ + ete after \$waitTimeoutPre seconds\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info \"\$SMP Waiting for previous email to finish (status: \$[/\ + tool e-mail get last-status])...\";\r\ + \n :delay 1; \r\ + \n :set waitCounterPre (\$waitCounterPre + 1);\r\ + \n }\r\ + \n # Send the email\r\ + \n :do {\r\ + \n /tool e-mail send to=\$EmailGeneralTo subject=\$emailSubject body=\$\ + emailBody file=\$emailAttachments;\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Email send command failed to execute. Check logs \ + and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n # Wait for send status to change from \"in-progress\" / \"resolving-dn\ + s\"\r\ + \n :local waitTimeout 60;\r\ + \n :local waitCounter 0;\r\ + \n :local emailStatus \"\";\r\ + \n :log info \"\$SMP Waiting for email to be sent, timeout in `\$waitTime\ + out` seconds...\";\r\ + \n :while (\$waitCounter < \$waitTimeout) do={\r\ + \n :set emailStatus [/tool e-mail get last-status];\r\ + \n :if (\$emailStatus != \"in-progress\" and \$emailStatus != \"resolvi\ + ng-dns\") do={\r\ + \n :log info \"\$SMP Email send status received: \$emailStatus\";\r\ + \n # exit loop\r\ + \n :set waitCounter \$waitTimeout;\r\ + \n } else={:delay 1; :set waitCounter (\$waitCounter + 1)}\r\ + \n }\r\ + \n # Final decision based on last status\r\ + \n :if (\$emailStatus = \"succeeded\") do={\r\ + \n :log info \"\$SMP Email successfully sent to `\$EmailGeneralTo`\";\ + \r\ + \n } else={\r\ + \n :log error \"\$SMP Email failed to send. Status: `\$emailStatus`. Ch\ + eck logs for more details and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n# Global variable to track current update step\r\ + \n# They need to be initialized here first to be available in the script\r\ + \n:global buGlobalVarTargetOsVersion;\r\ + \n:global buGlobalVarScriptStep;\r\ + \n:local scriptStep \$buGlobalVarScriptStep;\r\ + \n:do {\r\ + \n /system/script/environment remove buGlobalVarScriptStep;\r\ + \n} on-error={}\r\ + \n:if ([:len \$scriptStep] = 0) do={\r\ + \n :set scriptStep 1;\r\ + \n}\r\ + \n## ^^ FUNCTIONS ^^ ##\r\ + \n#\r\ + \n# Initial validation\r\ + \n## Check email settings\r\ + \n:if ([:len \$EmailGeneralTo] < 3) do={\r\ + \n :log error (\"\$SMP Parameter `\\\$EmailGeneralTo` is not set, or cont\ + ains invalid value. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Values will be defined later in the script\r\ + \n:local emailServer \"\";\r\ + \n:local emailFromAddress [/tool e-mail get from];\r\ + \n:log info \"\$SMP Validating email settings...\";\r\ + \n:do {\r\ + \n :set emailServer [/tool e-mail get server];\r\ + \n} on-error={\r\ + \n # This is a workaround for the RouterOS v7.12 and older versions\r\ + \n :set emailServer [/tool e-mail get address];\r\ + \n}\r\ + \n:if (\$emailServer = \"0.0.0.0\") do={\r\ + \n :log error (\"\$SMP Email server address is not correct: `\$emailServe\ + r`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n:if ([:len \$emailFromAddress] < 3) do={\r\ + \n :log error (\"\$SMP Email configuration FROM address is not correct: `\ + \$emailFromAddress`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Script mode validation\r\ + \n:if (\$BackupAndUpdateMode != \"backup\" and \$BackupAndUpdateMode != \"\ + osupdate\" and \$BackupAndUpdateMode != \"updateOnce\" and \$BackupAndUpda\ + teMode != \"osnotify\") do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$BackupAndUpdateMode` is not \ + set, or contains invalid value: `\$BackupAndUpdateMode`. Script stopped.\"\ + );\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Update channel validation\r\ + \n:if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\" \ + and \$updateChannel != \"testing\" and \$updateChannel != \"development\")\ + \_do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$updateChannel` is not set, o\ + r contains invalid value: `\$updateChannel`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Verify if script is set to install patch updates and if the update cha\ + nnel is valid\r\ + \n:if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \"\ + updateOnce\") and \$installOnlyPatchUpdates = true) do={\r\ + \n :if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\ + \") do={\r\ + \n :log error (\"\$SMP Patch-only updates enabled, but update channel `\ + \$updateChannel` is invalid. Only `stable` and `long-term` are supported. \ + Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n \r\ + \n :if (\$runningChannel != \"stable\" and \$runningChannel != \"long-ter\ + m\") do={\r\ + \n :log error (\"\$SMP Script is set to install only patch updates, but\ + \_the installed RouterOS version is not from `stable` or `long-term` chann\ + el: `\$runningChannel`. Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n#\r\ + \n\r\ + \n:local rawTime [/system clock get time];\r\ + \n:local rawDate [/system clock get date];\r\ + \n\r\ + \n:local deviceOsVerAndChannelRunning [/system/resource/get version];\r\ + \n\r\ + \n:local backupNameTemplate (\"backup_v\" . \$runningVersion . \"_\" .\ + \_\$runningChannel . \"_\" . \$MDTSFix);\r\ + \n:local backupNameBeforeUpdate (\$backupNameTemplate . \"_before_update\"\ + );\r\ + \n:local backupNameAfterUpdate (\$backupNameTemplate . \"_after_update\")\ + ;\r\ + \n\r\ + \n## Email body template\r\ + \n:local mailSubjectPrefix \"\$SMP Device - `\$IdentityShort`\";\r\ + \n:local mailBodyCopyright \"Mikrotik RouterOS automatic backup & update \ + (ver. \$scriptVersion) \\n\$copyrightUrl\";\r\ + \n:local changelogUrl \"Check RouterOS changelog: https://mikrotik.com\ + /download/changelogs/\";\r\ + \n:local mailBodyDeviceInfo \"\";\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"Device information:\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\n-------------------\ + --\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nName: \$Identity\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nModel: \$devModel\"\ + );\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBoard: \$devBoardNa\ + me\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nSerial number: \$de\ + vRbSerialNumber\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterOS version: v\ + \$deviceOsVerAndChannelRunning\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBuild time: \$[/sys\ + tem/resource/get build-time]\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterboard FW Avai\ + lable: \$ROsVerAvail\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nDevice date-time: \ + \$rawDate \$rawTime (\$[/system/clock/get time-zone-name ])\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nUptime: \$[/system/\ + resource/get uptime]\");\r\ + \n## IP address detection\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local PublicIpAddress [ \$GetPubIp ];\r\ + \n :set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nPublic IP address\ + : \" . \$PublicIpAddress . \".\");\r\ + \n :log info \"\$SMP Public IP address detected: \$PublicIpAddress\";\r\ + \n} \r\ + \n\r\ + \n:local mailAttachments [:toarray \"\"];\r\ + \n:if (\$scriptStep = 1 or \$scriptStep = 3) do={\r\ + \n :if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP Waiting for one minute before continuing to the f\ + inal step.\");\r\ + \n :delay 1m;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n## STEP 1: Create backups, check for new RouterOS, and send email\r\ + \n## Steps 2\C3\A23 run only if auto-update is enabled and a new version i\ + s available\r\ + \n:if (\$scriptStep = 1) do={\r\ + \n :global BackupPassword;\r\ + \n :global BackupSens;\r\ + \n :local isNewOsUpdateAvailable false;\r\ + \n :local isLatestOsAlreadyInstalled true;\r\ + \n :local isOsNeedsToBeUpdated false;\r\ + \n :local isUpdateCheckSucceeded false;\r\ + \n :local isEmailNeedsToBeSent false;\r\ + \n :local mailSubjectPartAction \"\";\r\ + \n :local mailPtBodyAction \"\";\r\ + \n :local mailPtSubjectBackup \"\";\r\ + \n :local mailPtBodyBackup \"\";\r\ + \n # Checking for new version\r\ + \n :if (\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"osnotify\" or \$BackupAndUpdateMode = \"updateOnce\") do={\r\ + \n :log info (\"\$SMP Setting update channel to `\$updateChannel`\");\r\ + \n /system/package/update/set channel=\$updateChannel;\r\ + \n :log info (\"\$SMP Checking for new RouterOS version. Current instal\ + led version is: `\$runningVersion`\");\r\ + \n \$LogPrint debug \$ScriptName (\"Checking for updates...