chiark - git - mdw - zones/blob

1 ;;; Zone file for distorted.org.uk

2

3 (load "hosts.lisp" :verbose nil)

4

5 ;;;--------------------------------------------------------------------------

6 ;;; Anycast services.

7

8 (defvar *anycast-routable-families* (list :ipv6))

9

10 (defzoneparse :anycast (name data rec :prefix prefix :zname zname)

11 (destructuring-bind (any-provider default-provider &rest other-providers)

12 data

13

14 ;; First, the default address. If the anycast network is preferred then

15 ;; this is easy; otherwise we have something complicated to do because

16 ;; IPv6 anycast addresses are globally routable, while IPv4 ones aren't.

17 (if (zone-preferred-subnet-p (car any-provider))

18 (zone-set-address #'rec (cdr any-provider) :make-ptr-p t)

19 (do-host (addr (cdr any-provider))

20 (let ((family (ipaddr-family addr)))

21 (if (member family *anycast-routable-families*)

22 (zone-set-address #'rec addr

23 :family family :make-ptr-p t)

24 (zone-set-address #'rec (cdr default-provider)

25 :family family :make-ptr-p nil)))))

26

27 ;; Now for all of the others.

28 (dolist (provider (list* any-provider default-provider other-providers))

29 (zone-set-address #'rec (cdr provider)

30 :make-ptr-p (eq provider any-provider)

31 :name (domain-name-concat prefix

32 (zone-parse-host

33 (car provider)

34 zname))))))

35

36 ;;;--------------------------------------------------------------------------

37 ;;; Hostname abbreviations.

38

39 (defvar *abbrev-subdomain*

40 (make-domain-name :labels '("abbrev") :absolutep nil))

41 (defparameter *abbrev-used* (make-hash-table :test #'equal))

42

43 (defzoneparse :abbrev (name data rec :zname zname)

44 (let* ((domain (zone-parse-host data

45 (domain-name-concat *abbrev-subdomain*

46 zname)))

47 (key (princ-to-string domain))

48 (existing (gethash key *abbrev-used*)))

49 (when existing

50 (error "Abbrev collision for ~A between ~A and ~A."

51 domain existing name))

52 (setf (gethash key *abbrev-used*) name)

53 (rec :name domain

54 :type :cname

55 :data name)))

56

57 ;;;--------------------------------------------------------------------------

58 ;;; Other definitions.

59

60 (setf *default-zone-admin* "hostmaster@distorted.org.uk")

61

62 (setf *default-zone-source* 'radius.distorted.org.uk.)

63

64 ;;;--------------------------------------------------------------------------

65 ;;; Main zone definition.

66

67 (defzone distorted.org.uk

68

69 ;; Nameservers.

70 :ns ((radius.ns :ip radius)

71 (precision.ns :ip precision)

72 (telecaster.ns :ip telecaster)

73 (national.ns :ip national)

74 (eggle.ns :ip eggle)

75 #-view/inside (mythic-beasts-1.ns :ip mythic-ns1)

76 #-view/inside (mythic-beasts-2.ns :ip mythic-ns2)

77 #-view/inside (mythic-beasts-3.ns :ip mythic-ns3)

78 #-view/inside (chiark.ns :ip chiark.greenend.org.uk))

79

80 ;; Certification.

81 :caa ((:issue "letsencrypt.org")

82 (:issue "distorted.org.uk"))

83

84 ;; Mail servers.

85 ((@ mail blackhole) :mx mail :srv ((:smtp mail)))

86 (bugs :mx lists :srv ((:smtp bugs)))

87 (lists :mx lists :srv ((:smtp lists)))

88 (_dmarc :dmarc (:v "DMARC1"

89 :p "quarantine" :sp "quarantine"

90 :adkim "s" :aspf "s"))

91 ((_domainkey _domainkey.mail) :dname stratocaster.dkim)

92 ((stratocaster @ mail) :spf ((:version "spf1")

93 (:pass :ip stratocaster.dmz)

94 (:soft :all)))

95 ((_domainkey.bugs _domainkey.lists) :dname telecaster.dkim)

96 ((telecaster bugs lists) :spf ((:version "spf1")

97 (:pass :ip telecaster.dmz)

98 (:soft :all)))

99

100 ;; Anycast services.

