X-Git-Url: https://git.distorted.org.uk/~mdw/zones/blobdiff_plain/664e6cf95b818fd519f19fa22769072e79cfd5eb..40832d8058e6f13747cb8abac5f64263827bde8a:/hosts.lisp diff --git a/hosts.lisp b/hosts.lisp index 8576a0b..bbe1663 100644 --- a/hosts.lisp +++ b/hosts.lisp @@ -7,12 +7,14 @@ (defhost boyle.nsict.org ((:ipv4 "85.158.42.162"))) (defhost chiark.greenend.org.uk ((:ipv4 "212.13.197.229") - (:ipv6 "2001:ba8:1e3::"))) + #+chiark-dns-ipv6 (:ipv6 "2001:ba8:1e3::"))) (defhost mccoy.flatline.org.uk "80.74.241.31") -(defhost mythic-ns1 ((:ipv4 "69.56.173.190") +(defhost mythic-ns1 ((:ipv4 "45.33.127.156") (:ipv6 "2600:3c00::f03c:91ff:fe96:beac"))) (defhost mythic-ns2 ((:ipv4 "93.93.128.67") (:ipv6 "2a00:1098:0:80:1000::10"))) +(defhost mythic-ns3 ((:ipv4 "185.24.221.32") + (:ipv6 "2a02:2770:11:0:21a:4aff:febe:759b"))) (defhost gandi-ns6 ((:ipv4 "217.70.177.40"))) ;;;-------------------------------------------------------------------------- @@ -23,6 +25,7 @@ (untrusted "198.0/24" (wireless "0/25") (iodine "128/28") + (hippo "144/28") (upn "160/27")) (trusted "199.0/24" (wired "0/25" @@ -34,8 +37,15 @@ (safe "192/27") (any "224/27"))) -;; Externally routable DMZ from Demon. -(defnet dmz "62.49.204.144/28") +;; Externally routable DMZ from Andrews and Arnold. +(defnet gw "81.2.113.195") +(defnet dmz "81.187.238.128/28") +(defnet distorted.org.uk-aaisp "2001:8b0:c92/48" + (unsafe "1/64" + (dhcp "6468:6370/96")) + (dmz "fff/64") + (safe "4001/64") + (untrusted "8001/64")) ;; Externally routed colo range. (defnet jump "212.13.198.66/28") @@ -46,25 +56,17 @@ (vpn "6000/64") (upn "a000/64")) -;; Hurricane Electric IPv6-inIPv4 tunnel. -(defnet he-tunnel "2001:470:1f08:1b98/64") -(defnet dmz "2001:470:1f09:1b98/64") -(defnet distorted.org.uk-he "2001:470:9740/48" - (unsafe "1/64") - (safe "4001/64") - (untrusted "8001/64")) - ;;;-------------------------------------------------------------------------- ;;; Host allocations ;; External addresses. -(defhost guvnor.dmz ((:ipv4 dmz 1))) -(defhost radius.dmz (dmz 2)) -(defhost roadstar.dmz (dmz 3)) -(defhost jem.dmz (dmz 4)) -(defhost artist.dmz (dmz 5)) -(defhost vampire.dmz (dmz 6)) -(defhost universe.dmz (dmz 7)) +(defhost guvnor.dmz ((:ipv4 gw 0) (:ipv6 dmz "::1:1"))) +(defhost radius.dmz (dmz 1)) +(defhost roadstar.dmz (dmz 2)) +(defhost jem.dmz (dmz 3)) +(defhost artist.dmz (dmz 4)) +(defhost vampire.dmz (dmz 5)) +(defhost universe.dmz (dmz 6)) (defhost ibanez.dmz (dmz 9)) (defhost anon.dmz (dmz 12)) (defhost nat.dmz ((:ipv4 dmz 14))) @@ -96,13 +98,13 @@ (defhost groove.unsafe (unsafe 17)) ;; Client hosts, with IPv6 addresses. -(defhost gibson.unsafe ((:ipv6 "2001:470:9740:1:e269:95ff:fe63:bb4"))) -(defhost crybaby.unsafe ((:ipv6 "2001:470:9740:1:216:eaff:fec2:4cb8"))) -(defhost lespaul.unsafe ((:ipv6 "2001:470:9740:1:a00:27ff:fef5:aaef"))) -(defhost haze.unsafe ((:ipv6 "2001:470:9740:1:5056:a8ff:fe01:5654"))) -(defhost gretsch.unsafe ((:ipv6 "2001:470:9740:1:3a2c:4aff:fe6d:e768"))) -(defhost invader.safe ((:ipv6 "2001:470:9740:4001:a00:27ff:fe94:a5d7"))) -(defhost marauder.safe ((:ipv6 "2001:470:9740:4001:a00:27ff:fe6a:7846"))) +(defhost gibson.unsafe ((:ipv6 unsafe "e269:95ff:fe63:bb4"))) +(defhost crybaby.unsafe ((:ipv6 unsafe "216:eaff:fec2:4cb8"))) +(defhost lespaul.unsafe ((:ipv6 unsafe "a00:27ff:fef5:aaef"))) +(defhost haze.unsafe ((:ipv6 unsafe "5056:a8ff:fe01:5654"))) +(defhost gretsch.unsafe ((:ipv6 unsafe "3a2c:4aff:fe6d:e768"))) +(defhost invader.safe ((:ipv6 safe "a00:27ff:fe94:a5d7"))) +(defhost marauder.safe ((:ipv6 safe "a00:27ff:fe6a:7846"))) ;; Safe network. (defhost radius.safe (safe 1)) @@ -133,6 +135,10 @@ ;; Iodine network. (defhost jazz.iodine (iodine 1)) +;; Hippotat network. +(defhost jazz.hippo (hippo 1)) +(defhost crybaby.hippo (hippo 2)) + ;; Special network for ITS. ;; It doesn't understand point-to-point links, so we need a little net. (defhost gw.its (its 1)) @@ -160,16 +166,18 @@ (preferred-subnet-case ((unsafe colo) (defhost radius radius.unsafe) + (defhost vampire vampire.unsafe) (defhost precision precision.colo) (defhost telecaster telecaster.colo) (defhost stratocaster stratocaster.colo) - (defhost vampire vampire.unsafe)) + (defhost national national.upn)) (t (defhost radius radius.dmz) + (defhost vampire vampire.dmz) (defhost precision precision.jump) (defhost telecaster telecaster.jump) (defhost stratocaster stratocaster.jump) - (defhost vampire vampire.dmz))) + (defhost national national.linode))) (defhost jaguar jaguar.jump)