SPF: Add IP ranges as safety fallback

[dns.git] / src / openstreetmap.js

diff --git a/src/openstreetmap.js b/src/openstreetmap.js
index 7ca0c91a331a5f34fb7c7ae5fa5929e5caa96d57..13a72a5302c8d780b69b7affc8470bb27c879726 100644 (file)
--- a/src/openstreetmap.js
+++ b/src/openstreetmap.js
@@ -1,12 +1,3 @@
-if ( DOMAIN == "openstreetmap.org" ) {
-  // Custom Domain for https://github.com/osmfoundation/welcome-mat/
-  var WELCOME_DOMAIN = CNAME("welcome", "osmfoundation.github.io.")
-} else {
-  // Github Pages only allows 1 domain name per site.
-  // Avoid Google Pages domain hijack
-  var WELCOME_DOMAIN = CNAME("welcome", "openstreetmap.org.")
-}
-
 D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER),
 
   // Publish CAA records indicating that only letsencrypt and globalsign (Fastly) should issue certificates
@@ -49,6 +40,11 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER),
       "ip6:2001:41c9:1:400::32",  // shenron ipv6
       "ip4:184.104.226.98",       // fafnir ipv4
       "ip6:2001:470:1:b3b::2",    // fafnir ipv6
+      "ip4:193.60.236.0/24",          // ucl external
+      "ip4:130.117.76.0/27",          // amsterdam external
+      "ip6:2001:978:2:2C::172:0/112", // amsterdam external
+      "ip4:184.104.226.96/27",        // dublin external
+      "ip6:2001:470:1:b3b::/64",      // dublin external
       "mx",                       // safety net if we change mx
       "-all"
     ]
@@ -62,6 +58,11 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER),
       "ip6:2001:41c9:1:400::32",  // shenron ipv6
       "ip4:184.104.226.98",       // fafnir ipv4
       "ip6:2001:470:1:b3b::2",    // fafnir ipv6
+      "ip4:193.60.236.0/24",          // ucl external
+      "ip4:130.117.76.0/27",          // amsterdam external
+      "ip6:2001:978:2:2C::172:0/112", // amsterdam external
+      "ip4:184.104.226.96/27",        // dublin external
+      "ip6:2001:470:1:b3b::/64",      // dublin external
       "mx",                       // safety net if we change mx
       "-all"
     ]
@@ -75,6 +76,11 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER),
       "ip6:2001:41c9:1:400::32",  // shenron ipv6
       "ip4:184.104.226.98",       // fafnir ipv4
       "ip6:2001:470:1:b3b::2",    // fafnir ipv6
+      "ip4:193.60.236.0/24",          // ucl external
+      "ip4:130.117.76.0/27",          // amsterdam external
+      "ip6:2001:978:2:2C::172:0/112", // amsterdam external
+      "ip4:184.104.226.96/27",        // dublin external
+      "ip6:2001:470:1:b3b::/64",      // dublin external
       "mx",                       // safety net if we change mx
       "-all"
     ]
@@ -88,6 +94,11 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER),
       "ip6:2001:41c9:1:400::32",  // shenron ipv6
       "ip4:184.104.226.98",       // fafnir ipv4
       "ip6:2001:470:1:b3b::2",    // fafnir ipv6
+      "ip4:193.60.236.0/24",          // ucl external
+      "ip4:130.117.76.0/27",          // amsterdam external
+      "ip6:2001:978:2:2C::172:0/112", // amsterdam external
+      "ip4:184.104.226.96/27",        // dublin external
+      "ip6:2001:470:1:b3b::/64",      // dublin external
       "mx",                       // safety net if we change mx
       "-all"
     ]
@@ -101,6 +112,11 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER),
       "ip6:2001:41c9:1:400::32",  // shenron ipv6
       "ip4:184.104.226.98",       // fafnir ipv4
       "ip6:2001:470:1:b3b::2",    // fafnir ipv6
+      "ip4:193.60.236.0/24",          // ucl external
+      "ip4:130.117.76.0/27",          // amsterdam external
+      "ip6:2001:978:2:2C::172:0/112", // amsterdam external
+      "ip4:184.104.226.96/27",        // dublin external
+      "ip6:2001:470:1:b3b::/64",      // dublin external
       "mx",                       // safety net if we change mx
       "-all"
     ]
@@ -524,6 +540,10 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER),
   AAAA("blogs", NAGA_IPV6),
   A("munin", NAGA_IPV4),
   AAAA("munin", NAGA_IPV6),
+  A("welcome", NAGA_IPV4),
+  AAAA("welcome", NAGA_IPV6),
+  A("operations", NAGA_IPV4),
+  AAAA("operations", NAGA_IPV6),
   A("naga.dub", NAGA_INTERNAL),
   A("naga.oob", NAGA_OOB),
 
@@ -646,9 +666,6 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER),
 
   CNAME("uptime", "uptimessl-new.statuscake.com."),
 
-  // Custom Domain for https://github.com/osmfoundation/welcome-mat/
-  WELCOME_DOMAIN,
-
   // Dynamic DNS records
 
   DYNAMIC_RECORDS