chiark / gitweb /
distorted.lisp: Expose a name for vampire.
[zones] / distorted.lisp
... / ...
CommitLineData
1;;; Zone file for distorted.org.uk
2
3(load "hosts.lisp" :verbose nil)
4
5;;;--------------------------------------------------------------------------
6;;; Network allocations
7;;; (RFC1918 addresses are allocated from Cambridge G-RIN.)
8
9(defnet distorted.org.uk 172.29.198.0/23
10 (untrusted 256
11 (wireless 128)
12 (iodine 16))
13 (trusted 256
14 (fretwank 128
15 (unsafe 32)
16 (dhcp 32)
17 (safe 32))
18 (virtual 32)
19 (its 4)))
20
21;;;--------------------------------------------------------------------------
22;;; Host allocations
23
24;; External addresses.
25(defhost guvnor.demon 80.177.3.76)
26
27;; Unsafe network.
28(defhost guvnor (unsafe 1))
29(defhost metalzone (unsafe 2))
30(defhost radius (unsafe 3))
31(defhost vampire (unsafe 4))
32(defhost roadstar (unsafe 5))
33(defhost jem (unsafe 6))
34(defhost artist (unsafe 7))
35
36;; Safe network.
37(defhost tubescreamer (safe 1))
38(defhost obsidian (safe 2))
39(defhost ibanez (safe 3))
40
41;; Wireless network.
42(defhost vampire.untrusted (untrusted 1))
43(defhost evolution (untrusted 2))
44
45;; Virtual private network.
46(defhost crybaby (virtual 1))
47(defhost terror (virtual 2))
48
49;; Iodine network.
50(defhost vampire.iodine (iodine 1))
51
52;; Special network for ITS.
53;; It doesn't understand point-to-point links, so we need a little net.
54(defhost gw (its 1))
55(defhost mz (its 2))
56
57;;;--------------------------------------------------------------------------
58;;; Other definitions.
59
60(setf *default-zone-admin* "hostmaster@distorted.org.uk")
61
62(preferred-subnet-case
63 (fretwank
64 (setf *default-zone-source* 'vampire.distorted.org.uk.)
65 (defhost www-frontend metalzone)
66 (defhost dns-frontend vampire))
67 (t
68 (setf *default-zone-source* 'guvnor.distorted.org.uk.)
69 (defhost www-frontend guvnor.demon)
70 (defhost dns-frontend guvnor.demon)))
71
72;;;--------------------------------------------------------------------------
73;;; Main zone definition.
74
75(defzone distorted.org.uk
76 ;;
77 ;; Nameservers.
78 :ns #+subnet/fretwank ((metalzone.ns :ip metalzone)
79 (vampire.ns :ip vampire))
80 #-subnet/fretwank ((boyle.ns :ip boyle.nsict.org)
81 (chiark.ns :ip chiark.greenend.org.uk)
82 (guvnor.ns :ip guvnor.demon))
83 ;;
84 ;; Mail servers.
85 ((@ mail lists bugs cryptomail)
86 :mx mail
87 :srv ((:smtp mail)))
88 ;;
89 ;; Other services.
90 :srv ((:http www)
91 (:ftp ftp))
92 ;;
93 ;; Colocated services.
94 ;;((www ftp git) (inet :svc boyle.nsict.org) (fretwank :svc metalzone))
95 ;;
96 ;; Entry is via little port-forwarding box.
97 (guvnor (inet :a guvnor.demon) (fretwank :a guvnor))
98 ;;
99 ;; Wireless gateway.
100 (untrusted :net untrusted)
101 (evolution (untrusted :a evolution))
102 ;;
103 ;; Local services.
104 (@ :svc www-frontend)
105 ((www ftp wiki git bugs mail)
106 (inet :svc guvnor.demon)
107 (fretwank :svc metalzone))
108 ((db tor i2p rawk vox www-cache)
109 (inet :svc guvnor.demon)
110 (fretwank :svc vampire))
111 ;;
112 ;; Internal services.
113 ((ntp1) (fretwank :svc metalzone))
114 ((wpad ntp news) (fretwank :svc vampire))
115 ;;
116 ;; Wired ethernet.
117 (fretwank :net fretwank)
118 (metalzone (inet :a guvnor.demon)
119 (fretwank :a metalzone))
120 (vampire (fretwank :a vampire)
121 (inet :a guvnor.demon)
122 (untrusted :a vampire.untrusted)
123 (iodine :a vampire.iodine))
124 (obsidian (fretwank :a obsidian))
125 (ibanez (fretwank :a ibanez))
126 (radius (fretwank :a radius))
127 (roadstar (fretwank :a roadstar))
128 (jem (fretwank :a jem))
129 (artist (fretwank :a artist))
130 (gibson :cname gibson.dhcp)
131 (lespaul :cname lespaul.dhcp)
132 (firebird :cname firebird.dhcp)
133 ;;
134 ;; Virtual network.
135 (virtual :net virtual)
136 (crybaby (virtual :a crybaby))
137 (terror (virtual :a terror))
138 (iodine :net iodine)
139 ;;
140 ;; ITS.
141 (its :net its)
142 (gw (its :a gw))
143 (mz (its :a mz))
144 ;;
145 ;; Delegations.
146 #+subnet/fretwank (dhcp :ns (metalzone.ns vampire.ns))
147 (io :ns ((ns.io :ip dns-frontend))))
148
149;;;--------------------------------------------------------------------------
150;;; Other subsidiary zones.
151
152(defrevzone trusted
153 :ns ((metalzone.ns :ip metalzone) (vampire.ns :ip vampire))
154 :reverse trusted
155 #+subnet/fretwank (dhcp :ns (metalzone.ns vampire.ns))
156 #+subnet/fretwank (@ :cidr-delegation
157 (dhcp
158 (dhcp 199.29.172.dhcp.199.29.172.in-addr.arpa))))
159
160(defrevzone untrusted
161 :ns ((metalzone.ns :ip metalzone) (vampire.ns :ip vampire))
162 :reverse untrusted)
163
164(defzone dhcp.distorted.org.uk
165 :ns ((metalzone.ns :ip metalzone) (vampire.ns :ip vampire))
166 :net dhcp)
167
168(defzone io.distorted.org.uk
169 :ns ((ns :ip dns-frontend))
170 (about :txt "Fake zone used for IP-over-DNS tunnelling."))
171
172(defzone dhcp.199.29.172.in-addr.arpa
173 :ns ((metalzone.ns :ip metalzone) (vampire.ns :ip vampire)))
174
175;;;----- That's all, folks --------------------------------------------------