DDNS enabled automatically after being disabled

Hi Jon, This is my development box running testing, I was a bit surprised myself though that Pakfire upgraded to CU170 as only 169 was shown to be available when I upgraded.

Not a lot to see in the logs. /var/log/messages has:

Aug 13 21:55:00 ipfire-dev2 fcron[5152]: Job '[ -f "/var/ipfire/red/active" ] && /usr/bin/ddns update-all' started for user root (pid 5153)
Aug 13 21:55:00 ipfire-dev2 fcron[5152]: Job '[ -f "/var/ipfire/red/active" ] && /usr/bin/ddns update-all' completed

every 5 minutes and presumably coming from the fcron entry.

Rob

Do you have multiple DDNS services.
Are they all disabled.
Are they Disabled?
Are there none on your Current list.
Did you hit save button?
Pehaps a WUI button function problem
Will Disable mine and test.

1 Like

Excellent!

I am fairly sure that job will always run. What do you see in the System logs under DDNS?

1 Like

I don’t use DDNS it is fully disabled (or should be!)

DDNS System logs don’t show any entries.

The only erroneous indication I can see is that I cannot turn off DDNS in ddns.cgi

Rob

Can you post that pic? (redact what is needed)

My bad! :pensive: I should have been more specific!

Can you send a pic of the ddns.cgi page?

I think it is much safer, just to start the ddns updater every 5 minutes independant from the enabling/disabling.
The updater itself only sends requests for enabled providers.

This is also deductible from the fact, that the DDNS page doesn’t have a global enable/disable button.
Any manipulation of the fcron tabs bears some possibility for errors.

EDIT: I just tried on my system.
With all providers disabled /usr/bin/ddns update-all --force doesn’t log any activity, so ddns is effectively inactive.
Enabling one provider produces only the log entry for this provider.

3 Likes

If this the whole contents of the ddns.cgi page, you have no providers defined.
See my post above.

1 Like

Rob - Everything is working OK on your system. Nothing DDNS is enabled.

You would see this bottom section Current Hosts if it was:

1 Like

Jon, thanks for looking into this. Try disabling the ‘Enabled’ check box and then reload the cgi. On my system the check box is again set.

Rob, do you mean the ‘Enabled’ checkbox in the ‘Add a host’ section?
This the default value for a new host.
The enabled/disabled check boxes for the defined hosts are in the next section ‘Current hosts’.

I just brought up my test system with a recent CU 169 update and it has DDNS enabled also.

And there are no entries in the System Log under DDNS.



Unless you are experimenting you may want to turn off the debug for fcron. I am guessing you are seeing LOTS of messages that begin with

Jun 15 17:20:00 ipfire fcron[1234]: Job '

Thank you for the clarification Bernhard. Maybe I have misunderstood the function of the enable check box which I thought was to Enable/Disable DDNS functionality. Perhaps the GUI could be clearer and have a Global Enable setting similar to many of the other cgi pages.

Regarding the fcron entries, I have a few of my own programs running from fcron and I like to keep an eye on them. Unfortunately after the upgrade to CU170 I’ll have to add them back.

Rob

It would be better to add programs to these directories:

/etc/fcron.cyclic
/etc/fcron.daily
/etc/fcron.hourly
/etc/fcron.minutely
/etc/fcron.monthly
/etc/fcron.weekly

fcrontab might be updated during a core update. The above directories won’t be updated.

See: My fcrontab file has been replaced by a new one - #11 by jon

1 Like

Thank you for suggestion.

I’ll certainly look at this. Historically have edited root.orig and run fcrontab -z
I’m sort of used to CU updates removing menus and breaking my programs with updated IPFire software, one of the downfalls in using your own firewall application.

Rob

1 Like

@helix , if you have programs broken by a CU, they are either not integrated in the general structure of IPFire or are essential programs possibly interesting for other users also.
In latter case you are invited to contribute to the development.

BTW: Most lost programs or features on my system are corrections or extensions I didn’t save somewhere or contribute to the Git data base. But that is my own fault, not the problem of the IPFire system and community.

I am more than happy to share my programs with all and it would be nice to have them integrated into IPFire but I don’t think there is much interest in them. For instance I didn’t get much feedback after I uploaded my Banish addon:

https://lists.ipfire.org/pipermail/development/2022-May/013530.html

so I guess it is of little interest to others. Incidently I have now added an extension to Banish to block on ASNs and I will upload that to IPFire shortly. Maybe now that ipblocklist is incorporated into IPFire there may be more interest.

Rob

3 Likes