Dynamic DDNS provider no ip not working

General questions
, ,
1

i have configured ddns based on documentation what am i missing here i am using pppoe on eth0.

set service dns dynamic address pppoe0 service noip host-name 'akxx.xxxx.net'
set service dns dynamic address pppoe0 service noip password '/[75BxdsedUdTdfggX@'
set service dns dynamic address pppoe0 service noip protocol 'noip'
set service dns dynamic address pppoe0 service noip username 'xxl_xxxn'

Also

vyos@vyos:~$ show log | grep ddclient | tail -12
Sep 15 08:18:31 systemd[1]: Starting ddclient.service - Update dynamic domain name service entries...
Sep 15 08:18:31 ddclient[1585]: WARNING:  file /run/ddclient/ddclient.conf: file /run/ddclient/ddclient.conf must be accessible only by its owner (fixed).
Sep 15 08:18:31 ddclient[1585]: WARNING:  file /run/ddclient/ddclient.conf: file /run/ddclient/ddclient.conf must be accessible only by its owner.
Sep 15 08:18:31 ddclient[1585]: WARNING:  file /run/ddclient/ddclient.conf: file /run/ddclient/ddclient.conf must not be accessible by others.
Sep 15 08:18:31 systemd[1]: Started ddclient.service - Update dynamic domain name service entries.
Sep 15 08:18:32 ddclient[1598]: WARNING:  cannot connect to dynupdate.no-ip.com:443 socket: System error IO::Socket::IP configuration failed
Sep 15 08:18:32 ddclient[1599]: FAILED:   updating axxxd.dxsddd.net: Could not connect to dynupdate.no-ip.com.

and

show dns dynamic status
Hostname        IPv4 address    IPv4 status    IPv6 address    IPv6 status    Last update
--------------  --------------  -------------  --------------  -------------  -------------------
axxxx.dfgtr.net                                                                1970-01-01 04:00:00
2

Can you run an nslookup on your router entry, then a ping if it’s resolvable? I want to ensure it can reach out to dynupdate.no-ip.com

3

Yes it can ping to ddns websites also i have no firewall rules configured

4

Alright, can you remove the following line from the configuration?

service dns dynamic address pppoe0 service noip protocol ‘noip’

It may not be necessary to define it since it’s defined with the service definition.

After which can you open up another window (assuming you’re sshd into the router) and run a packet capture on the pppoe interface? monitor traffic interface pppoe0

Let me know what you find. The error your getting makes me think it’s a communications issue between the router and noip.

5

I just found that by changing an interface to web it prevented config errors. I don’t know if it’ll help in your case but if it’s having an issue with the pppoe interface then it could be a way to ensure it works.

