Remove shenron from SPF records

diff --git a/src/openstreetmap.js b/src/openstreetmap.js
index 98ad77c3c2169391c8438f94a38c36f117714467..e23ce69a2af7ea9b0ed5c7cf44f78d1ad28c4707 100644 (file)
--- a/src/openstreetmap.js
+++ b/src/openstreetmap.js
@@ -38,15 +38,13 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER),
     label: "@",
     parts: [
       "v=spf1",
-      "ip4:212.110.172.32",       // shenron ipv4
-      "ip6:2001:41c9:1:400::32",  // shenron ipv6
       "ip4:184.104.226.98",       // fafnir ipv4
       "ip6:2001:470:1:b3b::2",    // fafnir ipv6
-      "ip4:193.60.236.0/24",          // ucl external
-      "ip4:184.104.179.128/27",       // amsterdam external
-      "ip6:2001:470:1:fa1::/64",      // amsterdam external
-      "ip4:184.104.226.96/27",        // dublin external
-      "ip6:2001:470:1:b3b::/64",      // dublin external
+      "ip4:193.60.236.0/24",      // ucl external
+      "ip4:184.104.179.128/27",   // amsterdam external
+      "ip6:2001:470:1:fa1::/64",  // amsterdam external
+      "ip4:184.104.226.96/27",    // dublin external
+      "ip6:2001:470:1:b3b::/64",  // dublin external
       "mx",                       // safety net if we change mx
       "-all"
     ]
@@ -56,15 +54,13 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER),
     label: "messages",
     parts: [
       "v=spf1",
-      "ip4:212.110.172.32",       // shenron ipv4
-      "ip6:2001:41c9:1:400::32",  // shenron ipv6
       "ip4:184.104.226.98",       // fafnir ipv4
       "ip6:2001:470:1:b3b::2",    // fafnir ipv6
-      "ip4:193.60.236.0/24",          // ucl external
-      "ip4:184.104.179.128/27",       // amsterdam external
-      "ip6:2001:470:1:fa1::/64",      // amsterdam external
-      "ip4:184.104.226.96/27",        // dublin external
-      "ip6:2001:470:1:b3b::/64",      // dublin external
+      "ip4:193.60.236.0/24",      // ucl external
+      "ip4:184.104.179.128/27",   // amsterdam external
+      "ip6:2001:470:1:fa1::/64",  // amsterdam external
+      "ip4:184.104.226.96/27",    // dublin external
+      "ip6:2001:470:1:b3b::/64",  // dublin external
       "mx",                       // safety net if we change mx
       "-all"
     ]
@@ -74,15 +70,13 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER),
     label: "noreply",
     parts: [
       "v=spf1",
-      "ip4:212.110.172.32",       // shenron ipv4
-      "ip6:2001:41c9:1:400::32",  // shenron ipv6
       "ip4:184.104.226.98",       // fafnir ipv4
       "ip6:2001:470:1:b3b::2",    // fafnir ipv6
-      "ip4:193.60.236.0/24",          // ucl external
-      "ip4:184.104.179.128/27",       // amsterdam external
-      "ip6:2001:470:1:fa1::/64",      // amsterdam external
-      "ip4:184.104.226.96/27",        // dublin external
-      "ip6:2001:470:1:b3b::/64",      // dublin external
+      "ip4:193.60.236.0/24",      // ucl external
+      "ip4:184.104.179.128/27",   // amsterdam external
+      "ip6:2001:470:1:fa1::/64",  // amsterdam external
+      "ip4:184.104.226.96/27",    // dublin external
+      "ip6:2001:470:1:b3b::/64",  // dublin external
       "mx",                       // safety net if we change mx
       "-all"
     ]
@@ -92,15 +86,13 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER),
     label: "otrs",
     parts: [
       "v=spf1",
-      "ip4:212.110.172.32",       // shenron ipv4
-      "ip6:2001:41c9:1:400::32",  // shenron ipv6
       "ip4:184.104.226.98",       // fafnir ipv4
       "ip6:2001:470:1:b3b::2",    // fafnir ipv6
-      "ip4:193.60.236.0/24",          // ucl external
-      "ip4:184.104.179.128/27",       // amsterdam external
-      "ip6:2001:470:1:fa1::/64",      // amsterdam external
-      "ip4:184.104.226.96/27",        // dublin external
-      "ip6:2001:470:1:b3b::/64",      // dublin external
+      "ip4:193.60.236.0/24",      // ucl external
+      "ip4:184.104.179.128/27",   // amsterdam external
+      "ip6:2001:470:1:fa1::/64",  // amsterdam external
+      "ip4:184.104.226.96/27",    // dublin external
+      "ip6:2001:470:1:b3b::/64",  // dublin external
       "mx",                       // safety net if we change mx
       "-all"
     ]
@@ -110,15 +102,13 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER),
     label: "community",
     parts: [
       "v=spf1",
-      "ip4:212.110.172.32",       // shenron ipv4
-      "ip6:2001:41c9:1:400::32",  // shenron ipv6
       "ip4:184.104.226.98",       // fafnir ipv4
       "ip6:2001:470:1:b3b::2",    // fafnir ipv6
-      "ip4:193.60.236.0/24",          // ucl external
-      "ip4:184.104.179.128/27",       // amsterdam external
-      "ip6:2001:470:1:fa1::/64",      // amsterdam external
-      "ip4:184.104.226.96/27",        // dublin external
-      "ip6:2001:470:1:b3b::/64",      // dublin external
+      "ip4:193.60.236.0/24",      // ucl external
+      "ip4:184.104.179.128/27",   // amsterdam external
+      "ip6:2001:470:1:fa1::/64",  // amsterdam external
+      "ip4:184.104.226.96/27",    // dublin external
+      "ip6:2001:470:1:b3b::/64",  // dublin external
       "mx",                       // safety net if we change mx
       "-all"
     ]
@@ -128,15 +118,13 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER),
     label: "supporting",
     parts: [
       "v=spf1",
-      "ip4:212.110.172.32",       // shenron ipv4
-      "ip6:2001:41c9:1:400::32",  // shenron ipv6
       "ip4:184.104.226.98",       // fafnir ipv4
       "ip6:2001:470:1:b3b::2",    // fafnir ipv6
-      "ip4:193.60.236.0/24",          // ucl external
-      "ip4:184.104.179.128/27",       // amsterdam external
-      "ip6:2001:470:1:fa1::/64",      // amsterdam external
-      "ip4:184.104.226.96/27",        // dublin external
-      "ip6:2001:470:1:b3b::/64",      // dublin external
+      "ip4:193.60.236.0/24",      // ucl external
+      "ip4:184.104.179.128/27",   // amsterdam external
+      "ip6:2001:470:1:fa1::/64",  // amsterdam external
+      "ip4:184.104.226.96/27",    // dublin external
+      "ip6:2001:470:1:b3b::/64",  // dublin external
       "mx",                       // safety net if we change mx
       "-all"
     ]

