Complete Tailscale Guide; Setup, Deployment, and Hardening

The Complete Tailscale Guide:
Setup, Deployment, and Hardening

If you've ever wrestled with port forwarding, dynamic DNS, or a clunky traditional VPN just to reach a device at home or a server at work, Tailscale is about to change your life. It creates a private mesh network (called a tailnet) across all your devices, wherever they are, with no open ports and no complex firewall rules. It just works.

This guide covers everything: creating and securing your account, installing Tailscale on Windows, Linux, virtual machines, and Docker containers, and hardening your tailnet so it's both maximally secure and actually pleasant to use.

Unifi Cloud Gateway WAN2 Failover Setup

Here is a complete, step-by-step guide for setting up a dual-WAN failover on a UniFi Cloud Gateway (UCG) Max or Ultra network controller!

Your Router Might Be Lying to You:
The Quiet Rise of DNS Hijacking

Over the last six months, I've been seeing more and more DNS hijack infections on routers, switches, and servers. It's a genuinely clever tactic, and it's worth understanding why: the attacker only needs to briefly gain access and very lightly maintain it. Once they've rerouted your DNS to a server they control, they can quietly sit in the middle of your traffic and analyze your traffic packets, harvest credentials, the works.

This isn't theoretical, and it isn't rare. 

My own server and three customer servers have been hit by this class of attack in the last 3 months. I'm writing this to bring some attention to what's going on, explain how these attacks actually work, and (most importantly) show you how to defend your equipment and check whether it's already been hit, without needing to be a network engineer.

Cybersecurity & IT/Networking Apps - iOS

Cybersecurity, Networking & IT Related Apps; That I Actually Use (*For iOS)

I recently put together a list of the Android apps that have actually earned a spot on my phone after 20+ years running Pacific Northwest Computers. I got enough questions about "what about iPhone?" that it's worth doing a proper companion piece.

Cybersecurity & IT/Networking Apps - Android

Cybersecurity, Networking & IT Related Apps; That I Actually Use (*For Android)

After 20+ years running Pacific Northwest Computers, I've installed, uninstalled, and re-installed a lot of "must have" Android apps. Most of what gets marketed as a "hacker toolkit" on the Play Store is either abandoned, repackaged, or outright malicious. So I figured I'd share the apps that have actually earned a spot on my phone for use all of the time, or just if/as needed. Nonetheless, these are the ones I can and do reach for during client visits, network troubleshooting, and security work.

This isn't a sponsored list. 

These are the tools I use, or have used.

How To Setup a Desktop PC as a Server

Desktop PC as a Server:

The Ultimate Setup Guide (Windows 10/11)

Applies to: Windows 10 Pro / Windows 11 Pro (22H2 and later)

The purpose of this guide is to help folks with configuring a standard desktop computer to reliably serve files, printers, and business applications (QuickBooks, Sage, etc.) without downtime or performance lag.

UniFi Console Migration Guide:

Dream Machine Upgrade or Migration: Including Cloud Account Claiming, Cellular WAN Failover, SSH Credential Capture & Orphaned Device Recovery

This guide covers migrating all adopted UniFi devices (APs, switches, cameras) from a Dream Machine (UDM) to a Dream Machine Pro (UDM-Pro) with minimal disruption. It assumes you are replacing the UDM entirely and the UDM-Pro will take the same network role.

This guide has been updated with real-world field experience from an actual UDM → UDM-Pro migration, including the cloud account claiming procedure, Mesh AP tweaks required post-restore, and cellular WAN failover configuration using a designated LAN port as WAN3.

 

PNW Computers' Recommended Hardware

After years of working with small and medium businesses across the Pacific Northwest, I've learned one fundamental truth: the right hardware makes all the difference. Whether you're building out a new office network, upgrading your storage infrastructure, or simply need a reliable mouse that won't quit on you during a critical deadline, choosing the right equipment saves time, money, and headaches down the road.

This guide represents my go-to recommendations for devices that consistently deliver performance, reliability, and value. These aren't just products I recommend; they're the equipment I trust for my own infrastructure and confidently recommend to clients.

Quickbooks Multi-User Hosting Troubleshooting

QuickBooks Multi-User Troubleshooting:
Workstation(s) & Server

Please follow these steps to make sure only your server is hosting QuickBooks, and that the QuickBooks Database Server is working correctly.

The Computer, IT & Cybersecurity Guide & Manual(s) Trifecta

 

Announcing Three "IT Guide" Projects!

I am thrilled to announce the launch of three new, powerful resources on GitHub designed to help you navigate, understand, and master the world of technology, from fundamental computing to advanced cybersecurity. Whether you're a complete beginner, an aspiring IT professional, or a seasoned enthusiast, this new collection has something crucial for you.

Setting Up OPNsense as a Private DNS Server with Intrusion Detection (ProxMoxVE)

Setting Up OPNsense as a Private DNS Server with Intrusion Detection in a Proxmox VM

Transform your network security with a dedicated DNS server and real-time threat detection

Set your Windows PC Network Profile to Private and Make Sure File and Print Sharing is On

Ensure Your Windows PC's Network is Set to Private and File & Printer Sharing Settings Are Correct!

1. Check and Set Your Network Profile to Private

• Open Settings:

• Press Windows + I to open the Settings app.
• Go to Network & Internet:
• In the left-hand menu, click on "Network & Internet."
• Choose Your Network:
• Click on "Properties" next to your current network connection (e.g., Wi-Fi or Ethernet).
• Set Network Profile to Private:
• Under "Network profile type," select "Private."
• This setting makes your PC discoverable on the network, which is necessary for File and Printer Sharing.

Make 802.11ac Work Correctly On A Linksys WRT1900AC

Make 802.11ac Work Correctly On A Linksys WRT1900AC Router

I have had a Linksys WRT1900AC router for quiet sometime now, and in it's name it says that is an AC router. Since I have AC compatible Wifi devices, theoretically I should be able to get a max speed of around 1300 Mbps. In reality it would likely see something around 600 Mbps to something around 1024 Mbps due to the connections being wireless and can have interference. What I recently discovered though was that I was getting 802.11n speeds on my devices. I found that to be weird. So  I checked the route's settings.

Under "Network Mode" in the router's settings (logged in through a browser via the router's IP address), I found that the only options for wireless network modes were for A, N or A/N. But nowhere in the menus/options does it specify an option for 802.11ac!?

That was baffling to me seeing as this router is capable of doing 802.11ac according to Linksys AND it's in the devices NAME. So I figured that I was doing something wrong or I was not looking in the right place. Naturally, I checked their FAQ section and found nothing on this.
I also did what I tell ALL my customers to do and read the manual; found no assistance there.

After doing someone line research I found that if flipped the setting in "Network Mode from A/N only to Mixed (and after a reboot of the router) I had 802.11ac speeds! This router apparently HAS to be on "Mixed Mode" for AC speeds to be achieved. Very odd that Linksys would NOT include an AC option in the "Network Mode" section in the router settings, or make it more clear the A/N mode disables/prevents AC speeds all together.

Since I was able to figure it out, I wanted to make this post to hopefully help folks out that find themselves with the same or similar issue!

Pacific Northwest Computers

www.pnwcomputers.com

360.624.7379