#                   version: 6.49.18 (long-term)
#          factory-software: 6.46.3
#              total-memory: 256.0MiB
#                       cpu: MIPS 1004Kc V2.15
#                 cpu-count: 4
#           total-hdd-space: 16.0MiB
#         architecture-name: mmips
#                board-name: hEX
#                  platform: MikroTik
#   installed-version: 6.49.18
# Flags: U - undoable, R - redoable, F - floating-undo
#   ACTION                                   BY               POLICY
# U changed script settings                  iper             write
# U changed script settings                  iper             write
# U log action changed                       iper             write
# 
# software id = PVXC-3L44
#
# model = RB750Gr3
# serial number = HG809QSKSPJ
/interface bridge
add name=br0
/interface ethernet
set [ find default-name=ether1 ] name=ether1-uplink-ultranet
set [ find default-name=ether2 ] name=ether2-to-server-aurin
set [ find default-name=ether5 ] name=ether5-to-sw-atm
/interface vlan
add interface=ether5-to-sw-atm name=vlan4-gerencia-atm vlan-id=4
add interface=ether1-uplink-ultranet name=vlan2000-link-ultranet vlan-id=2000
/interface pppoe-client
add add-default-route=yes disabled=no interface=vlan2000-link-ultranet name=pppoe-out1 password=al2025 use-peer-dns=yes user=auryn.ltda.vda
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool0 ranges=201.201.201.100-201.201.201.200
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=br0 lease-time=1h name=dhcp1
/snmp community
set [ find default=yes ] name=ipermonitor
/system logging action
add name=iper remote=45.163.13.106 remote-port=8514 src-address=177.37.81.99 target=remote
/interface bridge port
add bridge=br0 interface=ether2-to-server-aurin
add bridge=br0 interface=ether3
add bridge=br0 interface=ether4
/ip neighbor discovery-settings
set discover-interface-list=all
/ip address
add address=192.168.50.249/24 interface=vlan4-gerencia-atm network=192.168.50.0
add address=201.201.201.1/24 interface=br0 network=201.201.201.0
/ip dhcp-server lease
add address=201.201.201.200 client-id=1:e0:7:1b:f8:8e:d3 mac-address=E0:07:1B:F8:8E:D3 server=dhcp1
add address=201.201.201.198 client-id=ff:b6:22:f:eb:0:2:0:0:ab:11:c2:68:f:e6:a3:89:5c:89 mac-address=1C:98:EC:16:DE:18 server=dhcp1
/ip dhcp-server network
add address=201.201.201.0/24 gateway=201.201.201.1
/ip firewall address-list
add address=92.255.85.0/24 list=block
add address=52.67.199.51 list=src-ssh-ok
add address=177.75.161.164 list=src-ssh-ok
add address=177.75.160.206 list=src-ssh-ok
/ip firewall filter
add action=fasttrack-connection chain=forward connection-state=established,related
/ip firewall nat
add action=dst-nat chain=dstnat dst-address=177.37.81.99 dst-port=8001 protocol=tcp to-addresses=201.201.201.200 to-ports=443
add action=dst-nat chain=dstnat dst-address=177.37.81.99 dst-port=22 protocol=tcp src-address-list=src-ssh-ok to-addresses=201.201.201.198
add action=dst-nat chain=dstnat dst-address=177.37.81.99 dst-port=9100 protocol=tcp src-address=52.25.193.58 to-addresses=201.201.201.198
add action=dst-nat chain=dstnat dst-address=177.37.81.99 dst-port=9104 protocol=tcp src-address=52.25.193.58 to-addresses=201.201.201.198
add action=dst-nat chain=dstnat dst-address=177.37.81.99 dst-port=17990 protocol=tcp src-address=186.209.207.16 to-addresses=201.201.201.200
add action=dst-nat chain=dstnat dst-address=177.37.81.99 dst-port=80 protocol=tcp to-addresses=201.201.201.198
add action=dst-nat chain=dstnat dst-address=177.37.81.99 dst-port=443 protocol=tcp to-addresses=201.201.201.198
