macos: restrict dynamic ddns to specific interfaces