7

can you please elaborate

8

i get error when i try to delete the line you suggest

Traceback (most recent call last):
File “/usr/libexec/vyos/conf_mode/dns_dynamic.py”, line 154, in
verify(c)
File “/usr/libexec/vyos/conf_mode/dns_dynamic.py”, line 97, in verify
error_msg_uns = f’is not supported for Dynamic DNS service “{service}” on “{address}” with protocol “{config[“protocol”]}”’
~~~~~~^^^^^^^^^^^^
KeyError: ‘protocol’

9

That just means it needs the configuration key, feel free to leave it in.

The second part was to get a packet capture of the router trying to update it’s IP. I’d like to see what it tries to do when you attempt to update it.

In one window, connect to the router and run “monitor traffic interface pppoe0” and in another run “update dns dynamic” and observe what happens in the monitor output.

11 
show log | grep ddclient | tail -12
Dec 04 09:57:37 systemd[1]: Stopping ddclient.service - Update dynamic domain name service entries...
Dec 04 09:57:37 systemd[1]: ddclient.service: Deactivated successfully.
Dec 04 09:57:37 systemd[1]: Stopped ddclient.service - Update dynamic domain name service entries.
Dec 04 09:57:37 systemd[1]: Starting ddclient.service - Update dynamic domain name service entries...
Dec 04 09:57:37 systemd[1]: Started ddclient.service - Update dynamic domain name service entries.
Dec 04 09:57:37 ddclient[5694]: WARNING:  Could not determine an IP for akxs.dxx.net
Dec 04 09:59:48 systemd[1]: Stopping ddclient.service - Update dynamic domain name service entries...
Dec 04 09:59:48 systemd[1]: ddclient.service: Deactivated successfully.
Dec 04 09:59:48 systemd[1]: Stopped ddclient.service - Update dynamic domain name service entries.
Dec 04 09:59:48 systemd[1]: Starting ddclient.service - Update dynamic domain name service entries...
Dec 04 09:59:48 systemd[1]: Started ddclient.service - Update dynamic domain name service entries.
Dec 04 09:59:48 ddclient[5930]: WARNING:  Could not determine an IP for axxs.dxx.net
Admin@vyos:~$ nslookup www.noip.com
Server:         10.255.10.1
Address:        10.255.10.1#53

Non-authoritative answer:
Name:   www.noip.com
Address: 158.247.7.200

Admin@vyos:~$ ping www.noip.com
PING www.noip.com (1xx.xx7.7.xx) 56(84) bytes of data.
64 bytes from www.noip.com (1x.247.7.200): icmp_seq=1 ttl=54 time=251 ms
64 bytes from www.noip.com (x8.247.7x00): icmp_seq=2 ttl=54 time=253 ms
64 bytes from www.noip.com (1x.247.7.x0): icmp_seq=3 ttl=54 time=261 ms
^C
--- www.noip.com ping statistics ---
4 packets transmitted, 3 received, 25% packet loss, time 3005ms
rtt min/avg/max/mdev = 250.610/254.921/261.364/4.641 ms
Admin@vyos:~$ ^C
Admin@vyos:~$ show dns dynamic status
Hostname        IPv4 address    IPv4 status    IPv6 address    IPv6 status    Last update
--------------  --------------  -------------  --------------  -------------  -------------------
xxxls.ddns.net                                                                1970-01-01 04:00:00


09:59:50.460209 IP dns9.quad9.net.domain-s > 5.193xdfgg3.52524: Flags [R], seq 3125892159, win 0, length 0
09:59:50.460209 IP dns9.quad9.net.domain-s > 5.1xxx61.13xxxxx
09:59:50.462214 IP dns9.quad9.net.domain-s > 5.xxxxx51834: Flags [S.], seq 2629632626, ack 3262925807, win 28960, options [mss 1460,nop,nop,TS val 1427838557 ecr 2285393041,nop,wscale 8], length 0
09:59:50.462377 IP 51834 > dns9.quad9.net.domain-s: Flags [.], ack 1, win 511, options [nop,nop,TS val 2285393050 ecr 1427838557], length 0
09:59:50.463278 IP 5.51834 > dns9.quad9.net.domain-s: Flags [P.], seq 1:559, ack 1, win 511, options [nop,nop,TS val 2285393051 ecr 14233.51834: Flags [.], ack 559, win 118, options [nop,nop,TS val 1427838567 ecr 2285393051], length 0
09:59:50.474646 IP dns9.quad9.net.domain-s > 5.51834: Flags [P.], seq 1:246, ack 559, win 118, options [nop,nop,TS val 1427838568 ecr 2285393051], length 245
09:59:50.474733 IP 5.1834 > dns9.quad9.net.domain-s: Flags [.], ack 246, win 510, options [nop,nop,TS val 2285393062 ecr 1427838568], length 0
09:59:50.475663 IP 5.19334 > dns9.quad9.net.domain-s: Flags [P.], seq 559:639, ack 246, win 510, options [nop,nop,TS val 2285393063 ecr 1427838568], length 80
09:59:50.475771 IP 5.1834 > dns9.quad9.net.domain-s: Flags [P.], seq 639:718, ack 246, win 510, options [nop,nop,TS val 2285393063 ecr 1427838568], length 79
09:59:50.482898 IP dns9.quad9.net.domain-s > .51834: Flags [.], ack 718, win 118, options [nop,nop,TS val 1427838578 ecr 2285393063], length 0
09:59:50.491843 IP dns9.quad9.net.domain-s > 5.1834: Flags [P.], seq 246:1104, ack 718, win 118, options [nop,nop,TS val 1427838587 ecr 2285393063], length 858
