Cursed Silicons Wiki - User contributions [en]

CGHMN-IP-Allocations

2026-06-13T21:12:39Z

Bredo: Remove table of member IP allocations, link to signup page instead

Known Bugs

2026-05-27T22:33:35Z

Bredo: get categorised!!!

[[Category:Compu-Global-Hyper-Mega-Net]]
=== Just a scratchpad for "stuff that is known to not work and needs fixing" ===

===== PvPGN =====
PvPGN, the BattleNet emulator on the network seems to error out when StarCraft clients running Mac OS X (PowerPC) connect with game client 1.16.1

1.15.2 on Mac OS 9 works.

'''Unsure if x86 Mac is also broken?'''

External Services

2026-05-27T22:33:15Z

Bredo: get categorised!!!

[[Category:Compu-Global-Hyper-Mega-Net]]
So! You want to run services on CGHMN. But you also want them to be accessible to the broader internet?

By default the network is designed to be effectively "hermetically sealed". IE: Clients can connect '''''into the network''''' but aren't really meant to have internet access or the ability to talk to "the outside"

This is still "the default" for the innumerable amount of security (and legal!) issues that could arise for the network if we effectively acted as an "open web proxy with extra steps" but that's not a discussion for here!

Currently the two ways to bridge external services are

1. '''Run your own gateway!''' We can't really "stop" you from running a proxy to the real internet or other services. We can (and do) '''''heavily suggest against this''''' as anything (and everything) that comes out of it is effectively "your" traffic.

At the bare minimum you probably want to use some kind of IP whitelisting (both for source and destination) and bandwidth limiting. Anything you can do to minimize harm to yourself the better!

2. '''Use a middlebox!''' Okay so this isn't much "more" fool-proofed than option #1 but is effectively how we've got the (few) services that warrant internet access configured.

CGHMN NAT and Firewalls

2026-05-27T22:32:45Z

Bredo: get categorised!!!

[[Category:Compu-Global-Hyper-Mega-Net]]
=== A brief history on how the internet worked in the 1990's ===

[[Compu-Global-Hyper-Mega-Net|Compu-Global-Hyper-Mega-Net (CGHMN)]] exists in a difficult kind of space. We aim to emulate "the old web". A time of roughly "1995 to around 2005 or so". A sort of nebulous "Before Web 2.0 took off" kind of period. Though, really we support anything that speaks ethernet and (usually) TCP/IP. We've had devices as old as a DOS 286 PC clone connected successfully. Most users trend toward Windows XP as their platform of choice due to its relative flexibility and widespread hardware and software support

Unfortunately for all of us we live at the "[[wikipedia:End_of_history|end of history]]". In 1995 the "World Wide Web" was in its infancy in such a way that every single year brought quantum technological leaps over the previous year. By the end of the millennium we'd gone from rudimentary analog Dial-Up services to ''Wireless Networking'' being accessible to consumers (Apple's AirPort routers alone showed up in 1999)

However on a technical level this began to create severe issues. The internet as it was originally designed assumed simple "end-to-end" connectivity. Every computer on the internet could (more or less) talk to another computer without exception.

<big>'''This created two major problems:'''</big>

The first one was IP exhaustion. Even by the 1990's there was an understanding that there simply wouldn't be enough IP addresses for everyone on the internet. This needed to be fixed, and fast! This lead to IPv6 as an evolutionary upgrade (a problem the internet still struggles to even deploy in 2025, despite being ratified in 1998)

The second, and much more obvious problem was security. By the year 2000 it was obviously apparent that every machine being able to talk to every other machine on Earth was a problem. Particularly when the dominant operating system these machines ran was what could be charitably described as..."not great" in terms of security. In the 2000's this would only escalate as the "[[wikipedia:ILOVEYOU|ILOVEYOU]]" worm gave way to some of Windows XP's greatest hits, [[wikipedia:Blaster_(computer_worm)|Blaster]], [[wikipedia:Sasser_(computer_worm)|Sasser]], [[wikipedia:Mydoom|Mydoom]], [[wikipedia:Nimda|Nimda]] and [[wikipedia:Conficker|Conficker]]. Among others.

A remedy proposed in the 1990's to the issue of IP exhaustion was "Network Address Translation" or "NAT". In layman terms this allows a bunch of computers to all sit behind a single IP address using a device such as a router. This technology is so ubiquitous that even in 2025 at time of writing it's still the defacto standard for home and business computers and other devices to access the modern internet.

'''''However,''''' this technology came at a cost. The internet as most folks imagine (or remember it) was originally built on the idea that every computer had its own, unique, IP address. NAT broke that assumption. And, in doing so, programs broke. Sometimes completely with services like FTP, sometimes in subtle ways. Like being unable to connect certain game players in a StarCraft lobby.

The problem that NAT introduced was that while "outbound" traffic would work fine. Such as you connecting to a website. If a program needed to ''receive'' data on your local computer, it could no longer simply sit and wait for a connection from a remote PC. An example would be AOL Instant Messenger (AIM). Chats between users are routed through a remote server. You and the Other User talk to a central server and it handles sending messages to-and-fro. ''However'' to save on bandwidth, sending files happens directly between users. If either user is behind NAT. They won't be able to "see" the remote computer and send data to it as desired.

The "solution" to this problem is known as '''''Port Forwarding'''''. You tell your router that [these ports] *always* go to [this IP address on the LAN] exclusively. This (mostly) solved the problem at the time. Additional solutions were proposed such as "UPnP" to allow programs to ask the router to forward ports for them dynamically. However, support for this was few-and-far-between (mostly BitTorrent clients) and in time it faded into oblivion.

As stated before, we live at the end of history. Which means we have the benefit of looking back on what was, and understanding the flaws. Which (finally) brings us to the point of this wiki page.

=== Okay but what does that have to do with CGHMN? ===
Every CGHMN user is allocated a /24 block of IP's. Effectively every user has 253 IP addresses to use as they'd like. This was a deliberate decision both to maximize the amount of freedom users would have to connect ALL their retro equipment if desired, and to try and allow direct end-to-end connectivity that the old web "expects"

'''''However''''' because we have the benefit of historical hindsight. Having directly allocated IP addresses does not mean that your devices are directly exposed to the network. By default (if using OpenWRT with Snep's setup script) your IP block will be ''firewalled'' against incoming connections. This is a necessary security measure because because of the very nature of "running a retro network". Connecting machines that are (likely) un-patched would make them immediately vulnerable to attack. Even before they're properly configured for service by the end user.

=== So, what stuff breaks, exactly? ===

There's no definitive list of "what" breaks under this decision. A broad (but by no means encompassing) list of things that ''won't work'' are

- Servers. You won't be able to run any kind of server or service (EG: hosting your own website, running a game server) without the ability for users to connect to it

- Games that '''''don't''''' use a server browser. Games like Quake or Halo where users all connect to a single server to play on will work (provided the server is either port forwarded or the firewall is disabled) but other games such as StarCraft or Command & Conquer have players connect dynamically connect to a single player as the "host" (typically the player that created the game lobby). These will not work

- FTP! FTP is such an old protocol that the '''''remote server''''' initiates a connection back to the client and then begins sending files that way. This was fixed in [https://datatracker.ietf.org/doc/html/rfc1579 RFC 1579] with the "Firewall-Friendly FTP" proposal. Unfortunately despite being proposed in February 1994, some software such as Microsoft FrontPage did not enable it until 2003(!)

- AIM file transfers. As described already on this wiki page, AIM (and IRC and other chat clients such as MSN or Yahoo) all use a direct connection between two computers to send files across a network

=== How do I opt-out out? ===
<br>

<br>

<big>'''It should be made completely clear that opting out of using the OpenWRT firewall is not a decision that should be made lightly. We cannot explicitly guarantee that a user won't accidentally (or intentionally) release a malware Pandora's Box on the network. Blaster/Sasser/Mydoom/ILOVEYOU/etc are still real malware samples that can be downloaded and executed either by mistake or by a malicious user. We highly recommend installing any and all software patches that were (or are) available for your chosen systems before doing this!'''</big>

There are two "modes" of opt-out available. Depending on user preference.

The most drastic is simply to disable OpenWRT's firewall completely. This means any machine you plug in will have direct access to the network and any other devices on the network will be able to directly access it. If you choose this option we highly recommend putting any machines behind a (preferably modern!) Firewall and then port forwarding as necessary

The other option is to set a static (fixed) IP address on the device you want to run servers or play games from. Once this is done you can access the OpenWRT Firewall page (Network -> Firewall -> Traffic Rules) and manually allow the required ports for that specific host to pass the firewall.

CGHMN Hosting

2026-05-27T22:32:30Z

Bredo: get categorised!!!

[[Category:Compu-Global-Hyper-Mega-Net]]
One of the headline features of the early web was users being able to host their own websites. This was typically accomplished through services such as Geocities, free webhosting from your ISP or other large organizations such as universities.

Compu-Global-Hyper-Mega-Net's network design makes it fairly trivial for users of sufficient technical capacity to host their own sites and services. Indeed many users already do just that. Either running websites, game servers or other things that fit their interests.

This page acts to document the types of services offered by CGHMN and how users may access them.

__TOC__

=== Domain Registration ===
CGHMN in one of its many branching roles functions as a ''root DNS server''. What that means in a technical sense is outside the scope of this document. But for the end-user it means that if you want a website, we can handle gluing a domain name (such as "cursedsilicon.retro") to an IP address your service is running on.

CGHMN offers '''''.retro''''' as the "defacto" domain extension (TLD) for use on the network. This was chosen both to fit the scope of the project and to provide a domain that would not cause real-world DNS lookup issues. There is also '''''.cghmn''''' for services core to CGHMN itself. However these domains are rare as most infrastructure is run by members and staff of the project, rather than directly run by the network.

If you would like to get your own domain(s) for running services on CGHMN's network. You will need to email domains@cghmn-mail.retro from inside the CGHMN network. If you don't have an email address, you can register a free email account at <nowiki>http://cghmn-mail.retro/register</nowiki> and then email us.

In the email simply put a list of domain names and IP addresses you want the domains to correspond to. An example might look like
cursedsilicon.retro 100.96.52.3
runescape2.retro 100.96.52.7
classic.runescape.retro 100.96.52.5
This email inbox is monitored semi-regularly by the CGHMN Staff. Once we've read the email we'll make an effort to action the changes and email you with a reply letting you know. DNS '''''updates''''' may take a few hours to propagate. Particularly if you require changes after the domain is registered.

=== Bring Your Own TLD ===
One of the benefits of running our own "retro internet" service is that we're (largely) un-burdened by the constraints of the regular web. While "classic" domains such as .com, .net .org etc are reserved and '''''will not be delegated to a user'''''. Custom TLD's are available for use if the user would like to have their own domain name extension.

This allows for a greater degree of user freedom and customization. Examples of custom TLD's include ChivaNet who own the '''''chivanet''''' TLD. Typing www.chivanet will take you to their main website.

The caveat to this is that custom TLD's are expected to be hosted and handled <u>'''entirely by the end user'''</u>'''.''' Our DNS server (BIND) will return your custom TLD's DNS server in requests. But the availability and domains running on it are expected to be handled by the user who owns the TLD. We do not promise (nor expect of the user) any reliability of these custom TLD's. We simply make the functionality available for use.

If you would like to request your own TLD. Please email dns@cghmn-mail.retro from inside the CGHMN network. If you don't have an email address, you can register a free email account at <nowiki>http://cghmn-mail.retro/register</nowiki> and then email us. We'll work with you to verify your DNS server compatibility with modern BIND (not all servers are compatible out of the box, such as Windows Server DNS) and integrate it with the CGHMN DNS network.

=== Server hosting ===
At this time we do not (currently) have the resources to host websites or other servers for members. There is a desire to eventually offer this as a "paid" service where members (likely via Patreon?) will gain access to a Proxmox server and IP block which they can spin up as many virtual servers as they desire up to a fixed quota of CPU/Memory/Hard disk. This service will be offered '''''at cost of physically hosting the server''''' in order to make it as cheap for users as possible

CGHMN Certificate Authority

2026-05-27T22:32:10Z

Bredo: get categorised!!!

[[Category:Compu-Global-Hyper-Mega-Net]]
=== The CGHMN Certificate Authority ===
... is used to create internal certificates for old SSL and TLS applications with our custom domains .cghmn and .retro, which cannot receive actual, real world publicly trusted certificates.

To trust those certificates, navigate to http://certs.cghmn, download the Root CA certificate and install it into your operating systems root CA store.

