ANSWERED Entry IPs for VPN servers not resolving correctly on dns1.airvpn.org or others

[epictetus 0]

Hi Everyone,

I have firewall rules set in pfsense to only allow VPN machines to connect to AirVPN IP addresses. (Aliases that update the pfsense DNS resolver.)
The entry IPs are not resolving correctly for me.
For example if I lookup ro.all.vpn.airdns.org I get;
91.207.102.162
86.105.9.66

I’m using quad nine (9.9.9.9) and have tried dns1.airvpn.org.

To enable a machine to connect to Alamak in Romania, I need to allow 91.207.102.165 in the firewall (Server exits 91.207.102.163).

I think there are other servers that are missing in the DNS list, but I haven’t dug into it.

Is there a different address I should use to resolve AirVPN entry IPs?

Has someone forgotten to update the DNS A records?

Perhaps it’s just me and everyone else is ok!? (Not sure how many people enforce IPs on their firewalls…)

Thanks.
 

[Staff 9973]

Hello!

 

91.207.102.162 is Alamak entry-IP address 1.

91.207.102.165 is Alamak entry-IP address 3.

 

Entry-IP address 3 enforces tls-crypt and TLS 1.2 and is the favorite choice of Eddie when it can count on OpenVPN 2.4 or higher version.

 

If Eddie can count on OpenVPN versions older than 2.4 (which do not support tls-crypt) then it will pick entry-IP address 1 to keep compatibility.

 

Kind regards

[epictetus 0]

Ah, great, that's good to know I'm connecting to the prefered IP.

 

So, what DNS name do I need to use to get IP address 3?

 

Thanks

[Staff 9973]

Hello!

 

Please see here, so you can have a complete overview:

https://airvpn.org/topic/14378-how-can-i-get-vpn-servers-entry-ip-addresses

 

Kind regards

[epictetus 0]

Ah, so I should have been using a 3! ro3.all.vpn.airdns.org resolves to the needed as does the earth3 etc. I should have read that properly in the first place! Shame it doesn't resolve to the third by default or something. Thanks for the help.