09:59:50.532268 IP ggffff.51834 > dns9.quad9.net.domain-s: Flags [.], ack 1104, win 504, options [nop,nop,TS val 2285393120 ecr 1427838587], length 0

Does this help??

Since i updated latest version of vyos i had to change config commands to match the new syntax

set service dns dynamic name axxxs
set service dns dynamic name axxxs address pppoe0
set service dns dynamic name xxxx protocol noip
set service dns dynamic name axxs host-name xxxs.ddns.net
set service dns dynamic name axxs password '/xxx^~-xxxxx@'
set service dns dynamic name axx username xxxxxxl_axxxn

Also changed set service dns dynamic name dddls address web

Admin@vyos:~$ show log | grep ddclient | tail -12
Dec 04 10:18:35 systemd[1]: Stopping ddclient.service - Update dynamic domain name service entries...
Dec 04 10:18:35 systemd[1]: ddclient.service: Deactivated successfully.
Dec 04 10:18:35 systemd[1]: Stopped ddclient.service - Update dynamic domain name service entries.
Dec 04 10:18:35 systemd[1]: Starting ddclient.service - Update dynamic domain name service entries...
Dec 04 10:18:35 systemd[1]: Started ddclient.service - Update dynamic domain name service entries.
Dec 04 10:18:35 ddclient[6457]: WARNING:  Could not determine an IP for ahgfs.dfffs.fft
Dec 04 10:20:08 systemd[1]: Stopping ddclient.service - Update dynamic domain name service entries...
Dec 04 10:20:08 systemd[1]: ddclient.service: Deactivated successfully.
Dec 04 10:20:08 systemd[1]: Stopped ddclient.service - Update dynamic domain name service entries.
Dec 04 10:20:08 systemd[1]: Starting ddclient.service - Update dynamic domain name service entries...
Dec 04 10:20:08 systemd[1]: Started ddclient.service - Update dynamic domain name service entries.
Dec 04 10:20:08 ddclient[6667]: WARNING:  Could not determine an IP for fffff.dfffs.ffffet
12

Also i am able to ping my ddns host name from the router

Admin@vyos:~$ ping sdefts.dfgts.nfgtt
PING xxxxs.xxxxs.xxxt (5ddffffg) 56(84) bytes of data.
64 bytes from gxxxxxx1.133 (5.xxxxx.133): icmp_seq=2 ttl=64 time=0.126 ms
64 bytes from 5.1xxxxx.133 (5.1xxxx133): icmp_seq=3 ttl=64 time=0.110 ms
64 bytes from 5.1xxxx.133 (5.19xxxxx133): icmp_seq=4 ttl=64 time=0.097 ms
13

ok finally got it working thanks, there was this command blocking it.

set service ssh listen-address '1xx.25x.x0.1 '

but have a new problem after i restart the router wont boot and show migrate configuration failed

WhatsApp Image 2023-12-04 at 2.24.14 PM
WhatsApp Image 2023-12-04 at 2.24.14 PM1600×720 166 KB

14

show me your ddns config for a second and I’ll make some tweaks based on what I’ve found out recently.

configure
show service dns dynamic

then just copy in the results (feel free to obfuscate as needed).

15

The reboot configuration error got resolved by this command

set service dns dynamic name axxxs address web

,but my ddns ip is not getting updated after restart

show service dns dynamic
 name axixs {
     address web
     host-name xhgxls.dxns.net
     password /[dfhtuigmg~-:Ugth@
     protocol noip
     username adhfytxxn

when i try to ping my ddns host name it shows the old wan ip address

16

In 1.4 and 1.5 it’ll look like this. Which version are you on? I can be more specific. if ifconfig.me doesn’t work you can test others from this article: https://linuxconfig.org/how-to-use-curl-to-get-public-ip-address using curl.

show service dns dynamic

 address web {
      service axixs {
           host-name xhgxls.dxns.net
           password /[dfhtuigmg~-:Ugth@
           protocol noip
           username adhfytxxn
 }
 web-options {
      url https://ifconfig.me
 }
17

Version: VyOS 1.5-rolling-202312040024
Release train: current
Built by: [email protected]
Built on: Mon 04 Dec 2023 01:41 UTC
Build UUID: 5217c829-5830-43a4-9555-d2650683239c
Build commit ID: a3d29d9110a391
Architecture: x86_64
Boot via: installed image
System type: bare metal
Hardware vendor: Default string
Hardware model: Default string
Hardware S/N: Default string
Hardware UUID: 03000200-0400-0500-0006-000700080009

what is the command line to get this ???

web-options {
url https://ifconfig.me

18

Good, integrate the config options I sent you and test it out. It should work as long as the connection to noip is good.

19

what is the command line to get this ???

web-options {
url https://ifconfig.me

please share configurations commands if you dont mind

20 
set service dns dynamic address web service axixs host-name xhgxls.dxns.net
set service dns dynamic address web service axixs password /[dfhtuigmg~-:Ugth@
