Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Dynamic WAN address not updating on tunnelbroker for a configured IPv6 tunnel

    Scheduled Pinned Locked Moved IPv6
    13 Posts 5 Posters 3.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      muchacha_grande
      last edited by

      Hi,

      I'm testing an ALIX box with pfSense 2.1.1 PRERELEASE.

      I've configured an IPv6 tunnel and it worked.

      To do this I followed this how to: https://doc.pfsense.org/index.php/Using_IPv6_on_2.1_with_a_Tunnel_Broker

      But there is a problem whe the router is rebooted, because when I get the new WAN address it is not updated on the tunnelbroker's so the tunnel stop working until I force an update.

      Forcing the update from the Dynamic DNS configuration doesn't work until I first reload the filters.

      The update returns an error telling me that the tunnelbroker can't ICMP PING my address and it suggests me to allow this traffic on the filter rules, but of course, it's already allowed.

      So I assume that for some reason the WAN rule that allows ICMP traffic from the tunnelbroker's IP is not updating to the new WAN IP assigned from my ISP.

      The a filter reload fixes that rule and the I can force the IP address update on the tunnelbroker's and it work.

      May be there is some problem on my config that prevents the update to happen automatically.

      Anybody else have the same issue? and knows the solution?

      Bye..

      1 Reply Last reply Reply Quote 0
      • GertjanG
        Gertjan
        last edited by

        Yes.

        Same situation - same result - so I decided to weak up this thread instead of creating another one.

        Details: as above, and more.

        It starts with my pppoe connection that times out - my ISP closes the connection softly after one week exactly.
        This is handled ok.

        tc.newwanip is called to do his work.

        This is the end of 'ppp' getting all the IP, DNS, etc.
        It just works great.

        
        ....
        2014-06-20 16:12:33	Daemon.Info	192.168.1.1	Jun 20 16:12:36 ppp: [wan]   SECDNS 0.0.0.0
        2014-06-20 16:12:33	Daemon.Info	192.168.1.1	Jun 20 16:12:36 ppp: [wan_link0] LCP: rec'd Protocol Reject #211 (Opened)
        2014-06-20 16:12:33	Daemon.Info	192.168.1.1	Jun 20 16:12:36 ppp: [wan_link0] LCP: protocol IPV6CP was rejected
        2014-06-20 16:12:33	Daemon.Info	192.168.1.1	Jun 20 16:12:36 ppp: [wan] IPV6CP: protocol was rejected by peer
        2014-06-20 16:12:33	Daemon.Info	192.168.1.1	Jun 20 16:12:36 ppp: [wan] IPV6CP: state change Req-Sent --> Stopped
        2014-06-20 16:12:33	Daemon.Info	192.168.1.1	Jun 20 16:12:36 ppp: [wan] IPV6CP: LayerFinish
        2014-06-20 16:12:33	Daemon.Info	192.168.1.1	Jun 20 16:12:36 ppp: [wan] IPCP: rec'd Configure Nak #11 (Ack-Sent)
        2014-06-20 16:12:33	Daemon.Info	192.168.1.1	Jun 20 16:12:36 ppp: [wan]   IPADDR 90.45.8.77
        2014-06-20 16:12:33	Daemon.Info	192.168.1.1	Jun 20 16:12:36 ppp: [wan]     90.45.8.77 is OK
        2014-06-20 16:12:33	Daemon.Info	192.168.1.1	Jun 20 16:12:36 ppp: [wan]   PRIDNS 81.253.149.2
        2014-06-20 16:12:33	Daemon.Info	192.168.1.1	Jun 20 16:12:36 ppp: [wan]   SECDNS 80.10.246.132
        2014-06-20 16:12:33	Daemon.Info	192.168.1.1	Jun 20 16:12:36 ppp: [wan] IPCP: SendConfigReq #12
        2014-06-20 16:12:33	Daemon.Info	192.168.1.1	Jun 20 16:12:36 ppp: [wan]   IPADDR 90.45.8.77
        2014-06-20 16:12:33	Daemon.Info	192.168.1.1	Jun 20 16:12:36 ppp: [wan]   PRIDNS 81.253.149.2
        2014-06-20 16:12:33	Daemon.Info	192.168.1.1	Jun 20 16:12:36 ppp: [wan]   SECDNS 80.10.246.132
        2014-06-20 16:12:33	Daemon.Info	192.168.1.1	Jun 20 16:12:36 ppp: [wan] IPCP: rec'd Configure Ack #12 (Ack-Sent)
        2014-06-20 16:12:33	Daemon.Info	192.168.1.1	Jun 20 16:12:36 ppp: [wan]   IPADDR 90.45.8.77
        2014-06-20 16:12:33	Daemon.Info	192.168.1.1	Jun 20 16:12:36 ppp: [wan]   PRIDNS 81.253.149.2
        2014-06-20 16:12:33	Daemon.Info	192.168.1.1	Jun 20 16:12:36 ppp: [wan]   SECDNS 80.10.246.132
        2014-06-20 16:12:33	Daemon.Info	192.168.1.1	Jun 20 16:12:36 ppp: [wan] IPCP: state change Ack-Sent --> Opened
        2014-06-20 16:12:33	Daemon.Info	192.168.1.1	Jun 20 16:12:36 ppp: [wan] IPCP: LayerUp
        2014-06-20 16:12:33	Daemon.Info	192.168.1.1	Jun 20 16:12:36 ppp: [wan]   90.45.8.77 -> 193.253.160.3
        

