# HG changeset patch
# User IBBoard <dev@ibboard.co.uk>
# Date 1667593771 0
# Node ID 7798ec0fd059311e82d8c440b275caba1994abd6
# Parent  3744cd0807cbabff55fe3a37e9c8c39c2fd53a80
Change NAT64 allocation range

We use this to block outbound emails to IPv4 addresses that
got converted by DNS64. MythicBeasts changed it to the
"well-known prefix" some time before April 2021. But we
only just found out when an email bounced.

diff -r 3744cd0807cb -r 7798ec0fd059 manifests/nodes.pp
--- a/manifests/nodes.pp	Sat Oct 15 15:38:08 2022 +0100
+++ b/manifests/nodes.pp	Fri Nov 04 20:29:31 2022 +0000
@@ -11,7 +11,7 @@
 		primary_ip => '2a00:1098:82:52::1',
 		proxy_4to6_ip_prefix => '2a00:1098:82:52::01d4', # ::old4 for IPv4!
 		proxy_upstream => ['2a00:1098::82:1000:3b:1:1', '2a00:1098::80:1000:3b:1:1'],
-		nat64_ranges => ['2a00:1098:0:80:1000:3a::/96', '2a00:1098:0:82:1000:3a::/96'],
+		nat64_ranges => ['64:ff9b::/96'],
 		mailserver => 'mail.ibboard.co.uk',
 		imapserver => 'imap.ibboard.co.uk',
 		mailrelays => ['mx.mythic-beasts.com'],