'''WARNING:''' Only do this on retro machines that are attached to the CGHMN, don't do this on modern machines with data you care for and websites you'd rather not have potentially [[wikipedia:Man-in-the-middle_attack|MITM]]'ed. Installing and trustig the Root CA certificate would allow us (or anyone that has access to the root CA public and private keys together with the signing password) to create whatever certificate we like for any domain name out there and fool your OS into thinking it can trust that self-signed certificate.

Alternatively, you can always just click "Trust this page" or similar in your web browser and most applications that rely on SSL/TLS have some option to disable CA checking.

=== How to obtain a certificate for your .cghmn or .retro domain ===
If you'd like a certificate for your CGHMN internal domain, ping one of the admins in the Discord channel and pass along the following infos:

* Domain Name: The domain you'd like to receive a certificate for
* How to best send you your certificate, e.g. Discord DMs, E-Mail, some Messenger, Filesharing service etc., best not through a public channel
* Optionally:
** If you want a wildcard certificate, i.e. one certificate for the domain above and all subdomains underneath that domain (e.g. *.example.org)
** If you'd like the private key to be protected with a randomly generated password
** What two letter code to fill into the "Country" field of the certificate, default is "XX"
** What to fill into the "State or Province" field of the certificate, default is "Global"
** What to fill into the "Locality" field of the certificate, defaut is "The Internet"
** What to fill into the "Organization Name" field of the certificate, default is "Compu Global Hyper Mega Network"
** What to fill into the "Organizational Unit" field of the certificate, default is your username
** What to fill into the "E-Mail" field of the certificate, default is "complain@mail.cghmn"
** ''All of the above can be freely chosen and be whatever you like''

Then we'll create the certificate, private key and full chain certificate and send it over so you can install it into whatever service you like!

=== How to generate a certificate - For CGHMN Admins ===
[[File:Example Certificate Script Run.png|thumb|Script Example Output]]
To generate a members' certificate, <code>ssh</code> or <code>pct enter</code> into Container <code>11013</code> with IP address 100.64.11.13. In the root directory should be a Bash script called <code>create-and-sign-server-csr.sh</code>, run it with <code>bash /root/create-and-sign-server-csr.sh</code>.

It will first ask you what the output files should be called, it's best to enter something that associates the file with the target domain or member, e.g. the domain itself or the members' username. It's recommended to only use alpha-numerical characters, dashes, underscores and dots.

Next, you're asked if the key shall be protected with a password. If the member didn't specify or doesn't want one, you can just press '''Enter''' on this step to select the default value of ''not'' using a password. Otherwise type '''y''' and press '''Enter''' to confirm, then generate a random password with a website, tool or password manager of your choice and input said password in the "Enter PEM pass phrase" prompt. The password needs to be at least 4 characters long!

The next step asks you for the hostnames of the certificate. Enter all hostnames you want the certificate to be valid for, e.g. <code>example.retro</code>, <code>www.example.retro</code> and <code>mail.example.retro</code>. If the member requested a wildcard certificate, enter the base domain first, e.g. <code>example.retro</code>, followed by the wildcard domain, e.g. <code>*.example.retro</code>. Once all domain names are entered, press '''Ctrl+D''' to confirm.

If you've specified '''y''' at the question above if the private key should be password protected, you will next be asked to re-enter that password.

Next, you'll be asked for the Common Name, there enter the base domain for which the certificate is valid, e.g. '''example.retro'''.

Then, some certificate options can be set like Country, Organization and E-Mail assigned with the certificate, which are most of the optional details listed above that the member can specify if they like, which does not need to be real data, it can be whatever they like. Otherwise, just press '''Enter''' on the fields to select the predefined default values.

The next password requested from you is the Intermediate CA Signing Password, followed by two confirmations if you really really want to sign the new certificates with our intermediate CA. Input '''y''' and press '''Enter''' both times.

Now the certificate is created and ready for use, the script will tell you into which directory it has written the certificate files.

All that's left to do now is to SCP the files off the CA container and send them over to the member in a secure-ish fashion through their prefered channel. Don't send them in the Discord channel unless they're fine with it since it allows someone else to more easily impersonate their site, not that that's a huge concern in the CGHMN network, but still.

Example Setups

2026-05-27T22:18:57Z

Bredo:

[[Category:Compu-Global-Hyper-Mega-Net]]
Example setups for connecting to CGHMN:

[[OpenWRT as a Proxmox VM]]

OpenWRT as a Proxmox VM

2026-05-27T22:17:54Z

Bredo: Add Category

[[Category:Compu-Global-Hyper-Mega-Net]]
=== Proxmox with single network interface CGHMN setup with virtual OpenWRT: ===

'''Make sure you have signed up for CGHMN first before starting this! You will need to imput various details sent in your welcome message.'''

==== 1. Create new bridge in Proxmox VE ====
a. Add the following to your network bridge:
auto <name-of-bridge>
iface <name-of-bridge>
bridge-ports none
bridge-stp off
bridge-fd 0
post-up echo 1 > /proc/sys/net/ipv4/ip_forward
<code><name-of-bridge></code> should be an available vmbr# interface, such as <code>vmbr1</code>. This bridge will be dedicated to all our CGHMN Proxmox VMs going forward.

b. Run:
systemctl networking restart
c. Confirm configuration is correct with:
ip a
Example output:
21: vmbr1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000

====== 2. Create new OpenWRT VM ([https://computingforgeeks.com/install-and-configure-openwrt-vm-on-proxmox-ve/ based off this tutorial]). ======
a. Download the <code>x86-64-generic-ext4-combined.img.gz</code> OpenWRT image

b. Transfer it to your Proxmox system using SFTP

c. Decompress it so you have a .img file using gzip:
gzip -d openwrt*.img.gz
d. To make space for additional software that we're going to install to OpenWRT later, grow the disk image to 1GB:
qemu-img resize -f raw ./openwrt.img 1G
e. Create the VM using the following command:
qm create --name <vm-name> <available-vm-id#> --memory 256 --cores 1 --cpu cputype=kvm64 --net0 virtio,bridge=<existing-proxmox-network-bridge> --net1 virtio,bridge=<name-of-bridge> --scsihw virtio-scsi-pci --numa 1
f. Check for available VM disk stores:
pvesm status
Example Output:
Name Type Status Total Used Available %
local dir active 772966856 53281488 680347384 6.89%
g. Import disk image into VM:
qm importdisk <available-vm-id#> ./openwrt.img <vm-disk-store>
Example Output:
transferred 0.0 GiB of 1.0 GiB (0.00%)
...
transferred 1.0 GiB of 1.0 GiB (99.59%)
transferred 1.0 GiB of 1.0 GiB (100.00%)
transferred 1.0 GiB of 1.0 GiB (100.00%)
Successfully imported disk as 'unused0:local:102/vm-102-disk-0.raw'
h. Attach imported disk to VM:
qm set <available-vm-id#> --scsihw virtio-scsi-pci --virtio0 <vm-disk-store>:<available-vm-id#>/vm-<available-vm-id#>-disk-0.raw
Example Output:
update VM 102: -scsihw virtio-scsi-pci -virtio0 local:102/vm-102-disk-0.raw
i. Set serial console and boot order priority:
qm set <available-vm-id#> --serial0 socket --vga serial0
qm set <available-vm-id#> --boot c --bootdisk virtio0
j. (optional if you want it to boot on Proxmox startup) - Configure VM to start up on system boot:
qm set <available-vm-id#> --onboot 1

====== 3. Configure OpenWRT ======
a. Start VM and connect to the console. Once started enter the console shell by pressing Enter.

b. Set a new root password:
passwd
c. Show current network configuration:
uci show network
d. Set a static IP address that is accessible from another VM with a GUI (this will make troubleshooting and checking your config easier). For example if you have a VM at <code>203.0.113.100</code> and your existing bridge subnet is <code>203.0.113.0/24</code>, then you could set your OpenWRT's <code>vmbr0</code> interface to be <code>203.0.113.101</code>.

e. Do the above by editing <code>/etc/config/network</code> file and adding the following:
config interface 'lan'
option device 'br-lan'
option proto 'static'
option ipaddr '<your-chosen-IP-address>'
option netmask '<matching-netmask-with-vmbr0>'
option gateway '<vmbr0-gateway-ip-for-internet-access>'
list dns '<public-dns-resolver-such-as-quad9-or-google>'
list dns '<2nd-public-dns-resolver>'
<list as many resolvers as you would like>

config interface 'retro_lan'
option device 'br-retrolan'
option proto 'static'
option ipaddr '<cghmn-assigned-subnet>'
option netmask '<cghmn-assigned-netmask-usually-255.255.255.0>'
option multipath 'off'
list dns '100.64.11.1'
list dns '100.64.12.2'
f. Add a static route to allow for your router to reach the internet. This should be the IP of the Proxmox VE's <code>vmbr0</code> interface. For example, if <code>vmbr0</code> on Proxmox VE is configured as <code>203.0.113.1</code>, you would put that in this command on OpenWRT so it would know who to communicate with to get to the internet. You can do this by adding the following to <code>/etc/config/network</code>:
config route
option interface 'lan'
option target '0.0.0.0/0'
option gateway '203.0.113.1'
g. Restart the networking stack to read the new configuration settings:
/etc/init.d/network restart
i. Update your package lists:
apk update
j. Install any additional desired software using apk, such as wget (needed for the next step)

k. Download the <code>get-connected.sh</code> script to your OpenWRT router by following the steps [[How to Get Connected|here]]

l. Once the steps from the link are completed, reboot your VM and reconnect. Your Wireguard connection should establish automatically and be bridged through the Wireguard tunnel to CGHMN, and your systems should automatically get an IP address from your assigned subnet. Additional configuration should have been added to <code>/etc/config/network</code> to accommodate the Wireguard connection. '''If you need to share the contents of this file make sure you do not include your''' <code>private_key</code> '''from the configuration!''' Your <code>public_key</code> is OK to share.

Example Setups

2026-05-27T22:17:39Z

Bredo: Add Category

[[Category:Compu-Global-Hyper-Mega-Net]]
The following are some example setups for connecting to CGHMN:

[[OpenWRT as a Proxmox VM]]

Example Setups

2026-05-27T22:15:07Z

Bredo: add OpenWRT as a Proxmox VM

The following are some example setups for connecting to CGHMN:

[[OpenWRT as a Proxmox VM]]

Example Setups

2026-05-27T22:08:01Z

Bredo: Create page for example setups

The following are some example setups for connecting to CGHMN:

CGHMN-IP-Allocations

2026-05-22T01:16:08Z

Bredo: add my domain, add .yg tld to document it exists

=== IP Address Allocations in the CGHMN Network ===
This page documents any IP addresses that are allocated statically to routers, subnets and members.

