Router role.

    rev: v0.14.3

    hooks:

      - id: detect-secrets

        exclude: nsd/shore\.co\.il|roles/router/vars/main\.yaml

  - repo: https://github.com/adrienverge/yamllint

    rev: v1.25.0

---

spamdAS="65066"

AS 65001

fib-update no    # Mandatory, to not update the local routing table

group "spamd-bgp" {

        remote-as $spamdAS

        multihop 64

        announce IPv4 none	# Do not send Route Server any information

	# us.bgp-spamd.net

        neighbor 64.142.121.62

	# eu.bgp-spamd.net

	neighbor 217.31.80.170

	# IPv6 eu.bgp-spamd.net

	neighbor 2a00:15a8:0:100:0:d91f:50aa:1

}

# 'match' is required, to remove entries when routes are withdrawn

# This updates the <bgp-spamd-bypass> table in PF

match from group spamd-bgp community $spamdAS:42  set pftable "bgp-spamd-bypass"

max-lease-time 86400;

default-lease-time 3600;

deny unknown-clients;

authoritative;

use-host-decl-names on;

subnet 192.168.3.0 netmask 255.255.255.0

{

  allow unknown-clients;

  option domain-name-servers 192.168.3.1;

  option routers 192.168.3.1;

  option domain-name "shore.co.il";

  range 192.168.3.100 192.168.3.199;

  host kodi

  {

    #hardware ethernet ac:f1:df:12:33:24;

    hardware ethernet 10:c3:7b:9c:b8:fa;

    fixed-address kodi.shore.co.il;

  }

  host ea6350

  {

    hardware ethernet 60:38:E0:AE:19:4A;

    fixed-address ea6350.shore.co.il;

  }

  host host01

  {

    hardware ethernet C0:7C:D1:C0:02:99;

    fixed-address host01.shore.co.il;

  }

}

127.0.0.1	localhost

::1		localhost

192.168.3.1	ns1

192.168.3.11 ea6350.shore.co.il ea6350

192.168.3.12 xbmc.shore.co.il xbmc kodi.shore.co.il kodi

192.168.3.17 host01.shore.co.il host01