\");\r\ + \n \r\ + \n# /system/package/update/check-for-updates without-paging as-value;\ + \r\ + \n# /system/package/update check-for-updates;\r\ + \n :delay 5s;\r\ + \n :set PkgUpdStatus [ /system/package/update/get status ];\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :set ROsVerAvail [/system/package/update/get latest-version];\r\ + \n }\r\ + \n\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :log info (\"\$SMP New RouterOS version is available: `\$ROsVerAva\ + il`\");\r\ + \n :set isNewOsUpdateAvailable true;\r\ + \n :set isLatestOsAlreadyInstalled false;\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"New RouterOS available\";\r\ + \n :set mailPtBodyAction \"New RouterOS version is available, curren\ + t version: v\$runningVersion, new version: v\$ROsVerAvail. \\n\$changelogU\ + rl\";\r\ + \n } else={\r\ + \n :if (\$PkgUpdStatus = \"System is already up to date\") do={\r\ + \n :log info (\"\$SMP No new RouterOS version is available, the lat\ + est version is already installed: `v\$runningVersion`\");\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set mailSubjectPartAction \"No os update available\";\r\ + \n :set mailPtBodyAction \"No new RouterOS version is available, t\ + he latest version is already installed: `v\$runningVersion`\";\r\ + \n } else={\r\ + \n :log error (\"\$SMP Failed to check for new RouterOS version. Pa\ + ckage check status: `\$PkgUpdStatus`\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"Error unable to check new os versio\ + n\";\r\ + \n :set mailPtBodyAction \"An error occurred while checking for a \ + new RouterOS version.\\nStatus returned: `\$PkgUpdStatus`\\n\\nPlease revi\ + ew the logs on the device for more details and verify internet connectivit\ + y.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n # Checking if the script needs to install new os version\r\ + \n :if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"updateOnce\") and \$isNewOsUpdateAvailable = true) do={\r\ + \n :if (\$installOnlyPatchUpdates = true) do={\r\ + \n :if ([\$FuncIsPatchUpdateOnly \$runningVersion \$ROsVerAvail] = tr\ + ue) do={\r\ + \n :log info \"\$SMP New RouterOS version is available, and it is a\ + \_patch update. Current version: v\$runningVersion, new version: v\$ROsVer\ + Avail\";\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n } else={\r\ + \n :log info \"\$SMP The script will not install this update, becau\ + se it is not a patch update. Current version: v\$runningVersion, new versi\ + on: v\$ROsVerAvail\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThis update wil\ + l not be installed, because the script is set to install only patch update\ + s.\");\r\ + \n }\r\ + \n } else={\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n }\r\ + \n }\r\ + \n # Checking If the script needs to create a backup\r\ + \n :if (\$forceBackup = true or \$BackupAndUpdateMode = \"backup\" or \$i\ + sOsNeedsToBeUpdated = true) do={\r\ + \n :log info (\"\$SMP Starting backup process.\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :local backupName \$backupNameTemplate;\r\ + \n # This means it's the first step where we create a backup before the\ + \_update process\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :set backupName \$backupNameBeforeUpdate;\r\ + \n #Email body if the purpose of the script is to update the device\r\ + \n :set mailSubjectPartAction \"Update preparation\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThe update proces\ + s for device '\$Identity' is scheduled to upgrade RouterOS from version v.\ + \$runningVersion to version v.\$ROsVerAvail (Update channel: \$updateChann\ + el)\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nPlease note: The \ + update will proceed only after a successful backup.\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nA final report wi\ + th detailed information will be sent once the update process is completed.\ + \");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nIf you do not rec\ + eive a second email within the next 10 minutes, there may be an issue. Ple\ + ase check your device logs for further information.\");\r\ + \n }\r\ + \n :do {\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupName \$BackupPas\ + sword \$BackupSens];\r\ + \n :set mailPtSubjectBackup \"Backup created\";\r\ + \n :set mailPtBodyBackup \"System backups have been successfully crea\ + ted and attached to this email.\";\r\ + \n } on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :set mailPtSubjectBackup \"Backup failed\";\r\ + \n :set mailPtBodyBackup \"The script failed to create backups. Pleas\ + e check device logs for more details.\";\r\ + \n :log warning \"\$SMP Backup creation failed. Update process will b\ + e canceled if automatic update is enabled\";\r\ + \n }\r\ + \n }\r\ + \n :if (\$isEmailNeedsToBeSent = true) do={\r\ + \n :log info \"\$SMP Preparing to send email...\";\r\ + \n :local mailStep1Subject \$mailSubjectPrefix;\r\ + \n :local mailStep1Body \"\";\r\ + \n # subject\r\ + \n :if (\$mailSubjectPartAction != \"\") do={:set mailStep1Subject (\$\ + mailStep1Subject . \" - \" . \$mailSubjectPartAction)}\r\ + \n :if (\$mailPtSubjectBackup != \"\") do={:set mailStep1Subject (\$ma\ + ilStep1Subject . \" - \" . \$mailPtSubjectBackup)}\r\ + \n # body\r\ + \n :if (\$mailPtBodyAction != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyAction . \"\\n\\n\")}\r\ + \n :if (\$mailPtBodyBackup != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyBackup . \"\\n\\n\")}\r\ + \n :set mailStep1Body (\$mailStep1Body . \$mailBodyDeviceInfo . \"\\n__\ + ________\\n\" . \$mailBodyCopyright);\r\ + \n :set mailStep1Body (\$mailStep1Body . \"\\n[*** TEST START ***]\\n\\\ + \$DeviceInfo: \" . [ \$DeviceInfo ] . \"\\n[*** TEST END ***]\\n\");\r\ + \n # Send email with backups\r\ + \n :do {\$FuncSendEmailSafe \$EmailGeneralTo \$mailStep1Subject \$mailS\ + tep1Body \$mailAttachments} on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :log error \"\$SMP The script will not proceed with the update pro\ + cess, because the email was not sent.\";\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2s;\r\ + \n }\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :global OldMode;\r\ + \n :log info \"\$SMP everything is ready to install new RouterOS, going\ + \_to start the update process and reboot the device.\";\r\ + \n :do {\r\ + \n :local nextStep 2;\r\ + \n :if (\$isCloudHostedRouter = true) do={\r\ + \n :log info \"\$SMP The device is a cloud hosted router, the secon\ + d step updating the Routerboard firmware will be skipped.\";\r\ + \n :set nextStep 3;\r\ + \n }\r\ + \n :local scheduledCommand (\":delay 5s; /system/scheduler remove BKP\ + UPD-NEXT-BOOT-TASK; \\\r\ + \n :global buGlobalVarScriptStep \$nextStep; :global buGlobalVarTarg\ + etOsVersion \\\"\$ROsVerAvail\\\"; \\\r\ + \n :delay 10s; /system/script { run \$ScriptName; }\");\r\ + \n /system/scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\$schedu\ + ledCommand start-time=startup interval=0;\r\ + \n /system/package/update install;\r\ + \n } on-error={\r\ + \n # Failed to install new os version, remove the task and variables\ + \r\ + \n :do {\r\ + \n /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\r\ + \n :set BackupAndUpdateMode \$OldMode;\r\ + \n :delay 2;\r\ + \n :do {\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \"ERROR Remove\ + \_global variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n# :if ([ :len \$OldMode ] > 0) do={\r\ + \n# :do {\r\ + \n# :global OldMode (a);\r\ + \n# } on-error={\r\ + \n# :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Re\ + move global variable \\\$OldMode failed!\");\r\ + \n# }\r\ + \n# }\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Pleas\ + e check device logs for more details. \\\r\ + \n \\nAnd Failed to remove task and variables! Check it!\";\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove \ + task and global variables!\");\r\ + \n }\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Please \ + check device logs for more details.\";\r\ + \n :local mailUpdateErrorSubject (\$mailSubjectPrefix . \" - Update f\ + ailed\");\r\ + \n :local mailUpdateErrorBody \"The script was unable to install new \ + RouterOS version. Please check device logs for more details.\";\r\ + \n # Send email with error\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailUpdateErrorSubject \$ma\ + ilUpdateErrorBody \"\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n## STEP 2: (Post-reboot) Upgrade RouterBOARD firmware\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und\r\ + \n:if (\$scriptStep = 2) do={\r\ + \n :log info \"\$SMP The script is in the second step, updating Routerboa\ + rd firmware.\";\r\ + \n :log info \"\$SMP Upgrading routerboard firmware from v.\$deviceRbCurr\ + entFw to v.\$deviceRbUpgradeFw\";\r\ + \n /system routerboard upgrade;\r\ + \n :delay 2;\r\ + \n :log info \"\$SMP routerboard upgrade process was completed, going to \ + reboot in a moment!\";\r\ + \n ## Set task to send final report on the next boot\r\ + \n /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\":delay 2; \ + :global buGlobalVarScriptStep 3; \\\r\ + \n :global buGlobalVarTargetOsVersion \\\"\$buGlobalVarTargetOsVersion\\\ + \"; :delay 10s; /system/script { run \$ScriptName; }; \\ \r\ + \n :delay 5s; /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\" start-ti\ + me=startup interval=0;\r\ + \n :delay 2;\r\ + \n /system reboot;\r\ + \n}\r\ + \n\r\ + \n## STEP 3: Final report (after second reboot, with delay).\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und.\r\ + \n:if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP The script is in the third step, sending final repo\ + rt.\");\r\ + \n :local targetOsVersion \$buGlobalVarTargetOsVersion;\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"buGlobalVarTargetOsV\ + ersion\"];\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove glob\ + al variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$OldMode ] != 0) do={\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"OldMode\"];\r\ + \n :global OldMode (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR! Remove\ + \_global variable \\\$OldMode failed!\");\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$targetOsVersion] = 0) do={\r\ + \n :log warning \"\$SMP Something is wrong, the script was unable to ge\ + t the target updated OS version from the global variable.\";\r\ + \n }\r\ + \n :local mailStep3Subject \$mailSubjectPrefix;\r\ + \n :local mailStep3Body \"\";\r\ + \n :if (\$targetOsVersion = \$runningVersion) do={\r\ + \n :log info \"\$SMP Successfully verified new RouterOS version: target\ + : `\$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update completed - \ + Backup created\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"RouterOS and routerboard upg\ + rade process was completed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\nNew RouterOS version: v.\ + \$targetOsVersion, routerboard firmware: v.\$deviceRbCurrentFw\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\n\$changelogUrl\\nBackups \ + of the upgraded system are in the attachment of this email.\\n\\n\$mailBod\ + yDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupNameAfterUpdate \$\ + BackupPassword \$BackupSens];\r\ + \n } else={\r\ + \n :log error \"\$SMP Failed to verify new RouterOS version: target: `\ + \$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update failed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"The script was unable to ver\ + ify that the new RouterOS version was installed, target version: `\$target\ + OsVersion`, current version: `\$runningVersion`\\nCheck device logs for mo\ + re details.\\n\\n\$mailBodyDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n }\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailStep3Subject \$mailStep3Bod\ + y \$mailAttachments;\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2;\r\ + \n }\r\ + \n :log info (\"\$SMP Final report email sent successfully, and the scrip\ + t has finished.\");\r\ + \n}\r\ + \n:log info (\"\$SMP the script has finished, script step: `\$scriptStep` \ + \\n\\n\");\r\ + \n\r\ + \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n" +add dont-require-permissions=no name=testGetPubIP owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global DevInfoIncludeIP;\r\ + \n:global CharacterReplace;\r\ + \n:global EscapeForRegEx;\r\ + \n:global UrlEncode;\r\ + \n\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local Char (\"\\n\\r\");\r\ + \n :local PublicIpAddress [\$GetPubIp];\r\ + \n# :if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 2) ] = \ + \"\\n\") do={:error true}; :set error falseon-error={:set PublicIpAddress \ + (\$PublicIpAddress . Char)};\r\ + \n#:if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 1) ] = \"/\ + n\") do={\r\ + \n#:log warning \"N is = //n\"; \r\ + \n# :set PublicIpAddress [ \$CharacterReplace \$PublicIpAddress \$Char \"\ + \" ];\r\ + \n#}\r\ + \n# :set PublicIpAddress [ \$UrlEncode \$PublicIpAddress ];\r\ + \n#:local IpLen ([ :len \$PublicIpAddress ] -1);\r\ + \n#:set PublicIpAddress [:pick \$PublicIpAddress 0 \$IpLen];\r\ + \n :log warning \"Public IP address detected: \$PublicIpAddress , len = \ + \$IpLen\";\r\ + \n}\r\ + \n" +add comment="download, import and update firewall address-lists" \ + dont-require-permissions=no name=AM-FwAddrLists owner=AM-FwAddrLists \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-FwAddrLists\r\ + \n# Script comment: download, import and update firewall address-lists\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# https://ros.vados.ru/doc/fw-addr-lists.md\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ListsDirName (\"fw-addr-lists.d/\" . [ /system identity get nam\ + e ] . \"/\");\r\ + \n :local ListsUrl (\$GlobalScriptsUrl . \$ListsDirName);\r\ + \n :local ListsIndex \"index.lst\";\r\ + \n :local AddrListsTimeOut 1d;\r\ + \n :local CheckCerts false;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global FetchHugeFiles;\r\ + \n :global HumanReadableNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global NetMask4;\r\ + \n :global NetMask6;\r\ + \n :global ScriptLock;\r\ + \n \r\ + \n :local FindDelim do={\r\ + \n :local ValidChars \"0123456789.:/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghi\ + jklmnopqrstuvwxyz-\";\r\ + \n :for I from=0 to=[ :len \$1 ] do={\r\ + \n :if ([ :typeof [ :find \$ValidChars [ :pick (\$1 . \" \") \$I ] ] \ + ] != \"num\") do={\r\ + \n :return \$I;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local GetBranch do={\r\ + \n :global EitherOr;\r\ + \n :return [ :pick [ :convert transform=md5 to=hex [ :pick \$1 0 [ \$Ei\ + therOr [ :find \$1 \"/\" ] [ :len \$1 ] ] ] ] 0 2 ];\r\ + \n }\r\ + \n \r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local ListComment (\"managed by \" . \$ScriptName);\r\ + \n :local Url (\$ListsUrl . \$ListsIndex);\r\ + \n :local tmpIndex false;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :set tmpIndex [ :tolf [ \$FetchHugeFiles \$ScriptName \$Url \$Chec\ + kCerts ] ];\r\ + \n :if (\$tmpIndex = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list \ + index, \" . \$I . \". try from: \" . \$Url);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list inde\ + x from: \" . \$Url);\r\ + \n :set tmpIndex \"\";\r\ + \n }\r\ + \n\r\ + \n :foreach List in=[ :deserialize \$tmpIndex delimiter=\"\\n\" from=dsv \ + options=dsv.plain ] do={\r\ + \n# :set List (\$List->0);\r\ + \n :local ListName;\r\ + \n :local Delim [ \$FindDelim \$List ];\r\ + \n :if (\$Delim = 0) do={ :set List \"\"; };\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$List);\r\ + \n :if ([ :len \$List ] = 0) do={\r\ + \n :log error (\$ScriptName . \" Failed parsing address-list index en\ + try: \" . \$List);\r\ + \n } else={\r\ + \n :set ListName [ :pick \$List 0 \$Delim ];\r\ + \n }\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$ListName . \" - Ok.