X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fdebian-org%2Fmisc%2Fhoster.yaml;h=5cc702fb08bbb993204af43dc4c7c6ff7b3e5463;hb=caf590fcde21e0ad8cceaa83f27c88387cfc259a;hp=9175eea5d22f263305ffbd0f39ac363a3ff543ed;hpb=101691222c2b522bff0f5c42774d08cecc29c6ed;p=mirror%2Fdsa-puppet.git

diff --git a/modules/debian-org/misc/hoster.yaml b/modules/debian-org/misc/hoster.yaml
index 9175eea5d..5cc702fb0 100644
--- a/modules/debian-org/misc/hoster.yaml
+++ b/modules/debian-org/misc/hoster.yaml
@@ -3,13 +3,16 @@
   netrange:
     - 87.106.0.0/16
     - 2001:8d8:81:1520::/64
+  nameservers_break_dnssec: true
   nameservers: [87.106.64.251, 195.20.224.99, 195.20.224.234]
+  # for i in `awk '$1=="nameserver" {print $2}' /etc/resolv.conf; [ -e /etc/unbound/unbound.conf ] && awk '$1=="forward-addr:" {print $2}' /etc/unbound/unbound.conf`; do dig +dnssec @$i -t ns . | grep RRSIG || echo BROKEN; echo;echo $i; echo;read; done
 1und1-sec:
   netrange:
     - 195.20.242.64/26
     - 212.227.126.32/27
     - 2001:8d8:2:1::/64
   searchpaths: [debprivate-oneandone.debian.org]
+  nameservers_break_dnssec: true
   nameservers: [195.20.224.99, 195.20.224.234, 87.106.64.251]
 accumu:
   netrange:
@@ -22,31 +25,38 @@ ana:
   netrange:
     - 150.203.164.0/24
     - 2001:388:1034:2900::64
+  nameservers_break_dnssec: true
   nameservers: [150.203.1.10, 150.203.164.10, 150.203.164.9]
 arm:
   netrange:
-    - 217.140.96.58/29
+    - 217.140.96.0/22
+  nameservers_break_dnssec: true
   nameservers: [158.43.128.1, 217.140.108.113]
+  entropy_provider_hoster: sil
 br:
   # University Federal do Parana (.br)
   netrange:
     - 200.17.192.0/19
-  nameservers: [200.17.202.1, 200.17.202.3]
+  nameservers: [200.236.31.1, 200.17.202.3]
 brainfood:
   netrange:
     - 70.103.162.0/24
   searchpaths: [debprivate-brainfood.debian.org]
-  nameservers: [70.103.162.29, 70.103.162.4]
-  # master accepts queries from murphy
-  allow_dns_query: [70.103.162.31/32]
+  # all hosts have their own recursor
+  nameservers: []
 brown:
   netrange:
     - 128.148.0.0/16
   # all hosts have their own recursor
   nameservers: []
+conova:
+  netrange:
+    - 217.196.146.0/24
+  nameservers: [217.196.144.129, 217.196.144.229]
 carnet:
   netrange:
     - 193.198.0.0/16
+  nameservers_break_dnssec: true
   nameservers: [161.53.160.3, 161.53.123.3]
 csail:
   # mit
@@ -64,7 +74,7 @@ darmstadt:
     - 82.195.75.32/28
     - 2001:41b8:202:deb::/64
   searchpaths: [debprivate-darmstadt.debian.org]
-  nameservers: [82.195.75.81, 82.195.66.249, 217.198.242.225]
+  nameservers: [82.195.66.249, 217.198.242.225]
 dgi:
   netrange:
     - 93.94.130.128/26
@@ -72,6 +82,7 @@ dgi:
 freenet:
   netrange:
     - 62.104.0.0/16
+  nameservers_break_dnssec: true
   nameservers: [194.97.3.83, 62.104.64.3, 194.97.3.11]
 ftcollins:
   netrange:
@@ -89,12 +100,15 @@ grnet:
 helsinki:
   netrange:
     - 193.167.160.0/23
-  nameservers: [128.214.9.15, 218.214.4.29]
+  # all hosts have their own recursor
+  nameservers: []
 isc:
   netrange:
     - 149.20.0.0/16
     - 2001:4F8::/32
-  nameservers: [149.20.64.2, 204.152.184.67]
+  #nameservers: [149.20.64.2, 204.152.184.67]
+  # sometimes very slow?
+  nameservers: []
 nmmn:
   netrange:
     - 217.114.76.80/29
@@ -103,13 +117,17 @@ osuosl:
   netrange:
     - 140.211.166.0/25
     - 140.211.15.0/24
+  nameservers_break_dnssec: true
   nameservers: [140.211.166.130, 140.211.166.131, 216.165.191.54]
 sanger:
   netrange:
     - 193.62.202.24/29
-  nameservers: [193.62.203.96, 193.62.203.97]
+  # broken with dnssec
+  # nameservers: [193.62.203.96, 193.62.203.97]
+  #resolvoptions: [single-request]
+  nameservers: [193.62.202.28, 193.62.202.29]
   searchpaths: [debprivate-sanger.debian.org]
-  resolvoptions: [single-request]
+  allow_dns_query: [193.62.202.24/29]
 rapidswitch:
   netrange:
     - 193.201.200.0/23
@@ -117,13 +135,18 @@ rapidswitch:
 sil:
   netrange:
     - 86.59.118.144/28
+    - 2001:858:2:2::/64
   searchpaths: [debprivate-sil.debian.org]
-  nameservers: [213.129.232.1, 213.129.226.2]
+  #nameservers_break_dnssec: true
+  #nameservers: [213.129.232.1, 213.129.226.2]
+  nameservers: [86.59.118.147, 86.59.118.148]
+  allow_dns_query: [86.59.118.144/28, 2001:858:2:2::/64]
 scanplus:
   netrange:
     - 212.211.132.0/26
     - 212.211.132.248/29
     - 2001:a78::/64
+  nameservers_break_dnssec: true
   nameservers: [212.211.132.4, 212.75.32.4]
 snowman:
   netrange:
@@ -132,14 +155,15 @@ snowman:
 telegrafxs4all:
   netrange:
     - 82.94.249.152/29
+  nameservers_break_dnssec: true
   nameservers: [194.109.6.66]
 ubcece:
   netrange:
     - 137.82.84.64/27
     - 206.12.19.0/24
   searchpaths: [debprivate-ubc.debian.org]
-  nameservers: [206.12.19.5, 137.82.1.1, 142.103.1.1]
-  allow_dns_query: [137.82.84.64/27, 206.12.19.0/24]
+  nameservers: [206.12.19.214, 2607:f8f0:610:4000:224:81ff:fea7:e952, 206.12.19.20, 2607:f8f0:610:4000:218:feff:fe76:2ed0, 206.12.19.21, 2607:f8f0:610:4000:21c:c4ff:fee5:e890]
+  allow_dns_query: [137.82.84.64/27, 206.12.19.0/24, 2607:f8f0:610:4000::/64]
 ugent:
   netrange:
     - 157.193.0.0/16
@@ -147,6 +171,7 @@ ugent:
 umn:
   netrange:
     - 128.101.240.212
+  nameservers_break_dnssec: true
   nameservers: [128.101.101.101, 134.84.84.84]
 utwente:
   netrange:
@@ -166,6 +191,7 @@ ynic:
 zivit:
   netrange:
     - 80.245.144.0/22
+  nameservers_break_dnssec: true
   nameservers: [80.245.147.53, 80.245.147.54]
 
 # vim:set et: