diff --git a/AGENTS.md b/AGENTS.md
index 2001ee5..f89b90a 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -94,11 +94,11 @@ vps-tracker/
 
 Ручная проверка с VPS: `curl -fsSL https://vt.shnt.top/cc | bash` (тот же контейнер, Traefik dual Host).
 Раз в сутки: `curl -fsSL https://vt.shnt.top/cc | bash -s -- --daily` (cron, свежий HMAC-токен на каждый запуск).
-MikroTik 7.22+: `:global vtIface "ether1"; /tool fetch url="https://vt.shnt.top/cc.rsc" dst-path=vt-cc.rsc; /import file-name=vt-cc.rsc` (ежедневно: `?daily=1`; пробы через policy routing + `src-address` интерфейса; при необходимости `:global vtGw`).
+MikroTik 7.22+: `:global vt-srcIp "1.2.3.4"; /tool fetch url="https://vt.shnt.top/cc.rsc" dst-path=vt-cc.rsc; /import file-name=vt-cc.rsc` (ежедневно: `?daily=1`; все пробы через `src-address` этого IP).
 
 - **Vendor:** `apps/api/scripts/censorcheck/censorcheck.sh` (pin SHA `12c5839`, MIT)
 - **Launcher:** `GET /cc` минтит HMAC ingest-токен (TTL 20 мин); по `/etc/os-release` ставит `jq`/`dig`/`column` без prompt; прогресс-бар в stderr; `GET /cc/vendor` — скрипт (LF); `--daily` / `--remove-daily`
-- **MikroTik:** `GET /cc.rsc` — RouterOS-скрипт (HTTPS GET, без DPI); обязателен `:global vtIface`; `?daily=1` / `?remove=daily`; scheduler `vt-cc`
+- **MikroTik:** `GET /cc.rsc` — RouterOS-скрипт (HTTPS GET, без DPI); обязателен `:global vt-srcIp`; `?daily=1` / `?remove=daily`; scheduler `vt-cc`
 - **Ingest:** `POST /api/integrations/censorcheck/runs` (без portal JWT)
 - **UI:** `/blocking` — текущие прогоны и история, группировка VPS / сервис
 - Env: `CENSORCHECK_INGEST_SECRET`, `CENSORCHECK_PUBLIC_URL`, `VPS_LAUNCHER_DOMAIN`
@@ -107,11 +107,11 @@ MikroTik 7.22+: `:global vtIface "ether1"; /tool fetch url="https://vt.shnt.top/
 
 Ручная проверка с VPS: `curl -fsSL https://vt.shnt.top/ic | bash`.
 Раз в сутки: `curl -fsSL https://vt.shnt.top/ic | bash -s -- --daily`.
-MikroTik 7.22+: `:global vtIface "ether1"; /tool fetch url="https://vt.shnt.top/ic.rsc" dst-path=vt-ic.rsc; /import file-name=vt-ic.rsc` (`?daily=1`; пробы через тот же `vtIface` и его шлюз; при необходимости `:global vtGw`).
+MikroTik 7.22+: `:global vt-srcIp "1.2.3.4"; /tool fetch url="https://vt.shnt.top/ic.rsc" dst-path=vt-ic.rsc; /import file-name=vt-ic.rsc` (`?daily=1`; пробы через тот же `vt-srcIp`).
 
 - **Vendor:** `apps/api/scripts/ipregion/ipregion.sh` (pin SHA `7d1c25c`, MIT, [vernette/ipregion](https://github.com/vernette/ipregion))
 - **Launcher:** `GET /ic` минтит HMAC ingest-токен (тот же `CENSORCHECK_INGEST_SECRET`); `GET /ic/vendor` — pinned скрипт (LF); `--daily` / `--remove-daily`
-- **MikroTik:** `GET /ic.rsc` — primary GeoIP JSON + Cloudflare CDN; обязателен `:global vtIface`; scheduler `vt-ic`
+- **MikroTik:** `GET /ic.rsc` — primary GeoIP JSON + Cloudflare CDN; обязателен `:global vt-srcIp`; scheduler `vt-ic`
 - **Ingest:** `POST /api/integrations/ipregion/runs` (без portal JWT)
 - **UI:** `/geo` — матрица ISO-стран VPS × сервисы (primary / custom / cdn)
 