101 (dns0 :anycast ((any dns0.any) (dmz radius.dmz)

102 (unsafe radius.unsafe)))

103 (dns1 :anycast ((any dns1.any) (dmz precision.dmz)

104 (unsafe precision.unsafe)))

105 (dns :cname dns0)

106

107 (ntp0 :anycast ((any ntp0.any) (dmz ibanez.dmz)

108 (unsafe ibanez.unsafe)))

109 (ntp1 :anycast ((any ntp1.any) (dmz fender.dmz)

110 (unsafe fender.unsafe)))

111 (ntp :cname ntp0)

112

113 (www-cache :anycast ((any www-cache.any) (dmz telecaster.dmz)

114 (unsafe telecaster.unsafe)))

115 (wpad :cname www-cache)

116

117 (_kerberos :txt "DISTORTED.ORG.UK")

118 (krb0 :anycast ((any krb0.any) (dmz radius.dmz)

119 (unsafe radius.unsafe)))

120 (krb1 :anycast ((any krb1.any) (dmz precision.dmz)

121 (unsafe precision.unsafe)))

122 (krb-master (unsafe :svc radius.unsafe)

123 (dmz :svc radius.dmz))

124 :srv (((:kerberos :protocol :udp)

125 krb0

126 (krb1 :prio 100))

127 ((:kerberos-master :protocol :udp :port 88) krb-master)

128 (:kerberos-adm krb-master)

129 ((:kpasswd :protocol :udp) krb-master))

130 (krb :cname krb0)

131

132 ;; Other services.

133 :srv ((:http www)

134 (:ftp ftp))

135

136 ;; Formerly colocated services.

137 ((irc vox keys wiki) (unsafe :svc jazz.unsafe :sshfp "jazz")

138 (dmz :svc jazz.dmz :sshfp "jazz"))

139 ((irc vox keys wiki) :tlsa (:https (:service-certificate-constraint

140 :public-key :sha-256 #p"https-jazz")))

141 ((bugs lists db ftp) (unsafe :svc telecaster.unsafe :sshfp "telecaster")

142 (dmz :svc telecaster.dmz :sshfp "telecaster"))

143 ((bugs lists ftp) :tlsa (:https #3=(:service-certificate-constraint

144 :public-key :sha-256

145 #p"https-telecaster")))

146 (dyndns :svc telecaster.dmz :sshfp "telecaster")

147 ((git www mail) (unsafe :svc stratocaster.unsafe :sshfp "stratocaster")

148 (dmz :svc stratocaster.dmz :sshfp "stratocaster"))

149 ((www git mail @) :tlsa (:https #2=(:service-certificate-constraint

150 :public-key :sha-256

151 #p"https-stratocaster")))

152 (www-cache :tlsa (3127 #1=(:trust-anchor-assertion

153 :certificate :sha-256 #p"distorted-ca")))

154 (mail :tlsa ((:submission :imap :imaps) #1#))

155 (mail :tlsa (:smtp

156 #+view/inside #1#

157 #-view/inside (:domain-issued-certificate

158 :public-key :sha-256

159 #p"smtps-stratocaster")))

160 ((bugs lists) :tlsa (:smtp

161 #+view/inside #1#

162 #-view/inside (:domain-issued-certificate

163 :public-key :sha-256

164 #p"smtps-telecaster")))

165 :svc #+view/inside stratocaster.unsafe

166 #-view/inside stratocaster.dmz

167 (cabal :svc stratocaster.dmz :sshfp "stratocaster")

168

169 ;; Local services.

170 (rawk (unsafe :svc artist.unsafe) (dmz :svc artist.dmz))

171 (rawk :tlsa (:https (:service-certificate-constraint

172 :public-key :sha-256

173 #p"https-artist")))

174 (mirror (dmz :svc roadstar.dmz :sshfp "roadstar")

175 (unsafe :svc roadstar.unsafe :sshfp "roadstar"))

176

177 ;; Internal services.

178 ((news lpr) :svc roadstar.unsafe :sshfp "roadstar")

179

180 ;; Anonymity services.

181 (anon (dmz :svc anon.dmz)

182 (unsafe :svc jazz.unsafe))

183

184 ;; Fancy connectivity.

185 (iodine (dmz :svc jazz.dmz))

186 (hippotat (dmz :svc jazz.dmz))

187

188 ;; Formerly colocated hosts.

