Overhaul for service role names and split-horizon craziness.
[zones] / distorted.lisp
1 ;;; Zone file for distorted.org.uk
2
3 (load "hosts" :verbose nil)
4
5 ;; Network allocations
6 ;; (RFC1918 addresses are allocated from Cambridge G-RIN.)
7 (defnet distorted.org.uk 172.29.198.0/23
8 (untrusted 256
9 (wireless 64))
10 (trusted 256
11 (fretwank 128
12 (unsafe 32)
13 (dhcp 32)
14 (safe 32))
15 (virtual 32)))
16
17 ;; Host allocations
18 (defhost guvnor (unsafe))
19 (defhost guvnor.demon 80.177.3.76)
20 (defhost metalzone (unsafe))
21 (defhost tubescreamer (safe))
22 (defhost obsidian (safe))
23 (defhost evolution (unsafe))
24 (defhost evolution.wireless (wireless))
25 (defhost fuzzface (virtual))
26 (defhost mz (virtual))
27 (if (zone-preferred-subnet-p 'fretwank)
28 (defhost www-frontend metalzone)
29 (defhost www-frontend guvnor.demon))
30
31 (setf *default-zone-admin* "hostmaster@distorted.org.uk")
32 (setf *default-zone-source* 'guvnor.distorted.org.uk.)
33
34 (defzone distorted.org.uk
35 ;;
36 ;; Nameservers
37 :ns ((boyle.ns :ip boyle.nsict.org)
38 (chiark.ns :ip chiark.greenend.org.uk)
39 (guvnor.ns :ip guvnor.demon))
40 ;;
41 ;; Mail servers
42 ((@ mail lists bugs cryptomail) :mx mail)
43 ;;
44 ;; Colocated services
45 ;;((www ftp git) (inet :svc boyle.nsict.org) (fretwank :svc metalzone))
46 ;;
47 ;; Entry is via little port-forwarding box
48 (guvnor (inet :a guvnor.demon) (fretwank :a guvnor))
49 ;;
50 ;; Wireless gateway
51 (evolution (fretwank :a evolution) (wireless :a evolution.wireless))
52 ;;
53 ;; Local services
54 (@ :svc www-frontend)
55 ((www ftp git bugs mail rawk)
56 (inet :svc guvnor.demon)
57 (fretwank :svc metalzone))
58 ;;
59 ;; Internal services
60 ((news www-cache)
61 (fretwank :svc metalzone))
62 ;;
63 ;; Wired ethernet
64 (metalzone (inet :a guvnor.demon) (fretwank :a metalzone))
65 (tubescreamer (fretwank :a tubescreamer))
66 (obsidian (fretwank :a obsidian))
67 (fuzzface (virtual :a fuzzface))
68 (mz (virtual :a mz))
69 ;;
70 ;; Networks
71 (fretwank :net fretwank)
72 (dhcp :net dhcp)
73 (wireless :net wireless)
74 (virtual :net virtual))
75
76 (defrevzone trusted
77 :ns ((metalzone.ns :ip metalzone))
78 :reverse trusted)
79 (defrevzone untrusted
80 :ns ((metalzone.ns :ip metalzone))
81 :reverse untrusted)