diff --git a/apps/api/scripts/censorcheck/launcher.rsc b/apps/api/scripts/censorcheck/launcher.rsc
index c49b12a..83a1ae4 100644
--- a/apps/api/scripts/censorcheck/launcher.rsc
+++ b/apps/api/scripts/censorcheck/launcher.rsc
@@ -1,17 +1,14 @@
 # VPS Tracker — blocking launcher for RouterOS 7.22+
-# First run: :global vtIface "ether1"; /tool fetch url="__VT_API_URL__/cc.rsc" dst-path=vt-cc.rsc; /import file-name=vt-cc.rsc
-# Optional: :global vtGw "x.x.x.x" if the WAN gateway is not DHCP / not .1 of the subnet.
+# First run: :global vt-srcIp "1.2.3.4"; /tool fetch url="__VT_API_URL__/cc.rsc" dst-path=vt-cc.rsc; /import file-name=vt-cc.rsc
 # HTTPS GET only (no DPI/SNI). Ingest: POST /api/integrations/censorcheck/runs
 
 :local vtApi "__VT_API_URL__"
 :local vtToken "__VT_INGEST_TOKEN__"
 :local vtDaily "__VT_DAILY__"
 :local vtRemove "__VT_REMOVE_DAILY__"
-:local launcherVer "ros-3"
+:local launcherVer "ros-4"
 :local schedName "vt-cc"
 :local dstFile "vt-cc.rsc"
-:local rtName "vt-cc"
-:local rtComment "vt-cc-probe"
 
 :local ver [/system resource get version]
 :local dot [:find $ver "."]
@@ -32,142 +29,22 @@
 
 :if ($vtRemove = "yes") do={
   :do { /system scheduler remove [find name=$schedName] } on-error={}
-  :do { /ip firewall mangle remove [find comment=$rtComment] } on-error={}
-  :do { /ip firewall nat remove [find comment=$rtComment] } on-error={}
-  :do { /routing rule remove [find comment=$rtComment] } on-error={}
-  :do { /ip route remove [find comment=$rtComment] } on-error={}
   :put ("Ежедневная проверка снята (" . $schedName . ")")
 } else={
 
 :put ("censorcheck launcher " . $launcherVer . " (RouterOS)")
 