        DHCP, dnsmasqetc kick in:
        Note that several dnsmasq logs just get thrown away - it spams ;)
        My external DNS servers from my ISP (the IPv4 ones) are set up ok.

        2014-06-20 16:12:33	User.Notice	192.168.1.1	Jun 20 16:12:36 check_reload_status: Rewriting resolv.conf
        2014-06-20 16:12:34	User.Notice	192.168.1.1	Jun 20 16:12:37 check_reload_status: rc.newwanip starting pppoe0
        2014-06-20 16:12:34	Daemon.Info	192.168.1.1	Jun 20 16:12:37 ppp: [wan] IFACE: Up event
        2014-06-20 16:12:34	Daemon.Info	192.168.1.1	Jun 20 16:12:37 ppp: [wan] IFACE: Rename interface ng0 to pppoe0
        2014-06-20 16:12:36	User.Error	192.168.1.1	Jun 20 16:12:39 php: rc.newwanip: rc.newwanip: Informational is starting pppoe0.
        2014-06-20 16:12:36	User.Error	192.168.1.1	Jun 20 16:12:39 php: rc.newwanip: rc.newwanip: on (IP address: 90.45.8.77) (interface: WAN[wan]) (real interface: pppoe0).
        2014-06-20 16:12:36	User.Error	192.168.1.1	Jun 20 16:12:39 php: rc.newwanip: ROUTING: setting IPv6 default route to 2001:470:1f12:5c0::1
        2014-06-20 16:12:36	User.Info	192.168.1.1	Jun 20 16:12:39 dhcpleases: Sending HUP signal to dns daemon(99921)
        2014-06-20 16:12:36	Daemon.Info	192.168.1.1	Jun 20 16:12:39 dnsmasq[99921]: reading /etc/resolv.conf
        2014-06-20 16:12:36	Daemon.Info	192.168.1.1	Jun 20 16:12:39 dnsmasq[99921]: using nameserver 2001:470:20::2#53
        2014-06-20 16:12:36	Daemon.Info	192.168.1.1	Jun 20 16:12:39 dnsmasq[99921]: using nameserver 80.10.246.132#53
        2014-06-20 16:12:36	Daemon.Info	192.168.1.1	Jun 20 16:12:39 dnsmasq[99921]: using nameserver 81.253.149.2#53
        2014-06-20 16:12:36	Daemon.Warning	192.168.1.1	Jun 20 16:12:39 dnsmasq[99921]: ignoring nameserver 127.0.0.1 - local interface
        2014-06-20 16:12:36	Daemon.Info	192.168.1.1	Jun 20 16:12:39 dnsmasq[99921]: using local addresses only for domain 31.172.in-addr.arpa
        2014-06-20 16:12:36	Daemon.Info	192.168.1.1	Jun 20 16:12:39 dnsmasq[99921]: using local addresses only for domain 30.172.in-addr.arpa
        2014-06-20 16:12:36	Daemon.Info	192.168.1.1	Jun 20 16:12:39 dnsmasq[99921]: using local addresses only for domain 29.172.in-addr.arpa
        2014-06-20 16:12:36	Daemon.Info	192.168.1.1	Jun 20 16:12:39 dnsmasq[99921]: using local addresses only for domain 28.172.in-addr.arpa
        2014-06-20 16:12:36	Daemon.Info	192.168.1.1	Jun 20 16:12:39 dnsmasq[99921]: using local addresses only for domain 27.172.in-addr.arpa
        2014-06-20 16:12:36	Daemon.Info	192.168.1.1	Jun 20 16:12:39 dnsmasq[99921]: using local addresses only for domain 26.172.in-addr.arpa
        2014-06-20 16:12:36	Daemon.Info	192.168.1.1	Jun 20 16:12:39 dnsmasq[99921]: using local addresses only for domain 25.172.in-addr.arpa
        2014-06-20 16:12:36	Daemon.Info	192.168.1.1	Jun 20 16:12:39 dnsmasq[99921]: using local addresses only for domain 24.172.in-addr.arpa
        2014-06-20 16:12:36	Daemon.Info	192.168.1.1	Jun 20 16:12:39 dnsmasq[99921]: using local addresses only for domain 23.172.in-addr.arpa
        2014-06-20 16:12:36	Daemon.Info	192.168.1.1	Jun 20 16:12:39 dnsmasq[99921]: using local addresses only for domain 22.172.in-addr.arpa
        2014-06-20 16:12:36	Daemon.Info	192.168.1.1	Jun 20 16:12:39 dnsmasq[99921]: using local addresses only for domain 21.172.in-addr.arpa
        2014-06-20 16:12:36	Daemon.Info	192.168.1.1	Jun 20 16:12:39 dnsmasq[99921]: using local addresses only for domain 20.172.in-addr.arpa
        2014-06-20 16:12:36	Daemon.Info	192.168.1.1	Jun 20 16:12:39 dnsmasq[99921]: using local addresses only for domain 19.172.in-addr.arpa
        2014-06-20 16:12:36	Daemon.Info	192.168.1.1	Jun 20 16:12:39 dnsmasq[99921]: using local addresses only for domain 18.172.in-addr.arpa
        2014-06-20 16:12:36	Daemon.Info	192.168.1.1	Jun 20 16:12:39 dnsmasq[99921]: using local addresses only for domain 17.172.in-addr.arpa
        2014-06-20 16:12:36	Daemon.Warning	192.168.1.1	Jun 20 16:12:39 dnsmasq[99921]: overflow: 2 log entries lost
        2014-06-20 16:12:36	Daemon.Warning	192.168.1.1	Jun 20 16:12:39 dnsmasq[99921]: overflow: 2 log entries lost
        