189 (fender :abbrev f (unsafe :abbrev fu) (dmz :abbrev fd))

190 (fender (unsafe :addr fender.unsafe :sshfp "fender")

191 (dmz :addr fender.dmz :sshfp "fender"))

192 (precision :abbrev p (unsafe :abbrev pu) (dmz :abbrev pd) (vpn :abbrev pv))

193 (precision (unsafe :addr precision.unsafe :sshfp "precision")

194 (dmz :addr precision.dmz :sshfp "precision")

195 (vpn :addr precision.vpn :sshfp "precision"))

196 (telecaster :alias tele :abbrev t

197 (unsafe :alias tele.unsafe :abbrev tu)

198 (dmz :alias tele.dmz :abbrev td))

199 (telecaster (unsafe :addr telecaster.unsafe :sshfp "telecaster")

200 (dmz :addr telecaster.dmz :sshfp "telecaster"))

201 (stratocaster :alias strat :abbrev s

202 (unsafe :alias strat.unsafe :abbrev su)

203 (dmz :alias strat.dmz :abbrev sd))

204 (stratocaster (unsafe :addr stratocaster.unsafe :sshfp "stratocaster")

205 (dmz :addr stratocaster.dmz :sshfp "stratocaster"))

206 (jazz :abbrev z (unsafe :abbrev zu) (dmz :abbrev zd) (vpn :abbrev :zv))

207 (jazz (unsafe :addr jazz.unsafe :sshfp "jazz")

208 (dmz :addr jazz.dmz :sshfp "jazz")

209 (vpn :addr jazz.vpn :sshfp "jazz")

210 (iodine :addr jazz.iodine :sshfp "jazz")

211 (hippo :addr jazz.hippo :sshfp "jazz"))

212

213 ;; Virtual hosts.

214 (national :abbrev n (linode :abbrev nl) (upn :abbrev ny))

215 (national (linode :addr national.linode) (upn :addr national.upn))

216 (eggle :abbrev e (jump :abbrev ej) (upn :abbrev ey))

217 (eggle (jump :addr eggle.jump) (upn :addr eggle.upn))

218 (mdwdev (upn :addr mdwdev.upn))

219

220 ;; Nicko's servers.

221 (richmond (dmz :svc richmond.dmz))

222 (marshall (dmz :svc marshall.dmz))

223

224 ;; Entry is via little router box.

225 (dmz :net dmz)

226 (guvnor (dmz :addr guvnor.dmz))

227 (nat (dmz :addr nat.dmz))

228

229 ;; Wireless access points.

230 (wireless :net wireless)

231 (evolution (safe :addr evolution.safe))

232 (evolution :alias evo)

233 (kitkat :alias ap0)

234 (kitkat (safe :addr kitkat.safe))

235 (lunch :alias ap1)

236 (lunch (safe :addr lunch.safe))

237

238 ;; Printer.

239 (burntaxe :alias lp0)

240 (burntaxe (safe :addr burntaxe.safe))

241

242 ;; Switches.

243 (grigsby :alias tp0)

244 (grigsby (safe :addr grigsby.safe))

245 (carling :alias tp1)

246 (carling (safe :addr carling.safe))

247 (tritan :alias tp2)

248 (tritan (safe :addr tritan.safe))

249

250 ;; Wired ethernet.

251 (unsafe :net unsafe)

252 (safe :net safe)

253 (untrusted :net untrusted)

254 (vampire :abbrev v

255 (unsafe :abbrev vu) (dmz :abbrev vd) (vpn :abbrev vv)

256 (safe :abbrev vs) (untrusted :abbrev vx))

257 (vampire (unsafe :addr vampire.unsafe :sshfp "vampire")

258 (dmz :addr vampire.dmz :sshfp "vampire")

259 (vpn :addr vampire.vpn :sshfp "vampire")

260 (safe :addr vampire.safe :sshfp "vampire")

261 (untrusted :addr vampire.untrusted :sshfp "vampire"))

262 (ibanez :abbrev i (unsafe :abbrev iu) (dmz :abbrev id))

263 (ibanez (unsafe :addr ibanez.unsafe :sshfp "ibanez")

264 (dmz :addr ibanez.dmz :sshfp "ibanez"))

265 (radius :abbrev r

266 (unsafe :abbrev ru) (dmz :abbrev rd) (vpn :abbrev rv)

267 (safe :abbrev rs) (untrusted :abbrev rx))

268 (radius (unsafe :addr radius.unsafe :sshfp "radius")