-:global vtIface
-:if (([:typeof $vtIface] != "str") or ([:len $vtIface] = 0)) do={
-  :put "Задайте интерфейс и повторите импорт:"
-  :put ":global vtIface \"ether1\""
-  :put "Интерфейсы:"
-  /interface print
-  :error "vtIface не задан"
-}
-:if ([:len [/interface find where name=$vtIface]] = 0) do={
-  :put "Интерфейсы:"
-  /interface print
-  :error ("Нет интерфейса " . $vtIface)
-}
-
-:local srcIp ""
-:local addrRaw
-:local slash
-:local pfxLen 0
-:local net
-:foreach a in=[/ip address find where interface=$vtIface] do={
-  :if ([:len $srcIp] = 0) do={
-    :set addrRaw [/ip address get $a address]
-    :set slash [:find $addrRaw "/"]
-    :if ([:typeof $slash] != "nil") do={
-      :set srcIp [:pick $addrRaw 0 $slash]
-      :set pfxLen [:tonum [:pick $addrRaw ($slash + 1) [:len $addrRaw]]]
-    } else={
-      :set srcIp $addrRaw
-    }
-  }
-}
-:if ([:len $srcIp] = 0) do={
-  :error ("Нет IPv4 на интерфейсе " . $vtIface)
-}
-:put ("интерфейс: " . $vtIface . " src=" . $srcIp)
-
-:local gw ""
-:local itype ""
-:local igw
-:local needle
-:local fnd
-:local gwy
-:local failMsg ""
-:local after
-:do { /ip firewall mangle remove [find comment=$rtComment] } on-error={}
-:do { /ip firewall nat remove [find comment=$rtComment] } on-error={}
-:do { /routing rule remove [find comment=$rtComment] } on-error={}
-:do { /ip route remove [find comment=$rtComment] } on-error={}
-:do { /routing table add name=$rtName fib } on-error={}
-:if ([:len [/ip dhcp-client find where interface=$vtIface]] > 0) do={
-  :do { :set gw [/ip dhcp-client get [find interface=$vtIface] gateway] } on-error={}
-}
-:if ([:len $gw] = 0) do={
-  :foreach rte in=[/ip route find where active] do={
-    :if ([:len $gw] = 0) do={
-      :set igw [/ip route get $rte immediate-gw]
-      :if ([:typeof $igw] = "str") do={
-        :set needle ("%" . $vtIface)
-        :set fnd [:find $igw $needle]
-        :if ([:typeof $fnd] != "nil") do={
-          :set after ($fnd + [:len $needle])
-          :if (($after = [:len $igw]) or ([:pick $igw $after ($after + 1)] = " ")) do={
-            :set gw [:pick $igw 0 $fnd]
-          }
-        }
-      }
-      :if ([:len $gw] = 0) do={
-        :set gwy [/ip route get $rte gateway]
-        :if (([:typeof $gwy] = "str") and ($gwy = $vtIface)) do={
-          :set gw $vtIface
-        }
-      }
-    }
-  }
-}
-:if ([:len $gw] = 0) do={
-  :do { :set itype [/interface get [find name=$vtIface] type] } on-error={}
-  :if (($itype = "pppoe-out") or ($itype = "pptp-out") or ($itype = "l2tp-out") or ($itype = "sstp-out") or ($itype = "ovpn-out") or ($itype = "wireguard")) do={
-    :set gw $vtIface
-  }
-}
-:if (([:len $gw] = 0) and ($pfxLen > 0) and ($pfxLen <= 30)) do={
-  :foreach a in=[/ip address find where interface=$vtIface] do={
-    :if ([:len $gw] = 0) do={
-      :do {
-        :set net [/ip address get $a network]
-        :set gw [:tostr ([:toip $net] + 1)]
-      } on-error={}
-    }
-  }
-}
-:global vtGw
-:if (([:typeof $vtGw] = "str") and ([:len $vtGw] > 0)) do={
-  :set gw $vtGw
-}
-:if ([:len $gw] = 0) do={
-  :set gw $vtIface
-}
-:put ("шлюз: " . $gw)
-:do {
-  /ip route add dst-address=0.0.0.0/0 gateway=$gw routing-table=$rtName pref-src=$srcIp comment=$rtComment
-} on-error={
-  :do {
-    /ip route add dst-address=0.0.0.0/0 gateway=($gw . "%" . $vtIface) routing-table=$rtName pref-src=$srcIp comment=$rtComment
-  } on-error={
-    :set failMsg ("Не удалось добавить маршрут через " . $gw)
-  }
-}
-:if ([:len $failMsg] = 0) do={
-  :do {
-    /ip firewall mangle add chain=output action=mark-routing new-routing-mark=$rtName src-address=$srcIp passthrough=no comment=$rtComment place-before=0
-  } on-error={
-    /ip firewall mangle add chain=output action=mark-routing new-routing-mark=$rtName src-address=$srcIp passthrough=no comment=$rtComment
-  }
-  :do {
-    /routing rule add src-address=($srcIp . "/32") action=lookup-only-in-table table=$rtName comment=$rtComment
-  } on-error={}
-  :do {
-    /ip firewall nat add chain=srcnat action=accept src-address=$srcIp comment=$rtComment place-before=0
-  } on-error={
-    /ip firewall nat add chain=srcnat action=accept src-address=$srcIp comment=$rtComment
-  }
+:global "vt-srcIp"
+:if (([:typeof $"vt-srcIp"] != "str") or ([:len $"vt-srcIp"] = 0)) do={
+  :put "Задайте исходный IP и повторите импорт:"
+  :put ":global vt-srcIp \"1.2.3.4\""
+  :error "vt-srcIp не задан"
 }
+:local srcIp $"vt-srcIp"
+:put ("vt-srcIp: " . $srcIp)
 
