IONOS

[ionos.com IONOS] This an ISP that I have used for a very long time. I have actually underused it. I have two packages and the most that I need is one. There are a serious number of Atomic/Bidwell domains that come here.

Long term, this all needs to be sorted out.

PiHole

PiHole is a combined DNS and Ad-blocking application running on rufus.

Access with: http://pi.hole:8080
User: pi.hole
Password: Eaglesprings123!

Also on rufus is an unbound server that does most of the heavy lifting for DNS as the upstream DNS server.

Unbound (DNS server)

Define local IP addresses in pi.hole under the local DNS section. Local resources are in as name.lan.

The Ad-blocker is controlled with a an ad list for global determination and the white and black lists for local control. Most of the localizations are additions to the white list.

Register.com

Register.com This is the domain registrar for maceys.net and vombo.org. Tagging along is californiacreativity.org, but I don't have anything to do with that domain.

maceys.net expires on 8/31/2025
vombo.org expires on 8/17/2025
The DNS NS records on both of these point to Cloudflare name servers

Long term, these registrations should be moved over to Cloudflare.

Cloudflare

Cloudflare is my chosen DNS name server. Follow the link and login.

Keys needed elsewhere:

Account ID: 591e95a8cc18e1c1f6b99238e7329555
Zone ID: 85cfae37bb53473b8cd8e9861700249a
Global API token: O9hlV9MLhPXuhsf_yN2tR76FqrKqTj1LgXvL57bF

Notes:

Both maceys.net and vombo.org have their DNS services managed through Cloudflare. A wildcard on maceys.net resolves to 80/443 on the primary server in my office known as Proxmox, or pve.

Exterior Gateways

AT&T

AT&T provides a fiber connection to the apartment. It has been the backup internet connection for everything in the apartment.

I plan to retire this in favor of the Verizon solution after doing a brief evaluation.

The secondary exterior gateway is a fiber router supplied by AT&T.

Model: BGW320-505
WAN IP: DHCP supplied but pretty stable
LAN IP: 192.168.1.254
WiFi Network: ATTaS3B6rK
Device access code: 337\<6=&6\  
Current password: The Usual one

Comcast/Xfinity

Xfinity provides cable and internet services to the apartment.

The primary exterior gateway is a Comcast provided cable modem/router.

WAN IP: DHCP supplied but pretty stable. Latest: 73.48.154.237
LAN IP: 192.168.86.1

Account

Account number: 8155600282108276
User ID: lynnmacey@gmail.com
TV: 70 channels
xFi: 
 Package: 800 Mbps down
 Actual: 900+ Mbps down 
         10 Mbps up
         55 Mbps down 5 Mbps up with VPN through Panama - Need to look into that

Hardware

P/N: TG02DCW4482CT
Factory Settings
Gateway SSID XFSETUP-8528
Password: bacon5496diesel

The gateway is set into bypass mode.

Interior Gateway

Netgear Nighthawk Firewall

Gateway is a Netgear AX3000 4-Stream WiFi-6 Router RAX36S.

Documentation

Internal network: 192.168.86.0/24
Gateway: 192.168.86.1
Netmask: 255.255.255.0
DHCP pool: 192.168.86.201-250
External IP (DHCP): 73.48.154.237/24 Gateway: 73.48.154.1
WiFi Network name: macey everyone knows the password who should 
Guest Network: no
Security: Enabled
Forwarded ports: 
  80/443 (TCP/UDP) -> 192.168.86.37 (chico7 on Proxmox server)
  34200 (TCP/UDP) -> 192.168.86.11 (Plex Server on macey)
  8006 (TCP/UDP) -> 192.168.86.20 (Proxmox server

Return to Infrastructure Return to Technical Guides Return to Main Page