Alexey Dmitriev

powershell -Command "[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; (new-object net.webclient).DownloadString('https://api.telegram.org/bot9872429879724:sdfsfdsfedfgdfgrfeve/sendMessage?chat_id=mydididididid&text=mytext')"

PROGRAM
The program line gives the name of a program to be run when
mdadm --monitor detects potentially interesting events on any of
the arrays that it is monitoring. This program gets run with
two or three arguments, they being the Event, the md device, and
possibly the related component device.

There should only be one program line and it should be give only
one program.

$ mdadm --monitor --help
...
  --program=    -p   : Program to run when an event is detected
  --alert=           : same as --program

/ip firewall mangle add action=mark-routing chain=prerouting comment="To AWS" src-address=<Mashine IP> new-routing-mark=aws_route passthrough=no

/ip route add comment="To AWS" distance=5 gateway=<L2TP_AWS_IP> routing-mark=aws_route

[sshd]

# To use more aggressive sshd modes set filter parameter "mode" in jail.local:
# normal (default), ddos, extra or aggressive (combines all).
# See "tests/files/logs/sshd" or "filter.d/sshd.conf" for usage example and details.
#mode   = normal
port    = ssh
logpath = %(sshd_log)s
backend = %(sshd_backend)s