=== Networks on the CGHMN side ===
This is a list of all networks active on the CGHMN server side.
{| class="wikitable"
|+
!Network Name
!VLAN
!Subnet
!Router IP
!Notes
|-
|Core Services
| -
|100.64.11.0/24
|100.64.1.1
| -
|-
|CGHMN VMs
| -
| 100.64.21.0/24
| 100.64.21.1
| -
|-
|Wireguard Members Tunnel
| -
|100.89.128.0/22
|100.89.128.0
|The .0 for the router is not a typo, on P2P links the network address can also be used for a host
|}

=== Members' Networks ===
This list contains the subnets that are assigned to member routers on the network. Members which need routed subnets receive one <code>/24</code> network from the <code>100.96.0.0/13</code> block, in first-come-first-serve sequential order per default. Members who only need a single IP receive an IP from the <code>100.96.0.0/24</code> block, in first-come-first-serve sequential order per default.
{| class="wikitable"
|+
!Member Name
!Peer Endpoint/Via
!Tunnel IP
!Routed Subnet(s)
!Notes
|-
|CursedSilicon
|/dev/hack (usually)
|100.89.128.1
|100.96.1.0/24
| -
|-
|Talija
| DIY
|100.89.128.2
|100.96.2.0/24
| -
|-
|Snep
|OPNsense box and PPPoE server
|100.89.128.3
|100.96.3.0/24
| -
|-
|Snep
|PC VPN tunnel
|100.89.128.4
| -
| -
|-
|Hadn69
| DIY
|100.89.128.5
|100.96.5.0/24
| -
|-
|Lily
| Dell PowerEdge R620
|100.89.128.6
|100.96.6.0/24
| -
|-
|Theothertom
| OpenBSD VM
|100.89.128.7
|100.96.7.0/24
| -
|-
|Lily
| Raspberry Pi
|100.89.128.8
|100.96.8.0/24
| -
|-
|Loganius
| PPTP Bridge on Debian VM
|100.89.128.9
|100.96.9.0/24
| Using Microsoft Virtual Server 2005 under Windows Server 2003.
|-
|GothPanda
| OpenWRT
|100.89.128.10
|100.96.10.0/24
| TP-Link Archer C59 v2
|-
|ch0ccyra1n
| Unknown
|100.89.128.11
|100.96.11.0/24
| -
|-
|Chromaryu
|Unknown
|100.89.128.12
|100.96.12.0/24
| -
|-
|Serena
|Unknown
|100.89.128.13
|100.96.13.0/24
|Chivanet
|-
|CursedSilicon
|OpenWRT VM
|100.89.128.14
|100.96.14.0/24
|At home
|-
|Mel
|OpenWRT VM
|100.89.128.15
|100.96.15.0/24
|"Glinet Nugget"
|-
|Spz2024
|OpenWRT VM
|100.89.128.16
|100.96.16.0/24
| OpenWRT in QEMU on Windows host
|-
|Spaztron64
|Unknown
|100.89.128.17
|100.96.17.0/24
| -
|-
|Harry
|Unknown
|100.89.128.18
|100.96.18.0/24
| -
|-
|Mel
|OpenWRT VM
|100.89.128.19
|100.96.19.0/24
|OpenWRT VM
|-
|Spaztron64
|Unknown
|100.89.128.20
|100.96.20.0/24
| -
|-
|TsuboDii
|Unknown
|100.89.128.21
|100.96.21.0/24
| -
|-
|j4yc33
|Unknown
|100.89.128.22
|100.96.22.0/24
| -
|-
|CursedSilicon
|Unknown
|100.89.128.23
|100.96.23.0/24
|"Travel Router"
|-
|Dusty
|Unknown
|100.89.128.24
|100.96.24.0/24
| -
|-
|Nicuuut
|Unknown
|100.89.128.25
|100.96.25.0/24
| -
|-
|Tyler McVicker
|Unknown
|100.89.128.26
|100.96.26.0/24
|"Game Servers"
|-
|YoungChief
|Unknown
|100.89.128.27
|100.96.27.0/24
| -
|-
|Zefie
|Unknown
|100.89.128.28
|100.96.28.0/24
| -
|-
|CH
|Unknown
|100.89.128.29
|100.96.29.0/24
| -
|-
|Alyx
|Unknown
|100.89.128.30
|100.96.30.0/24
| -
|-
|Alyx
|Unknown
|100.89.128.31
|100.96.31.0/24
|"Datacenter"
|-
|Grawity
|Unknown
|100.89.128.32
|100.96.32.0/24
| -
|-
|pmc
|Unknown
|100.89.128.33
|100.96.33.0/24
| -
|-
|kirb
|Unknown
|100.89.128.34
|100.96.34.0/24
| -
|-
|GothPanda
|Unknown
|100.96.0.1
|N/A
|Proxy
|-
|Loganius
|Lenovo Yoga 6 that's falling apart.
|100.96.0.2
|N/A
|Travel
|-
|i430vx
|Unknown
|100.89.128.35
|100.96.35.0/24
| -
|-
|rwf93
|Unknown
|100.89.128.36
|100.96.36.0/24
| -
|-
|accipitroid
|Unknown
|100.89.128.37
|100.96.37.0/24
| -
|}

=== Member-Delegated (Sub-) Domains ===
{| class="wikitable"
|+
!Member Name
!Domain
!Nameserver
!Nameserver IP
!Notes
|-
|Serena
|chivanet
|pandora.chivanet
|100.96.13.7
| -
|-
|Nicuuut
|goat
|sanemi.nicuuut.goat
|172.23.0.53
| -
|-
|Talija
|coyote.retro
|a.ns.coyote.retro
|100.96.2.53
| -
|-
|''Snep''
|''snep.retro''
|''ns1.snep.retro''
|''172.23.8.11''
| Currently offline
|-
|Lily
|lily.retro
|ns1.lily.retro
|100.96.6.250
| -
|-
|Loganius
|loganius.retro
|kirk.loganius.retro
|100.96.9.3
| -
|-
|theothertom
|theothertom.retro
|north-foreland.theothertom.retro
|100.96.7.12
| -
|-
|Spaztron64
|arcesia.retro
|ns.arcesia.retro
|100.96.17.105
| -
|-
|ch0ccyra1n
|oohay.retro
|ns1.oohay.retro
|100.96.11.197
| -
|-
|ch0ccyra1n
|mac
|ns1.oohay.retro
|100.96.11.197
| -
|-
|Harry
|404.retro
|ns.404.retro
|100.96.18.254
| -
|-
|GothPanda
|northstar.retro
|ns1.northstar.retro
|172.23.3.201
| -
|-
|Loganius
|askme.retro
|kirk.loganius.retro
|100.96.9.3
| -
|-
|PurpleJillybeans
|n8fq.retro
|ns.n8fq.retro
|100.68.39.1
| -
|-
|PurpleJillybeans
|sha.retro
|ns.n8fq.retro
|100.68.39.1
| -
|-
|PurpleJillybeans
|weather.retro
|ns.n8fq.retro
|100.68.39.1
| -
|-
|bredo
|drgn.retro
|yip.drgn.retro
|100.68.61.4
| -
|-
|YesterGearPC
|yg
|ns1.yg
|100.68.144.2
| -
|}

=== Member Servers hosted on the CGHMN side ===
{| class="wikitable"
|+
!Member Name
!VM/CT ID
!Server Name
!Server IP
!Notes
|-
|Snep
|10811
|srv01.snep.retro
|172.23.8.11
| -
|-
|Talija
|118
|junko.coyote.retro
|172.23.3.173
|Network diagnostics
|-
|Loganius
|103
|kira.loganius.retro
|100.64.21.4
|WMS Server
|-
|Cursed
|107
|cghmn-mail.retro
|172.23.0.69
|Mail Server
|-
|Nicuuut
|124
|sanemi.nicuuut.goat
|172.23.0.53
| -
|-
|Nicuuut
|103
|mitsuri.nicuuut.goat
|172.23.0.54
| -
|-
|GothPanda
|104
|litwick.northstar.retro
|172.23.3.201
|also hosts tests.cghmn
|-
|Loganius
|104
|worf.loganius.retro
|100.64.21.3
|ILS Server (for MS NetMeeting)
|-
|Loganius
|12002
|elim.loganius.retro
|100.64.21.2
|Minecraft Reverse Proxy Server
|}
[[Category:Compu-Global-Hyper-Mega-Net]]

How to Get Connected

2026-04-26T21:35:26Z

Bredo: Add note about OpenWRT 25.12 as the minimum (due to apk transition)

[[Category:Compu-Global-Hyper-Mega-Net]]
This is a quick and dirty "how do I get on CGHMN"

'''Since the service is in "open beta" these steps are a bit vague and manual. But over time as we figure out what works we'll add more connection methods and better documentation'''

=== Step 1: ===
[[Signup|'''Let us know you'd like to connect!''']]

(We'll need information from you such as your WireGuard Pubkey to let you connect to the network)[[File:CGHMN.png|thumb|319x319px|Example CGHMN Router Setup using a GL-AR300M and basic network switch]]

=== Hardware requirements ===
To connect your retro machine(s) to the CGHMN, you'll need the following:
*'''An Ethernet connection on your retro device(s) of choice, with a TCP/IP (v4) stack for now! TrumpetWinSock, Microsoft TCP/IP, whatever. It all works.'''

* '''Something with the ability to run WireGuard and forward IPv4 packets at the minimum and, for any non-IP packets, <code>gretap</code> and <code>nftables</code>. Personally we recommend something running OpenWRT, like the [https://www.gl-inet.com/products/gl-ar300m GL-AR300M] which we have successfully tested to work. We're currently working on a pre-built image for some select routers to make the setup easier for new members. A script to configure already existing OpenWRT instances can be found below.'''
* Alternatively, you can also run the CGHMN routing on any standard Linux box which has at least one Ethernet port and either a second one or WiFi for internet connectivity. <s>A basic script to set up a Linux machine as a router is posted below</s> (TODO!).

* '''Optionally: A simple network switch, in case you want to add multiple machines to the network. You plug one end into the CGHMN Router box and then your clients can all access CGHMN. Super easy!'''

On the right is an example of what a CGHMN router setup could look like.

=== Get connected - With OpenWRT ===
If you chose to go with an OpenWRT compatible router or want to run OpenWRT on typical x86 hardware/in a VM, you can follow these steps to get yourself connected to the CGHMN:

# Update your OpenWRT install to the latest version to ensure all required packages are available and compatible.
# Download [https://raw.githubusercontent.com/CGHMN/openwrt-scripts/refs/heads/main/get-connected/setup-cghmn.sh this script from GitHub] to your OpenWRT router: <code>wget https://cghmn.org/get-connected.sh</code>
# Run the following commands on the router:
## <code>ash setup-cghmn.sh install-pkgs</code>
### If you run into issues at this step, please make sure you are on OpenWRT 25.12 or later - the setup script only supports version 25.12 and up.
## Reboot the router, this step is necessary if you intend to use the web UI for any other configuration or see the status of the CGHMN connection, to make LuCI recognize WireGuard connections.
## <code>ash setup-cghmn.sh init</code>
## You will be asked what network port you'd like to use for the Retro LAN. This is where you will plug in your retro machines to be part of the CGHMN. Choose a port that is not assigned to any OpenWRT interface like '''lan''' or '''wan''' or which not already part of a bridge and enter the Linux interface name, e.g. <code>eth1</code>, then press <code>[Enter]</code> to continue. If your router only has two ports and you're using one for WAN, then you first have to [https://openwrt.org/docs/guide-user/luci/luci.secure#allow_access_from_internet enable the web UI and SSH access via the '''wan''' OpenWRT interface], remove the entire '''lan''' OpenWRT interface and the default <code>br-lan</code> or any other bridge the interface might belong to, to free the network port and continue the setup over the IP address your router got on its WAN side. If you only have a single Ethernet port, you're running on a router setup we can't really recommend, however you can configure VLANs and use a managed switch to both get a WAN DHCP address for internet access and have a separate VLAN for the Retro LAN bridge over a single port. This is commonly referred to as "[[wikipedia:Router_on_a_stick|router on a stick]]". Just enter the VLAN interface name here if you choose to go that route.
# Now you will be given some information on the console, including a WireGuard public key. Head over to https://signup.cghmn.org, fill out the form there with your details like an e-mail address we can reach you under and copy over the WireGuard public key from the script output into the appropriate field on the web page. Once your request has been approved, you'll receive an e-mail with your CGHMN WireGuard connection details. Note: If you cannot copy-paste, for example, because you're on a VM VNC console, you can run <code>ash setup-cghmn.sh pubkey-qr</code> to get a QR code with your public key, which can be scanned with a phone, tablet or software QR code parser to get the key as copy-pastable text.
# In the e-mail from your sign-up server post approval, you will receive a tunnel IPv4 address (<code>100.65.x.x/32</code>) and a routed IPv4 subnet (<code>100.68.x.0/24</code> and up). These will be needed on the next step
# Run <code>ash setup-cghmn.sh set-tunnel-ip</code>, enter your new tunnel IP address with or without the <code>/32</code> subnet mask, enter your routed subnet '''with''' the CIDR netmask and supply your pre-shared key from the e-mail.
# Once the script completed successfully, reboot the router to ensure all interfaces are up properly. After the reboot, your retro devices should receive an IP address in your routed IPv4 subnet on the Retro LAN port you chose above and be able to communicate with other machines on the CGHMN network.

=== Get Connected - Manually (Linux, WireGuard/IP traffic only) ===
In case you want to setup a connection into the network manually, here are the required steps and information you should be needing:

* Generate a Wireguard private key and public key, this command writes a fresh WireGuard private key to <code>private-key</code> and the corresponding public key to <code>public-key</code>:

$ wg genkey | tee private-key | wg pubkey > public-key

* NEVER share your private key, even with us! It should never be required outside of your own WireGuard setup!
* You will, however, need to share your public key with us. Head over to https://signup.cghmn.org, fill out the forms with some details like an e-mail address we can reach you under and paste the newly generated public key into the public key field.
* After submitting your request, we'll approve it as soon as possible and you'll get two IP addresses sent over to your specified e-mail: Your tunnel IP address, with which ''your'' router talks to ''our'' router, and a routed subnet, from which you can assign IPs to your own machines so they can talk to other CGHMN member devices on the network without NAT in the way.
* In the e-mail, you will also find a full WireGuard configuration looking a little like this:

[Interface]
PrivateKey = xxx
Address = 100.65.0.xxx/32

[Peer]
PublicKey = k/QiJIbMakMKgTCHVt8/D+8k4DzRVM6U33F3gMZfRUg=
Endpoint = us.wg.cghmn.org:42070
AllowedIPs = 100.64.0.0/10
PersistentKeepalive = 15
PresharedKey = xxx

* Copy this configuration to a file, <code>wg-cghmn.conf</code>, for example.
* If you use wg-quick like below, you can also add the line <code>DNS = 100.64.12.2</code> in the [Interface] section to make use of our DNS resolvers and access other CGHMN member's services through domain names, though be adviced that we cannot guarantee public internet address lookups, which means this might break internet access for the host you're opening this WireGuard tunnel from! Alternatively, for advanced users, one can setup dnsmasq to automatically pull any domains we offer within the CGHMN and forward them to our DNS resolvers with the help of [https://raw.githubusercontent.com/CGHMN/openwrt-scripts/refs/heads/main/dns/update-dns-forwards.sh this script from our GitHub] and having it being run periodically through cron, systemd-timers or similar. See [[CGHMN DNS Information#dnsmasq Synchronization Script|this Wiki article]] for more information.
* Then, run <code>wg-quick up ./wg-cghmn.conf</code>, perhaps requiring <code>doas</code>/<code>sudo</code>, to bring the tunnel up and connect to the network!

This should bring whatever system you've set the tunnel up on onto the network and is now reachable for other members on the network, as long as the firewall on your device is configured accordingly, of course.

==== Enabling routing ====

Once you have WireGuard running and are able to reach CGHMN hosts from your Linux box, all you have to do to get the rest of your network online is enable routing in the kernel.

# echo 1 > /proc/sys/net/ipv4/conf/default/forwarding

Check your distro's docs for instructions for automatically setting sysctls on startup. On Debian, you can add this line to <code>/etc/sysctl.conf</code>:

net.ipv4.conf.default.forwarding=1

You will need to give your client machines IP addresses within your CGHMN routed subnet (provided in your welcome email) and set the gateway to the IP of the machine you're running WireGuard on. You can assign addresses manually or use a DHCP/BOOTP server. Many CGHMN users use <code>dnsmasq</code> for this; ask for help in IRC if you need it.

At present, CGHMN does not use IPv6.

=== After you get connected ===
There are a few optional things you might want to do.

==== Network mailing list ====
There is a mailing list you can subscribe to if you want to be notified about things that may affect CGHMN or core services. You can subscribe to the list here: https://berwick-upon-tweed.cobaltqu.be/postorius/lists/cghmn-announce.lists.cobaltqu.be/.

If you need to post to the list, you will need to subscribe before you can be added to the list of poster.

==== Explore things available on the network ====
There is a collection of [[services people are running]] - things like email/hosting/chat/search/etc.

How to Get Connected

2026-04-08T11:11:17Z

Bredo: Wireguard -> WireGuard

[[Category:Compu-Global-Hyper-Mega-Net]]
This is a quick and dirty "how do I get on CGHMN"

'''Since the service is in "open beta" these steps are a bit vague and manual. But over time as we figure out what works we'll add more connection methods and better documentation'''

=== Step 1: ===
[[Signup|'''Let us know you'd like to connect!''']]

(We'll need information from you such as your WireGuard Pubkey to let you connect to the network)[[File:CGHMN.png|thumb|319x319px|Example CGHMN Router Setup using a GL-AR300M and basic network switch]]

=== Hardware requirements ===
To connect your retro machine(s) to the CGHMN, you'll need the following:
*'''An Ethernet connection on your retro device(s) of choice, with a TCP/IP (v4) stack for now! TrumpetWinSock, Microsoft TCP/IP, whatever. It all works.'''

* '''Something with the ability to run WireGuard and forward IPv4 packets at the minimum and, for any non-IP packets, <code>gretap</code> and <code>nftables</code>. Personally we recommend something running OpenWRT, like the [https://www.gl-inet.com/products/gl-ar300m GL-AR300M] which we have successfully tested to work. We're currently working on a pre-built image for some select routers to make the setup easier for new members. A script to configure already existing OpenWRT instances can be found below.'''
* Alternatively, you can also run the CGHMN routing on any standard Linux box which has at least one Ethernet port and either a second one or WiFi for internet connectivity. <s>A basic script to set up a Linux machine as a router is posted below</s> (TODO!).

* '''Optionally: A simple network switch, in case you want to add multiple machines to the network. You plug one end into the CGHMN Router box and then your clients can all access CGHMN. Super easy!'''

On the right is an example of what a CGHMN router setup could look like.

=== Get connected - With OpenWRT ===
If you chose to go with an OpenWRT compatible router or want to run OpenWRT on typical x86 hardware/in a VM, you can follow these steps to get yourself connected to the CGHMN:

# Update your OpenWRT install to the latest version to ensure all required packages are available and compatible.
# Download [https://raw.githubusercontent.com/CGHMN/openwrt-scripts/refs/heads/main/get-connected/setup-cghmn.sh this script from GitHub] to your OpenWRT router: <code>wget https://cghmn.org/get-connected.sh</code>
# Run the following commands on the router:
## <code>ash setup-cghmn.sh install-pkgs</code>
## Reboot the router, this step is necessary if you intend to use the web UI for any other configuration or see the status of the CGHMN connection, to make LuCI recognize WireGuard connections.
## <code>ash setup-cghmn.sh init</code>
## You will be asked what network port you'd like to use for the Retro LAN. This is where you will plug in your retro machines to be part of the CGHMN. Choose a port that is not assigned to any OpenWRT interface like '''lan''' or '''wan''' or which not already part of a bridge and enter the Linux interface name, e.g. <code>eth1</code>, then press <code>[Enter]</code> to continue. If your router only has two ports and you're using one for WAN, then you first have to [https://openwrt.org/docs/guide-user/luci/luci.secure#allow_access_from_internet enable the web UI and SSH access via the '''wan''' OpenWRT interface], remove the entire '''lan''' OpenWRT interface and the default <code>br-lan</code> or any other bridge the interface might belong to, to free the network port and continue the setup over the IP address your router got on its WAN side. If you only have a single Ethernet port, you're running on a router setup we can't really recommend, however you can configure VLANs and use a managed switch to both get a WAN DHCP address for internet access and have a separate VLAN for the Retro LAN bridge over a single port. This is commonly referred to as "[[wikipedia:Router_on_a_stick|router on a stick]]". Just enter the VLAN interface name here if you choose to go that route.
# Now you will be given some information on the console, including a WireGuard public key. Head over to https://signup.cghmn.org, fill out the form there with your details like an e-mail address we can reach you under and copy over the WireGuard public key from the script output into the appropriate field on the web page. Once your request has been approved, you'll receive an e-mail with your CGHMN WireGuard connection details. Note: If you cannot copy-paste, for example, because you're on a VM VNC console, you can run <code>ash setup-cghmn.sh pubkey-qr</code> to get a QR code with your public key, which can be scanned with a phone, tablet or software QR code parser to get the key as copy-pastable text.
# In the e-mail from your sign-up server post approval, you will receive a tunnel IPv4 address (<code>100.65.x.x/32</code>) and a routed IPv4 subnet (<code>100.68.x.0/24</code> and up). These will be needed on the next step
# Run <code>ash setup-cghmn.sh set-tunnel-ip</code>, enter your new tunnel IP address with or without the <code>/32</code> subnet mask, enter your routed subnet '''with''' the CIDR netmask and supply your pre-shared key from the e-mail.
# Once the script completed successfully, reboot the router to ensure all interfaces are up properly. After the reboot, your retro devices should receive an IP address in your routed IPv4 subnet on the Retro LAN port you chose above and be able to communicate with other machines on the CGHMN network.

=== Get Connected - Manually (Linux, WireGuard/IP traffic only) ===
In case you want to setup a connection into the network manually, here are the required steps and information you should be needing:

* Generate a Wireguard private key and public key, this command writes a fresh WireGuard private key to <code>private-key</code> and the corresponding public key to <code>public-key</code>:

$ wg genkey | tee private-key | wg pubkey > public-key

* NEVER share your private key, even with us! It should never be required outside of your own WireGuard setup!
* You will, however, need to share your public key with us. Head over to https://signup.cghmn.org, fill out the forms with some details like an e-mail address we can reach you under and paste the newly generated public key into the public key field.
* After submitting your request, we'll approve it as soon as possible and you'll get two IP addresses sent over to your specified e-mail: Your tunnel IP address, with which ''your'' router talks to ''our'' router, and a routed subnet, from which you can assign IPs to your own machines so they can talk to other CGHMN member devices on the network without NAT in the way.
* In the e-mail, you will also find a full WireGuard configuration looking a little like this:

[Interface]
PrivateKey = xxx
Address = 100.65.0.xxx/32

[Peer]
PublicKey = k/QiJIbMakMKgTCHVt8/D+8k4DzRVM6U33F3gMZfRUg=
Endpoint = us.wg.cghmn.org:42070
AllowedIPs = 100.64.0.0/10
PersistentKeepalive = 15
PresharedKey = xxx

* Copy this configuration to a file, <code>wg-cghmn.conf</code>, for example.
* If you use wg-quick like below, you can also add the line <code>DNS = 100.64.12.2</code> in the [Interface] section to make use of our DNS resolvers and access other CGHMN member's services through domain names, though be adviced that we cannot guarantee public internet address lookups, which means this might break internet access for the host you're opening this WireGuard tunnel from! Alternatively, for advanced users, one can setup dnsmasq to automatically pull any domains we offer within the CGHMN and forward them to our DNS resolvers with the help of [https://raw.githubusercontent.com/CGHMN/openwrt-scripts/refs/heads/main/dns/update-dns-forwards.sh this script from our GitHub] and having it being run periodically through cron, systemd-timers or similar. See [[CGHMN DNS Information#dnsmasq Synchronization Script|this Wiki article]] for more information.
* Then, run <code>wg-quick up ./wg-cghmn.conf</code>, perhaps requiring <code>doas</code>/<code>sudo</code>, to bring the tunnel up and connect to the network!

This should bring whatever system you've set the tunnel up on onto the network and is now reachable for other members on the network, as long as the firewall on your device is configured accordingly, of course.

==== Enabling routing ====

Once you have WireGuard running and are able to reach CGHMN hosts from your Linux box, all you have to do to get the rest of your network online is enable routing in the kernel.

# echo 1 > /proc/sys/net/ipv4/conf/default/forwarding

Check your distro's docs for instructions for automatically setting sysctls on startup. On Debian, you can add this line to <code>/etc/sysctl.conf</code>:

net.ipv4.conf.default.forwarding=1

You will need to give your client machines IP addresses within your CGHMN routed subnet (provided in your welcome email) and set the gateway to the IP of the machine you're running WireGuard on. You can assign addresses manually or use a DHCP/BOOTP server. Many CGHMN users use <code>dnsmasq</code> for this; ask for help in IRC if you need it.

At present, CGHMN does not use IPv6.

=== After you get connected ===
There are a few optional things you might want to do.

==== Network mailing list ====
There is a mailing list you can subscribe to if you want to be notified about things that may affect CGHMN or core services. You can subscribe to the list here: https://berwick-upon-tweed.cobaltqu.be/postorius/lists/cghmn-announce.lists.cobaltqu.be/.

If you need to post to the list, you will need to subscribe before you can be added to the list of poster.

==== Explore things available on the network ====
There is a collection of [[services people are running]] - things like email/hosting/chat/search/etc.

How to Get Connected

2026-04-08T11:09:58Z

Bredo: quick spelling pass

[[Category:Compu-Global-Hyper-Mega-Net]]
This is a quick and dirty "how do I get on CGHMN"

'''Since the service is in "open beta" these steps are a bit vague and manual. But over time as we figure out what works we'll add more connection methods and better documentation'''

=== Step 1: ===
[[Signup|'''Let us know you'd like to connect!''']]

(We'll need information from you such as your Wireguard Pubkey to let you connect to the network)[[File:CGHMN.png|thumb|319x319px|Example CGHMN Router Setup using a GL-AR300M and basic network switch]]

=== Hardware requirements ===
To connect your retro machine(s) to the CGHMN, you'll need the following:
*'''An Ethernet connection on your retro device(s) of choice, with a TCP/IP (v4) stack for now! TrumpetWinSock, Microsoft TCP/IP, whatever. It all works.'''

* '''Something with the ability to run Wireguard and forward IPv4 packets at the minimum and, for any non-IP packets, <code>gretap</code> and <code>nftables</code>. Personally we recommend something running OpenWRT, like the [https://www.gl-inet.com/products/gl-ar300m GL-AR300M] which we have successfully tested to work. We're currently working on a pre-built image for some select routers to make the setup easier for new members. A script to configure already existing OpenWRT instances can be found below.'''
* Alternatively, you can also run the CGHMN routing on any standard Linux box which has at least one Ethernet port and either a second one or WiFi for internet connectivity. <s>A basic script to set up a Linux machine as a router is posted below</s> (TODO!).

* '''Optionally: A simple network switch, in case you want to add multiple machines to the network. You plug one end into the CGHMN Router box and then your clients can all access CGHMN. Super easy!'''

On the right is an example of what a CGHMN router setup could look like.

=== Get connected - With OpenWRT ===
If you chose to go with an OpenWRT compatible router or want to run OpenWRT on typical x86 hardware/in a VM, you can follow these steps to get yourself connected to the CGHMN:

# Update your OpenWRT install to the latest version to ensure all required packages are available and compatible.
# Download [https://raw.githubusercontent.com/CGHMN/openwrt-scripts/refs/heads/main/get-connected/setup-cghmn.sh this script from GitHub] to your OpenWRT router: <code>wget https://cghmn.org/get-connected.sh</code>
# Run the following commands on the router:
## <code>ash setup-cghmn.sh install-pkgs</code>
## Reboot the router, this step is necessary if you intend to use the web UI for any other configuration or see the status of the CGHMN connection, to make LuCI recognize Wireguard connections.
## <code>ash setup-cghmn.sh init</code>
## You will be asked what network port you'd like to use for the Retro LAN. This is where you will plug in your retro machines to be part of the CGHMN. Choose a port that is not assigned to any OpenWRT interface like '''lan''' or '''wan''' or which not already part of a bridge and enter the Linux interface name, e.g. <code>eth1</code>, then press <code>[Enter]</code> to continue. If your router only has two ports and you're using one for WAN, then you first have to [https://openwrt.org/docs/guide-user/luci/luci.secure#allow_access_from_internet enable the web UI and SSH access via the '''wan''' OpenWRT interface], remove the entire '''lan''' OpenWRT interface and the default <code>br-lan</code> or any other bridge the interface might belong to, to free the network port and continue the setup over the IP address your router got on its WAN side. If you only have a single Ethernet port, you're running on a router setup we can't really recommend, however you can configure VLANs and use a managed switch to both get a WAN DHCP address for internet access and have a separate VLAN for the Retro LAN bridge over a single port. This is commonly referred to as "[[wikipedia:Router_on_a_stick|router on a stick]]". Just enter the VLAN interface name here if you choose to go that route.
# Now you will be given some information on the console, including a Wireguard public key. Head over to https://signup.cghmn.org, fill out the form there with your details like an e-mail address we can reach you under and copy over the Wireguard public key from the script output into the appropriate field on the web page. Once your request has been approved, you'll receive an e-mail with your CGHMN Wireguard connections details. Note: If you cannot copy-paste, for example, because you're on a VM VNC console, you can run <code>ash setup-cghmn.sh pubkey-qr</code> to get a QR code with your public key, which can be scanned with a phone, tablet or software QR code parser to get the key as copy-pastable text.
# In the e-mail from your sign-up server post approval, you will receive a tunnel IPv4 address (<code>100.65.x.x/32</code>) and a routed IPv4 subnet (<code>100.68.x.0/24</code> and up). These will be needed on the next step
# Run <code>ash setup-cghmn.sh set-tunnel-ip</code>, enter your new tunnel IP address with or without the <code>/32</code> subnet mask, enter your routed subnet '''with''' the CIDR netmask and supply your pre-shared key from the e-mail.
# Once the script completed successfully, reboot the router to ensure all interfaces are up properly. After the reboot, your retro devices should receive an IP address in your routed IPv4 subnet on the Retro LAN port you chose above and be able to communicate with other machines on the CGHMN network.

=== Get Connected - Manually (Linux, WireGuard/IP traffic only) ===
In case you want to setup a connection into the network manually, here are the required steps and information you should be needing:

* Generate a Wireguard private key and public key, this command writes a fresh WireGuard private key to <code>private-key</code> and the corresponding public key to <code>public-key</code>:

$ wg genkey | tee private-key | wg pubkey > public-key

* NEVER share your private key, even with us! It should never be required outside of your own WireGuard setup!
* You will, however, need to share your public key with us. Head over to https://signup.cghmn.org, fill out the forms with some details like an e-mail address we can reach you under and paste the newly generated public key into the public key field.
* After submitting your request, we'll approve it as soon as possible and you'll get two IP addresses sent over to your specified e-mail: Your tunnel IP address, with which ''your'' router talks to ''our'' router, and a routed subnet, from which you can assign IPs to your own machines so they can talk to other CGHMN member devices on the network without NAT in the way.
* In the e-mail, you will also find a full WireGuard configuration looking a little like this:

[Interface]
PrivateKey = xxx
Address = 100.65.0.xxx/32

[Peer]
PublicKey = k/QiJIbMakMKgTCHVt8/D+8k4DzRVM6U33F3gMZfRUg=
Endpoint = us.wg.cghmn.org:42070
AllowedIPs = 100.64.0.0/10
PersistentKeepalive = 15
PresharedKey = xxx

* Copy this configuration to a file, <code>wg-cghmn.conf</code>, for example.
* If you use wg-quick like below, you can also add the line <code>DNS = 100.64.12.2</code> in the [Interface] section to make use of our DNS resolvers and access other CGHMN member's services through domain names, though be adviced that we cannot guarantee public internet address lookups, which means this might break internet access for the host you're opening this WireGuard tunnel from! Alternatively, for advanced users, one can setup dnsmasq to automatically pull any domains we offer within the CGHMN and forward them to our DNS resolvers with the help of [https://raw.githubusercontent.com/CGHMN/openwrt-scripts/refs/heads/main/dns/update-dns-forwards.sh this script from our GitHub] and having it being run periodically through cron, systemd-timers or similar. See [[CGHMN DNS Information#dnsmasq Synchronization Script|this Wiki article]] for more information.
* Then, run <code>wg-quick up ./wg-cghmn.conf</code>, perhaps requiring <code>doas</code>/<code>sudo</code>, to bring the tunnel up and connect to the network!

This should bring whatever system you've set the tunnel up on onto the network and is now reachable for other members on the network, as long as the firewall on your device is configured accordingly, of course.

==== Enabling routing ====

Once you have WireGuard running and are able to reach CGHMN hosts from your Linux box, all you have to do to get the rest of your network online is enable routing in the kernel.

# echo 1 > /proc/sys/net/ipv4/conf/default/forwarding

Check your distro's docs for instructions for automatically setting sysctls on startup. On Debian, you can add this line to <code>/etc/sysctl.conf</code>:

net.ipv4.conf.default.forwarding=1

You will need to give your client machines IP addresses within your CGHMN routed subnet (provided in your welcome email) and set the gateway to the IP of the machine you're running WireGuard on. You can assign addresses manually or use a DHCP/BOOTP server. Many CGHMN users use <code>dnsmasq</code> for this; ask for help in IRC if you need it.

At present, CGHMN does not use IPv6.

=== After you get connected ===
There are a few optional things you might want to do.

==== Network mailing list ====
There is a mailing list you can subscribe to if you want to be notified about things that may affect CGHMN or core services. You can subscribe to the list here: https://berwick-upon-tweed.cobaltqu.be/postorius/lists/cghmn-announce.lists.cobaltqu.be/.

If you need to post to the list, you will need to subscribe before you can be added to the list of poster.

==== Explore things available on the network ====
There is a collection of [[services people are running]] - things like email/hosting/chat/search/etc.

How to Get Connected

2026-04-05T00:26:40Z

Bredo: Update links to OpenWRT setup script

[[Category:Compu-Global-Hyper-Mega-Net]]
This is a quick and dirty "how do I get on CGHMN"

'''Since the service is in "open beta" these steps are a bit vague and manual. But over time as we figure out what works we'll add more connection methods and better documentation'''

=== Step 1: ===
[[Signup|'''Let us know you'd like to connect!''']]

(We'll need information from you such as your Wireguard Pubkey to let you connect to the network)[[File:CGHMN.png|thumb|319x319px|Example CGHMN Router Setup using a GL-AR300M and basic network switch]]

=== Hardware requirements ===
To connect your retro machine(s) to the CGHMN, you'll need the following:
*'''An Ethernet connection on your retro device(s) of choice, with a TCP/IP (v4) stack for now! TrumpetWinSock, Microsoft TCP/IP, whatever. It all works.'''

* '''Something with the ability to run Wireguard and forward IPv4 packets at the minimum and, for any non-IP packets, <code>gretap</code> and <code>nftables</code>. Personally we recommend something running OpenWRT, like the [https://www.gl-inet.com/products/gl-ar300m GL-AR300M] which we have successfully tested to work. We're currently working on a pre-built image for some select routers to make the setup easier for new members. A script to configure already existing OpenWRT instances can be found below.'''
* Alternatively, you can also run the CGHMN routing on any standard Linux box which has at least one Ethernet port and either a second one or WiFi for internet connectivity. <s>A basic script to set up a Linux machine as a router is posted below</s> (TODO!).

* '''Optionally: A simple network switch, in case you want to add multiple machines to the network. You plug one end into the CGHMN Router box and then your clients can all access CGHMN. Super easy!'''

On the right is an example of what a CGHMN router setup could look like.

=== Get connected - With OpenWRT ===
If you chose to go with an OpenWRT compatible router or want to run OpenWRT on typical x86 hardware/in a VM, you can follow these steps to get yourself connected to the CGHMN:

# Update your OpenWRT install to the latest version to ensure all required packages are available and compatible.
# Download [https://raw.githubusercontent.com/CGHMN/openwrt-scripts/refs/heads/main/get-connected/setup-cghmn.sh this script from GitHub] to your OpenWRT router: <code>wget https://cghmn.org/get-connected.sh</code>
# Run the following commands on the router:
## <code>ash setup-cghmn.sh install-pkgs</code>
## Reboot the router, this step is necessary if you intend to use the web UI for any other configuration or see the status of the CGHMN connection, to make LuCI recognize Wireguard connections.
## <code>ash setup-cghmn.sh init</code>
## You will be asked what network port you'd like to use for the Retro LAN. This is where you will plug in your retro machines to be part of the CGHMN. Choose a port that is not assigned to any OpenWRT interface like '''lan''' or '''wan''' or which not already part of a bridge and enter the Linux interface name, e.g. <code>eth1</code>, then press <code>[Enter]</code> to continue. If your router only has two ports and you're using one for WAN, then you first have to [https://openwrt.org/docs/guide-user/luci/luci.secure#allow_access_from_internet enable the web UI and SSH access via the '''wan''' OpenWRT interface], remove the entire '''lan''' OpenWRT interface and the default <code>br-lan</code> or any other bridge the interface might belong to, to free the network port and continue the setup over the IP address your router got on its WAN side. If you only have a single Ethernet port, you're running on a router setup we can't really recommend, however you can configure VLANs and use a managed switch to both get a WAN DHCP address for internet access and have a separate VLAN for the Retro LAN bridge over a single port. This is commonly referred to as "[[wikipedia:Router_on_a_stick|router on a stick]]". Just enter the VLAN interface name here if you choose to go that route.
# Now you will be given some information on the console, including a Wireguard public key. Head over to https://signup.cghmn.org, fill out the form there with your details like an e-mail address we can reach you under and copy over the Wireguard public key from the script output into the appropriate field on the web page. Once your request has been approved, you'll receive an e-mail with your CGHMN Wireguard connections details. Note: If you cannot copy-paste, for example, because you're on a VM VNC console, you can run <code>ash setup-cghmn.sh pubkey-qr</code> to get a QR code with your public key, which can be scanned with a phone, tablet or software QR code parser to get the key as copy-pastable text.
# In the e-mail from your sign-up server post approval, you will receive a tunnel IPv4 address (<code>100.65.x.x/32</code>) and a routed IPv4 subnet (<code>100.68.x.0/24</code> and up). These will be needed on the next step
# Run <code>ash setup-cghmn.sh set-tunnel-ip</code>, enter your new tunnel IP address with or without the <code>/32</code> subnet mask, enter your routed subnet '''with''' the CIDR netmask and supply your pre-shared key from the e-mail.
# Once the script completed successfully, reboot the router to ensure all interfaces are up properly. After the reboot, your retro devices should receive an IP address in your routed IPv4 subnet on the Retro LAN port you chose above and be able to communicate with other machines on the CGHMN network.