        

        My IPv6 (static - it my tunnel side) is set up.
        Note that apinger gets SIGHUPed and
        that is complains at the end of this part of the log: no more (IPv6) tunnel. Ok, that normal.
        Note also: My other DynDNS - a "rfc2136 BIND DNS" starts its update - No detailed logs because part of the DynDNS settings page hasn't a "VerboseLog" option - the DynDNS  HE.net Tunnelbroker updater has this option - and its set.
        So, the job is done, the mail is send (to me - note: I received that mail !).
        BUT: my debug logs on my DNS serveur (a Debian server with bind9) never receives this 'rfc2136' update:

        20-Jun-2014 17:12:12.162 update: client 2001:470:1f12:5c0::2#1295: updating zone 'brit.test-domaine.fr/IN': deleting rrset $
        20-Jun-2014 17:12:12.179 update: client 2001:470:1f12:5c0::2#1295: updating zone 'brit.test-domaine.fr/IN': adding an RR at$
        20-Jun-2014 17:12:12.240 update: client 2001:470:1f12:5c0::2#14669: updating zone 'brit.test-domaine.fr/IN': deleting rrset$
        20-Jun-2014 17:12:12.240 update: client 2001:470:1f12:5c0::2#14669: updating zone 'brit.test-domaine.fr/IN': adding an RR a$
        20-Jun-2014 17:12:12.241 notify: zone brit.test-domaine.fr/IN: sending notifies (serial 2014012372)
        
        

        This is ME manually updating one hour (17:12 !!) afterwards. Again: these 4 lines is a fragment of the bind9 DNS server - running on my Linux server on the net.

        Back to the pfSense logs:
        The "HE.net Tunnelbroker" get handled - and is detailed:

        2014-06-20 16:12:36	User.Error	192.168.1.1	Jun 20 16:12:39 php: rc.newwanip: ROUTING: setting IPv6 default route to 2001:470:1f12:5c0::1
        2014-06-20 16:12:36	User.Error	192.168.1.1	Jun 20 16:12:40 php: rc.newwanip: ROUTING: setting IPv6 default route to 2001:470:1f12:5c0::1
        2014-06-20 16:12:36	User.Error	192.168.1.1	Jun 20 16:12:40 php: rc.newwanip: ROUTING: setting IPv6 default route to 2001:470:1f12:5c0::1
        2014-06-20 16:12:36	User.Error	192.168.1.1	Jun 20 16:12:40 php: rc.newwanip: ROUTING: setting default route to 193.253.160.3
        2014-06-20 16:12:36	User.Error	192.168.1.1	Jun 20 16:12:40 apinger: SIGHUP received, reloading configuration.
        2014-06-20 16:12:36	User.Error	192.168.1.1	Jun 20 16:12:40 php: rc.newwanip: phpDynDNS: updating cache file /conf/dyndns_wan_rfc2136_'brit.test-domaine.fr'_ns.test-domaine.fr.cache: 90.45.8.77
        2014-06-20 16:12:37	User.Error	192.168.1.1	Jun 20 16:12:41 php: rc.newwanip: Message sent to gertjan@kroeb.me OK
        2014-06-20 16:12:37	User.Error	192.168.1.1	Jun 20 16:12:41 php: rc.newwanip: DynDns: updatedns() starting
        2014-06-20 16:12:38	User.Error	192.168.1.1	Jun 20 16:12:41 php: rc.newwanip: DynDns (245809): 90.45.8.77 extracted from local system.
        2014-06-20 16:12:38	User.Error	192.168.1.1	Jun 20 16:12:41 php: rc.newwanip: DynDNS (245809): running get_failover_interface for wan. found pppoe0
        2014-06-20 16:12:38	User.Error	192.168.1.1	Jun 20 16:12:41 php: rc.newwanip: DynDns (245809): 90.45.8.77 extracted from local system.
        2014-06-20 16:12:38	User.Error	192.168.1.1	Jun 20 16:12:41 php: rc.newwanip: DynDns (245809): Current WAN IP: 90.45.8.77 Cached IP: 86.221.4.132
        2014-06-20 16:12:38	User.Error	192.168.1.1	Jun 20 16:12:41 php: rc.newwanip: DynDns (245809): DynDns: cacheIP != wan_ip.  Updating. Cached IP: 86.221.4.132 WAN IP: 90.45.8.77
        2014-06-20 16:12:38	User.Error	192.168.1.1	Jun 20 16:12:41 php: rc.newwanip: DynDNS (245809): DynDns _update() starting.
        2014-06-20 16:12:38	User.Error	192.168.1.1	Jun 20 16:12:41 php: rc.newwanip: HE.net Tunnelbroker: DNS update() starting.
        2014-06-20 16:12:38	User.Error	192.168.1.1	Jun 20 16:12:41 apinger: ALARM: TUNNELGWv6(2001:470:1f12:5c0::1)  *** down ***
        
        

        First, some more fragments from "check_reload_status"
        And the "DynDNS " that continues …. and received a "non-documented error", but very essential to "HE.net Tunnelbroker" : "HE.net Tunnelbroker" CAN NOT ping me back, and this is needed if they want to accept my NEW IP.
        Note: this "error should be add in /etc/inc/dyndns.class for the "'he-net-tunnelbroker'" case.
        But, happily enough, the error (PAYLOAD) is shown: "I can't ping your IP - You don't reply to ICMP".
        => Note : I do have a pass rule on WAN interface that enabled ICMP (IPv4) on "WAN address ".
        An we see the end of the script /etc/rc.newwanip.

        2014-06-20 16:12:48	User.Notice	192.168.1.1	Jun 20 16:12:51 check_reload_status: updating dyndns TUNNELGWv6
        2014-06-20 16:12:48	User.Notice	192.168.1.1	Jun 20 16:12:51 check_reload_status: Restarting ipsec tunnels
        2014-06-20 16:12:48	User.Notice	192.168.1.1	Jun 20 16:12:51 check_reload_status: Restarting OpenVPN tunnels/interfaces
        2014-06-20 16:12:48	User.Notice	192.168.1.1	Jun 20 16:12:51 check_reload_status: Reloading filter
        2014-06-20 16:12:51	User.Error	192.168.1.1	Jun 20 16:12:54 php: rc.dyndns.update: phpDynDNS: Not updating brit.test-domaine.fr AAAA record because the IPv6 address has not changed.
        2014-06-20 16:12:51	User.Error	192.168.1.1	Jun 20 16:12:54 php: rc.newwanip: DynDNS (245809): DynDns _checkStatus() starting.
        2014-06-20 16:12:51	User.Error	192.168.1.1	Jun 20 16:12:54 php: rc.newwanip: DynDNS (245809): Current Service: he-net-tunnelbroker
        2014-06-20 16:12:51	User.Error	192.168.1.1	Jun 20 16:12:54 php: rc.newwanip: phpDynDNS: PAYLOAD: -ERROR: IP is not ICMP pingable.  Please make sure ICMP is not blocked.  If you are blocking ICMP, please allow 66.220.2.74 through your firewall.
        2014-06-20 16:12:51	User.Error	192.168.1.1	Jun 20 16:12:54 php: rc.newwanip: phpDynDNS: (Unknown Response)
        2014-06-20 16:12:51	User.Error	192.168.1.1	Jun 20 16:12:54 php: rc.filter_configure_sync: Could not find IPv6 gateway for interface(wan).
        2014-06-20 16:12:57	User.Error	192.168.1.1	Jun 20 16:13:00 php: rc.newwanip: Resyncing OpenVPN instances for interface WAN.
        2014-06-20 16:12:57	User.Error	192.168.1.1	Jun 20 16:13:00 php: rc.newwanip: Creating rrd update script
        2014-06-20 16:12:59	User.Error	192.168.1.1	Jun 20 16:13:02 php: rc.newwanip: pfSense package system has detected an ip change 109.214.189.183 ->  90.45.8.77 ... Restarting packages.
        2014-06-20 16:12:59	User.Notice	192.168.1.1	Jun 20 16:13:02 check_reload_status: Starting packages
        
        

        I guess the WAN IP (IPv4) is up, but routes, rules or whatever aren't stabilized yet, my WAN firewall rule to accept (and reply) ICMP on my WAN IP isn't activated yet.
        https://ipv4.tunnelbroker.net/ipv4_end.php ("'he-net-tunnelbroker'") tries to ping me back, it won't receive a reply and flags the error.

        Note the difference with my DynDNS rfc2136 just a second or so before: the curl_exec() won't even make it to MY Linux server on the net (bind9 - If it did,I should have the traces in the bind9-debug log).

        I decided to put on some "sleep(10) on strategics places to see what happens next time.
        edit: this didn't work. A more sophisticated system is needed.
        I'll try to re-order rc.newwanip.

        Of course, simply "editing" my two DynDNS entries (without modifying anything) - simply "Safe a Force Update" will do the job just fine (logs and functionality prove it)

        edit: several posts on the forum(like this one https://forum.pfsense.org/index.php?topic=38296.msg197621#msg197621 ) tell me that jimp knows all about DynDNS, HE-tunnelbroker and IPv6  :)

        No "help me" PM's please. Use the forum, the community will thank you.
        Edit : and where are the logs ??

        1 Reply Last reply Reply Quote 0
        • GertjanG
          Gertjan
          last edited by

          @Gertjan:

          I'll try to re-order rc.newwanip.

          Re ordered rc.newwanip, so that DynSNS stuff gets executed after restart_packages();

          This works much better:

           diff rc.newwanip rc.newwanip.org
          194,199d193
          <       /* perform RFC 2136 DNS update */
          <       services_dnsupdate_process($interface);
          <
          <       /* signal dyndns update */
          <       services_dyndns_configure($interface);
          <
          216c210,216
          <       restart_packages();
          ---
          >       restart_packages();
          >
          >       /* perform RFC 2136 DNS update */
          >       services_dnsupdate_process($interface);
          >
          >       /* signal dyndns update */
          >       services_dyndns_configure($interface);
          
          

          Both the he-tunnelbroker and my DNS server were updated correctly now.

          The question is: are there any side effects ?

          Note: I have only one package installed: NUT (2.6.5_1 pkg 2.0.2) for UPS management.
          Nothing else.

          Also: this is NOT an IPv6 related issue - this thread should be moved elsewhere.

          No "help me" PM's please. Use the forum, the community will thank you.
          Edit : and where are the logs ??

          1 Reply Last reply Reply Quote 0
          • GertjanG
            Gertjan
            last edited by

            …. lost my pppoe WAN IP.
            The modified rc.newwanip got executed.

