Tagus (Non-existent) HAF Entry

[parityboy]

OK, so while looking at my firewall I noticed this:

Code: Select all

Chain OUTPUT (policy DROP)
target     prot opt source               destination         
ACCEPT     all  --  localhost            localhost           
ACCEPT     all  --  anywhere             192.168.1.0/24      
ACCEPT     udp  --  anywhere             servidor14.expressview.net  udp dpt:https
ACCEPT     udp  --  anywhere             raw-onyx-1.cryptostorm.net  udp dpt:https
ACCEPT     all  --  anywhere             anywhere

hmmm....so I did an nslookup on "servidor14.expressview.net" (Tagus). The result is this:

Code: Select all

Non-authoritative answer:
Name:   servidor14.expressview.net
Address: 130.185.83.237

OK, fair enough. So let's do an nslookup on Tagus' IP address (109.71.42.163).

Code: Select all

Non-authoritative answer:
163.42.71.109.in-addr.arpa      name = servidor14.expressview.net.

The expected result was "raw-tagus-1.cryptostorm.net", which is obviously not the actual result. So...what gives?

[Guest]

I have no idea- but I don't see any of those IP's in the raw ip config list.
It's probably nothing, but this sort of thing is exactly why I don't like to involve dns in my vpn setup. And why I appreciate when CS is quick to update there IP's in the raw IP thread when there's a change.
security>convenience.