\");\r\ + \n :local ListUrl (\$ListsUrl . \$ListName);\r\ + \n :local CntAdd 0;\r\ + \n :local CntRenew 0;\r\ + \n :local CntRemove 0;\r\ + \n :local IPv4Addresses ({});\r\ + \n :local IPv6Addresses ({});\r\ + \n :local Failure false;\r\ + \n :local Data false;\r\ + \n :local TimeOut \$AddrListTimeOut;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data [ :tolf [ \$FetchHugeFiles \$ScriptName \$ListUrl \$Ch\ + eckCerts ] ];\r\ + \n :if (\$Data = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\ + \" . \$ListName . \"', \" . \$I . \". try from: \" . \$ListUrl);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data \"\";\r\ + \n :set Failure true;\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\" . \ + \$ListName . \"' from: \" . \$ListUrl);\r\ + \n } else={\r\ + \n :log warning (\$ScriptName . \" Downloaded \" . [ \$HumanReadableN\ + um [ :len \$Data ] 1024 ] . \"B for list '\" . \$ListName . \"' from: \" .\ + \_\$ListUrl);\r\ + \n }\r\ + \n\r\ + \n :foreach Line in=[ :deserialize \$Data delimiter=\"\\n\" from=dsv op\ + tions=dsv.plain ] do={\r\ + \n :set Line (\$Line->0);\r\ + \n :local Address;\r\ + \n :if ([ :pick \$Line 0 1 ] = \"{\" && [ :pick \$Line ([ :len \$Line\ + \_] - 1) ] = \"}\") do={\r\ + \n :do {\r\ + \n :set Address [ :tostr ([ :deserialize from=json \$Line ]->\"ci\ + dr\") ];\r\ + \n } on-error={ }\r\ + \n } else={\r\ + \n :set Address ([ :pick \$Line 0 [ \$FindDelim \$Line ] ] . (\$L\ + ist->\"cidr\"));\r\ + \n }\r\ + \n :do {\r\ + \n :local Branch;\r\ + \n :if (\$Address ~ \"^[0-9]{1,3}\\\\.[0-9]{1,3}\\\\.[0-9]{1,3}\\\\\ + .[0-9]{1,3}(/[0-9]{1,2})\?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 32;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n :set Address [ :tostr (([ :toip \$Net ] & [ \$NetMask4 \$CID\ + R ]) . [ \$IfThenElse (\$CIDR < 32) (\"/\" . \$CIDR) ]) ];\r\ + \n }\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[0-9a-zA-Z]*:[0-9a-zA-Z:\\\\.]+(/[0-9]{1,3})\ + \?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 128;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip6 [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n }\r\ + \n :set Address (([ :toip6 \$Net ] & [ \$NetMask6 \$CIDR ]) . \"/\ + \" . \$CIDR);\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[\\\\.a-zA-Z0-9-]+\\\\.[a-zA-Z]{2,}\\\$\") d\ + o={\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n \r\ + \n\r\ + \n :foreach Entry in=[ /ip/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ip/firewall/address-list/get \$Entry address ];\ + \r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv4 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ip/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv4 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ip/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach Entry in=[ /ipv6/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ipv6/firewall/address-list/get \$Entry address ]\ + ;\r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv6 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ipv6/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv6 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ipv6/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv4Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv4 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ip/firewall/address-list/add list=\$ListName comment=\$ListCo\ + mment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv4 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv6Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv6 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ipv6/firewall/address-list/add list=\$ListName comment=\$List\ + Comment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv6 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :log info (\$ScriptName . \" list: \" . \$ListName . \\\r\ + \n \" (\" . [ \$HumanReadableNum (\$CntAdd + \$CntRenew) 1000 ] . \ + \")\" . \\\r\ + \n \" -- added: \" . [ \$HumanReadableNum \$CntAdd 1000 ] . \\\r\ + \n \" - renewed: \" . [ \$HumanReadableNum \$CntRenew 1000 ] . \\\r\ + \n \" - removed: \" . [ \$HumanReadableNum \$CntRemove 1000 ]);\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=awg-env owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/envs/add list=awg-proxy-env key=AWG_LISTEN value=\":55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_REMOTE value=\"109.107.17\ + 7.79:55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H1 value=\"472437748-4724\ + 38637\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H2 value=\"707808381-7078\ + 09250\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H3 value=\"1609078552-160\ + 9079495\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H4 value=\"1012329484-101\ + 2329741\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I5 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_SERVER_PUB value=\"o5IgCl\ + 1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_CLIENT_PUB value=[/interf\ + ace/wireguard/get [find name=wg-awg-proxy] public-key]" +add dont-require-permissions=no name=awg-container-add owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/add file=sata1/tmp/awg-proxy-amd64.tar.gz interface=veth-awg-pro\ + xy envlist=awg-proxy-env \\\ + \n hostname=awg-proxy root-dir=sata1/awg-proxy logging=yes shm-size=4M \ + start-on-boot=yes\ + \n/container/start [find where tag~\"awg-proxy\"]" +add dont-require-permissions=yes name=awg2-webui owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + put \"Download image, and save him to usb1/tmp\"\ + \n/tool/fetch url=\"https://ros.vados.ru/docker/awg2-webui-chr.tar\" dst-p\ + ath=sata1/tmp/awg2-webui.tar\ + \n\ + \n:put \"1. Create veth interface\"\ + \n/interface veth add name=veth-awg address=10.9.9.2/24 gateway=10.9.9.1\ + \n\ + \n:put \"2. Create bridge and add veth\"\ + \n/interface bridge add name=br-awg\ + \n/interface bridge port add bridge=br-awg interface=veth-awg\ + \n\ + \n:put \"3. Assign IP to bridge\"\ + \n/ip address add address=10.9.9.1/24 interface=br-awg\ + \n\ + \n:put \"4. NAT: masquerade container traffic\"\ + \n/ip firewall nat add chain=srcnat src-address=10.9.9.0/24 action=masquer\ + ade\ + \n\ + \n:put \"5. Port forward: UDP 443 \? container (AmneziaWG QUIC mimicry)\"\ + \n/ip firewall nat add chain=dstnat protocol=udp dst-port=443 action=dst-n\ + at to-addresses=10.9.9.2 to-ports=55055 in-interface=ether1\ + \n\ + \n:put \"6. Port forward: HTTPS 9443 \? container Web UI\"\ + \n/ip firewall nat add chain=dstnat protocol=tcp dst-port=9443 action=dst-\ + nat to-addresses=10.9.9.2 to-ports=443 in-interface=ether1\ + \n\ + \n:put \"Create environment list..\"\ + \n/container envs add list=awgui-env key=WEB_USER value=vados\ + \n/container envs add list=awgui-env key=WEB_PASS value=zoomzoomrulezz\ + \n/container envs add list=awgui-env key=SECRET_KEY value=RanDomSecret32Sy\ + mboLs2325272931q\ + \n/container envs add list=awgui-env key=AWG_ENDPOINT value=10.30.30.10:44\ + 3\ + \n\ + \n:put \"Load and start container...\"\ + \n/container add file=sata1/tmp/awg2-webui.tar interface=veth-awg hostname\ + =awg2-webui \\\ + \nroot-dir=sata1/awg2-webui layer-dir=sata1/docker/awg2-webu/ envlist=awgu\ + i-env start-on-boot=yes logging=yes shm-size=4M\ + \n\ + \n:put \"Start...\"\ + \n/container start 0\ + \n\ + \n:put \"Verify...