            But, no way, neither my "RFC 2136 DNS", neither "'he-net-tunnelbroker'" got updated.
            The first: the curl never made it to my site.
            The latter:

            2014-06-23 14:03:27 User.Error 192.168.1.1 Jun 23 14:03:34 php: rc.newwanip: DynDNS (245809): DynDns _checkStatus() starting.
            2014-06-23 14:03:27 User.Error 192.168.1.1 Jun 23 14:03:34 php: rc.newwanip: DynDNS (245809): Current Service: he-net-tunnelbroker
            2014-06-23 14:03:27 User.Error 192.168.1.1 Jun 23 14:03:34 php: rc.newwanip: phpDynDNS: PAYLOAD: -ERROR: IP is not ICMP pingable.  Please make sure ICMP is not blocked.  If you are blocking ICMP, please allow 66.220.2.74 through your firewall.
            2014-06-23 14:03:27 User.Error 192.168.1.1 Jun 23 14:03:34 php: rc.newwanip: phpDynDNS: (Unknown Response)
            2014-06-23 14:03:28 User.Notice 192.168.1.1 Jun 23 14:03:35 check_reload_status: Reloading filter

            Interesting:
            The last line:

            2014-06-23 14:03:28	User.Notice	192.168.1.1	Jun 23 14:03:35 check_reload_status: Reloading filter
            

            came in just to late ??

            I'll:

                    filter_configure();
            
                    /* perform RFC 2136 DNS update */
                    services_dnsupdate_process($interface);
            
                    /* signal dyndns update */
                    services_dyndns_configure($interface);
            
            } else
            
                    /* signal filter reload */
                    filter_configure();
            
            ?>
            
            

            No "help me" PM's please. Use the forum, the community will thank you.
            Edit : and where are the logs ??

            1 Reply Last reply Reply Quote 0
            • GertjanG
              Gertjan
              last edited by

              Putting

              filter_configure();

              above DynDNS handling was being proposed before https://forum.pfsense.org/index.php?topic=72862.0

              No "help me" PM's please. Use the forum, the community will thank you.
              Edit : and where are the logs ??

              1 Reply Last reply Reply Quote 0
              • rcfaR
                rcfa
                last edited by

                Seem to have the same or similar issue with a HE tunnel broker link.
                Has there been a consensus established on how to fix this properly?

                Things used to work just fine until I installed 2.1.4, and now nada on the IPv6 tunnel front.

                1 Reply Last reply Reply Quote 0
                • GertjanG
                  Gertjan
                  last edited by

                  @rcfa:

                  Things used to work just fine until I installed 2.1.4, and now nada on the IPv6 tunnel front.

                  The code involved when updating DynDNS and "RFC2136 DNS" didn't change the last versions.
                  The same behavior could show up before.

                  Its more some race condition: for example, to validate upon "he-net-tunnelbroker" our IP-WAN has to reply on pings.
                  It doesn't when "DynDNS" runs (again: "he-net-tunnelbroker") and a couple of lines ahead in the 'rc.newwanip' scripts a "filter_configure();" rebuilds the firewall rules with our new IP-WAN. Then, our IP-WAN replies to ICMP (needed for "he-net-tunnelbroker" to validate our IP-WAN).

                  I guess for the same reason my "RFC2136 DNS" just doesn't finds its way out tp my 'bind9' server neither.
                  My logs on my "bind9 linux server" do not show any traces of the curl call.

                  Try my patch.

                  No "help me" PM's please. Use the forum, the community will thank you.
                  Edit : and where are the logs ??

                  1 Reply Last reply Reply Quote 0
                  • L
                    lxa
                    last edited by

                    Just to add another datapoint: I had the same problem and the patch helped. Does not seem to have adverse side effects.

                    1 Reply Last reply Reply Quote 0
                    • GertjanG
                      Gertjan
                      last edited by

                      Thanks for the feed back.

                      Using the patch myself, for the last 3 weeks I had several IP Wan renews, and no issues what so ever.
                      Both my "RFC2136 DNS" and DynDNS got updated fine now.

                      No "help me" PM's please. Use the forum, the community will thank you.
                      Edit : and where are the logs ??

                      1 Reply Last reply Reply Quote 0
                      • D
                        dkrizic
                        last edited by

                        I can confirm this behavior. When my WAN connection drops, 2(!) other DynDNS services are updated reliably, only the HE Tunnel Dyn DNS is NOT updated. Reproducable (every morning).