add action=dst-nat chain=dstnat dst-address=177.37.81.99 dst-port=8090 protocol=tcp to-addresses=201.201.201.198
add action=dst-nat chain=dstnat dst-address=177.37.81.99 dst-port=4434 protocol=tcp to-addresses=201.201.201.198
add action=dst-nat chain=dstnat dst-address=177.37.81.99 dst-port=4435 protocol=tcp to-addresses=201.201.201.198
add action=dst-nat chain=dstnat dst-address=177.37.81.99 dst-port=4436 protocol=tcp to-addresses=201.201.201.198
add action=dst-nat chain=dstnat dst-address=177.37.81.99 dst-port=4437 protocol=tcp to-addresses=201.201.201.198
add action=dst-nat chain=dstnat dst-address=177.37.81.99 dst-port=8443 protocol=tcp to-addresses=201.201.201.198
add action=dst-nat chain=dstnat dst-address=177.37.81.99 dst-port=8443 protocol=udp to-addresses=201.201.201.198
add action=dst-nat chain=dstnat dst-address=177.37.81.99 dst-port=80 protocol=udp to-addresses=201.201.201.198
add action=dst-nat chain=dstnat dst-address=177.37.81.99 dst-port=443 protocol=udp to-addresses=201.201.201.198
add action=dst-nat chain=dstnat dst-address=177.37.81.99 dst-port=8161 protocol=udp to-ports=161
add action=masquerade chain=srcnat out-interface=pppoe-out1 src-address=201.201.201.0/24
/ip firewall raw
add action=drop chain=prerouting src-address-list=block
/ip route
add distance=100 gateway=192.168.50.1
/ip service
set telnet disabled=yes port=2300
set ftp disabled=yes
set www disabled=yes port=8080
set ssh port=2200
set api disabled=yes
set winbox port=8293
set api-ssl disabled=yes
/snmp
set contact=noc@iper.net.br enabled=yes location=br-sc-lgs
/system clock
set time-zone-name=America/Sao_Paulo
/system identity
set name=atm-router-aurin-lages
/system logging
add action=iper topics=info,!firewall
/system scheduler
add interval=1d name=script_backup_email on-event=script_backup_email policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-date=jan/01/1970 start-time=03:30:00
add interval=1d name=script_backup_ftp on-event=script_backup_ftp policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-date=jan/01/1970 start-time=03:00:00
/system script
add dont-require-permissions=no name=script_backup_ftp owner=iper policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":log info \"Iniciado Backup FTP\"\n\n:local ident [/system identity get name]\n:local rawdata [/system clock get date]\n\n:local data \"\"\n:for i from=0 to=([:len \$rawdata] - 1) do={\n    :local char [:pick \$rawdata \$i (\$i + 1)]\n    :if (\$char = \"/\") do={\n        :set char \"-\"\n    }\n    :set data (\$data . \$char)\n}\n\n:local arquivo (\$ident . \"-\" . \$data . \".rsc\")\n\n/export file=backup-ftp.rsc\n\n/tool fetch address=45.163.13.106 \\\n    user=bkp.atm \\\n    password=atm.bkp \\\n    mode=ftp \\\n    upload=yes \\\n    src-path=backup-ftp.rsc \\\n    dst-path=\$arquivo\n\n:log info \"Terminado Backup FTP\"\n"
add dont-require-permissions=no name=script_backup_email owner=iper policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":log info \"Iniciando Backup Email\"\n\n:local ident [/system identity get name]\n:local rawdata [/system clock get date]\n\n:local data \"\"\n:for i from=0 to=([:len \$rawdata] - 1) do={\n    :local char [:pick \$rawdata \$i (\$i + 1)]\n    :if (\$char = \"/\") do={\n        :set char \"-\"\n    }\n    :set data (\$data . \$char)\n}\n\n:local name (\$ident . \"-\" . \$data)\n\n/export file=backup-email.rsc\n\n/tool e-mail send \\\n    to=\"bkp.rb@iper.net.br\" \\\n    subject=\$ident \\\n    body=\$name \\\n    file=\"backup-email.rsc\"\n\n:log info \"Terminado Backup Email\"\n"
/tool e-mail
set address=45.163.12.11 from=envia.bkp@iper.net.br password=Iper@2022 port=587 start-tls=yes user=envia.bkp@iper.net.br