 :local r
 :local publicIp ""
-:if ([:len $failMsg] = 0) do={
 :do {
   :set r [/tool fetch url="https://api.ipify.org" src-address=$srcIp output=user as-value]
   :if (($r->"status") = "finished") do={
@@ -191,8 +68,8 @@
   :if ([:typeof $lf] != "nil") do={ :set publicIp [:pick $publicIp 0 $lf] }
 }
 :if ([:len $publicIp] = 0) do={
-  :set failMsg "Не удалось определить публичный IP"
-} else={
+  :error "Не удалось определить публичный IP"
+}
 
 :local hoster ""
 :do {
@@ -210,9 +87,6 @@
 
 :local runId ("mt-" . [:rndstr length=16])
 :put ("probe IP: " . $publicIp)
-:if ($publicIp != $srcIp) do={
-  :put ("внимание: probe IP " . $publicIp . " != src " . $srcIp)
-}
 :if ([:len $hoster] > 0) do={ :put ("хостер: " . $hoster) }
 :put ("runId: " . $runId)
 :put "Проверяю сайты (HTTPS GET, без DPI)..."
@@ -301,7 +175,7 @@
   :if ($hour < 10) do={ :set hh ("0" . $hour) }
   :if ($minute < 10) do={ :set mm ("0" . $minute) }
   :local startTime ($hh . ":" . $mm . ":00")
-  :local ev (":global vtIface \"" . $vtIface . "\"; /tool fetch url=" . $vtApi . "/cc.rsc dst-path=" . $dstFile . "; /import file-name=" . $dstFile)
+  :local ev (":global vt-srcIp \"" . $srcIp . "\"; /tool fetch url=" . $vtApi . "/cc.rsc dst-path=" . $dstFile . "; /import file-name=" . $dstFile)
   :do { /system scheduler remove [find name=$schedName] } on-error={}
   /system scheduler add name=$schedName interval=1d start-time=$startTime on-event=$ev policy=read,write,test,policy comment="vps-tracker vt-cc"
   :put ("Ежедневная проверка: каждый день в " . $startTime . " (" . $schedName . ")")
@@ -309,13 +183,3 @@
 }
 
 }
-
-}
-
-:do { /ip firewall mangle remove [find comment=$rtComment] } on-error={}
-:do { /ip firewall nat remove [find comment=$rtComment] } on-error={}
-:do { /routing rule remove [find comment=$rtComment] } on-error={}
-:do { /ip route remove [find comment=$rtComment] } on-error={}
-:if ([:len $failMsg] > 0) do={ :error $failMsg }
-
-}
diff --git a/apps/api/scripts/ipregion/launcher.rsc b/apps/api/scripts/ipregion/launcher.rsc
index 29c3e7c..5f1910d 100644
--- a/apps/api/scripts/ipregion/launcher.rsc
+++ b/apps/api/scripts/ipregion/launcher.rsc
@@ -1,17 +1,14 @@
 # VPS Tracker — GeoIP launcher for RouterOS 7.22+
-# First run: :global vtIface "ether1"; /tool fetch url="__VT_API_URL__/ic.rsc" dst-path=vt-ic.rsc; /import file-name=vt-ic.rsc
-# Optional: :global vtGw "x.x.x.x" if the WAN gateway is not DHCP / not .1 of the subnet.
+# First run: :global vt-srcIp "1.2.3.4"; /tool fetch url="__VT_API_URL__/ic.rsc" dst-path=vt-ic.rsc; /import file-name=vt-ic.rsc
 # Primary GeoIP JSON + Cloudflare CDN. Ingest: POST /api/integrations/ipregion/runs
 