=== Get Connected - Manually (Linux, Wireguard/IP traffic only) ===
In case you want to setup a connection into the network manually, here are the required steps and information you should be needing:

* Generate a Wireguard private key and public key, this command writes a fresh Wireguard private key to <code>private-key</code> and the corresponsing public key to <code>public-key</code>:

$ wg genkey | tee private-key | wg pubkey > public-key

* NEVER share your private key, even with us! It should never be required outside of your own Wireguard setup!
* You will, however, need to share your public key with us. Head over to https://signup.cghmn.org, fill out the forms with some details like an e-mail address we can reach you under and paste the newly generated public key into the public key field.
* After submitting your request, we'll approve it as soon as possible and you'll get two IP addresses sent over to your specified e-mail: Your tunnel IP address, with which ''your'' router talks to ''our'' router, and a routed subnet, from which you can assign IPs to your own machines so they can talk to other CGHMN member devices on the network without NAT in the way.
* In the e-mail, you will also find a full Wireguard configuration looking a little like this:

[Interface]
PrivateKey = xxx
Address = 100.65.0.xxx/32

[Peer]
PublicKey = k/QiJIbMakMKgTCHVt8/D+8k4DzRVM6U33F3gMZfRUg=
Endpoint = us.wg.cghmn.org:42070
AllowedIPs = 100.64.0.0/10
PersistentKeepalive = 15
PresharedKey = xxx

* Copy this configuration to a file, <code>wg-cghmn.conf</code>, for example.
* If you use wg-quick like below, you can also add the line <code>DNS = 100.64.12.2</code> in the [Interface] section to make use of our DNS resolvers and access other CGHMN member's services through domain names, though be adviced that we cannot guarantee public internet address lookups, which means this might break internet access for the host you're opening this Wireguard tunnel from! Alternatively, for advanced users, one can setup dnsmasq to automatically pull any domains we offer within the CGHMN and forward them to our DNS resolvers with the help of [https://raw.githubusercontent.com/CGHMN/openwrt-scripts/refs/heads/main/dns/update-dns-forwards.sh this script from our GitHub] and having it being run periodically through cron, systemd-timers or similar. See [[CGHMN DNS Information#dnsmasq Synchronization Script|this Wiki article]] for more information.
* Then, run <code>wg-quick up ./wg-cghmn.conf</code>, perhaps requiring <code>doas</code>/<code>sudo</code>, to bring the tunnel up and connect to the network!

This should bring whatever system you've set the tunnel up on onto the network and is now reachable for other members on the network, as long as the firewall on your device is congfigured accordingly, of course.

==== Enabling routing ====

Once you have WireGuard running and are able to reach CGHMN hosts from your Linux box, all you have to do to get the rest of your network online is enable routing in the kernel.

# echo 1 > /proc/sys/net/ipv4/conf/default/forwarding

Check your distro's docs for instructions for automatically setting sysctls on startup. On Debian, you can add this line to <code>/etc/sysctl.conf</code>:

net.ipv4.conf.default.forwarding=1

You will need to give your client machines IP addresses within your CGHMN routed subnet (provided in your welcome email) and set the gateway to the IP of the machine you're running WireGuard on. You can assign addresses manually or use a DHCP/BOOTP server. Many CGHMN users use <code>dnsmasq</code> for this; ask for help in IRC if you need it.

At present, CGHMN does not use IPv6.

=== After you get connected ===
There are a few optional things you might want to do.

==== Network mailing list ====
There is a mailing list you can subscribe to if you want to be notified about things that may affect CGHMN or core services. You can subscribe to the list here: https://berwick-upon-tweed.cobaltqu.be/postorius/lists/cghmn-announce.lists.cobaltqu.be/.

If you need to post to the list, you will need to subscribe before you can be added to the list of poster.

==== Explore things available on the network ====
There is a collection of [[services people are running]] - things like email/hosting/chat/search/etc.

Services people are running

2026-04-04T21:41:12Z

Bredo: add my site

This is a collection of "services" available on CGHMN. It's intended as a bootstrapping point until we get something to help with discovery.

'''Are you running anything you'd like people to know about?''' Please add it here, or email '''[mailto:jill@n8fq.retro PurpleJillybeans]''' and she'll add it for you.

== Chat ==

=== AIM ===
CGHMN connects to Chivanet's AIM service (running RetroAimServer). To use it, you need to sign up via http://chivanet.org/aim/. Once you have a screenname, you can connect from within the network with a [[AIM Clients|client]].

=== IRC ===
{| class="wikitable"
|+
!Hostname
!Port (non-TLS)
!TLS?
!Major channels
!Notes
|-
|irc.cghmn.retro
|6667
|no
|#cghmn, #cghmn-events
|Bridged onto the regular internet and Discord
|-
|irc.loganius.retro
|6667
|yes, at 6697
|#hangout
|Must register your nick with NickServ before you can start talking. You'll need working email for this.
|}

=== MSN Messenger ===
'''TODO (maybe ask to federate with NINA ala ChivaNet?) - CursedSilicon'''

== Email ==
You can run your own mail server on a .retro domain. If you would prefer not to (or want a backup), there are some open mail services (separate from general "hosting").

=== CGHMN Public Email Service (ala Hotmail/Yahoo/Gmail) ===
Webmail: available - Supports Internet Explorer 3 (in theory) as a minimum. IE5 on Win3.11 tested and verified working.

HTTP: http://cghmn-mail.retro

IMAP:: cghmn-mail.retro

POP3: cghmn-mail.retro

(both incoming and outgoing servers use the same address for POP/IMAP/SMTP)

'''NOTE: SSL is ''enabled'' but is not widely tested. Your mileage may vary. If you experience issues, just use insecure/plaintext modes for simplicity'''

How to sign up: http://cghmn-mail.retro/register/

== Game servers ==
{| class="wikitable"
|+
!User
!Hostname
!IP
!Game(s)
!OS
!Notes
|-
|Loganius
|loganius.retro
|100.68.9.71
|ClassiCube & Halo PC
|Windows Server 2003 R2
|Must connect by IP for Halo.
|-
|[[User:CursedSilicon|CursedSilicon]]
|cursedsilicon.retro
|100.68.52.3
|Battle.Net
|Linux
|Just works! Plays Blizzard games up to Warcraft 3: Frozen Throne
|-
|[[User:CursedSilicon|CursedSilicon]]
|cursedsilicon.retro
|100.68.52.3
|Westwood Online
|Linux
|Just works! Plays Westwood games up to Red Alert 2: Yuri's Revenge
|-
|Serena
|wow.chivanet
|100.96.13.13
|World of Warcraft 3.3.5a (Wrath of the Lich King)
|Linux
|Message Serena for an account
|-
|PurpleJillybeans
|qw.n8fq.retro
|100.68.39.30
|QuakeWorld 2.30
|OpenBSD 3.0
|Artifact-RJS mod with custom maps. Info at [http://www.n8fq.retro/quakeworld www.n8fq.retro/quakeworld]
|-
|PurpleJillybeans
|master.n8fq.retro
|100.68.39.1
|QuakeSpy/GameSpy
|Debian Trixie
|Must specify manually for QuakeWorld and Quake 2. DNS override in place for Heretic II, Quake 3, and Doom 3.
|}
'''NOTE: Some services are "patched" at DNS level. Other games (such as Halo) require connecting to a server via IP. Check the notes!'''

== Websites ==
{| class="wikitable"
|+
!User
!IP/Hostname
!OS
!Server
!Brief Description
!Notes
|-
|Loganius
|http://loganius.retro
|Windows Server 2003 R2
|IIS 6.0
|Whatever I feel like putting there.
|Supports HTTPS.
|-
|Loganius
|http://askme.retro
|Windows Server 2003 R2
|IIS 6.0
|The AskMe Search Engine
|
|-
|[[User:CursedSilicon|CursedSilicon]]
|http://cursedsilicon.retro
|Linux
|Nginx
|Basically a landing page for new users.
Also has an FTP with lots of useful files
|Also available at http://cghmn.cursedsilicon.net
|-
|[[User:Ch0ccyra1n|ch0ccyra1n]]
|http://start.mac
|Raspberry Pi OS Lite
|Nginx
|Homepage for retro macintosh computers
|
|-
|PurpleJillybeans
|http://www.n8fq.retro
|OpenBSD 3.0
|Apache 1.3.19
|Public wiki, US/CA weather info, articles, web dev reference, HTML validator, Wikipedia and Stack Exchange mirrors
|
|-
|lily
|http://lily.retro
|
|
|Java Duke fan site
|And maybe vierus?
|-
|Harry404
|http://404.retro
|OS/2
|IBM Internet Connection Server
|
|
|-
|
|http://ca.cghmn
|
|
|CGHMN certificate authority
|SSL root cert downloads
|-
|talija
|http://www.coyote.retro
|
|
|
|NetBSD and FreeBSD Ports mailing lists
Icecast coming soon
|-
|GothPanda
|http://neato.retro
|Debian
|
|Neato! - a web directory
|
|-
|GothPanda
|http://northstar.retro
|Debian
|
|Hosting services
|Work in progress
|-
|bredo
|http://www.drgn.retro
|NetBSD 10
|nginx
|Random stuff
|
|}

== Streaming Media ==
{| class="wikitable"
|+
!User
!IP/Hostname
!OS
!Server
!Brief Description
!Notes
|-
|Loganius
|live.loganius.retro
|Windows Server 2003 R2 x64
|IIS 6.0
|My livestream VODs.
|<nowiki>Livestreams at [rtsp | mms]://live.loganius.retro/, or </nowiki>http://live.loganius.retro:81/
<nowiki>TV playlist at [rtsp | mms]://live.loganius.retro/tv, or </nowiki>http://live.loganius.retro:81/tv
|-
|GothPanda
|northstar.retro
|
|Icecast
|[http://northstar.retro:8000/ WTST radio]
|'90s/'00s top 100
|-
|PurpleJillybeans
|real.n8fq.retro
|OpenBSD 3.0
|RealNetworks Basic Server Plus 5.0
|Streams for RealPlayer 5/G2/7/8
|[http://www.n8fq.retro/real Channel list]
|-
|Clay
|www.clay.retro
|
|Icecast
|
|[http://www.clay.retro:8000/ Channel list]
|}

== Gopher ==
{| class="wikitable"
|+
!User
!IP/Hostname
!OS
!Server
!Brief Description
!Notes
|-
|PurpleJillybeans
|gopher.n8fq.retro
|OpenBSD 3.0
|UMN gopherd 3.0r5
|Phlog, links (eventually)
|
|}

== Hosting ==

=== Theotherhost ===
{| class="wikitable"
|+
!OS
!Platform
!Admin UI requirements
!Languages
!Databases
!Services
|-
|Linux
|BlueOnyx
|IE 5 (tested on Win 2k)
|Perl 5.8.8, PHP 5.1.5
|MySQL 5.0.95
|FTP/Web/SMTP/IMAP/POP/DNS/Mailing lists
|}
'''How to sign up: message theothertom on IRC.'''

=== CGHMN Proxmox Hosting ===
CGHMN will offer Proxmox based hosting in future. Currently we are limited by hard disk capacity, but small servers can be uploaded and run. Ask [[User:CursedSilicon|CursedSilicon]] for details.

== Other communications ==

=== theotherforum ===
There is a forum at [http://forum.theothertom.retro '''forum.theothertom.retro''']. This can be used to share projects/sites, as well as for general discussion. Currently, you need an email address to sign up.

=== PhpWiki ===
This is a retro-compatible wiki that's open for anyone to edit with no account needed. Personal pages are welcome! http://wiki.n8fq.retro

=== Pastebin ===
http://wastebin.retro thanks Alyx!

=== Image host ===
[http://sha.retro ShaRetro] by PurpleJillybeans

=== Webrings ===
[http://webrings.n8fq.retro http://webrings.n8fq.retro]

== Search ==

=== Google Search Appliance ===
Available on '''[http://google.retro google.retro]'''

'''Submit domains for indexing to CursedSilicon. Crawling takes about 15 minutes'''

=== Pandia Search ===
Available on '''''[http://www.chivanet www.chivanet]''''' (no TLD but WWW is required!)