\"\ + \n/container print\ + \n\ + \n:put \"Should show: status=running\"\ + \n\ + \n/log print where topics~\"container\"\ + \n\ + \n:put \"Should show: AWG started, nginx running\"\ + \n" +add dont-require-permissions=no name=awg-proxy-go-Client owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:put \"[::::::::::::::: START :::::::::::::::]\"\ + \n:put \"\"\ + \n:put \"Add ram disk tmpfs\"\ + \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ + \n\ + \n:put \"veth and network:\"\ + \n /interface/bridge add name=docker port-cost-mode=short\ + \n /ip/address/add address=192.168.100.1/24 interface=docker\ + \n\ + \n /interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\ + =awg-proxy-go-client\ + \n /interface/bridge/port add bridge=docker interface=awg-proxy-go-client\ + \n\ + \n:put \"add config-client.json\"\ + \n/file/add name=sata1/mounts/awg-proxy-go/config-client.json\ + \n/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json d\ + st=/app/config.json list=awgcfg-client\ + \n\ + \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\ + d64.tar.gz\"\ + \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\ + 4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\ + \n\ + \n:put \"Add container\"\ + \n/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interface\ + =awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-proxy\ + -client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pro\ + xy-go-client\" mountlists=awgcfg-client\ + \n\ + \n:put \"Start container\"\ + \n#/container/start awg-proxy-go-client\ + \n\ + \n:put \"Add user:\"\ + \n /user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ + peskar55\ + \n\ + \n:put \"Add forwarding port web-ui\"\ + \n /ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ + face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ + \n\ + \n:put \"Add native WireGuard-server wg-awg, add address.\"\ + \n /interface/wireguard/add name=wg-awg-client\ + \n /ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ + \n\ + \n:put \"\"\ + \n:put \"[::::::::::::::: END :::::::::::::::]\"\ + \n" +add comment=awg2wg dont-require-permissions=no name=awg2wg-uninstall owner=\ + Manager policy=ftp,read,write,policy source="\r\ + \n :put \"Uninstalling AmneziaWG...\"\r\ + \n :log info \"Uninstalling AmneziaWG...\"\r\ + \n /ip/route/remove [find where comment=awg2wg-tunnel]\r\ + \n :do { /tool/netwatch/remove [find where comment=Monitor-AWG2WG] } on-e\ + rror={}\r\ + \n :do { /ip/route/remove [find where comment=Monitor-AWG2WG] } on-error=\ + {}\r\ + \n /container/stop [find where interface=veth-awg2wg]\r\ + \n :delay 7s\r\ + \n /interface/list/member/remove [find where interface=wg-awg2wg]\r\ + \n /container/remove [find where interface=veth-awg2wg]\r\ + \n /container/envs/remove [find where list=\"awg2wg-env\"]\r\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg2wg\"]\r\ + \n /ip/address/remove [find where address=\"172.20.0.1/30\"]\r\ + \n /interface/veth/remove [find where name=\"veth-awg2wg\"]\r\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg2wg\"]\ + \r\ + \n /ip/address/remove [find where interface=\"wg-awg2wg\"]\r\ + \n /interface/wireguard/remove [find where name=\"wg-awg2wg\"]\r\ + \n :do { /file/remove [find where name~\"awg2wg.+tar\"] } on-error={}\r\ + \n :do { /file/remove [find where name=\"disk1/awg2wg\"] } on-error={}\r\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n /system/script/remove [find where name=awg2wg-uninstall]\r\ + \n" +add dont-require-permissions=no name=amneziawg-mikrotik-c owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\ + \n:global imagesPath \"amneziawg/img/\";\ + \n:local Image \"awg-proxy-amd64-7.20-Docker.tar.gz\";\ + \n\ + \n:global DstDir \"sata1/dst/\";\ + \n\ + \n:local Url=(\$GlobalScriptsUrl . \$ImagesPath . \$Image);\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n" +add comment=Generator dont-require-permissions=no name=awg-VDSina owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# ============================================================\ + \n# AWG Proxy -- MikroTik RouterOS (protocol: v2)\ + \n# 2026-06-30 22:08:12\ + \n# ============================================================\ + \n\ + \n# 0. Check prerequisites\ + \n:if ([:len [/system/package/find where name=\"container\" disabled=no]] \ + = 0) do={\ + \n :put \"Container package is not installed or disabled. Install it and \ + reboot.\"\ + \n :error \"Usage: /system/device-mode/update container=yes\"\ + \n}\ + \n\ + \n# Auto-detect storage\ + \n:global awgDisk \"disk1\"\ + \n{\ + \n :local usbFree 0\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] free] \ + } on-error={}\ + \n :if (\$usbFree > 0) do={\ + \n :set awgDisk \"usb1\"\ + \n :put (\"Using USB: usb1 (\" . (\$usbFree / 1048576) . \" MB free)\")\ + \n } else={\ + \n :if ([:len [/disk/find where slot=\"usb1\"]] > 0) do={\ + \n :put \"USB found but not mounted. Format as ext4\?\"\ + \n :put \"Press 'y' to confirm:\"\ + \n :local key [/terminal/inkey timeout=30]\ + \n :if (\$key = 121 || \$key = 89) do={\ + \n /disk/format-drive usb1 file-system=ext4 label=usb1\ + \n :delay 3s\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] \ + free] } on-error={}\ + \n :if (\$usbFree > 0) do={\ + \n :set awgDisk \"usb1\"\ + \n } else={ :put \"Format failed, using disk1\" }\ + \n } else={ :put \"Using disk1\" }\ + \n } else={ :put \"No USB, using disk1\" }\ + \n }\ + \n}\ + \n\ + \n# 1. Uninstall script\ + \n/system/script/add name=awg-VDSina-uninstall comment=awg-VDSina source={\ + \n :put \"Uninstallimg AmneziaWG...\"\ + \n :log info \"Uninstallimg AmneziaWG...\"\ + \n :local prevDNS \"\"\ + \n :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\ + env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\ + \n :local storageDisk \"disk1\"\ + \n :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\ + ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\ + \n :local prevTmpdir \"\"\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\ + Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\ + \n }\ + \n /ip/route/remove [find where comment=awg-VDSina-tunnel]\ + \n /ip/route/remove [find where comment=awg-VDSina-dns]\ + \n /container/stop [find where interface=veth-awg-VDSina]\ + \n :delay 7s\ + \n /container/remove [find where interface=veth-awg-VDSina]\ + \n /container/envs/remove [find where list=\"awg-VDSina-env\"]\ + \n :if (\$prevDNS != \"\") do={\ + \n :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\ + \n :put (\"DNS restored to: \$prevDNS\")\ + \n }\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n /container/config set tmpdir=\$prevTmpdir\ + \n :put (\"Container tmpdir restored to: \$prevTmpdir\")\ + \n }\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\ + \n /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\ + \n /ip/address/remove [find where address=\"172.19.75.209/30\"]\ + \n /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\ + a\"]\ + \n /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\ + \n /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\ + \n :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\ + \_} on-error={}\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\ + out.rsc\")] } on-error={}\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\ + n-error={}\ + \n }\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\ + \n /system/script/remove [find where name=awg-VDSina-uninstall]\ + \n}\ + \n\ + \n# 2. Network infrastructure\ + \n/interface/veth/add name=veth-awg-VDSina address=172.19.75.210/30 gatewa\ + y=172.19.75.209\ + \n/ip/address/add address=172.19.75.209/30 interface=veth-awg-VDSina\ + \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.19.7\ + 5.208/30\ + \n\ + \n# 3. WireGuard interface (MikroTik derives the public key automatically)\ + \n/interface/wireguard/add name=wg-awg-VDSina private-key=\"4CHyNhbOs923/E\ + yNDguMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=14710 disabled=yes\ + \n/interface/wireguard/peers/add interface=wg-awg-VDSina public-key=\"o5Ig\ + Cl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcY\ + QnD9N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=172.19.75.210 endpoint-po\ + rt=51820 allowed-address=0.0.0.0/0 persistent-keepalive=10\ + \n/ip/address/add address=10.9.0.3/32 interface=wg-awg-VDSina\ + \n\ + \n# 4. Container environment variables\ + \n/container/envs/add list=awg-VDSina-env key=AWG_LISTEN value=\":51820\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_REMOTE