Help with blocking Hamachi

[GSV]Lemming · 30 Mar 2011 at 20:08

My google fu has failed me, I cannot find a way to block users on my system from using Hamachi connections. Is this possible?

I am using a LINKSYS WRT54GS router if that helps..

Makes a change trying to block rather than making it work based on my google searches for sure!!

NathanE · 30 Mar 2011 at 20:29

Block the IP addresses for the Hamachi master/mediation servers.

matthab · 30 Mar 2011 at 21:32

NathanE said:
Block the IP addresses for the Hamachi master/mediation servers.

Theres a lot of servers and they dont release them all.

Hope this can help:
http://portforward.com/english/routers/port_forwarding/Thomson-Alcatel/Speedtouch510v6/Hamachi.htm

You can try the opposit and block all ports except the ones you need. So Port 80,443 etc.

[GSV]Lemming · 31 Mar 2011 at 17:01

Thanks for that, I will be blocking all those ports tonight. If I hear cries of frustration from upstairs I will know my work is done!!

KIA · 31 Mar 2011 at 20:30

Hamachi will fall back to using port 443 and tunnelling traffic through their nodes.

Azuse05 · 31 Mar 2011 at 22:48

fluff said:
Hamachi will fall back to using port 443 and tunnelling traffic through their nodes.

Which is why the op should be checking whether that router will run tomato and use qos to limit the problem*

*cries of frustration may be unwanted side-effect.

NathanE · 1 Apr 2011 at 08:50

[GSV]Lemming;18799235 said:
Thanks for that, I will be blocking all those ports tonight. If I hear cries of frustration from upstairs I will know my work is done!!

What ports? Hamachi doesn't use fixed port numbers unless the user has specifically told it to use certain numbers.

The only reliable way to block Hamachi is:

1. via deep packet inspection: identify "Hamachi packets" and block them. This will be hard, might need something like L7-Filter to do it assuming it supports the Hamachi protocol.

2. block the IP's of the mediation servers.

Phal · 1 Apr 2011 at 13:47

Uninstall it from their PCs and tell em theyll lose local admin rights if they keep trying cheeky ****

Too much time is wasted trying to stop people from doing stuff when telling people should be enough I think. Unless you have a suitably geared firewall then blocking stuff like this reliably is a pain in the ass!