Has both a web and CGHMN version (automatically selected by detecting the domain from which the user visits)

'''Sites can be added via the Pandia UI'''

=== AskMe ===
Available on '''[http://askme.retro askme.retro]'''

'''Must submit pages for indexing'''

== Time ==
{| class="wikitable"
|+
!User
!IP/Domain
!Protocols
!Notes
|-
|PurpleJillybeans
|time.n8fq.retro
|NTP 4, daytime
|DNS overrides for time.windows.com, time.apple.com, and time.nist.gov
|}

== Proposed Services ==
{| class="wikitable"
|+
!User
!Domain
!Category
!Description
!Notes
|-
|[[User:Ch0ccyra1n|ch0ccyra1n]]
|chat.mac
|Chat: IRC (and XMPP)
|IRC and XMPP chat for retro macs
|Most likely will run on ejabberd and ejabberd-ircd. Will need a web signup page with probably perl scripting
|-
|[[User:Ch0ccyra1n|ch0ccyra1n]]
|domains.mac
|Domain Registrar
|Registrar where retro mac enthusiasts can get their own .mac domain
|Will write with perl on the backend
|-
|[[User:Ch0ccyra1n|ch0ccyra1n]]
|mail.mac
|Email
|Public email and webmail for retro macs
|Most likely will use SquirrelMail for webmail
|-
|[[User:Ch0ccyra1n|ch0ccyra1n]]
|repos.mac
|Software Repositories
|Software repository mirrors for TigerBrew and Yellow Dog Linux
|Will probably need to [https://distrowatch.com/table.php?distribution=yellowdog&pkglist=true recompile all packages] from source and re-package them as no surviving mirrors for versions of YDL before version 5 seem to exist.
|-
|[[User:Ch0ccyra1n|ch0ccyra1n]]
|forums.mac
|Other communications
|Forum for retro mac enthusiasts
|Debating between PHPbb or Simple Machines. Either way I'd write a custom theme to make it aqua just like the other services (besides oldgrounds)
|-
|[[User:Ch0ccyra1n|ch0ccyra1n]]
|time.mac
|Time
|NTP server, synced to time.apple.com
|
|-
|[[User:Ch0ccyra1n|ch0ccyra1n]]
|oldgrounds.mac
|Other communications
|Website for uploading Macromedia Flash (.swf) to play in the browser
|Might also add support for uploading videos, that would be converted to work on flash using a custom video player, kinda like how YouTube worked in the early days. Will need to write from scratch.
|-
|[[User:Ch0ccyra1n|ch0ccyra1n]]
|ch0ccyra1n.mac
|Websites
|Personal website for [[User:Ch0ccyra1n|ch0ccyra1n]]
|
|-
|PurpleJillybeans
|weather.retro
|Websites
|Worldwide weather conditions and forecasts
|PHP, Open-Meteo or AccuWeather API
|}
[[Category:Compu-Global-Hyper-Mega-Net]]

Services people are running

2026-04-04T21:35:59Z

Bredo: update loganius and cursedsilicon ip addresses

This is a collection of "services" available on CGHMN. It's intended as a bootstrapping point until we get something to help with discovery.

'''Are you running anything you'd like people to know about?''' Please add it here, or email '''[mailto:jill@n8fq.retro PurpleJillybeans]''' and she'll add it for you.

== Chat ==

=== AIM ===
CGHMN connects to Chivanet's AIM service (running RetroAimServer). To use it, you need to sign up via http://chivanet.org/aim/. Once you have a screenname, you can connect from within the network with a [[AIM Clients|client]].

=== IRC ===
{| class="wikitable"
|+
!Hostname
!Port (non-TLS)
!TLS?
!Major channels
!Notes
|-
|irc.cghmn.retro
|6667
|no
|#cghmn, #cghmn-events
|Bridged onto the regular internet and Discord
|-
|irc.loganius.retro
|6667
|yes, at 6697
|#hangout
|Must register your nick with NickServ before you can start talking. You'll need working email for this.
|}

=== MSN Messenger ===
'''TODO (maybe ask to federate with NINA ala ChivaNet?) - CursedSilicon'''

== Email ==
You can run your own mail server on a .retro domain. If you would prefer not to (or want a backup), there are some open mail services (separate from general "hosting").

=== CGHMN Public Email Service (ala Hotmail/Yahoo/Gmail) ===
Webmail: available - Supports Internet Explorer 3 (in theory) as a minimum. IE5 on Win3.11 tested and verified working.

HTTP: http://cghmn-mail.retro

IMAP:: cghmn-mail.retro

POP3: cghmn-mail.retro

(both incoming and outgoing servers use the same address for POP/IMAP/SMTP)

'''NOTE: SSL is ''enabled'' but is not widely tested. Your mileage may vary. If you experience issues, just use insecure/plaintext modes for simplicity'''

How to sign up: http://cghmn-mail.retro/register/

== Game servers ==
{| class="wikitable"
|+
!User
!Hostname
!IP
!Game(s)
!OS
!Notes
|-
|Loganius
|loganius.retro
|100.68.9.71
|ClassiCube & Halo PC
|Windows Server 2003 R2
|Must connect by IP for Halo.
|-
|[[User:CursedSilicon|CursedSilicon]]
|cursedsilicon.retro
|100.68.52.3
|Battle.Net
|Linux
|Just works! Plays Blizzard games up to Warcraft 3: Frozen Throne
|-
|[[User:CursedSilicon|CursedSilicon]]
|cursedsilicon.retro
|100.68.52.3
|Westwood Online
|Linux
|Just works! Plays Westwood games up to Red Alert 2: Yuri's Revenge
|-
|Serena
|wow.chivanet
|100.96.13.13
|World of Warcraft 3.3.5a (Wrath of the Lich King)
|Linux
|Message Serena for an account
|-
|PurpleJillybeans
|qw.n8fq.retro
|100.68.39.30
|QuakeWorld 2.30
|OpenBSD 3.0
|Artifact-RJS mod with custom maps. Info at [http://www.n8fq.retro/quakeworld www.n8fq.retro/quakeworld]
|-
|PurpleJillybeans
|master.n8fq.retro
|100.68.39.1
|QuakeSpy/GameSpy
|Debian Trixie
|Must specify manually for QuakeWorld and Quake 2. DNS override in place for Heretic II, Quake 3, and Doom 3.
|}
'''NOTE: Some services are "patched" at DNS level. Other games (such as Halo) require connecting to a server via IP. Check the notes!'''

== Websites ==
{| class="wikitable"
|+
!User
!IP/Hostname
!OS
!Server
!Brief Description
!Notes
|-
|Loganius
|http://loganius.retro
|Windows Server 2003 R2
|IIS 6.0
|Whatever I feel like putting there.
|Supports HTTPS.
|-
|Loganius
|http://askme.retro
|Windows Server 2003 R2
|IIS 6.0
|The AskMe Search Engine
|
|-
|[[User:CursedSilicon|CursedSilicon]]
|http://cursedsilicon.retro
|Linux
|Nginx
|Basically a landing page for new users.
Also has an FTP with lots of useful files
|Also available at http://cghmn.cursedsilicon.net
|-
|[[User:Ch0ccyra1n|ch0ccyra1n]]
|http://start.mac
|Raspberry Pi OS Lite
|Nginx
|Homepage for retro macintosh computers
|
|-
|PurpleJillybeans
|http://www.n8fq.retro
|OpenBSD 3.0
|Apache 1.3.19
|Public wiki, US/CA weather info, articles, web dev reference, HTML validator, Wikipedia and Stack Exchange mirrors
|
|-
|lily
|http://lily.retro
|
|
|Java Duke fan site
|And maybe vierus?
|-
|Harry404
|http://404.retro
|OS/2
|IBM Internet Connection Server
|
|
|-
|
|http://ca.cghmn
|
|
|CGHMN certificate authority
|SSL root cert downloads
|-
|talija
|http://www.coyote.retro
|
|
|
|NetBSD and FreeBSD Ports mailing lists
Icecast coming soon
|-
|GothPanda
|http://neato.retro
|Debian
|
|Neato! - a web directory
|
|-
|GothPanda
|http://northstar.retro
|Debian
|
|Hosting services
|Work in progress
|}

== Streaming Media ==
{| class="wikitable"
|+
!User
!IP/Hostname
!OS
!Server
!Brief Description
!Notes
|-
|Loganius
|live.loganius.retro
|Windows Server 2003 R2 x64
|IIS 6.0
|My livestream VODs.
|<nowiki>Livestreams at [rtsp | mms]://live.loganius.retro/, or </nowiki>http://live.loganius.retro:81/
<nowiki>TV playlist at [rtsp | mms]://live.loganius.retro/tv, or </nowiki>http://live.loganius.retro:81/tv
|-
|GothPanda
|northstar.retro
|
|Icecast
|[http://northstar.retro:8000/ WTST radio]
|'90s/'00s top 100
|-
|PurpleJillybeans
|real.n8fq.retro
|OpenBSD 3.0
|RealNetworks Basic Server Plus 5.0
|Streams for RealPlayer 5/G2/7/8
|[http://www.n8fq.retro/real Channel list]
|-
|Clay
|www.clay.retro
|
|Icecast
|
|[http://www.clay.retro:8000/ Channel list]
|}

== Gopher ==
{| class="wikitable"
|+
!User
!IP/Hostname
!OS
!Server
!Brief Description
!Notes
|-
|PurpleJillybeans
|gopher.n8fq.retro
|OpenBSD 3.0
|UMN gopherd 3.0r5
|Phlog, links (eventually)
|
|}

== Hosting ==

=== Theotherhost ===
{| class="wikitable"
|+
!OS
!Platform
!Admin UI requirements
!Languages
!Databases
!Services
|-
|Linux
|BlueOnyx
|IE 5 (tested on Win 2k)
|Perl 5.8.8, PHP 5.1.5
|MySQL 5.0.95
|FTP/Web/SMTP/IMAP/POP/DNS/Mailing lists
|}
'''How to sign up: message theothertom on IRC.'''

=== CGHMN Proxmox Hosting ===
CGHMN will offer Proxmox based hosting in future. Currently we are limited by hard disk capacity, but small servers can be uploaded and run. Ask [[User:CursedSilicon|CursedSilicon]] for details.

== Other communications ==

=== theotherforum ===
There is a forum at [http://forum.theothertom.retro '''forum.theothertom.retro''']. This can be used to share projects/sites, as well as for general discussion. Currently, you need an email address to sign up.

=== PhpWiki ===
This is a retro-compatible wiki that's open for anyone to edit with no account needed. Personal pages are welcome! http://wiki.n8fq.retro

=== Pastebin ===
http://wastebin.retro thanks Alyx!

=== Image host ===
[http://sha.retro ShaRetro] by PurpleJillybeans

=== Webrings ===
[http://webrings.n8fq.retro http://webrings.n8fq.retro]

== Search ==

=== Google Search Appliance ===
Available on '''[http://google.retro google.retro]'''

'''Submit domains for indexing to CursedSilicon. Crawling takes about 15 minutes'''

=== Pandia Search ===
Available on '''''[http://www.chivanet www.chivanet]''''' (no TLD but WWW is required!)

