Overhaul for service role names and split-horizon craziness.

[zones] / distorted.lisp

;;; Zone file for distorted.org.uk

(load "hosts" :verbose nil)

;; Network allocations
;; (RFC1918 addresses are allocated from Cambridge G-RIN.)
(defnet distorted.org.uk 172.29.198.0/23
  (untrusted 256
    (wireless 64))
  (trusted 256
    (fretwank 128
      (unsafe 32)
      (dhcp 32)
      (safe 32))
    (virtual 32)))

;; Host allocations
(defhost guvnor (unsafe))
(defhost guvnor.demon 80.177.3.76)
(defhost metalzone (unsafe))
(defhost tubescreamer (safe))
(defhost obsidian (safe))
(defhost evolution (unsafe))
(defhost evolution.wireless (wireless))
(defhost fuzzface (virtual))
(defhost mz (virtual))
(if (zone-preferred-subnet-p 'fretwank)
    (defhost www-frontend metalzone)
    (defhost www-frontend guvnor.demon))

(setf *default-zone-admin* "hostmaster@distorted.org.uk")
(setf *default-zone-source* 'guvnor.distorted.org.uk.)

(defzone distorted.org.uk
  ;;
  ;; Nameservers
  :ns ((boyle.ns :ip boyle.nsict.org)
       (chiark.ns :ip chiark.greenend.org.uk)
       (guvnor.ns :ip guvnor.demon))
  ;;
  ;; Mail servers
  ((@ mail lists bugs cryptomail) :mx mail)
  ;;
  ;; Colocated services
  ;;((www ftp git) (inet :svc boyle.nsict.org) (fretwank :svc metalzone))
  ;;
  ;; Entry is via little port-forwarding box
  (guvnor (inet :a guvnor.demon) (fretwank :a guvnor))
  ;;
  ;; Wireless gateway
  (evolution (fretwank :a evolution) (wireless :a evolution.wireless))
  ;;
  ;; Local services
  (@ :svc www-frontend)
  ((www ftp git bugs mail rawk)
   (inet :svc guvnor.demon)
   (fretwank :svc metalzone))
  ;;
  ;; Internal services
  ((news www-cache)
   (fretwank :svc metalzone))
  ;;
  ;; Wired ethernet
  (metalzone (inet :a guvnor.demon) (fretwank :a metalzone))
  (tubescreamer (fretwank :a tubescreamer))
  (obsidian (fretwank :a obsidian))
  (fuzzface (virtual :a fuzzface))
  (mz (virtual :a mz))
  ;;
  ;; Networks
  (fretwank :net fretwank)
  (dhcp :net dhcp)
  (wireless :net wireless)
  (virtual :net virtual))

(defrevzone trusted
  :ns ((metalzone.ns :ip metalzone))
  :reverse trusted)
(defrevzone untrusted
  :ns ((metalzone.ns :ip metalzone))
  :reverse untrusted)