What's the solution to no port forwards? -- Hamachi!

TLDR: I use Hamachi to solve a problem. Client doesn’t listen and breaks it, then gets me to fix it.

This is a story of using an old software to fix a modern solution with a client that doesn’t listen.

Back in the old days, where Minecraft was new and port forwarding was advanced, there was a software called “Hamachi” made by the company “LogMeIn”.

It was a nifty little tool that used to allow people from all over the world to virtually connect to your computer with no ports forwarded!

Then everyone figured out how to use a router properly and dropped Hamachi.

Nowadays I work as a senior tech at an I.T Management/Consulting company.

10 years after my experiences with Hamachi, one of my clients calls up. They are a company that specializes in yachts. One of their yachts requires an AV guy to remote in and perform updates on their equipment but isn’t bothered being there physically.

They call up asking me to set up a VPN, little did they realise that their Sat provider and 4G backup both do not support port forwards. We are not their general I.T company. These guys have another company that handles it but the parent company uses us as their primary I.T. So I had no idea about their systems, or how anything worked there. After spending 40 minutes figuring out and confirming my suspicions, all looked lost…

But do not fret, as the solution we used 10 years ago lit up in my mind like a fire in a forest.

I remote into a laptop on board, set up Hamachi, put it in gateway mode and test to see if I can access the local network… SUCCESS! 10 minutes later I’ve provided the relavent information, tell them not to touch the laptop and set up a 1 time installer that’ll allow the person to download the client and immediately add them to the network.

I wait… Hoping that my solution works for them. Wondering if this software that I used when I was 13 would still be useful today!

The next day rolls around, and I get a call.

C = Client

M = Me

C: “Your solution didn’t work. Fix it!” - Actual quote

M: “Hmm that’s odd… Did you turn off the laptop?”

C: “No, the guy just tried logging in and it didn’t work. We need these updates done ASAP!”

M: “Okay! No worries, just going to remote in now!”

I remote into the computer to find they weren’t lying… The machine hadn’t been turned off… They did however, unplug the laptop from ethernet, and connect it to wifi… Which is not the interface Hamachi was set to work on… And is on a separate VLAN all together so it wouldn’t be able to talk to the AV network anyway…

*sigh* They have a history of not listening to instructions and going off in a tangent.

M: “So I see that the laptop isn’t connected to the ethernet port anymore?”

C: “Yeah, we needed it to play music.”

M: “… But it needs to be plugged in for it to work. I told you this…”

C: “It’s on wifi, it should still connect!”

M: “No… It’s not set to work that way!”

C: “A client is using that laptop, we can’t get it back just yet.”

M: “Fine. Once you get it back, call me and I’ll make sure it works again”.

2 hours go by, I get a call back.

C: “It’s back on the cable. Do what you need to”.

Cool, it’s back in, everything shows up green on my end… An hour later…

C: “It’s still not working! What’s going on! I don’t see you logged in fixing it!”

M: “It’s working… I’m currently on the network…”

C: “The AV Guy said it isn’t!”

M: “Okay, I’ll talk to them about it.”

Eventually I found out that the AV guy decided to try installing it on another computer to make sure it worked before installing it on his new computer… So the 1 time installer link didn’t work…

I generate him a new installer link, he installs it. Eureka! It works!

My old friend Hamachi worked fine, the client was happy that they were able to get the updates done! All is well…

Well… Until the client got the bill…

I remember using Hamachi to spoof LAN games during the time before modern world-wide multi-player. Good times.

Hamchi is still around, and is one of the recommended solutions for certain virtual tabletop software. In fact, it’s most useful than ever in that regard because a number of major ISPs are blocking port forwarding these days.

Hamachi uses ip addresses in the range 25.0.0.0 for the virtual network it creates between machine running the hamachi client. (or did a few years ago, could have changed)

That range is allocated to the Ministry of Defense in the UK. Many years ago they got a block of 16 million ip addresses. Basically none of it is reachable from the internet.

This has occasionally caused infosec people to be concerned when a monitoring tool appears to shows a machine is exchanging data with the UK Ministry of Defense, because Hamachi is in use.

Convenient for Hamachi, as it does not conflict with reserved-for-lan ranges such as 192.168.x.x and 10.x.x.x that some Hamachi users will already be using.

At current prices, those ip addresses are worth half a billion dollars. A couple of years ago Amazon bought a quarter of an old class-a /8 block for $108 million.

Man, I remember Hamachi when it was a freeware project. I dropped it like a hot potato when LogMeIn got hold of it.

Reading Hamachi in the title gave me flashbacks to the time i got home from School at 1pm and after Lunch i started Hamachi then MCServer.bat and then started a group call on Skype with my friends.

I think this was my first real IT experience next to having reinstall Win xp (or 7?).

A friend of mine once observed that “I’m not good with computers” can often be translated to “I am incapable of following basic instructions”. The more years go by in this profession, the more often I remember that.

Shit I remember using Hamachi probably 10 years ago to setup a private server for Maplestory on my home network and needed people to connect remotely. Good times…

Well… What’s wrong with TeamViewer? (Other than the obvious)

Me and my friends still use Hamachi today for testing mods on Arma 3. By far easier flick Hamachi on than changing settings on our main server.

If you’re still in the boat software update business, take a look at ZeroTier, it’s a bit more robust than Hamachi

Ah, so you remoted in to solve the difficult task of making sure that the AV guy could remote in as well. Now you have 2 ways of remoting in!

/me is LFG - can’t host but have Hamachi

Wow, didn’t realize. I’ve only used it once or twice and never in a business environment. All of our clients have the ability to port forward and have static IP’s assigned by the ISP. Interesting to know it’s still used.

a number of major ISPs are blocking port forwarding

This is why you don’t rent your router from your ISP.

Stupid simple IPX routing over the internet was magical in that it let you play old multiplayer DOS games over the internet.

Ah yes, playing minecraft with like 25fps and a ping of 100ms while the one guy with a semi decent PC hosted the Server, that were the good ol days.

Sorry but could tell me what’s obviously wrong with Teamviewer?
I legitimately don’t know

They need port forwarding for Reasons, not a Remote Desktop experience.

Nothing wrong with it, as a remote access tool except for the breaches. It’s more the fact the guy didn’t want to install his software on the device and wanted to do everything from the software on his laptop. Was easier than arguing with the guy about a network that I don’t even really manage.