value=\"109.107.1\ + 77.79:55055\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H1 value=\"472437748-472\ + 438637\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H2 value=\"707808381-707\ + 809250\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H3 value=\"1609078552-16\ + 09079495\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H4 value=\"1012329484-10\ + 12329741\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_SERVER_PUB value=\"o5IgC\ + l1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_CLIENT_PUB value=[/inter\ + face/wireguard/get [find name=wg-awg-VDSina] public-key]\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I5 value=\"\"\ + \n\ + \n# 5. DNS\ + \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\ + n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\ + \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /container/envs/add list=aw\ + g-VDSina-env key=AWG_PREV_DNS value=\"\$prevDNS\" }\ + \n# NOTE: replaces existing DNS configuration\ + \n/ip/dns/set servers=109.107.177.79\ + \n/ip/route/add dst-address=109.107.177.79/32 gateway=wg-awg-VDSina distan\ + ce=1 comment=awg-VDSina-dns\ + \n\ + \n# 6. Download, create and start container\ + \n/container/envs/add list=awg-VDSina-env key=AWG_STORAGE value=\$awgDisk\ + \n:if (\$awgDisk != \"disk1\") do={\ + \n :local tmpPath (\$awgDisk . \"/pull\")\ + \n /container/envs/add list=awg-VDSina-env key=AWG_PREV_TMPDIR value=[/co\ + ntainer/config/get tmpdir]\ + \n /container/config set tmpdir=\$tmpPath memory-high=200M\ + \n}\ + \n{\ + \n :local arch [/system/resource/get architecture-name]\ + \n :local ver [/system/resource/get version]\ + \n :local dotPos [:find \$ver \".\"]\ + \n :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\ + \n :local endPos [:find \$rest \".\"]\ + \n :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \" \ + \"] }\ + \n :local minor [:tonum [:pick \$rest 0 \$endPos]]\ + \n :local suffix \"\"\ + \n :if (\$minor <= 20) do={ :set suffix \"-7.20-Docker\" }\ + \n :local file \"\"\ + \n :if (\$arch = \"arm64\") do={ :set file (\"awg-proxy-arm64\" . \$suffi\ + x . \".tar.gz\") }\ + \n :if (\$arch = \"arm\") do={ :set file (\"awg-proxy-arm\" . \$suffix . \ + \".tar.gz\") }\ + \n :if (\$arch ~ \"x86\") do={ :set file (\"awg-proxy-amd64\" . \$suffix \ + . \".tar.gz\") }\ + \n :if (\$file = \"\") do={ :error \"Unsupported architecture: \$arch\" }\ + \n :local url \"https://github.com/timbrs/amneziawg-mikrotik-c/releases/l\ + atest/download/\$file\"\ + \n :local filePath \$file\ + \n :if (\$awgDisk != \"disk1\") do={\ + \n :set filePath (\$awgDisk . \"/pull/\" . \$file)\ + \n :do { /file/make-directory (\$awgDisk . \"/pull\") } on-error={}\ + \n }\ + \n :if ([:len [/file/find where name=\$filePath]] = 0) do={\ + \n :local freeStorage 0\ + \n :if (\$awgDisk = \"disk1\") do={\ + \n :set freeStorage [/system/resource/get free-hdd-space]\ + \n } else={\ + \n :do { :set freeStorage [/disk/get [find where mount-point=\$awgDis\ + k] free] } on-error={}\ + \n }\ + \n :if (\$freeStorage < 262144) do={\ + \n :put (\"WARNING: Low disk space (\" . (\$freeStorage / 1024) . \"K\ + B free). Need at least 256KB.\")\ + \n :put \"See: https://github.com/timbrs/amneziawg-mikrotik-c#insuffi\ + cient-disk-space\"\ + \n :error \"Insufficient disk space\"\ + \n }\ + \n :put (\"Fetching: \$url -> \" . \$filePath)\ + \n /tool/fetch url=\$url dst-path=\$filePath http-max-redirect-count=10\ + \n } else={\ + \n :put (\"File already exists: \" . \$filePath)\ + \n }\ + \n :local rootDir (\$awgDisk . \"/awg-VDSina\")\ + \n /container/add file=\$filePath interface=veth-awg-VDSina envlist=awg-V\ + DSina-env hostname=awg-VDSina root-dir=\$rootDir logging=no start-on-boot=\ + yes comment=awg-VDSina\ + \n :if (\$minor > 20) do={ [:parse \"/container/set [find where interface\ + =veth-awg-VDSina] shm-size=4M\"] }\ + \n /file/remove \$filePath\ + \n :local freeMem [/system/resource/get free-memory]\ + \n :if (\$freeMem < 16777216) do={\ + \n :put (\"WARNING: Low memory (\" . (\$freeMem / 1048576) . \"MB free)\ + . 16MB+ recommended.\")\ + \n }\ + \n /container/start [find where interface=veth-awg-VDSina]\ + \n :do { /file/remove [find where name=\"console-dump.txt\"] } on-error={\ + }\ + \n :put \"Waiting for container to start...\"\ + \n :delay 5s\ + \n /interface/wireguard/enable wg-awg-VDSina\ + \n :put \"WireGuard interface enabled\"\ + \n :put \"Installation complete!\"\ + \n :put \"Ping test: 109.107.177.79 via AmneziaWG tunnel. repeat 10 times\ + \"\ + \n /ping 109.107.177.79 count=10 interval=1\ + \n :put \"\"\ + \n :put \"======= NEXT STEPS =======\"\ + \n :put \"\"\ + \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\ + \n :put \"\"\ + \n :put \" Route a single host:\"\ + \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-awg-VDSina \ + comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Route a subnet:\"\ + \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-awg-VDSina\ + \_comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Remove a route:\"\ + \n :put \" /ip/route/remove [find where comment=awg-VDSina-tunnel dst-\ + address=8.8.8.8/32]\"\ + \n :put \"\"\ + \n :put \" Show all tunnel routes:\"\ + \n :put \" /ip/route/print where comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Uninstall:\"\ + \n :put \" /system/script/run awg-VDSina-uninstall\"\ + \n :put \"=========================\"\ + \n}\ + \n\ + \n# 7. Verification\ + \n# /container/print\ + \n# /interface/wireguard/print\ + \n# /interface/wireguard/peers/print\ + \n" +add comment="wg2awg GH repo in client mode" dont-require-permissions=no name=\ + "wg2awg client" owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:local Arch \"amd64\";\ + \n:local Version \"v0.0.1\";\ + \n:local Name wg2awg;\ + \n:local WorkDisk \"sata1\";\ + \n:local WorkDir (\$WorkDisk . \"/\" . \$Name);\ + \n:local Bridge (\"Bridge-\" . \$Name);\ + \n:local VetchMTU \"1280\";\ + \n:local Vetch (\"vetch-\" . \$Name);\ + \n:local VetchNet \"10.9.0.0\";\ + \n:local VetchGate \"10.9.0.1\";\ + \n:local VetchAddr \"10.9.0.3/32\";\ + \n:local Env (\$Name . \"-env\");\ + \n:local ConfDir (\"/etc/\" . \$Name . \"/\");\ + \n:local ConfFile (\$Name . \".conf\");\ + \n:local Mounts (\$WorkDisk . \"/mounts/\" . \$Name . \"/\");\ + \n:local RootDir (\$WorkDisk . \"/\" . \$Name);\ + \n:local Registry \"https://registry-1.docker.io\";\ + \n:local FetchFile (\$Name . \"-\" . \$Arch . \"-oci.tar\");\ + \n:local FetchUrl (\"https://github.com/vados-dev/wg2awg/releases/download\ + /\" . \$Version . \"/\" . \$FetchFile);\ + \n:local FetchDir (\$WorkDisk . \"/dst/\");\ + \n:local AwgListen \":44044\";\ + \n:local AwgRemote \"109.107.177.79\";\ + \n\ + \n#:put \"\"\ + \n#put \"Add ram disk tmpfs\"\ + \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ + \n\ + \n\ + \n:log warning \"[::::::::::::::: START :::::::::::::::]\"\ + \n:log warning \"Add veth and nat...\";\ + \n\ + \n/interface/veth/add name=\$Vetch address=\$VetchAddr gateway=\$VetchGate\ + ;\ + \n\ + \n:do {\ + \n:log warning (\"Remove interface: name=\" . \$Vetch . \", address=\" . \ + \$VetchAddr . \", gateway=\" . \$VetchGate);\ + \n/interface/veth/remove [find name=\$Vetch];\ + \n:log warning (\"Add interface: name=\" . \$Vetch . \", address=\" . \$Ve\ + tchAddr . \", gateway=\" . \$VetchGate);\ + \n/interface/veth/add name=\$Vetch address=\$VetchAddr gateway=\$VetchGate\ + ;\ + \n:log warning (\"Remove ip address: address=\" . \$VetchGate . \", interf\ + ace=\" . \$Vetch);\ + \n/ip/address/remove [find address=\$VetchGate interface=\$Vetch];\ + \n:log warning (\"Add ip address: address=\" . \$VetchGate . \", interface\ + =\" . \$Vetch);\ + \n/ip/address/add address=\$VetchGate interface=\$Vetch;\ + \n:log warning (\"Remove firewall nat rule: chain=srcnat action=masquerade\ + \_src-address=\" . \$VetchNet . \"/24\");\ + \n/ip/firewall/nat/remove [find chain=srcnat action=masquerade src-address\ + =(\$VetchNet . \"/24\")];\ + \n:log warning (\"Add firewall nat rule: chain=srcnat action=masquerade sr\ + c-address=\" . \$VetchNet . \"/24\");\ + \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=(\$VethN\ + et . \"/24\");\ + \n} on-error={}\ + \n\ + \n#:do {\ + \n#/file add type=directory name=\$Mounts\ + \n#} on-error={}\ + \n\ + \n\ + \n:do {\ + \n:log warning (\"Remove WorkDir: \" . \$WorkDir . \"...