diff --git a/src/osm-wiki.js b/src/osm-wiki.js
index c93c8107d2be80a77fa72002cd60ba09fed2f131..80b1080df2a61e44220e34c847a665e6eb373b5d 100644 (file)
--- a/src/osm-wiki.js
+++ b/src/osm-wiki.js
@@ -27,22 +27,13 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER),
   A("mta-sts", FAFNIR_IPV4),
   AAAA("mta-sts", FAFNIR_IPV6),
 
-  // Publish SPF records indicating that only shenron sends mail
+  // Delegate SPF policy to the main domain
 
   SPF_BUILDER({
     label: "@",
     parts: [
       "v=spf1",
-      "ip4:212.110.172.32",       // shenron ipv4
-      "ip6:2001:41c9:1:400::32",  // shenron ipv6
-      "ip4:184.104.226.98",       // fafnir ipv4
-      "ip6:2001:470:1:b3b::2",    // fafnir ipv6
-      "ip4:193.60.236.0/24",          // ucl external
-      "ip4:184.104.179.128/27",       // amsterdam external
-      "ip6:2001:470:1:fa1::/64",      // amsterdam external
-      "ip4:184.104.226.96/27",        // dublin external
-      "ip6:2001:470:1:b3b::/64",      // dublin external
-      "mx",                       // safety net if we change mx
+      "include:openstreetmap.org",      // main openstreetmap.org spf record
       "-all"
     ]
   }),