Hamachi for IPCop

For those who don't know Hamachi (grabbed from wikipedia):

Hamachi is a centrally-managed zero-configuration virtual private network (VPN) freeware application capable of establishing direct links between computers that are behind NAT firewalls without requiring reconfiguration (in most cases); in other words, it establishes a connection over the Internet that very closely emulates the connection that would exist if the computers were connected over a local area network.

I've built an addon which integrates Hamachi VPNs into your IPCop box. Currently I don't have a Premium Account so this addon allows you to perform operations allowed to Free Account owners (eg. no Network lock or Member ban). It's based on Hamachi linux client version 0.9.9.20 which has a number of restrictions compared with the Windows version; the main one is that it cannot talk to clients traversing HTTP proxies. A feature not included with Hamachi, but added by this addon is that you can decide which clients to allow or deny access, somewhat limiting your IPCop box exposure.

If you want to contact me or contribute (translations, suggestions, etc.) please don't hesitate to contact me.


Addon Description Version
Hamachi Adds ability to participate in Hamachi VPNs to IPCop 1.1.0
1.0.9 beta version 1.0.9b
First release 1.0.0

Installation

To install this addon, simply execute these commands:

cd /wherever/you/downloaded
tar zxf ipcop-hamachi-x.y.z.tgz
cd ipcop-hamachi
./install

Removal

To remove this addon, you should issue these commands:

cd /wherever/you/downloaded
tar zxf ipcop-hamachi-x.y.z.tgz
cd ipcop-hamachi
./uninstall

Note that the uninstall program will not remove some files under /var/ipcop/hamachi; these are generated upon first startup of Hamachi (certificates and ID). If you want to keep your “identity” (together with network ownership) in the Hamachi world, you have to backup these files.

Quick start

Once installed, you'll find a new entry, HAMACHI, in the VPN menu.

Global settings

The Global settings section shows the connection status, the IP address assigned to the IPCop box and lets you configure these parameters:

  • Start on boot: autostart hamachi after rebooting IPCop
  • Nickname: this is how the Hamachi world knows you
  • Require network password: if checked, you must supply a password for newly created networks
  • Client security: defines the level of security applied to Hamachi clients connected to your IPCop box

You should stop Hamachi service in order to change these parameters. Particular attention should be payed to Client security; there are three values available and you'd be better to understand their meaning, to avoid bad surprises… :-)

  • Allow everyone: not much else to say…
  • Enable single clients: on the right side of each host you'll find a checkbox that lets you allow or block traffic from that host; it's an ON/OFF switch: once allowed, all the traffic will be accepted from that host.
  • Integrate with BOT: available only if you have Block Outgoing Traffic installed. As with previous level, you'll find a checkbox beside each host, but, once enabled, the traffic to and from that host will be subject to BOT rules. This way, you'll have finer control on what single hosts can (or can't) do.

Personally I wouldn't recommend using this addon without setting the latter one. After all, it's a firewall!

Create or join networks

Here you can create or join networks. Simply put the network name, the password and click the button you like. You can also check the Autoconnect flag if you want to automatically restore network connection upon Hamachi start.

Networks and hosts

Here you can control Hamachi networks and clients. The bullet on the left side of networks and hosts shows their connection state: red=offline, green=online.

On the right side, instead, you'll find some controls to perform actions against them. The legend is self-explicative and hovering with the mouse over the buttons will show a brief description of the action it performs. If Client security is set to Enable single clients or Integrate with BOT, enabled clients will be shown in green while disabled ones in red.

Backups

This addon integrates with IPCop's backup system; if you want to make additional copies, however, you have to copy, at least, these files:

/var/ipcop/hamachi/client.pri
/var/ipcop/hamachi/client.pub
/var/ipcop/hamachi/clients
/var/ipcop/hamachi/networks
/var/ipcop/hamachi/settings
/var/ipcop/hamachi/state

Changelog

1.1.0   Enhanced the integration with IPCop:
         - System Status now shows Hamachi service status
         - Network Status now shows Hamachi interface colored ;-)
         - Traffic Graphs shows Hamachi incoming/ougoing bps
         - Hamachi Connections are now shown in proper color
        Added integration with Block Outgoing Traffic.
        Added autostart on boot. I forgot it in the first release :-(
1.0.0   First release.
en/digitalstuff/ipcop/hamachi.txt · Last modified: 2012/04/10 03:07 by alle
Recent changes RSS feed Debian Powered by PHP Valid XHTML 1.0 Valid CSS Driven by DokuWiki