 :local vtApi "__VT_API_URL__"
 :local vtToken "__VT_INGEST_TOKEN__"
 :local vtDaily "__VT_DAILY__"
 :local vtRemove "__VT_REMOVE_DAILY__"
-:local launcherVer "ros-3"
+:local launcherVer "ros-4"
 :local schedName "vt-ic"
 :local dstFile "vt-ic.rsc"
-:local rtName "vt-ic"
-:local rtComment "vt-ic-probe"
 
 :local ver [/system resource get version]
 :local dot [:find $ver "."]
@@ -32,145 +29,25 @@
 
 :if ($vtRemove = "yes") do={
   :do { /system scheduler remove [find name=$schedName] } on-error={}
-  :do { /ip firewall mangle remove [find comment=$rtComment] } on-error={}
-  :do { /ip firewall nat remove [find comment=$rtComment] } on-error={}
-  :do { /routing rule remove [find comment=$rtComment] } on-error={}
-  :do { /ip route remove [find comment=$rtComment] } on-error={}
   :put ("Ежедневная проверка снята (" . $schedName . ")")
 } else={
 
 :put ("ipregion launcher " . $launcherVer . " (RouterOS)")
 
-:global vtIface
-:if (([:typeof $vtIface] != "str") or ([:len $vtIface] = 0)) do={
-  :put "Задайте интерфейс и повторите импорт:"
-  :put ":global vtIface \"ether1\""
-  :put "Интерфейсы:"
-  /interface print
-  :error "vtIface не задан"
-}
-:if ([:len [/interface find where name=$vtIface]] = 0) do={
-  :put "Интерфейсы:"
-  /interface print
-  :error ("Нет интерфейса " . $vtIface)
-}
-
-:local srcIp ""
-:local addrRaw
-:local slash
-:local pfxLen 0
-:local net
-:foreach a in=[/ip address find where interface=$vtIface] do={
-  :if ([:len $srcIp] = 0) do={
-    :set addrRaw [/ip address get $a address]
-    :set slash [:find $addrRaw "/"]
-    :if ([:typeof $slash] != "nil") do={
-      :set srcIp [:pick $addrRaw 0 $slash]
-      :set pfxLen [:tonum [:pick $addrRaw ($slash + 1) [:len $addrRaw]]]
-    } else={
-      :set srcIp $addrRaw
-    }
-  }
-}
-:if ([:len $srcIp] = 0) do={
-  :error ("Нет IPv4 на интерфейсе " . $vtIface)
-}
-:put ("интерфейс: " . $vtIface . " src=" . $srcIp)
-
-:local gw ""
-:local itype ""
-:local igw
-:local needle
-:local fnd
-:local gwy
-:local failMsg ""
-:local after
-:do { /ip firewall mangle remove [find comment=$rtComment] } on-error={}
-:do { /ip firewall nat remove [find comment=$rtComment] } on-error={}
-:do { /routing rule remove [find comment=$rtComment] } on-error={}
-:do { /ip route remove [find comment=$rtComment] } on-error={}
-:do { /routing table add name=$rtName fib } on-error={}
-:if ([:len [/ip dhcp-client find where interface=$vtIface]] > 0) do={
-  :do { :set gw [/ip dhcp-client get [find interface=$vtIface] gateway] } on-error={}
-}
-:if ([:len $gw] = 0) do={
-  :foreach rte in=[/ip route find where active] do={
-    :if ([:len $gw] = 0) do={
-      :set igw [/ip route get $rte immediate-gw]
-      :if ([:typeof $igw] = "str") do={
-        :set needle ("%" . $vtIface)
-        :set fnd [:find $igw $needle]
-        :if ([:typeof $fnd] != "nil") do={
-          :set after ($fnd + [:len $needle])
