X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~mdw/git/zones/blobdiff_plain/b1d5c6c26918b06284d9895eb50ef3c08133f840..8ca446b52a0e12c103b26ffe87b158a50c8a78a8:/distorted.lisp diff --git a/distorted.lisp b/distorted.lisp index 253c560..8ab90af 100644 --- a/distorted.lisp +++ b/distorted.lisp @@ -7,8 +7,7 @@ (load "hosts" :verbose nil) ;;; (RFC1918 addresses are allocated from Cambridge G-RIN.) (defnet distorted.org.uk 172.29.198.0/23 - (untrusted 256 - (wireless 64)) + (untrusted 256) (trusted 256 (fretwank 128 (unsafe 32) @@ -34,10 +33,11 @@ (defhost tubescreamer (safe 1)) (defhost obsidian (safe 2)) ;; Wireless network. -(defhost evolution.wireless (wireless 1)) +(defhost evolution.untrusted (untrusted 1)) +(defhost vampire.untrusted (untrusted 2)) ;; Virtual private network. -(defhost fuzzface (virtual 1)) +(defhost crybaby (virtual 1)) ;; Special network for ITS. ;; It doesn't understand point-to-point links, so we need a little net. @@ -85,8 +85,8 @@ (defzone distorted.org.uk (guvnor (inet :a guvnor.demon) (fretwank :a guvnor)) ;; ;; Wireless gateway - (wireless :net wireless) - (evolution (fretwank :a evolution) (wireless :a evolution.wireless)) + (untrusted :net untrusted) + (evolution (fretwank :a evolution) (untrusted :a evolution.untrusted)) ;; ;; Local services (@ :svc www-frontend) @@ -105,13 +105,12 @@ (defzone distorted.org.uk ;; Wired ethernet (fretwank :net fretwank) (metalzone (inet :a guvnor.demon) (fretwank :a metalzone)) - (vampire (fretwank :a vampire)) - (tubescreamer (fretwank :a tubescreamer)) + (vampire (fretwank :a vampire) (untrusted :a vampire.untrusted)) (obsidian (fretwank :a obsidian)) ;; ;; Virtual network (virtual :net virtual) - (fuzzface (virtual :a fuzzface)) + (crybaby (virtual :a crybaby)) ;; ;; ITS (its :net its) @@ -134,11 +133,7 @@ (defrevzone trusted (defrevzone untrusted :ns ((metalzone.ns :ip metalzone) (vampire.ns :ip vampire)) - #+subnet/fretwank (wireless :ns (metalzone.ns vampire.ns)) - #+subnet/fretwank (@ :cidr-delegation - (wireless - (wireless - 198.29.172.wireless.198.29.172.in-addr.arpa)))) + :reverse untrusted) (defzone dhcp.distorted.org.uk :ns ((metalzone.ns :ip metalzone) (vampire.ns :ip vampire)) @@ -147,8 +142,4 @@ (defzone dhcp.distorted.org.uk (defzone dhcp.199.29.172.in-addr.arpa :ns ((metalzone.ns :ip metalzone) (vampire.ns :ip vampire))) -(defzone wireless.198.29.172.in-addr.arpa - :ns ((metalzone.ns :ip metalzone) (vampire.ns :ip vampire)) - :reverse ((wireless :bytes 4))) - ;;;----- That's all, folks --------------------------------------------------