set service dns dynamic address web service axixs protocol noip
set service dns dynamic address web service axixs username adhfytxxn
set service dns dynamic address web web-options url https://ifconfig.me

Reviewing my previous post it seems I got the web-options in the wrong spot.

22

This command was accepted ,but issue remains same wan ip doesnt update

set service dns dynamic name xxxxs web-options url 'https://ifconfig.me'

here is my complete config

show | strip-private
 container {
     name adguardhome {
         allow-host-networks
         cap-add net-bind-service
         image docker.io/adguard/adguardhome:latest
         restart always
         volume adguard-conf {
             destination /opt/adguardhome/conf
             source /config/adguardhome/conf
         }
         volume adguard-hosts {
             destination /etc/hosts
             mode ro
             source /etc/hosts
         }
         volume adguard-work {
             destination /opt/adguardhome/work
             source /config/adguardhome/work
         }
     }
 }
 interfaces {
     ethernet eth0 {
         duplex auto
         hw-id xx:xx:xx:xx:xx:ce
         offload {
             gro
             gso
             lro
             rfs
             rps
             sg
             tso
         }
         ring-buffer {
             rx 4096
             tx 4096
         }
         speed auto
     }
     ethernet eth1 {
         address xxx.xxx.10.1/24
         duplex auto
         hw-id xx:xx:xx:xx:xx:cf
         offload {
             gro
             gso
             lro
             rfs
             rps
             sg
             tso
         }
         ring-buffer {
             rx 4096
             tx 4096
         }
         speed auto
     }
     ethernet eth2 {
         hw-id xx:xx:xx:xx:xx:d0
     }
     ethernet eth3 {
         hw-id xx:xx:xx:xx:xx:d1
     }
     ethernet eth4 {
         hw-id xx:xx:xx:xx:xx:d2
     }
     ethernet eth5 {
         hw-id xx:xx:xx:xx:xx:d3
     }
     loopback lo {
     }
     pppoe pppoe0 {
         authentication {
             password xxxxxx
             username xxxxxx
         }
         ip {
             adjust-mss clamp-mss-to-pmtu
         }
         source-interface eth0
     }
 }
 nat {
     source {
         rule 100 {
             outbound-interface {
                 name pppoe0
             }
             source {
                 address xxx.xxx.10.0/24
             }
             translation {
                 address masquerade
             }
         }
     }
 }
 service {
     dhcp-server {
         shared-network-name xxxxxx {
             subnet xxx.xxx.10.0/24 {
                 default-router xxx.xxx.10.1
                 domain-name xxxxxx
                 name-server xxx.xxx.10.1
                 range 0 {
                     start xxx.xxx.10.10
                     stop xxx.xxx.10.254
                 }
             }
         }
     }
     dns {
         dynamic {
             name akils {
                 address web
                 host-name xxxxxx
                 password xxxxxx
                 protocol noip
                 username xxxxxx
                 web-options {
                     url xxxxxx
                 }
             }
         }
     }
     ntp {
         allow-client xxxxxx
             address xxx.xxx.0.0/0
             address ::/0
         }
         server xxxxx.tld {
         }
         server xxxxx.tld {
         }
         server xxxxx.tld {
         }
     }
     ssh {
         port 22
     }
 }
 system {
     config-management {
         commit-revisions 100
     }
     conntrack {
         expect-table-size 10485760
         hash-size 10485760
         modules {
             ftp
             h323
             nfs
             pptp
             sip
             sqlnet
             tftp
         }
         table-size 10485760
     }
     console {
         device ttyS0 {
             speed 115200
         }
     }
     host-name xxxxxx
     ip {
         arp {
             table-size 32768
         }
         multipath {
             layer4-hashing
         }
     }
     login {
         user xxxxxx {
             authentication {
                 encrypted-password xxxxxx
             }
         }
     }
     name-server xxx.xxx.10.1
     syslog {
         global {
             facility all {
                 level info
             }
             facility local7 {
                 level debug
             }
         }
     }
     time-zone Asia/Dubai