-          :if (($after = [:len $igw]) or ([:pick $igw $after ($after + 1)] = " ")) do={
-            :set gw [:pick $igw 0 $fnd]
-          }
-        }
-      }
-      :if ([:len $gw] = 0) do={
-        :set gwy [/ip route get $rte gateway]
-        :if (([:typeof $gwy] = "str") and ($gwy = $vtIface)) do={
-          :set gw $vtIface
-        }
-      }
-    }
-  }
-}
-:if ([:len $gw] = 0) do={
-  :do { :set itype [/interface get [find name=$vtIface] type] } on-error={}
-  :if (($itype = "pppoe-out") or ($itype = "pptp-out") or ($itype = "l2tp-out") or ($itype = "sstp-out") or ($itype = "ovpn-out") or ($itype = "wireguard")) do={
-    :set gw $vtIface
-  }
-}
-:if (([:len $gw] = 0) and ($pfxLen > 0) and ($pfxLen <= 30)) do={
-  :foreach a in=[/ip address find where interface=$vtIface] do={
-    :if ([:len $gw] = 0) do={
-      :do {
-        :set net [/ip address get $a network]
-        :set gw [:tostr ([:toip $net] + 1)]
-      } on-error={}
-    }
-  }
-}
-:global vtGw
-:if (([:typeof $vtGw] = "str") and ([:len $vtGw] > 0)) do={
-  :set gw $vtGw
-}
-:if ([:len $gw] = 0) do={
-  :set gw $vtIface
-}
-:put ("шлюз: " . $gw)
-:do {
-  /ip route add dst-address=0.0.0.0/0 gateway=$gw routing-table=$rtName pref-src=$srcIp comment=$rtComment
-} on-error={
-  :do {
-    /ip route add dst-address=0.0.0.0/0 gateway=($gw . "%" . $vtIface) routing-table=$rtName pref-src=$srcIp comment=$rtComment
-  } on-error={
-    :set failMsg ("Не удалось добавить маршрут через " . $gw)
-  }
-}
-:if ([:len $failMsg] = 0) do={
-  :do {
-    /ip firewall mangle add chain=output action=mark-routing new-routing-mark=$rtName src-address=$srcIp passthrough=no comment=$rtComment place-before=0
-  } on-error={
-    /ip firewall mangle add chain=output action=mark-routing new-routing-mark=$rtName src-address=$srcIp passthrough=no comment=$rtComment
-  }
-  :do {
-    /routing rule add src-address=($srcIp . "/32") action=lookup-only-in-table table=$rtName comment=$rtComment
-  } on-error={}
-  :do {
-    /ip firewall nat add chain=srcnat action=accept src-address=$srcIp comment=$rtComment place-before=0
-  } on-error={
-    /ip firewall nat add chain=srcnat action=accept src-address=$srcIp comment=$rtComment
-  }
+:global "vt-srcIp"
+:if (([:typeof $"vt-srcIp"] != "str") or ([:len $"vt-srcIp"] = 0)) do={
+  :put "Задайте исходный IP и повторите импорт:"
+  :put ":global vt-srcIp \"1.2.3.4\""
+  :error "vt-srcIp не задан"
 }
+:local srcIp $"vt-srcIp"
+:put ("vt-srcIp: " . $srcIp)
 
 :local r
 :local j
 :local isp
 :local org
 :local publicIp ""
-:if ([:len $failMsg] = 0) do={
 :do {
   :set r [/tool fetch url="https://api.ipify.org" src-address=$srcIp output=user as-value]
   :if (($r->"status") = "finished") do={
@@ -194,8 +71,8 @@
   :if ([:typeof $lf] != "nil") do={ :set publicIp [:pick $publicIp 0 $lf] }
 }
 :if ([:len $publicIp] = 0) do={
-  :set failMsg "Не удалось определить публичный IP"
-} else={
+  :error "Не удалось определить публичный IP"
+}
 
