Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    DuiaDns.net wit NPt (Dual IPv6 WANs) [Resolved]

    Scheduled Pinned Locked Moved DHCP and DNS
    5 Posts 2 Posters 3.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • dragoangelD Offline
      dragoangel
      last edited by

      Good night, I'm trying to configure DDNS client for resolve domain```
      mydomainv6.duia.eu

      If I use LAN interface to monitor it display Cached IP: N\A but it forward local IPv6 to DNS Record to fd64::1\. And if I use Gateway Group to monitoring interface it display [::] address, and not forward it to DuiaDns.net. I already successful configured DuiaDns.net (v4) for another domain```
      mydomainv4.duia.eu
      ```and it work well. Can somebody test this case? Im using pfSense 2.3.3-RELEASE-p1\. Thx :)
      
      P.S. I take two 6rd from HE.net each for my WANv4, and my cfg for DDNS:
      Service Type: DuiaDns.net (v6)
      Interface to monitor: GW Group WANGROUP6
      Hostname: mydomainv6.duia.eu
      MX: empty
      Wildcards: false
      Verbose logging: false
      Username: token from [https://www.duiadns.net/account/account-info.html](https://www.duiadns.net/account/account-info.html) page
      Password: md5 password
      
      My "Custom (v6)" try not successful to:
      Interface to monitor: GW Group WANGROUP6
      Interface to send update from: Tried LAN01 and GW Group WANGROUP6
      Username: Tried  mydomainv6.duia.eu and token from [https://www.duiadns.net/account/account-info.html](https://www.duiadns.net/account/account-info.html)
      Password: md5 password
      Update URL: Tried https://ipv6.duia.net/dynamic.duia and https://ipv6.duia.net/dynamic.duia?host=mydomainv6.duia.eu
      Rule Match: Empty
      
      P.S.P.S.: I think next step, skip free DDNS and use RFC 2136 Clients, but it harder  :-\

      Latest stable pfSense on 2x XG-7100 and 1x Intel Xeon Server, running mutiWAN, he.net IPv6, pfBlockerNG-devel, HAProxy-devel, Syslog-ng, Zabbix-agent, OpenVPN, IPsec site-to-site, DNS-over-TLS...
      Unifi AP-AC-LR with EAP RADIUS, US-24

      1 Reply Last reply Reply Quote 0
      • dragoangelD Offline
        dragoangel
        last edited by

        Maybe someone already use free DDNSv6 server that gives you their domain (at least 1) for free?
        Someone used this script from manual https://doc.pfsense.org/index.php/RFC2136_Dynamic_DNS
        make-ddns-host.sh:```

        #!/bin/sh
        KEY_NAME=${1}
        KEY_DIR=/etc/namedb/keys
        KEYS_CONFIG=/etc/namedb/dns.keys.conf
        /bin/mkdir -p ${KEY_DIR}
        cd ${KEY_DIR}
        KEY_FILE_NAME=/usr/sbin/dnssec-keygen -K ${KEY_DIR} -a HMAC-MD5 -b 128 -n HOST ${KEY_NAME}.
        KEY_TEXT=/usr/bin/grep "^Key:" ${KEY_DIR}/${KEY_FILE_NAME}.private | /usr/bin/awk '{ print $2; }'
        echo "key ${KEY_NAME}. {" >> ${KEYS_CONFIG}
        echo " algorithm hmac-md5;" >> ${KEYS_CONFIG}
        echo " secret "${KEY_TEXT}";" >> ${KEYS_CONFIG}
        echo "};" >> ${KEYS_CONFIG}
        echo "Key for ${KEY_NAME} is: ${KEY_TEXT}"

        It safe to run on BIND where many domains already serving? It cant breaky something?

        Latest stable pfSense on 2x XG-7100 and 1x Intel Xeon Server, running mutiWAN, he.net IPv6, pfBlockerNG-devel, HAProxy-devel, Syslog-ng, Zabbix-agent, OpenVPN, IPsec site-to-site, DNS-over-TLS...
        Unifi AP-AC-LR with EAP RADIUS, US-24

        1 Reply Last reply Reply Quote 0
        • L Offline
          leev
          last edited by

          Duiadns is already integrated with pfSense and is working just fine for me. See the picture attached:

          duia_ipv6.png
          duia_ipv6.png_thumb

          1 Reply Last reply Reply Quote 0
          • dragoangelD Offline
            dragoangel
            last edited by

            Thanks for reply. Maybe in yours case it works because yours system do not use 2 WANs with NPt (NAT66)? Now i know it work in "standard" configuration. I modified name of theme. In my case i need that my LAN01 interface with Link-local Address can get his external [real] IPv6 and set it to DDNS.

            Latest stable pfSense on 2x XG-7100 and 1x Intel Xeon Server, running mutiWAN, he.net IPv6, pfBlockerNG-devel, HAProxy-devel, Syslog-ng, Zabbix-agent, OpenVPN, IPsec site-to-site, DNS-over-TLS...
            Unifi AP-AC-LR with EAP RADIUS, US-24

            1 Reply Last reply Reply Quote 0
            • dragoangelD Offline
              dragoangel
              last edited by

              I'we found a way to make this decision work.
              For me it work with only Custom (v6) Profile, configured like pictures in this post.
              Link I used for DDNS looks like:
              https://ipv6.duiadns.net/dynamic.duia?host=yours-v6.duia.eu&password=from_link_below

              https://www.duiadns.net/account/update-url.html

              02.jpg
              02.jpg_thumb
              01.jpg_thumb
              01.jpg

              Latest stable pfSense on 2x XG-7100 and 1x Intel Xeon Server, running mutiWAN, he.net IPv6, pfBlockerNG-devel, HAProxy-devel, Syslog-ng, Zabbix-agent, OpenVPN, IPsec site-to-site, DNS-over-TLS...
              Unifi AP-AC-LR with EAP RADIUS, US-24

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.