Network: Difference between revisions
Lynn Macey (talk | contribs) No edit summary |
Lynn Macey (talk | contribs) |
||
| (One intermediate revision by the same user not shown) | |||
| Line 62: | Line 62: | ||
=Certificates= | =Certificates= | ||
A number of internal web sites complain that they are not secure. Clicking through is pretty easy, but this maybe a way to fix that: | A number of internal web sites complain that they are not secure. Clicking through is pretty easy, but this maybe a way to fix that: | ||
[https://gist.github.com/kumakichi/c4476d32b44c0c50043a80a9b771086d Autocert] | [https://gist.github.com/kumakichi/c4476d32b44c0c50043a80a9b771086d Autocert] | ||
=Exterior Gateways= | =Exterior Gateways= | ||
==Comcast/Xfinity== | ==Comcast/Xfinity== | ||
| Line 90: | Line 92: | ||
==Verizon== | ==Verizon== | ||
Return to [[Infrastructure]] | Return to [[Infrastructure]] | ||
Return to [[Technical Guides]] | Return to [[Technical Guides]] | ||
Return to [[Main Page]] | Return to [[Main Page]] | ||
Latest revision as of 09:30, 14 August 2026
Interior Gateway
Netgear Nighthawk Firewall
Gateway is a Netgear AX3000 4-Stream WiFi-6 Router RAX36S.
Internal network: 192.168.86.0/24 Gateway: 192.168.86.1 Netmask: 255.255.255.0 DHCP pool: 192.168.86.201-250 External IP (DHCP): 73.220.78.91 WiFi Network name: macey everyone knows the password who should Guest Network: no Security: Enabled Forwarded ports: 80/443 (TCP/UDP) -> 192.168.86.37 (chico7 on Proxmox server) 34200 (TCP/UDP) -> 192.168.86.11 (Plex Server on macey) 8006 (TCP/UDP) -> 192.168.86.20 (Proxmox server
PiHole
PiHole is a combined DNS and Ad-blocking application running on rufus.
Access with: http://pi.hole:8080 User: pi.hole Password: Eaglesprings123!
Also on rufus is an unbound server that does most of the heavy lifting for DNS as the upstream DNS server.
Unbound (DNS server)
Define local IP addresses in pi.hole under the local DNS section. Local resources are in as name.lan.
The Ad-blocker is controlled with a an ad list for global determination and the white and black lists for local control. Most of the localizations are additions to the white list.
Register.com
Register.com This is the domain registrar for maceys.net and vombo.org. Tagging along is californiacreativity.org, but I don't have anything to do with that domain.
maceys.net expires on 8/31/2025 vombo.org expires on 8/17/2025 The DNS NS records on both of these point to Cloudflare name servers
Long term, these registrations should be moved over to Cloudflare.
IONOS
[ionos.com IONOS] This an ISP that I have used for a very long time. I have actually underused it. I have two packages and the most that I need is one. There are several Atomic/Bidwell domains with name service from here.
Long term, this all needs to be sorted out.
Cloudflare
Cloudflare is my chosen DNS name server. Follow the link and login.
Keys needed elsewhere:
Account ID: 591e95a8cc18e1c1f6b99238e7329555 Zone ID: 85cfae37bb53473b8cd8e9861700249a Global API token: O9hlV9MLhPXuhsf_yN2tR76FqrKqTj1LgXvL57bF
Notes:
Both maceys.net and vombo.org have their DNS services managed through Cloudflare. A wildcard on maceys.net resolves to 80/443 on the primary server in my office known as Proxmox, or pve.
Certificates
A number of internal web sites complain that they are not secure. Clicking through is pretty easy, but this maybe a way to fix that:
Exterior Gateways
Comcast/Xfinity
Xfinity provides cable and internet services to the apartment.
The primary exterior gateway is a Comcast provided cable modem/router.
WAN IP: DHCP supplied but pretty stable. Latest: 3.220.78.91 LAN IP: 192.168.86.1
Account
Account number: 8155600282108276
User ID: lynnmacey@gmail.com
TV: 70 channels
xFi:
Package: 800 Mbps down
Actual: 900+ Mbps down
10 Mbps up
55 Mbps down 5 Mbps up with VPN through Panama - Need to look into that
Hardware
P/N: TG02DCW4482CT Factory Settings Gateway SSID XFSETUP-8528 Password: bacon5496diesel
The gateway is set into bypass mode.
Verizon
Return to Infrastructure Return to Technical Guides Return to Main Page