269 (dmz :addr radius.dmz :sshfp "radius")

270 (vpn :addr radius.vpn :sshfp "radius")

271 (safe :addr radius.safe :sshfp "radius")

272 (untrusted :addr radius.untrusted :sshfp "radius"))

273 (roadstar :abbrev rg (unsafe :abbrev rgu) (dmz :abbrev rgd))

274 (roadstar (unsafe :addr roadstar.unsafe :sshfp "roadstar")

275 (dmz :addr roadstar.dmz :sshfp "roadstar"))

276 (jem :abbrev j (unsafe :abbrev ju) (dmz :abbrev jd))

277 (jem (unsafe :addr jem.unsafe :sshfp "jem")

278 (dmz :addr jem.dmz :sshfp "jem"))

279 (universe :abbrev u (unsafe :abbrev uu) (dmz :abbrev ud))

280 (universe (unsafe :addr universe.unsafe :sshfp "universe")

281 (dmz :addr universe.dmz :sshfp "universe"))

282 (artist :abbrev a

283 (unsafe :abbrev au) (dmz :abbrev ad) (untrusted :abbrev ax))

284 (artist (unsafe :addr artist.unsafe :sshfp "artist")

285 (dmz :addr artist.dmz :sshfp "artist")

286 (untrusted :addr artist.untrusted :sshfp "artist"))

287 (groove :abbrev gr

288 (vpn :abbrev grv) (unsafe :abbrev gru))

289 (groove (vpn :addr groove.vpn :sshfp "groove")

290 (unsafe :addr groove.unsafe :sshfp "groove"))

291

292 ;; DHCP hosts.

293 (gibson :cname gibson.dhcp :abbrev g)

294 (lespaul :cname lespaul.dhcp)

295 (firebird :cname firebird.dhcp)

296 (marauder :cname marauder.dhcp)

297 (invader :cname invader.dhcp)

298 (gretsch :cname gretsch.dhcp)

299

300 ;; Virtual network.

301 (vpn :net vpn)

302 (crybaby :abbrev cb)

303 (crybaby (vpn :addr crybaby.vpn :sshfp "crybaby")

304 (hippo :addr crybaby.hippo :sshfp "crybaby"))

305 (spirit (vpn :addr spirit.vpn :sshfp "spirit")

306 (hippo :addr spirit.hippo :sshfp "spirit"))

307 (terror (vpn :addr terror.vpn :sshfp "terror"))

308 (orange :abbrev o)

309 (orange (vpn :addr orange.vpn :sshfp "orange"))

310 (haze :abbrev h)

311 (haze (vpn :addr haze.vpn :sshfp "haze"))

312 (iodine :net iodine)

313 (hippo :net hippo)

314

315 ;; ITS.

316 (its :net its)

317 (gw (its :addr gw.its))

318 (mz (its :addr mz.its))

319

320 ;; Strange things.

321 (blackhole (dmz :addr blackhole.dmz))

322

323 ;; Delegations.

324 (dhcp :ns ((radius.ns.dhcp :ip radius)

325 (precision.ns.dhcp :ip precision)

326 (telecaster.ns.dhcp :ip telecaster)

327 (national.ns.dhcp :ip national)

328 (eggle.ns.dhcp :ip eggle))

329 :ds ((55966 :rsasha256 :sha1

330 "95b05c1f4e84f950f29630004bac447f8a87ca33")

331 (55966 :rsasha256 :sha256

332 #.(concatenate 'string "31696bf54b577362b2eb75793adeb9ec"

333 "2e8440ec671371b35d8d978cd9ca3007"))))

334 (dyn :ns ((radius.ns.dyn :ip radius)

335 (precision.ns.dyn :ip precision)

336 (telecaster.ns.dyn :ip telecaster)

337 (national.ns.dyn :ip national)

338 (eggle.ns.dyn :ip eggle))

339 :ds ((11335 :rsasha256 :sha1

340 "7ed2b843b0bfb38ceca68617dfacbeafab1d1ea9")

341 (11335 :rsasha256 :sha256

342 #.(concatenate 'string "6eb15eb587c48f5b84ca128a656a4cce"

343 "0a41cf040d3d0f15a44dffd6476b2b55"))))

344 (dnserr :ns ((radius.ns.dnserr :ip radius.dmz)

345 (precision.ns.dnserr :ip precision.dmz)

