changeset 428:7798ec0fd059

Change NAT64 allocation range We use this to block outbound emails to IPv4 addresses that got converted by DNS64. MythicBeasts changed it to the "well-known prefix" some time before April 2021. But we only just found out when an email bounced.
author IBBoard <dev@ibboard.co.uk>
date Fri, 04 Nov 2022 20:29:31 +0000
parents 3744cd0807cb
children fa3093f2dc8e
files manifests/nodes.pp
diffstat 1 files changed, 1 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/manifests/nodes.pp	Sat Oct 15 15:38:08 2022 +0100
+++ b/manifests/nodes.pp	Fri Nov 04 20:29:31 2022 +0000
@@ -11,7 +11,7 @@
 		primary_ip => '2a00:1098:82:52::1',
 		proxy_4to6_ip_prefix => '2a00:1098:82:52::01d4', # ::old4 for IPv4!
 		proxy_upstream => ['2a00:1098::82:1000:3b:1:1', '2a00:1098::80:1000:3b:1:1'],
-		nat64_ranges => ['2a00:1098:0:80:1000:3a::/96', '2a00:1098:0:82:1000:3a::/96'],
+		nat64_ranges => ['64:ff9b::/96'],
 		mailserver => 'mail.ibboard.co.uk',
 		imapserver => 'imap.ibboard.co.uk',
 		mailrelays => ['mx.mythic-beasts.com'],