# sep/11/2016 16:56:09 by RouterOS 6.23
# software id = SKZ4-RI2D
#
/interface bridge
add name=bridge1
/interface wireless
set [ find default-name=wlan1 ] disabled=no l2mtu=2290 mode=ap-bridge ssid=evil
/interface ethernet
set [ find default-name=ether1 ] mac-address=4C:5E:0C:F8:BD:96
set [ find default-name=ether2 ] mac-address=4C:5E:0C:F8:BD:97
set [ find default-name=ether3 ] mac-address=4C:5E:0C:F8:BD:98
set [ find default-name=ether4 ] mac-address=4C:5E:0C:F8:BD:99
set [ find default-name=ether5 ] mac-address=4C:5E:0C:F8:BD:9A
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] login-by=mac,cookie,mac-cookie mac-auth-password=testpassword \
    use-radius=yes
add hotspot-address=192.168.88.1 login-by=mac,cookie,mac-cookie mac-auth-password=\
    testpassword name=hsprof1 use-radius=yes
/ip hotspot user profile
set [ find default=yes ] add-mac-cookie=no idle-timeout=6h session-timeout=6h \
    shared-users=unlimited
/ip pool
add name=hs-pool-7 ranges=192.168.88.100-192.168.88.254
/ip dhcp-server
add address-pool=hs-pool-7 disabled=no interface=bridge1 lease-time=1h name=dhcp1
/ip hotspot
add address-pool=hs-pool-7 disabled=no interface=bridge1 name=hotspot1 profile=hsprof1
/interface l2tp-client
add add-default-route=no allow=pap,chap,mschap1,mschap2 connect-to=51.254.189.14 \
    dial-on-demand=no disabled=no keepalive-timeout=60 max-mru=1450 max-mtu=1450 mrru=\
    disabled name=l2tp-out1 password=simon1 profile=default-encryption user=simon1
/interface bridge port
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether5
add bridge=bridge1 interface=wlan1
/ip address
add address=192.168.1.2/24 disabled=yes interface=ether1 network=192.168.1.0
add address=192.168.88.1/24 interface=bridge1 network=192.168.88.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment="hotspot network" gateway=192.168.88.1
/ip dns
set servers=8.8.8.8
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" \
    disabled=yes
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" \
    disabled=yes
add action=masquerade chain=srcnat disabled=yes out-interface=ether1
add action=masquerade chain=srcnat comment="masquerade hotspot network" out-interface=\
    ether1 src-address=192.168.88.0/24
/ip hotspot user
add comment="counters and limits for trial users" name=default-trial
add name=admin
/ip hotspot walled-garden
add comment="place hotspot rules here" disabled=yes
add comment="place hotspot rules here" disabled=yes
add comment="place hotspot rules here" disabled=yes
add comment="place hotspot rules here" disabled=yes
add dst-host=*akamaihd*
add dst-host=*twimg*
add dst-host=*twitter*
add dst-host=*facebook*
add dst-host=*google*
add dst-host=*linkedin*
add dst-host=*instagram*
add dst-host=*googleapis*
add dst-host=*fontawesome*
add dst-host=*cloudflare*
/ip hotspot walled-garden ip
add action=accept disabled=no dst-host=fbcdn-profile-a.akamaihd.net
add action=accept disabled=no dst-host=.*-edge-chat.facebook.com
add action=accept disabled=no dst-host=fbcdn-profile-a.akamaihd.net
add action=accept disabled=no dst-address=192.168.77.0/24
add action=accept disabled=no dst-host=example.com
add action=accept disabled=no dst-host=astrofi.com
add action=accept disabled=no dst-host=astrofi.clic.agency/login
add action=accept disabled=no dst-host=example.com
add action=accept disabled=no dst-host=www.twitter.com
add action=accept disabled=no dst-host=*twitter.com
add action=accept disabled=no dst-host=*twimg.com
add action=accept disabled=no dst-host=*abs.twitter.com
add action=accept disabled=no dst-host=*twitter.com*
/ip service
set www-ssl disabled=no
/radius
add address=104.155.113.199 secret=secret service=hotspot timeout=2s
/system identity
set name=Clic.Agency
/system logging
add topics=dhcp,debug
/system scheduler
add interval=15s name=cronjob1 on-event="/ip hotspot host remove [find authorized=no]" \
    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive start-time=\
    startup