346 (telecaster.ns.dnserr :ip telecaster.dmz)

347 (national.ns.dnserr :ip national.linode)

348 (eggle.ns.dnserr :ip eggle.jump))

349 :ds ((40945 :rsasha256 :sha1

350 "f35b5d0b877b940e63ad1b3afc21d6ba83cd1b3b")

351 (40945 :rsasha256 :sha256

352 #.(concatenate 'string "fb171d206d4d64c5a7a6c290ce6e20df"

353 "44f1db7f41e2260f1fe8d7c55d524c11"))))

354 (stratocaster.dkim

355 :ns ((radius.ns.stratocaster.dkim :ip radius.dmz)

356 (precision.ns.stratocaster.dkim :ip precision.dmz)

357 (telecaster.ns.stratocaster.dkim :ip telecaster.dmz)

358 (national.ns.stratocaster.dkim :ip national.linode)

359 (eggle.ns :ip eggle.jump)

360 (mythic-beasts-1.ns.stratocaster.dkim :ip mythic-ns1)

361 (mythic-beasts-2.ns.stratocaster.dkim :ip mythic-ns2)

362 (mythic-beasts-3.ns.stratocaster.dkim :ip mythic-ns3))

363 :ds ((24577 :rsasha256 :sha1

364 "d06847c01e19098509a8d07a9aafaceff532c9c7")

365 (24577 :rsasha256 :sha256

366 #.(concatenate 'string "a40cdb1c633041cfbc1b80a400cff527"

367 "2cad051915fc0cd40296a2d4590b9d2b"))))

368 (telecaster.dkim

369 :ns ((radius.ns.telecaster.dkim :ip radius.dmz)

370 (precision.ns.telecaster.dkim :ip precision.dmz)

371 (telecaster.ns.telecaster.dkim :ip telecaster.dmz)

372 (national.ns.telecaster.dkim :ip national.linode)

373 (eggle.ns :ip eggle.jump)

374 (mythic-beasts-1.ns.telecaster.dkim :ip mythic-ns1)

375 (mythic-beasts-2.ns.telecaster.dkim :ip mythic-ns2)

376 (mythic-beasts-3.ns.telecaster.dkim :ip mythic-ns3))

377 :ds ((38896 :rsasha256 :sha1

378 "2c2daea658784e22c46bf9e86da67def1e34cf40")

379 (38896 :rsasha256 :sha256

380 #.(concatenate 'string "66997571c7d47f912caa65f2154ecd37"

381 "5b9d391e3ed44d79ac35eef59264e521"))))

382 (io :ns ((ns.io :ip jazz.dmz)))

383 (play :ns (radius.ns precision.ns telecaster.ns national.ns eggle.jump)))

384

385 ;;;--------------------------------------------------------------------------

386 ;;; Other subsidiary zones.

387

388 #+view/outside

389 (defzone dhcp.distorted.org.uk

390 :ns ((radius.ns :ip radius)

391 (precision.ns :ip precision)

392 (telecaster.ns :ip telecaster)

393 (national.ns :ip national)

394 (eggle.ns.dhcp :ip eggle))

395 (gibson :addr gibson.unsafe)

396 (crybaby :addr crybaby.unsafe)

397 (lespaul :addr lespaul.unsafe)

398 (gretsch :addr gretsch.unsafe)

399 (spirit :addr spirit.unsafe)

400 (haze :addr haze.unsafe)

401 (invader :addr invader.safe)

402 (marauder :addr marauder.safe))

403

404 #+view/outside

405 (defzone (dyn.distorted.org.uk :source telecaster.distorted.org.uk.)

406 :ns ((radius.ns :ip radius)

407 (precision.ns :ip precision)

408 (telecaster.ns :ip telecaster)

409 (national.ns :ip national)

410 (eggle.ns.dhcp :ip eggle)))

411

412 #+view/outside

413 (defzone nicko.org

414 (richmond :addr richmond.dmz))

415

416 #+view/outside

417 (defzone stratocaster.dkim.distorted.org.uk

418 :ns ((radius.ns :ip radius)

419 (precision.ns :ip precision)

420 (telecaster.ns :ip telecaster)

421 (national.ns :ip national)

422 (eggle.ns.dhcp :ip eggle)

423 (mythic-beasts-1.ns :ip mythic-ns1)

424 (mythic-beasts-2.ns :ip mythic-ns2)

425 (mythic-beasts-3.ns :ip mythic-ns3)))

426 #+view/outside

427 (defzone telecaster.dkim.distorted.org.uk

428 :ns ((radius.ns :ip radius)

429 (precision.ns :ip precision)

430 (telecaster.ns :ip telecaster)

431 (national.ns :ip national)

432 (eggle.ns.dhcp :ip eggle)

433 (mythic-beasts-1.ns :ip mythic-ns1)

434 (mythic-beasts-2.ns :ip mythic-ns2)

435 (mythic-beasts-3.ns :ip mythic-ns3)))

436

437 (defrevzone trusted

438 :ns (radius.distorted.org.uk.

