DDNS (Dynamic DNS) Whitelisting is designed for users with dynamic IPs who need to stay permanently whitelisted in the cPFence Firewall and WebUI. Instead of manually updating IPs each time they change, cPFence automatically syncs your DDNS hostname to the whitelist every hour.
Step 1: Create a DDNS Account
Sign up for a free DDNS service such as DuckDNS. Once created, you’ll receive a subdomain like:
your_ddns_subdomain.duckdns.org
Step 2: Add DDNS Hostname to Whitelist
Use the command below to add your DDNS hostname to the whitelist and grant access to the WebUI:
cpfence --add-whitelist-ddns your_ddns_subdomain.duckdns.org --webui
This automatically resolves your DDNS hostname to its current IP and adds it to the whitelist. When your IP changes, cPFence automatically refreshes it on the next sync (Hourly).
Step 3: Removing a DDNS Host
If you need to remove a DDNS entry and its cached IPs from the whitelist, use:
cpfence --del-whitelist-ddns your_ddns_subdomain.duckdns.org
Notes
- Available through CLI only; not yet supported in the WebUI interface.
- Using DDNS whitelisting ensures continuous access for clients with dynamic IPs (e.g., residential or mobile users).
- For enhanced security, use a DDNS subdomain unique to each client.
Need Further Assistance?
If you have questions, contact our support team via your client portal.
