Subj : DS-Lite
To   : Markus Reschke
From : Ingo Juergensmann
Date : Sun Aug 13 2017 17:26:14

   Hello Markus!

13 Aug 17 15:55, you wrote to me:

 IJ>> Instead of using http-based updates, direct updates via nsupdate
 IJ>> and rndc keys are more secure, but not that common for embedded
 IJ>> devices that are usually offering the http variant via their
 IJ>> webinterface.
 MR> You can also place the nsupdate script on the nameserver and use ssh
 MR> which provides the remote IP address via a shell variable. Tie the
 MR> script to a ssh pub-key and you'll have a pretty nifty and secure DDNS
 MR> updater.

Sure, but as already stated: usually the off-the-shelf DSL/cable router usually only offer some web based services, i.e. you can configure an URL via that a remote can update the RR entries in that zone.

However, if you want to handle the whole stuff behind the DSL/cable router, you'll have more possibilities, as you said, for example SSH. Or you can root your DSL/cable router as well, of course.

There are a plenty of possibilities. Point is: it's not difficult! The only requirement you need is to have control over your desired domain so that you can do nsupdates.

Ingo


--- GoldED+/LNX 1.1.5--b20170303
 * Origin: AmigaXess - back in FidoNet after 17 years  (2:2452/413)

.