Whitelist a DDNS hostname

Use a DDNS hostname when an administrator’s public IP changes. With IPDB protection enabled, cPFence v4+ resolves saved hostnames and refreshes their owned whitelist addresses hourly.

Add the hostname

1. Create a hostname with your chosen DDNS provider and configure its updater for your current public IP.
2. As root on the licensed target server, add the actual hostname:

cpfence --add-whitelist-ddns admin.example.com --webui

3. Read the resolved-address and access results. On your main control panel server, --webui also requests browser access; omit it when only an IPDB whitelist is needed.
4. Check the IP policy and browser access from the intended address.

Remove the hostname

cpfence --del-whitelist-ddns admin.example.com

Removal releases this hostname’s owned grants; other manual or feature-owned policies may remain.

Use a distinct hostname per administrator

Separate hostnames make it easier to remove one person’s access. A DNS change is applied at the next successful sync; failed lookup retains the previously stored addresses.

Protect the DDNS account

Anyone who can change this hostname’s addresses can redirect its access exception. Keep another root session or provider console when changing access; an hourly refresh is not a guarantee of uninterrupted browser access.