\");\ + \n/file remove [find name=\$WorkDir];\ + \n:log warning (\"Add WorkDir: \" . \$WorkDir . \"...\");\ + \n/file add type=directory name=\$WorkDir;\ + \n:log warning (\"Remove config file \" . \$Mounts . \$ConfFile . \"...\")\ + ;\ + \n/file remove [find name=(\$Mounts . \$ConfFile)];\ + \n:log warning (\"Add config file \" . \$Mounts . \$ConfFile . \"...\");\ + \n/file add type=file name=(\$Mounts . \$ConfFile) contents=\"[Interface]\ + \nPrivateKey = 4CHyNhbOs923/EyNDguMXJXdghL2I3UyzXPwrANVgHs=\ + \nAddress = \$VetchAddr\ + \nMTU = \$VetchMTU\ + \nDNS = 109.107.177.79\ + \nPreUp = ip route add 109.107.177.79/32 via \$VetchGate dev \$Vetch\ + \nPostDown = ip route del 109.107.177.79/32 via \$VetchGate dev \$Vetch\ + \nJc = 9\ + \nJmin = 105\ + \nJmax = 920\ + \nS1 = 90\ + \nS2 = 136\ + \nS3 = 45\ + \nS4 = 27\ + \nH1 = 472437748-472438637\ + \nH2 = 707808381-707809250\ + \nH3 = 1609078552-1609079495\ + \nH4 = 1012329484-1012329741\ + \nI1 = <\ + r 4>\ + \nI2 = \ + \nI3 = \ + \nI4 = \ + \nI5 = \ + \n\ + \n[Peer]\ + \nPublicKey = o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\ + \nAllowedIPs = 0.0.0.0/0\ + \nEndpoint = \$AwgRemote\ + \nPersistentKeepalive = 10\ + \nPresharedKey = RNvF7T1cg5tyXcYQnD9N5BEp6e20vVJQTv0GMjyvHU0=\";\ + \n} on-error={}\ + \n\ + \n\ + \n:do {\ + \n:log warning (\"Remove mounts list \$Env...\");\ + \n/container/mounts/remove [find list=\$Env];\ + \n:log warning (\"Add mounts list \$Env...\");\ + \n/container/mounts/add src=(\$Mounts . \$ConfFile) dst=(\$ConfDir . \$Con\ + fFile) list=\$Env mode=ro;\ + \n:log warning (\"Remove Environment keys.\");\ + \n/container/envs/remove [find list=\$Env];\ + \n:log warning (\"Add Environment keys.\");\ + \n/container/envs/add list=\$Env key=AWG_CONFIG value=(\$ConfDir . \$ConfF\ + ile);\ + \n/container/envs/add list=\$Env key=AWG_LISTEN value=\$AwgListen\ + \n/container/envs/add list=\$Env key=AWG_REMOTE value=\$AwgRemote\ + \n/container/envs/add list=\$Env key=AWG_MODE value=client\ + \n} on-error={}\ + \n\ + \n:do {\ + \n:log warning (\"Remove \" . \$WorkDisk . \"/tmp\");\ + \n/file remove [find name=(\$WorkDisk . \"/tmp\")];\ + \n:log warning (\"Add \" . \$WorkDisk . \"/tmp\");\ + \n/file add type=directory name=(\$WorkDisk . \"/tmp\");\ + \n:log warning (\"Container add tmpdir \" . \$WorkDisk . \"/tmp\");\ + \n/container config set tmpdir=(\$WorkDisk . \"/tmp\");\ + \n} on-error={}\ + \n\ + \n:do {\ + \n:log warning (\"Remove \" . \$FetchDir . \$FetchFile . \".\");\ + \n/file remove [find name=(\$FetchDir . \$FetchFile)];\ + \n:log warning (\"Download image from \" . \$FetchUrl . \" and save him to\ + \_\" . \$FetchDir . \$FetchFile . \".\");\ + \n/tool/fetch url=\$FetchUrl dst-path=(\$FetchDir . \$FetchFile);\ + \n} on-error={}\ + \n\ + \n#:log warning (\"Container set registry \" . \$Registry . \" tmpdir= \" \ + . \$WorkDisk . \"/tmp\");\ + \n#/container/config/set registry-url=\$Registry tmpdir=(\$WorkDisk . \"/t\ + mp\");\ + \n\ + \n#:do {\ + \n:log warning (\"Container add width: file=\" . \$FetchDir . \$FetchFile \ + . \", interface=\" . \$Vetch . \", hostname=\" . \$Name . \", mountlists=\ + \" . \$Env . \", envlist=\" . \$Env . \", root-dir=\" . \$RootDir . \", wo\ + rkdir=\" . \$WorkDir . \", name=\" . \$Name . \", logging=yes, start-on-bo\ + ot=yes\");\ + \n/container/add file=(\$FetchDir . \$FetchFile) interface=\$Vetch hostnam\ + e=\$Name mountlists=\$Env envlist=\$Env root-dir=\$RootDir workdir=\$WorkD\ + ir name=\$Name logging=yes start-on-boot=yes;\ + \n#} on-error={}\ + \n\ + \n\ + \n#/container/start [find where interface=\$Vetch];\ + \n\ + \n#/interface/bridge add name=\$Bridge port-cost-mode=short;\ + \n#/ip/address/add address=192.168.100.1/24 interface=\$Bridge;\ + \n\ + \n#/interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\ + =awg-proxy-go-client\ + \n#/interface/bridge/port add bridge=docker interface=awg-proxy-go-client\ + \n\ + \n#:put \"add config-client.json\"\ + \n#/file/add name=sata1/mounts/awg-proxy-go/config-client.json\ + \n#/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json \ + dst=/app/config.json list=awgcfg-client\ + \n\ + \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\ + d64.tar.gz\"\ + \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\ + 4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\ + \n\ + \n#:put \"Add container\"\ + \n#/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interfac\ + e=awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-prox\ + y-client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pr\ + oxy-go-client\" mountlists=awgcfg-client\ + \n\ + \n#:put \"Start container\"\ + \n#/container/start awg-proxy-go-client\ + \n\ + \n#:put \"Add user:\"\ + \n#/user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ + peskar55\ + \n\ + \n#:put \"Add forwarding port web-ui\"\ + \n#/ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ + face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ + \n\ + \n#:put \"Add native WireGuard-server wg-awg, add address.\"\ + \n#/interface/wireguard/add name=wg-awg-client\ + \n#/ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ + \n\ + \n:put \"\"\ + \n:put \"[::::::::::::::: END :::::::::::::::]\"\ + \n" +add dont-require-permissions=no name=tmp_print owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDguMX\ + JXdghL2I3UyzXPwrANVgHs=\" listen-port=21641 \ + \n :put \"======= AWG PROXY SETUP =======\"\ + \n :put \"\"\ + \n :put \"Run awg-proxy on your external device (10.30.30.33).\"\ + \n :put \"\"\ + \n :put \"1. Download the binary for your platform:\"\ + \n :put \" Linux arm64: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-arm64\"\ + \n :put \" Linux arm: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-arm\"\ + \n :put \" Linux amd64: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-amd64\"\ + \n :put \"\"\ + \n :put \"2. Set environment variables and run:\"\ + \n :put \"export AWG_LISTEN=\\\":51820\\\"\"\ + \n :put \"export AWG_REMOTE=\\\"109.107.177.79:55055\\\"\"\ + \n :put \"export AWG_JC=\\\"9\\\"\"\ + \n :put \"export AWG_JMIN=\\\"105\\\"\"\ + \n :put \"export AWG_JMAX=\\\"920\\\"\"\ + \n :put \"export AWG_S1=\\\"90\\\"\"\ + \n :put \"export AWG_S2=\\\"136\\\"\"\ + \n :put \"export AWG_H1=\\\"472437748-472438637\\\"\"\ + \n :put \"export AWG_H2=\\\"707808381-707809250\\\"\"\ + \n :put \"export AWG_H3=\\\"1609078552-1609079495\\\"\"\ + \n :put \"export AWG_H4=\\\"1012329484-1012329741\\\"\"\ + \n :put \"export AWG_SERVER_PUB=\\\"o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+\ + v0b9jU=\\\"\"\ + \n :put (\"export AWG_CLIENT_PUB=\\\"\" . [/interface/wireguard/get [find\ + \_name=wg-VDSina] public-key] . \"\\\"\")\ + \n :put \"export AWG_S3=\\\"45\\\"\"\ + \n :put \"export AWG_S4=\\\"27\\\"\"\ + \n :put \"export AWG_I1=\\\"\\\"\"\ + \n :put \"export AWG_I2=\\\"\\\"\"\ + \n :put \"export AWG_I3=\\\"\\\"\"\ + \n :put \"export AWG_I4=\\\"\\\"\"\ + \n :put \"export AWG_I5=\\\"\\\"\"\ + \n :put \"\"\ + \n :put \"chmod +x awg-proxy-linux-* && ./awg-proxy-linux-\"\ + \n :put \"\"\ + \n :put \"3. (Optional) Create a systemd service for auto-start.