idents that look like hexed ips are blindly trusted

[jesopo]

upshot: i got syn to fake cliconn snote me as cyberghost. i was not on cyberghost

[thegrumble]

It would be good to have this fixed eventually, ideally with a config option that would restrict all hexip handling to only those connections that are also assigned gateway cloaks based on it