 :local hoster ""
 :do {
@@ -213,9 +90,6 @@
 
 :local runId ("mt-" . [:rndstr length=16])
 :put ("probe IP: " . $publicIp)
-:if ($publicIp != $srcIp) do={
-  :put ("внимание: probe IP " . $publicIp . " != src " . $srcIp)
-}
 :if ([:len $hoster] > 0) do={ :put ("хостер: " . $hoster) }
 :put ("runId: " . $runId)
 :put "Проверяю GeoIP (JSON, IPv4)..."
@@ -418,7 +292,7 @@
   :if ($hour < 10) do={ :set hh ("0" . $hour) }
   :if ($minute < 10) do={ :set mm ("0" . $minute) }
   :local startTime ($hh . ":" . $mm . ":00")
-  :local ev (":global vtIface \"" . $vtIface . "\"; /tool fetch url=" . $vtApi . "/ic.rsc dst-path=" . $dstFile . "; /import file-name=" . $dstFile)
+  :local ev (":global vt-srcIp \"" . $srcIp . "\"; /tool fetch url=" . $vtApi . "/ic.rsc dst-path=" . $dstFile . "; /import file-name=" . $dstFile)
   :do { /system scheduler remove [find name=$schedName] } on-error={}
   /system scheduler add name=$schedName interval=1d start-time=$startTime on-event=$ev policy=read,write,test,policy comment="vps-tracker vt-ic"
   :put ("Ежедневная проверка: каждый день в " . $startTime . " (" . $schedName . ")")
@@ -426,13 +300,3 @@
 }
 
 }
-
-}
-
-:do { /ip firewall mangle remove [find comment=$rtComment] } on-error={}
-:do { /ip firewall nat remove [find comment=$rtComment] } on-error={}
-:do { /routing rule remove [find comment=$rtComment] } on-error={}
-:do { /ip route remove [find comment=$rtComment] } on-error={}
-:if ([:len $failMsg] > 0) do={ :error $failMsg }
-
-}
diff --git a/apps/api/src/routes/launcher.test.ts b/apps/api/src/routes/launcher.test.ts
index baeab80..71d97d5 100644
--- a/apps/api/src/routes/launcher.test.ts
+++ b/apps/api/src/routes/launcher.test.ts
@@ -128,15 +128,15 @@ describe('GET /cc.rsc RouterOS launcher', () => {
     expect(res.body).toContain('https://vt.shnt.top')
     expect(res.body).toContain('/tool fetch')
     expect(res.body).toContain('/api/integrations/censorcheck/runs')
-    expect(res.body).toContain('ros-3')
+    expect(res.body).toContain('ros-4')
     expect(res.body).toContain(':local vtDaily "no"')
     expect(res.body).toContain(':local vtRemove "no"')
     expect(res.body).toContain('/system scheduler')
     expect(res.body).toContain('youtube.com')
-    expect(res.body).toContain(':global vtIface')
+    expect(res.body).toContain('vt-srcIp')
     expect(res.body).toContain('src-address=$srcIp')
-    expect(res.body).toContain('mark-routing')
-    expect(res.body).toContain('lookup-only-in-table')
+    expect(res.body).not.toContain('mark-routing')
+    expect(res.body).not.toContain('vtIface')
     expect(res.body).not.toContain('\r')
     expect(res.body).not.toContain('__VT_API_URL__')
     expect(res.body).not.toContain('__VT_INGEST_TOKEN__')
@@ -185,14 +185,14 @@ describe('GET /ic.rsc RouterOS launcher', () => {
     expect(res.body).toContain('https://vt.shnt.top')
     expect(res.body).toContain('/tool fetch')
     expect(res.body).toContain('/api/integrations/ipregion/runs')
-    expect(res.body).toContain('ros-3')
+    expect(res.body).toContain('ros-4')
     expect(res.body).toContain(':local vtDaily "no"')
     expect(res.body).toContain('ipinfo.io')
     expect(res.body).toContain('cloudflare cdn')
-    expect(res.body).toContain(':global vtIface')
+    expect(res.body).toContain('vt-srcIp')
     expect(res.body).toContain('src-address=$srcIp')
-    expect(res.body).toContain('mark-routing')
-    expect(res.body).toContain('lookup-only-in-table')
+    expect(res.body).not.toContain('mark-routing')
+    expect(res.body).not.toContain('vtIface')
     expect(res.body).not.toContain('\r')
     expect(res.body).not.toContain('__VT_API_URL__')
     expect(res.body).not.toContain('__VT_INGEST_TOKEN__')
diff --git a/apps/web/src/components/censorcheck/types.ts b/apps/web/src/components/censorcheck/types.ts
index 06a3255..f310dd1 100644
--- a/apps/web/src/components/censorcheck/types.ts
+++ b/apps/web/src/components/censorcheck/types.ts
@@ -59,9 +59,9 @@ export const CENSORCHECK_STATUS_LABELS: Record<string, string> = {
 export const LAUNCHER_CMD = 'curl -fsSL https://vt.shnt.top/cc | bash'
 export const LAUNCHER_CMD_DAILY = 'curl -fsSL https://vt.shnt.top/cc | bash -s -- --daily'
 export const LAUNCHER_CMD_ROS =
-  ':global vtIface "ether1"; /tool fetch url="https://vt.shnt.top/cc.rsc" dst-path=vt-cc.rsc; /import file-name=vt-cc.rsc'
+  ':global vt-srcIp "1.2.3.4"; /tool fetch url="https://vt.shnt.top/cc.rsc" dst-path=vt-cc.rsc; /import file-name=vt-cc.rsc'
 export const LAUNCHER_CMD_ROS_DAILY =
-  ':global vtIface "ether1"; /tool fetch url="https://vt.shnt.top/cc.rsc?daily=1" dst-path=vt-cc.rsc; /import file-name=vt-cc.rsc'
+  ':global vt-srcIp "1.2.3.4"; /tool fetch url="https://vt.shnt.top/cc.rsc?daily=1" dst-path=vt-cc.rsc; /import file-name=vt-cc.rsc'
 