439 precision.distorted.org.uk.

440 telecaster.distorted.org.uk.

441 national.distorted.org.uk.

442 eggle.distorted.org.uk.)

443 :reverse unsafe

444 :reverse vpn

445 :reverse its

446 :reverse any

447 (dhcp :ns (radius.distorted.org.uk.

448 precision.distorted.org.uk.

449 telecaster.distorted.org.uk.

450 national.distorted.org.uk.))

451 :multi (((dhcp safe) :family :ipv4 :suffix "199.29.172.dhcp") :cname *))

452

453 #+view/outside

454 (defzone dhcp.199.29.172.in-addr.arpa

455 :ns (radius.distorted.org.uk.

456 precision.distorted.org.uk.

457 telecaster.distorted.org.uk.

458 national.distorted.org.uk.

459 eggle.distorted.org.uk.))

460

461 (defrevzone untrusted

462 :ns (radius.distorted.org.uk.

463 precision.distorted.org.uk.

464 telecaster.distorted.org.uk.

465 national.distorted.org.uk.

466 eggle.distorted.org.uk.))

467

468 (defzone 128-143.238.187.81.in-addr.arpa

469 :ns (radius.distorted.org.uk.

470 precision.distorted.org.uk.

471 telecaster.distorted.org.uk.

472 national.distorted.org.uk.

473 eggle.distorted.org.uk.

474 secondary-dns.co.uk.)

475 :reverse ((((:ipv4 dmz)))))

476

477 (defzone 64-79.12.169.217.in-addr.arpa

478 :ns (radius.distorted.org.uk.

479 precision.distorted.org.uk.

480 telecaster.distorted.org.uk.

481 national.distorted.org.uk.

482 eggle.distorted.org.uk.

483 secondary-dns.co.uk.)

484 :reverse ((((:ipv4 dmz1)))))

485

486 (defzone 195.113.2.81.in-addr.arpa

487 :ns (radius.distorted.org.uk.

488 precision.distorted.org.uk.

489 telecaster.distorted.org.uk.

490 national.distorted.org.uk.

491 eggle.distorted.org.uk.

492 secondary-dns.co.uk.)

493 :reverse ((((:ipv4 gw)))))

494

495 (defrevzone (distorted.org.uk-aaisp :family :ipv6)

496 :ns (radius.distorted.org.uk.

497 precision.distorted.org.uk.

498 telecaster.distorted.org.uk.

499 national.distorted.org.uk.

500 eggle.distorted.org.uk.

501 secondary-dns.co.uk.)

502 (0.7.3.6.8.6.4.6.1.0.0.0 :ns (radius.distorted.org.uk.

503 precision.distorted.org.uk.

504 telecaster.distorted.org.uk.

505 national.distorted.org.uk.

506 eggle.distorted.org.uk.))

507 :reverse ((((:ipv6 distorted.org.uk-aaisp)))))

508

509 (defrevzone jump-ipv6

510 :ns (radius.distorted.org.uk.

511 precision.distorted.org.uk.

512 telecaster.distorted.org.uk.

513 national.distorted.org.uk.

514 eggle.distorted.org.uk.)

515 :reverse ((((:ipv6 jump-ipv6)))))

516

517 (defrevzone (dhcp :family :ipv6)

518 :ns (radius.distorted.org.uk.

519 precision.distorted.org.uk.

520 telecaster.distorted.org.uk.

521 national.distorted.org.uk.

522 eggle.distorted.org.uk.))

523

524 #+view/outside

525 (defzone io.distorted.org.uk

526 :ns ((ns :ip jazz.dmz))

527 (about :txt "Fake zone used for IP-over-DNS tunnelling."))

528

529 ;;;----- That's all, folks --------------------------------------------------