МТС. ETHERNET. Обсуждение.

/system scheduler
add interval=4w2d name=byfly_local_monthly on-event=byfly_local policy=read,write,policy,test,password,sniff,sensitive start-date=dec/18/2016 start-time=01:00:00
add interval=4w2d name=byfly_bynets_monthly on-event=byfly_bynets policy=read,write,policy,test,password,sniff,sensitive start-date=dec/18/2016 start-time=01:05:00

/system script
add name=byfly_local owner=admin policy=read,write,policy,test,password,sniff,sensitive source="## Generic IP address list input\
\n## Based on a script written by Sam Norris, ChangeIP.com 2008\
\n# lpref = prefix; llist = suffix (and the name of file to fetch)\
\n:local lpref \"byfly\";\
\n:local lname \"local\";\
\n:local llist \"\$lpref_\$lname\";\
\n:local lfile \"\$lname.txt\";\
\n\
\n/tool fetch address=www.datacenter.by host=www.datacenter.by mode=http src-path=\"ip/\$lfile\"\
\n:delay 10 ;\
\n:if ( [/file get [/file find name=\"\$lfile\"] size] > 0 ) do={\
\n# Remove existing addresses from the current Address list\
\n/ip firewall address-list remove [/ip firewall address-list find list=\$llist]\
\n\
\n:local time [/system clock get time] ;\
\n:local date [/system clock get date] ;\
\n:local content [/file get [/file find name=\$lfile] contents] ;\
\n# add new line symbol\
\n:set content ( \"\$content\\n\" );\
\n:local contentLen [ :len \$content ] ;\
\n\
\n:local lineEnd 0;\
\n:local line \"\";\
\n:local lastEnd 0;\
\n:local counter 0;\
\n\
\n:do {\
\n :set lineEnd [:find \$content \"\\n\" \$lastEnd ] ;\
\n :set line [:pick \$content \$lastEnd \$lineEnd] ;\
\n#If the line doesn't start with a hash then process and add to the list\
\n#If we start over the beginning, skip!\
\n :if ( \$lineEnd < \$lastEnd) do={ :set lineEnd ( \$contentLen - 1 ); :set lastEnd ( \$contentLen ); :set counter 1234567890; } else { :set lastEnd ( \$lineEnd + 1 ); }\
\n :if ( [:pick \$line 0 1] != \"#\" && [:pick \$line 0 1] != \"\\n\" && \$counter != 1234567890) do={\
\n :set lastEnd ( \$lineEnd + 1 ) ;\
\n\
\n :local entry [:pick \$line 0 (\$lineEnd -0) ]\
\n :if ( [:len \$entry ] > 0 ) do={\
\n :set counter ( \$counter + 1 ) ;\
\n /log info \"address list \$llist entry \$counter added: \$entry\"\
\n /ip firewall address-list add list=\$llist address=\"\$entry\" comment=\"\$date \$time \$entry\"\
\n }\
\n }\
\n} while (\$lineEnd+1 < \$contentLen)\
\n# CUSTOM entries here\
\n#/ip firewall address-list add list=\$llist address=\"1.1.1.1/32\" comment=\"\$date \$time host via byfly is faster\"\
\n}"
add name=byfly_bynets owner=admin policy=read,write,policy,test,password,sniff,sensitive source="## Generic IP address list input\
\n## Based on a script written by Sam Norris, ChangeIP.com 2008\
\n# lpref = prefix; llist = suffix (and the name of file to fetch)\
\n:local lpref \"byfly\";\
\n:local lname \"bynets\";\
\n:local llist \"\$lpref_\$lname\";\
\n:local lfile \"\$lname.txt\";\
\n\
\n/tool fetch address=www.datacenter.by host=www.datacenter.by mode=http src-path=\"ip/\$lfile\"\
\n:delay 10 ;\
\n:if ( [/file get [/file find name=\"\$lfile\"] size] > 0 ) do={\
\n# Remove existing addresses from the current Address list\
\n/ip firewall address-list remove [/ip firewall address-list find list=\$llist]\
\n\
\n:local time [/system clock get time] ;\
\n:local date [/system clock get date] ;\
\n:local content [/file get [/file find name=\$lfile] contents] ;\
\n# add new line symbol\
\n:set content ( \"\$content\\n\" );\
\n:local contentLen [ :len \$content ] ;\
\n\
\n:local lineEnd 0;\
\n:local line \"\";\
\n:local lastEnd 0;\
\n:local counter 0;\
\n\
\n:do {\
\n :set lineEnd [:find \$content \"\\n\" \$lastEnd ] ;\
\n :set line [:pick \$content \$lastEnd \$lineEnd] ;\
\n#If the line doesn't start with a hash then process and add to the list\
\n#If we start over the beginning, skip!\
\n :if ( \$lineEnd < \$lastEnd) do={ :set lineEnd ( \$contentLen - 1 ); :set lastEnd ( \$contentLen ); :set counter 1234567890; } else { :set lastEnd ( \$lineEnd + 1 ); }\
\n :if ( [:pick \$line 0 1] != \"#\" && [:pick \$line 0 1] != \"\\n\" && \$counter != 1234567890) do={\
\n :set lastEnd ( \$lineEnd + 1 ) ;\
\n\
\n :local entry [:pick \$line 0 (\$lineEnd -0) ]\
\n :if ( [:len \$entry ] > 0 ) do={\
\n :set counter ( \$counter + 1 ) ;\
\n /log info \"address list \$llist entry \$counter added: \$entry\"\
\n /ip firewall address-list add list=\$llist address=\"\$entry\" comment=\"\$date \$time \$entry\"\
\n }\
\n }\
\n} while (\$lineEnd+1 < \$contentLen)\
\n# CUSTOM entries here\
\n#/ip firewall address-list add list=\$llist address=\"1.1.1.1/32\" comment=\"\$date \$time host via byfly is faster\"\
\n}"

add action=mark-routing chain=prerouting comment=byfly_bynets dst-address-list=byfly_bynets dst-address-type=!local new-routing-mark=byfly_bynets passthrough=\
yes
add action=mark-routing chain=prerouting comment=byfly_local dst-address-list=byfly_local dst-address-type=!local new-routing-mark=byfly_local passthrough=yes
add action=mark-routing chain=prerouting comment=byfly_exclude dst-address-list=byfly_exclude dst-address-type=!local new-routing-mark=main passthrough=yes
add action=mark-routing chain=output comment=byfly_local dst-address-list=byfly_local dst-address-type=!local new-routing-mark=byfly_local passthrough=yes
add action=mark-routing chain=output comment=byfly_bynets dst-address-list=byfly_bynets dst-address-type=!local new-routing-mark=byfly_bynets passthrough=yes
add action=mark-routing chain=output comment=byfly_exclude dst-address-list=byfly_exclude dst-address-type=!local new-routing-mark=main passthrough=yes