| 1 | ;;; -*-lisp-*- |
| 2 | ;;; |
| 3 | ;;; distorted.org.uk hosts and networks, and other useful addresses. |
| 4 | |
| 5 | ;;;-------------------------------------------------------------------------- |
| 6 | ;;; External hosts. |
| 7 | |
| 8 | (defhost boyle.nsict.org ((:ipv4 "85.158.42.162"))) |
| 9 | (defhost chiark.greenend.org.uk ((:ipv4 "212.13.197.229") |
| 10 | (:ipv6 "2001:ba8:1e3::"))) |
| 11 | (defhost mccoy.flatline.org.uk "80.74.241.31") |
| 12 | (defhost mythic-ns1 ((:ipv4 "69.56.173.190") |
| 13 | (:ipv6 "2600:3c00::f03c:91ff:fe96:beac"))) |
| 14 | (defhost mythic-ns2 ((:ipv4 "93.93.128.67") |
| 15 | (:ipv6 "2a00:1098:0:80:1000::10"))) |
| 16 | (defhost gandi-ns6 ((:ipv4 "217.70.177.40"))) |
| 17 | |
| 18 | ;;;-------------------------------------------------------------------------- |
| 19 | ;;; Internal addresses. |
| 20 | |
| 21 | ;; (RFC1918 addresses are allocated from Cambridge G-RIN.) |
| 22 | (defnet distorted.org.uk "172.29.198/23" |
| 23 | (untrusted "198.0/24" |
| 24 | (wireless "0/25") |
| 25 | (iodine "128/28")) |
| 26 | (trusted "199.0/24" |
| 27 | (wired "0/25" |
| 28 | (unsafe "0/27") |
| 29 | (dhcp "32/27")) |
| 30 | (vpn "128/27") |
| 31 | (its "160/30") |
| 32 | (colo "176/28") |
| 33 | (safe "192/27") |
| 34 | (any "224/27"))) |
| 35 | |
| 36 | ;; Externally routable DMZ from Demon. |
| 37 | (defnet dmz "62.49.204.144/28") |
| 38 | |
| 39 | ;; Externally routed colo range. |
| 40 | (defnet jump "212.13.198.66/28") |
| 41 | (defnet jump "2001:ba8:0:1d9/64") |
| 42 | (defnet distorted.org.uk-jump "2001:ba8:1d9/48" |
| 43 | (colo "2/64") |
| 44 | (any "0/64") |
| 45 | (vpn "6000/64")) |
| 46 | |
| 47 | ;; Hurricane Electric IPv6-inIPv4 tunnel. |
| 48 | (defnet he-tunnel "2001:470:1f08:1b98/64") |
| 49 | (defnet dmz "2001:470:1f09:1b98/64") |
| 50 | (defnet distorted.org.uk-he "2001:470:9740/48" |
| 51 | (unsafe "1/64") |
| 52 | (safe "4001/64") |
| 53 | (untrusted "8001/64")) |
| 54 | |
| 55 | ;;;-------------------------------------------------------------------------- |
| 56 | ;;; Host allocations |
| 57 | |
| 58 | ;; External addresses. |
| 59 | (defhost guvnor.dmz ((:ipv4 dmz 1))) |
| 60 | (defhost radius.dmz (dmz 2)) |
| 61 | (defhost roadstar.dmz (dmz 3)) |
| 62 | (defhost jem.dmz (dmz 4)) |
| 63 | (defhost artist.dmz (dmz 5)) |
| 64 | (defhost vampire.dmz (dmz 6)) |
| 65 | (defhost ibanez.dmz (dmz 9)) |
| 66 | (defhost anon.dmz (dmz 12)) |
| 67 | (defhost nat.dmz ((:ipv4 dmz 14))) |
| 68 | |
| 69 | ;; Colocated addresses. |
| 70 | (defhost gate.jump ((:ipv6 jump 2))) |
| 71 | (defhost fender.jump (jump 5)) |
| 72 | (defhost precision.jump (jump 6)) |
| 73 | (defhost telecaster.jump (jump 7)) |
| 74 | (defhost stratocaster.jump (jump 8)) |
| 75 | (defhost jazz.jump (jump 9)) |
| 76 | (defhost jaguar.jump ((:ipv4 jump 11) (:ipv6 jump "::2:1"))) |
| 77 | (defhost richmond.jump ((:ipv4 jump 12) (:ipv6 jump "::1:1"))) |
| 78 | (defhost anon.jump (jump 13)) |
| 79 | (defhost blackhole.jump ((:ipv4 jump 14) (:ipv6 jump "::ffff"))) |
| 80 | |
| 81 | ;; Unsafe network. |
| 82 | (defhost radius.unsafe (unsafe 1)) |
| 83 | (defhost roadstar.unsafe (unsafe 2)) |
| 84 | (defhost jem.unsafe (unsafe 3)) |
| 85 | (defhost artist.unsafe (unsafe 4)) |
| 86 | (defhost vampire.unsafe (unsafe 5)) |
| 87 | (defhost ibanez.unsafe (unsafe 14)) |
| 88 | |
| 89 | ;; Client hosts, with IPv6 addresses. |
| 90 | (defhost gibson.unsafe ((:ipv6 "2001:470:9740:1:e269:95ff:fe63:bb4"))) |
| 91 | (defhost lespaul.safe ((:ipv6 "2001:470:9740:4001:a00:27ff:fef5:aaef"))) |
| 92 | (defhost invader.safe ((:ipv6 "2001:470:9740:4001:a00:27ff:fe94:a5d7"))) |
| 93 | (defhost marauder.safe ((:ipv6 "2001:470:9740:4001:a00:27ff:fe6a:7846"))) |
| 94 | |
| 95 | ;; Safe network. |
| 96 | (defhost radius.safe (safe 1)) |
| 97 | (defhost vampire.safe (safe 2)) |
| 98 | (defhost evolution.safe ((:ipv4 safe 3))) |
| 99 | |
| 100 | ;; Wireless network. |
| 101 | (defhost radius.untrusted (untrusted 1)) |
| 102 | (defhost artist.untrusted (untrusted 2)) |
| 103 | (defhost vampire.untrusted (untrusted 3)) |
| 104 | |
| 105 | ;; Virtual private network. |
| 106 | (defhost crybaby.vpn ((:ipv4 vpn 1) (:ipv6 vpn "::1:1"))) |
| 107 | (defhost terror.vpn ((:ipv4 vpn 2))) |
| 108 | (defhost orange.vpn ((:ipv4 vpn 3) (:ipv6 vpn "::3:1"))) |
| 109 | |
| 110 | ;; Iodine network. |
| 111 | (defhost jazz.iodine (iodine 1)) |
| 112 | |
| 113 | ;; Special network for ITS. |
| 114 | ;; It doesn't understand point-to-point links, so we need a little net. |
| 115 | (defhost gw.its (its 1)) |
| 116 | (defhost mz.its (its 2)) |
| 117 | |
| 118 | ;; Internal (VPN) addresses for colocated services. |
| 119 | (defhost fender.colo (colo 1)) |
| 120 | (defhost precision.colo (colo 2)) |
| 121 | (defhost telecaster.colo (colo 3)) |
| 122 | (defhost stratocaster.colo (colo 4)) |
| 123 | (defhost jazz.colo (colo 5)) |
| 124 | |
| 125 | ;; Anycast addresses for services. |
| 126 | (defhost dns0.any ((:ipv4 any 0) (:ipv6 any "::0:1"))) |
| 127 | (defhost dns1.any ((:ipv4 any 1) (:ipv6 any "::1:1"))) |
| 128 | (defhost ntp0.any ((:ipv4 any 2) (:ipv6 any "::2:1"))) |
| 129 | (defhost ntp1.any ((:ipv4 any 3) (:ipv6 any "::3:1"))) |
| 130 | (defhost www-cache.any ((:ipv4 any 4) (:ipv6 any "::4:1"))) |
| 131 | (defhost krb0.any ((:ipv4 any 5) (:ipv6 any "::5:1"))) |
| 132 | (defhost krb1.any ((:ipv4 any 6) (:ipv6 any "::6:1"))) |
| 133 | |
| 134 | ;;;-------------------------------------------------------------------------- |
| 135 | ;;; Host switch. |
| 136 | |
| 137 | (preferred-subnet-case |
| 138 | ((unsafe colo) |
| 139 | (defhost radius radius.unsafe) |
| 140 | (defhost precision precision.colo) |
| 141 | (defhost telecaster telecaster.colo) |
| 142 | (defhost stratocaster stratocaster.colo) |
| 143 | (defhost vampire vampire.unsafe)) |
| 144 | (t |
| 145 | (defhost radius radius.dmz) |
| 146 | (defhost precision precision.jump) |
| 147 | (defhost telecaster telecaster.jump) |
| 148 | (defhost stratocaster stratocaster.jump) |
| 149 | (defhost vampire vampire.dmz))) |
| 150 | |
| 151 | ;;;----- That's all, folks -------------------------------------------------- |