Has both a web and CGHMN version (automatically selected by detecting the domain from which the user visits)

'''Sites can be added via the Pandia UI'''

=== AskMe ===
Available on '''[http://askme.retro askme.retro]'''

'''Must submit pages for indexing'''

== Time ==
{| class="wikitable"
|+
!User
!IP/Domain
!Protocols
!Notes
|-
|PurpleJillybeans
|time.n8fq.retro
|NTP 4, daytime
|DNS overrides for time.windows.com, time.apple.com, and time.nist.gov
|}

== Proposed Services ==
{| class="wikitable"
|+
!User
!Domain
!Category
!Description
!Notes
|-
|[[User:Ch0ccyra1n|ch0ccyra1n]]
|chat.mac
|Chat: IRC (and XMPP)
|IRC and XMPP chat for retro macs
|Most likely will run on ejabberd and ejabberd-ircd. Will need a web signup page with probably perl scripting
|-
|[[User:Ch0ccyra1n|ch0ccyra1n]]
|domains.mac
|Domain Registrar
|Registrar where retro mac enthusiasts can get their own .mac domain
|Will write with perl on the backend
|-
|[[User:Ch0ccyra1n|ch0ccyra1n]]
|mail.mac
|Email
|Public email and webmail for retro macs
|Most likely will use SquirrelMail for webmail
|-
|[[User:Ch0ccyra1n|ch0ccyra1n]]
|repos.mac
|Software Repositories
|Software repository mirrors for TigerBrew and Yellow Dog Linux
|Will probably need to [https://distrowatch.com/table.php?distribution=yellowdog&pkglist=true recompile all packages] from source and re-package them as no surviving mirrors for versions of YDL before version 5 seem to exist.
|-
|[[User:Ch0ccyra1n|ch0ccyra1n]]
|forums.mac
|Other communications
|Forum for retro mac enthusiasts
|Debating between PHPbb or Simple Machines. Either way I'd write a custom theme to make it aqua just like the other services (besides oldgrounds)
|-
|[[User:Ch0ccyra1n|ch0ccyra1n]]
|time.mac
|Time
|NTP server, synced to time.apple.com
|
|-
|[[User:Ch0ccyra1n|ch0ccyra1n]]
|oldgrounds.mac
|Other communications
|Website for uploading Macromedia Flash (.swf) to play in the browser
|Might also add support for uploading videos, that would be converted to work on flash using a custom video player, kinda like how YouTube worked in the early days. Will need to write from scratch.
|-
|[[User:Ch0ccyra1n|ch0ccyra1n]]
|ch0ccyra1n.mac
|Websites
|Personal website for [[User:Ch0ccyra1n|ch0ccyra1n]]
|
|-
|PurpleJillybeans
|weather.retro
|Websites
|Worldwide weather conditions and forecasts
|PHP, Open-Meteo or AccuWeather API
|}
[[Category:Compu-Global-Hyper-Mega-Net]]

User:Bredo

2026-04-03T05:43:19Z

Bredo: Created page with "hi"

Services people are running

2026-04-03T05:42:59Z

Bredo: Update sign-up instructions for cghmn-mail

This is a collection of "services" available on CGHMN. It's intended as a bootstrapping point until we get something to help with discovery.

'''Are you running anything you'd like people to know about?''' Please add it here, or email '''[mailto:jill@n8fq.retro PurpleJillybeans]''' and she'll add it for you.

== Chat ==

=== AIM ===
CGHMN connects to Chivanet's AIM service (running RetroAimServer). To use it, you need to sign up via http://chivanet.org/aim/. Once you have a screenname, you can connect from within the network with a [[AIM Clients|client]].

=== IRC ===
{| class="wikitable"
|+
!Hostname
!Port (non-TLS)
!TLS?
!Major channels
!Notes
|-
|irc.cghmn.retro
|6667
|no
|#cghmn, #cghmn-events
|Bridged onto the regular internet and Discord
|-
|irc.loganius.retro
|6667
|yes, at 6697
|#hangout
|Must register your nick with NickServ before you can start talking. You'll need working email for this.
|}

=== MSN Messenger ===
'''TODO (maybe ask to federate with NINA ala ChivaNet?) - CursedSilicon'''

== Email ==
You can run your own mail server on a .retro domain. If you would prefer not to (or want a backup), there are some open mail services (separate from general "hosting").

=== CGHMN Public Email Service (ala Hotmail/Yahoo/Gmail) ===
Webmail: available - Supports Internet Explorer 3 (in theory) as a minimum. IE5 on Win3.11 tested and verified working.

HTTP: http://cghmn-mail.retro

IMAP:: cghmn-mail.retro

POP3: cghmn-mail.retro

(both incoming and outgoing servers use the same address for POP/IMAP/SMTP)

'''NOTE: SSL is ''enabled'' but is not widely tested. Your mileage may vary. If you experience issues, just use insecure/plaintext modes for simplicity'''

How to sign up: http://cghmn-mail.retro/register/

== Game servers ==
{| class="wikitable"
|+
!User
!Hostname
!IP
!Game(s)
!OS
!Notes
|-
|Loganius
|loganius.retro
|100.96.9.6
|ClassiCube & Halo PC
|Windows Server 2003 R2
|Must connect by IP for Halo.
|-
|[[User:CursedSilicon|CursedSilicon]]
|cursedsilicon.retro
|172.23.0.20
|Battle.Net
|Linux
|Just works! Plays Blizzard games up to Warcraft 3: Frozen Throne
|-
|[[User:CursedSilicon|CursedSilicon]]
|cursedsilicon.retro
|172.23.0.20
|Westwood Online
|Linux
|Just works! Plays Westwood games up to Red Alert 2: Yuri's Revenge
|-
|Serena
|wow.chivanet
|100.96.13.13
|World of Warcraft 3.3.5a (Wrath of the Lich King)
|Linux
|Message Serena for an account
|-
|PurpleJillybeans
|qw.n8fq.retro
|100.68.39.30
|QuakeWorld 2.30
|OpenBSD 3.0
|Artifact-RJS mod with custom maps. Info at [http://www.n8fq.retro/quakeworld www.n8fq.retro/quakeworld]
|-
|PurpleJillybeans
|master.n8fq.retro
|100.68.39.1
|QuakeSpy/GameSpy
|Debian Trixie
|Must specify manually for QuakeWorld and Quake 2. DNS override in place for Heretic II, Quake 3, and Doom 3.
|}
'''NOTE: Some services are "patched" at DNS level. Other games (such as Halo) require connecting to a server via IP. Check the notes!'''

== Websites ==
{| class="wikitable"
|+
!User
!IP/Hostname
!OS
!Server
!Brief Description
!Notes
|-
|Loganius
|http://loganius.retro
|Windows Server 2003 R2
|IIS 6.0
|Whatever I feel like putting there.
|Supports HTTPS.
|-
|Loganius
|http://askme.retro
|Windows Server 2003 R2
|IIS 6.0
|The AskMe Search Engine
|
|-
|[[User:CursedSilicon|CursedSilicon]]
|http://cursedsilicon.retro
|Linux
|Nginx
|Basically a landing page for new users.
Also has an FTP with lots of useful files
|Also available at http://cghmn.cursedsilicon.net
|-
|[[User:Ch0ccyra1n|ch0ccyra1n]]
|http://start.mac
|Raspberry Pi OS Lite
|Nginx
|Homepage for retro macintosh computers
|
|-
|PurpleJillybeans
|http://www.n8fq.retro
|OpenBSD 3.0
|Apache 1.3.19
|Public wiki, US/CA weather info, articles, web dev reference, HTML validator, Wikipedia and Stack Exchange mirrors
|
|-
|lily
|http://lily.retro
|
|
|Java Duke fan site
|And maybe vierus?
|-
|Harry404
|http://404.retro
|OS/2
|IBM Internet Connection Server
|
|
|-
|
|http://ca.cghmn
|
|
|CGHMN certificate authority
|SSL root cert downloads
|-
|talija
|http://www.coyote.retro
|
|
|
|NetBSD and FreeBSD Ports mailing lists
Icecast coming soon
|-
|GothPanda
|http://neato.retro
|Debian
|
|Neato! - a web directory
|
|-
|GothPanda
|http://northstar.retro
|Debian
|
|Hosting services
|Work in progress
|}

== Streaming Media ==
{| class="wikitable"
|+
!User
!IP/Hostname
!OS
!Server
!Brief Description
!Notes
|-
|Loganius
|live.loganius.retro
|Windows Server 2003 R2 x64
|IIS 6.0
|My livestream VODs.
|<nowiki>Livestreams at [rtsp | mms]://live.loganius.retro/, or </nowiki>http://live.loganius.retro:81/
<nowiki>TV playlist at [rtsp | mms]://live.loganius.retro/tv, or </nowiki>http://live.loganius.retro:81/tv
|-
|GothPanda
|northstar.retro
|
|Icecast
|[http://northstar.retro:8000/ WTST radio]
|'90s/'00s top 100
|-
|PurpleJillybeans
|real.n8fq.retro
|OpenBSD 3.0
|RealNetworks Basic Server Plus 5.0
|Streams for RealPlayer 5/G2/7/8
|[http://www.n8fq.retro/real Channel list]
|-
|Clay
|www.clay.retro
|
|Icecast
|
|[http://www.clay.retro:8000/ Channel list]
|}

== Gopher ==
{| class="wikitable"
|+
!User
!IP/Hostname
!OS
!Server
!Brief Description
!Notes
|-
|PurpleJillybeans
|gopher.n8fq.retro
|OpenBSD 3.0
|UMN gopherd 3.0r5
|Phlog, links (eventually)
|
|}

== Hosting ==

=== Theotherhost ===
{| class="wikitable"
|+
!OS
!Platform
!Admin UI requirements
!Languages
!Databases
!Services
|-
|Linux
|BlueOnyx
|IE 5 (tested on Win 2k)
|Perl 5.8.8, PHP 5.1.5
|MySQL 5.0.95
|FTP/Web/SMTP/IMAP/POP/DNS/Mailing lists
|}
'''How to sign up: message theothertom on IRC.'''

=== CGHMN Proxmox Hosting ===
CGHMN will offer Proxmox based hosting in future. Currently we are limited by hard disk capacity, but small servers can be uploaded and run. Ask [[User:CursedSilicon|CursedSilicon]] for details.

== Other communications ==

=== theotherforum ===
There is a forum at [http://forum.theothertom.retro '''forum.theothertom.retro''']. This can be used to share projects/sites, as well as for general discussion. Currently, you need an email address to sign up.

=== PhpWiki ===
This is a retro-compatible wiki that's open for anyone to edit with no account needed. Personal pages are welcome! http://wiki.n8fq.retro

=== Pastebin ===
http://wastebin.retro thanks Alyx!

=== Image host ===
[http://sha.retro ShaRetro] by PurpleJillybeans

=== Webrings ===
[http://webrings.n8fq.retro http://webrings.n8fq.retro]

== Search ==

=== Google Search Appliance ===
Available on '''[http://google.retro google.retro]'''

'''Submit domains for indexing to CursedSilicon. Crawling takes about 15 minutes'''

=== Pandia Search ===
Available on '''''[http://www.chivanet www.chivanet]''''' (no TLD but WWW is required!)

Has both a web and CGHMN version (automatically selected by detecting the domain from which the user visits)

'''Sites can be added via the Pandia UI'''

=== AskMe ===
Available on '''[http://askme.retro askme.retro]'''

'''Must submit pages for indexing'''

== Time ==
{| class="wikitable"
|+
!User
!IP/Domain
!Protocols
!Notes
|-
|PurpleJillybeans
|time.n8fq.retro
|NTP 4, daytime
|DNS overrides for time.windows.com, time.apple.com, and time.nist.gov
|}

== Proposed Services ==
{| class="wikitable"
|+
!User
!Domain
!Category
!Description
!Notes
|-
|[[User:Ch0ccyra1n|ch0ccyra1n]]
|chat.mac
|Chat: IRC (and XMPP)
|IRC and XMPP chat for retro macs
|Most likely will run on ejabberd and ejabberd-ircd. Will need a web signup page with probably perl scripting
|-
|[[User:Ch0ccyra1n|ch0ccyra1n]]
|domains.mac
|Domain Registrar
|Registrar where retro mac enthusiasts can get their own .mac domain
|Will write with perl on the backend
|-
|[[User:Ch0ccyra1n|ch0ccyra1n]]
|mail.mac
|Email
|Public email and webmail for retro macs
|Most likely will use SquirrelMail for webmail
|-
|[[User:Ch0ccyra1n|ch0ccyra1n]]
|repos.mac
|Software Repositories
|Software repository mirrors for TigerBrew and Yellow Dog Linux
|Will probably need to [https://distrowatch.com/table.php?distribution=yellowdog&pkglist=true recompile all packages] from source and re-package them as no surviving mirrors for versions of YDL before version 5 seem to exist.
|-
|[[User:Ch0ccyra1n|ch0ccyra1n]]
|forums.mac
|Other communications
|Forum for retro mac enthusiasts
|Debating between PHPbb or Simple Machines. Either way I'd write a custom theme to make it aqua just like the other services (besides oldgrounds)
|-
|[[User:Ch0ccyra1n|ch0ccyra1n]]
|time.mac
|Time
|NTP server, synced to time.apple.com
|
|-
|[[User:Ch0ccyra1n|ch0ccyra1n]]
|oldgrounds.mac
|Other communications
|Website for uploading Macromedia Flash (.swf) to play in the browser
|Might also add support for uploading videos, that would be converted to work on flash using a custom video player, kinda like how YouTube worked in the early days. Will need to write from scratch.
|-
|[[User:Ch0ccyra1n|ch0ccyra1n]]
|ch0ccyra1n.mac
|Websites
|Personal website for [[User:Ch0ccyra1n|ch0ccyra1n]]
|
|-
|PurpleJillybeans
|weather.retro
|Websites
|Worldwide weather conditions and forecasts
|PHP, Open-Meteo or AccuWeather API
|}
[[Category:Compu-Global-Hyper-Mega-Net]]