\"\ + \n :put \"\"\ + \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\ + \n :put \"\"\ + \n :put \" Route a single host:\"\ + \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-VDSina comm\ + ent=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Route a subnet:\"\ + \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-VDSina com\ + ment=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Remove a route:\"\ + \n :put \" /ip/route/remove [find where comment=VDSina-tunnel dst-addr\ + ess=8.8.8.8/32]\"\ + \n :put \"\"\ + \n :put \" Show all tunnel routes:\"\ + \n :put \" /ip/route/print where comment=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Uninstall:\"\ + \n :put \" /system/script/run VDSina-uninstall\"\ + \n :put \"================================\"" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +add name=manager policy="local,ssh,ftp,read,write,policy,api,rest-api,!telnet,\ + !reboot,!test,!winbox,!password,!web,!sniff,!sensitive,!romon" +/app +set cinny firewall-redirects=8094:80:tcp:web +set goaway container-command-lines=goaway:none:docker.io/pommee/goaway:latest +set home-assistant container-command-lines=\ + home-assistant:none:lscr.io/linuxserver/homeassistant +set n8n firewall-redirects=5678:5678:tcp:web +set nextcloud container-command-lines="db:none:docker.io/postgres:17,redis:non\ + e:docker.io/valkey/valkey:/bin/sh -c 'valkey-server --port 6379 --appendon\ + ly yes --requirepass \$VALKEY_PASSWORD',server:none:docker.io/nextcloud:ap\ + ache" +set pihole environment="pihole:FTLCONF_dns_listeningMode=all,pihole:FTLCONF_we\ + bserver_api_password=password" +set redlib firewall-redirects=8087:8080:tcp:web +set solr container-command-lines=solr:none:docker.io/solr:latest +set uptime-kuma container-command-lines=\ + uptime-kuma:none:docker.io/louislam/uptime-kuma:1 +/app settings +set auto-update=yes disk=*7 lan-bridge=*3 registry-mirrors="https://reg.vados.\ + ru:5000/:https://reg.vados.ru/,https://registry-1.docker.io" +/caps-man aaa +set called-format=ssid +/caps-man access-list +add action=reject allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-120..-80 ssid-regexp="" +add action=accept allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-79..120 ssid-regexp="" +/caps-man configuration +add channel.band=2ghz-b/g/n country=no_country_set datapath=xs-DataPath mode=\ + ap name=xs-2G rx-chains=0,1,2,3 security=xs-Sec ssid=vados tx-chains=\ + 0,1,2,3 +add channel.band=5ghz-a/n/ac country=no_country_set datapath=xs-DataPath \ + installation=any mode=ap name=xs-5G rx-chains=0,1,2,3 security=xs-Sec \ + ssid=vados5g tx-chains=0,1,2,3 +add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ + XX .frequency=2422,2442,2462 .reselect-interval=20m country=belarus \ + datapath=DataPath datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes hw-protection-mode=rts-cts installation=any name=2G \ + rx-chains=0,1,2,3 security=WPA2 ssid=vados tx-chains=0,1,2,3 +add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ + XXXX .frequency=5180,5200,5220,5240,5260 .reselect-interval=20m \ + .skip-dfs-channels=yes country=belarus datapath=DataPath \ + datapath.client-to-client-forwarding=yes .local-forwarding=yes \ + hw-protection-mode=rts-cts installation=any name=5G security=WPA2 ssid=\ + vados5g +/caps-man datapath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + xs-DataPath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + DataPath +/caps-man manager +set ca-certificate=CAPsMAN-CA-51B25E507D07 certificate=CAPsMAN-51B25E507D07 \ + enabled=yes require-peer-certificate=yes +/caps-man manager interface +set [ find default=yes ] forbid=yes +add disabled=no interface=Bridge-LAN +/caps-man provisioning +add action=create-dynamic-enabled hw-supported-modes=g,gn,b \ + master-configuration=2G name-format=prefix-identity name-prefix=2G +add action=create-dynamic-enabled hw-supported-modes=an,ac,a \ + master-configuration=5G name-format=prefix-identity name-prefix=5G +add action=create-dynamic-enabled disabled=yes hw-supported-modes=ac,an,a \ + master-configuration=2G name-format=prefix-identity name-prefix=5ghz-ac +add action=create-dynamic-enabled disabled=yes hw-supported-modes=an \ + master-configuration=5G name-format=prefix-identity name-prefix=5ghz-an +/certificate settings +set crl-store=system +/container config +set layer-dir=/sata1/docker/layers memory-high=200.0MiB memory-max=4096.0MiB \ + registry-url=https://registry-1.docker.io tmpdir=/sata1/tmp username=\ + amsternl +/container envs +add key=AWG_CONFIG list=wg2awg-env value=/etc/wg2awg/wg2awg.conf +add key=AWG_LISTEN list=wg2awg-env value=:44044 +add key=AWG_MODE list=wg2awg-env value=client +add key=AWG_REMOTE list=wg2awg-env value=109.107.177.79 +/container mounts +add dst=/etc/wg2awg/wg2awg.conf list=wg2awg-env mode=ro src=\ + /sata1/mounts/wg2awg/wg2awg.conf +/ip smb +set enabled=no +/interface bridge port +add bridge=Bridge-LAN interface=*136 +add bridge=Bridge-LAN interface=ether1 +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN wan-interface-list=WAN +/interface list member +add interface=ether1 list=WAN +add interface=Bridge-LAN list=LAN +/interface wifi cap +set discovery-interfaces=*DF +/interface wifi capsman +set package-path=/tmpfs/capsman-packages upgrade-policy=none +/interface wireguard peers +add allowed-address=0.0.0.0/0 client-allowed-address=::/0 comment=\ + "Peer for MikroMaster connection" endpoint-address=10.30.30.81 \ + endpoint-port=33033 interface=MASTER name=MASTER persistent-keepalive=10s \ + public-key="zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4=" +/ip address +add address=10.30.30.10/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.10.0.2 interface=MASTER network=10.10.0.0 +/ip dhcp-client +add disabled=yes interface=ether1 name=client1 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set disabled=yes interface=*3 lease-script=\ + lease-script lease-time=10m name=nucDHCP server-address=10.30.30.10 +/ip dns +set allow-remote-requests=yes doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=10.30.30.33,109.107.177.79 \ + verify-doh-cert=yes +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip route +add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ + 10.30.30.81 routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set reverse-proxy disabled=yes +set ssh port=2222 +set www-ssl port=4443 +set api-ssl disabled=yes +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \ + webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=*3 type=external +add interface=*B5 type=internal +/ipv6 firewall address-list +add address=2400:cb00::/32 list=CLOUDFLARE-IP-Address +add address=2606:4700::/32 list=CLOUDFLARE-IP-Address +add address=2803:f800::/32 list=CLOUDFLARE-IP-Address +add address=2405:b500::/32 list=CLOUDFLARE-IP-Address +add address=2405:8100::/32 list=CLOUDFLARE-IP-Address +add address=2a06:98c0::/29 list=CLOUDFLARE-IP-Address +add address=2c0f:f248::/32 list=CLOUDFLARE-IP-Address +/special-login +add port=serial0 +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system identity +set name=MikroNUC +/system note +set show-at-login=no +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes +/system ntp client servers +add address=10.30.30.81 +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +/system scheduler +add comment="Every Day Set Global Environment Variables" disabled=yes name=\ + AM-SetGlobalEnv on-event=\ + "/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" disabled=yes interval=1d \ + name=AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Fake Bridges" disabled=yes interval=1d name=\ + mod/AM-IPbridge on-event="/system/script/run mod/AM-IPbridge;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Telegram Chat Bot" disabled=yes interval=30s name=mod/AM-TG-Bot \ + on-event="/system/script/run mod/AM-TG-Bot;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment=\ + "Every 7 Day Check For Update and Backup send notification to EMail." \ + disabled=yes interval=1w name=AM-Backup-UpdateEmail on-event=\ + "/system/script { run AM-Backup-UpdateEmail; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-06-25 start-time=03:41:27 +/tool e-mail +set certificate-verification=no from=MikroNUC port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/user aaa +set accounting=no diff --git a/MikroNUC/history/20260710/20260710122001-Diff-Config.rsc b/MikroNUC/history/20260710/20260710122001-Diff-Config.rsc new file mode 100644 index 0000000..7f05d76 --- /dev/null +++ b/MikroNUC/history/20260710/20260710122001-Diff-Config.rsc @@ -0,0 +1,3 @@ +5475a5476,5477 +> /system gps +> set set-system-time=yes -- 2.52.0