This is a Dynamic DNS service (same as noip.com or dyn.com) As you are not blocking noip, I think it would also make sense to not block duckdns