Tutorial for dynamic DNS updates?

[HachimanSec]

Hi everyone,
currently I try to setup dynamic DNS. The goal is for my DHCP server, on opnsense, forward updates for my zone.
I havent found any tutorial on this so far - does anyone know something?

In pdns.conf I added the interface of my FW to allow updates:
allow-dnsupdate-from=192.168.1.1,127.0.0.0/8,::1
and I configured:
dnsupdate=yes

I created a tsig key:

pdnsutil list-tsig-keys
Apr 20 16:03:41 [bindbackend] Done parsing domains, 0 rejected, 0 new, 0 removed
wck. hmac-sha512. yFHsE/DG45Tb92MK5Ogu+2z2svqSo7OsfphKUw<SECRET>==

However the firewall update always results in a timeout:

Unable to add forward map from host.my.doma to 192.168.1.15: timed out
No errors in the log:

Apr 20 15:54:23 dns01 systemd[1]: pdns.service: Consumed 9.958s CPU time.
Apr 20 15:54:23 dns01 pdns_server[4456]: Loading '/usr/lib/x86_64-linux-gnu/pdns/libgsqlite3backend.so'
Apr 20 15:54:23 dns01 pdns_server[4456]: Loading '/usr/lib/x86_64-linux-gnu/pdns/libbindbackend.so'
Apr 20 15:54:23 dns01 pdns_server[4456]: This is a standalone pdns
Apr 20 15:54:23 dns01 pdns_server[4456]: Listening on controlsocket in '/run/pdns/pdns.controlsocket'
Apr 20 15:54:23 dns01 pdns_server[4456]: [bindbackend] Parsing 0 domain(s), will report when done
Apr 20 15:54:23 dns01 pdns_server[4456]: [bindbackend] Done parsing domains, 0 rejected, 0 new, 0 removed
Apr 20 15:54:23 dns01 systemd[1]: Starting PowerDNS Authoritative Server...
Apr 20 15:54:23 dns01 pdns_server[4456]: UDP server bound to 127.0.0.1:5300
Apr 20 15:54:23 dns01 pdns_server[4456]: TCP server bound to 127.0.0.1:5300
Apr 20 15:54:23 dns01 pdns_server[4456]: PowerDNS Authoritative Server 4.5.3 (C) 2001-2021 PowerDNS.COM BV
Apr 20 15:54:23 dns01 pdns_server[4456]: Using 64-bits mode. Built using gcc 11.2.0.
Apr 20 15:54:23 dns01 pdns_server[4456]: PowerDNS comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it according to th>
Apr 20 15:54:23 dns01 pdns_server[4456]: [webserver] Listening for HTTP requests on 192.168.2.11:8081
Apr 20 15:54:23 dns01 pdns_server[4456]: Creating backend connection for TCP
Apr 20 15:54:23 dns01 pdns_server[4456]: About to create 3 backend threads for UDP
Apr 20 15:54:23 dns01 systemd[1]: Started PowerDNS Authoritative Server.
Apr 20 15:54:23 dns01 pdns_server[4456]: Done launching threads, ready to distribute questions

EDIT:
for clarification, this is my zone metadata:
get-meta my.domain
Apr 20 17:33:20 [bindbackend] Done parsing domains, 0 rejected, 0 new, 0 removed
Metadata for 'my.domain'
ALLOW-DNSUPDATE-FROM = 192.168.0.0/8
TSIG-ALLOW-DNSUPDATE = wck

[omoerbeek]

It looks like your server is only listening on 127.0.0.1 so updates sent to 192.168.1.1 will be dropped.
Plus: looking at https://docs.powerdns.com/authoritative/backends/index.html the bind backend does not support updates at all.

[HachimanSec]

Thanks, you are totally right. I got that mixed up with recursor. After rebuiliding the setup I also realized that opnsense (our dhcp) is not able to send updates to a different port. port 53 is occupied by recursor and authoritive runs on 5400 now. but opnsense always tries port 53.
So I guess no automatic dns updates for us.