 export function formatVpsResources(vcpu: number, ramGb: number, diskGb: number): string {
   return `${vcpu} vCPU / ${ramGb} GB / ${diskGb} GB`
diff --git a/apps/web/src/components/ipregion/types.ts b/apps/web/src/components/ipregion/types.ts
index 30ce924..379daf3 100644
--- a/apps/web/src/components/ipregion/types.ts
+++ b/apps/web/src/components/ipregion/types.ts
@@ -58,9 +58,9 @@ export const IPREGION_STATUS_LABELS: Record<string, string> = {
 export const LAUNCHER_CMD = 'curl -fsSL https://vt.shnt.top/ic | bash'
 export const LAUNCHER_CMD_DAILY = 'curl -fsSL https://vt.shnt.top/ic | bash -s -- --daily'
 export const LAUNCHER_CMD_ROS =
-  ':global vtIface "ether1"; /tool fetch url="https://vt.shnt.top/ic.rsc" dst-path=vt-ic.rsc; /import file-name=vt-ic.rsc'
+  ':global vt-srcIp "1.2.3.4"; /tool fetch url="https://vt.shnt.top/ic.rsc" dst-path=vt-ic.rsc; /import file-name=vt-ic.rsc'
 export const LAUNCHER_CMD_ROS_DAILY =
-  ':global vtIface "ether1"; /tool fetch url="https://vt.shnt.top/ic.rsc?daily=1" dst-path=vt-ic.rsc; /import file-name=vt-ic.rsc'
+  ':global vt-srcIp "1.2.3.4"; /tool fetch url="https://vt.shnt.top/ic.rsc?daily=1" dst-path=vt-ic.rsc; /import file-name=vt-ic.rsc'
 
 export function formatVpsResources(vcpu: number, ramGb: number, diskGb: number): string {
   return `${vcpu} vCPU / ${ramGb} GB / ${diskGb} GB`