                        After reboot: All DynDNS are correctly updated
                        After WAN drop: All DynDNS except HE are updated
                        After manual update of HE: Everything up and running again.

                        Is there a way to trigger the update via cron, as a workaround?

                        1 Reply Last reply Reply Quote 0
                        • GertjanG
                          Gertjan
                          last edited by

                          @dkrizic:

                          I can confirm this behavior. When my WAN connection drops, 2(!) other DynDNS services are updated reliably, only the HE Tunnel Dyn DNS is NOT updated. Reproducable (every morning).

                          Apply my patch proposed above - and check again.

                          @dkrizic:

                          After reboot: All DynDNS are correctly updated

                          Same thing for me - this always worked … as advertised ;)
                          @dkrizic:

                          After WAN drop: All DynDNS except HE are updated

                          I just tested that !
                          Ripped out the ADSL phone cable out of the wall.
                          Put it back in 30 seconds later.
                          Connection came back - my DynDNS (HE Tunnelbroker) and RFC (private server with 'DNS bind') was synchronised well - two mails from my pfSEnse box confirmed this.

                          @dkrizic:

                          After manual update of HE: Everything up and running again.

                          This is & was working for me - that's what I used to force the updates.

                          @dkrizic:

                          Is there a way to trigger the update via cron, as a workaround?

                          Login by SSH in your pfSEnse box.
                          Take the option 8), the Shell access.

                          Type
                          viconfig
                          (be carefull, you are using vi here  :) )

                          
                           <pfsense><version>10.1</version>
                                  <lastchange><theme>pfsense_ng</theme>
                                  <system><developerspew>1</developerspew></system></lastchange></pfsense> 
                          

                          ADD the line

                                          <developerspew>1</developerspew>
                          

                          Save
                          (that is
                          ESCAPE:wq
                          ==> 4 key strokes)

                          If your pfSEnse box can send mails to you, you will receive a mail around midnight.
                          The one that send the mail is the DYNDNS cron task  ;)

                          Anyway, my path works for me:
                          The end of /etc/ rc.newwanip look like this:

                          
                                  /* reload igmpproxy */
                                  services_igmpproxy_configure();
                          
                                  /* restart snmp */
                                  services_snmpd_configure();
                          
                                  restart_packages();
                          
                                  filter_configure();
                                  sleep(5);
                                  log_error("rc.newwanip: Go for DynDNS ...");
                          
                                  /* perform RFC 2136 DNS update */
                                  services_dnsupdate_process($interface);
                          
                                  /* signal dyndns update */
                                  services_dyndns_configure($interface);
                          
                          } else
                          
                                  /* signal filter reload */
                                  filter_configure();
                          
                          ?>
                          
                          

                          Save.

                          Now you can forget about this issue  :)

                          No "help me" PM's please. Use the forum, the community will thank you.
                          Edit : and where are the logs ??

                          1 Reply Last reply Reply Quote 0
                          • D
                            dkrizic
                            last edited by

                            Hi,

                            don't worry about the vi, it is my favorite editor. I patched /etc/rc.newwanip as you suggest:

                            
                            194,199d193
                            < 	/* perform RFC 2136 DNS update */
                            < 	services_dnsupdate_process($interface);
                            < 
                            < 	/* signal dyndns update */
                            < 	services_dyndns_configure($interface);
                            < 
                            216a211,220
                            > 
                            > 	filter_configure();
                            > 
                            > 	sleep(5);
                            > 
                            > 	/* perform RFC 2136 DNS update */
                            > 	services_dnsupdate_process($interface);
                            > 
                            > 	/* signal dyndns update */
                            > 	services_dyndns_configure($interface);
                            
                            

                            I will test it.

                            I test it with another problem I have: After WAN drop, the Squid Reverse Proxy does not listen on the WAN interface anymore. The generated file

                            /usr/pbi/squid-i386/etc/squid/squid.conf

                            contains the WAN IP and needs to be updated after a WAN drop. I found a workaround by not listening on WAN anymore and forward WAN -> Localhost with NAT rules.  But this is another topic.

                            Thanks, I will keep you updated.

                            1 Reply Last reply Reply Quote 0
                            • D
                              dkrizic
                              last edited by

                              Just to keep you updated… It works, today morning IPv6 was up and running, but there is one thing strange: The "Dynamic DNS" panel shows the wrong (old) IP in red. But I just saw, that there were some fixes for the upcoming 2.2, so I am relaxed.

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.