NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

techc0de's avatar
techc0de
Aspirant
Sep 02, 2021

Disable auto update on Orbi RBK50 ?

Hello all,

I had read many threads and tried out several methods suggested by the community to disable the auto update on my Orbi RBK50.

The currently firmware is v2.7.3.22, and I tried rolled it back to v2.7.2.104.

It worked but then the router auto update the firmware itself to a newer version the next day.

I want to stay on v2.7.2.104 for the Telnet feature.

 

 

Here the commands that I used:

 

nvram set orbi_auto_upgrade=0
nvram set auto_check_for_upgrade=0
nvram set auto_update=0
nvram set orbi_auto_upg=0
nvram set orbi_auto_flag=0
nvram set telnetd_enable=1
nvram commit

Any suggestion is helpful.

 

Thanks

 

15 Replies

Sort By
  • FURRYe38's avatar
    FURRYe38
    Guru
    Sep 02, 2021

    Install a upstream router for firewall device in front of the RBR and block services there...

    • techc0de's avatar
      techc0de
      Aspirant
      Sep 02, 2021

      My current setup is using an AT&T Modem/Router unit as a passthrough for the Orbi router.

       

      • FURRYe38's avatar
        FURRYe38
        Guru
        Sep 02, 2021

        Add the following key words to the ATT router:
        http.fw.updates1.netgear.com

        updates1.netgear.com

         

        I believe you'll need to remove IP-pass thru to make this work...

        You should see "Service Not Reachable" on the RBRs FW update check page if it works. 

  • 100won's avatar
    100won
    Star
    Sep 23, 2021

    I scanned some domains' netgear.

    http.fw.updates1.netgear.com,

    updates1.netgear.com,

    time-e.netgear.com,

    e70.g.akamaiedge.net,

    www.netgear.com,

    netgear.com,

    devcom.up.netgear.com,

    registration.ngxcld.com,

    netgear-devrecog.fing.io

     

    If you use pfsense, you will create alias and create rules on WAN tab then block Router & Satellite IP access Alias. See picture below.

    • FURRYe38's avatar
      FURRYe38
      Guru
      Sep 23, 2021

      Only ones needed are:

      http.fw.updates1.netgear.com

      updates1.netgear.com

      • 100won's avatar
        100won
        Star
        Sep 23, 2021

        Hi,

        I tried to block 2 domains but failed.

        http.fw.updates1.netgear.com

        updates1.netgear.com

        So that I scanned some domains which the router and satellite access.

         

        When you go to Advanced - Administration - Firmware Update. The router will access to devcom.up.netgear.com, a1599er83nvyl8.iot.us-west-2.amazonaws.com, www.netgear.com

        When using NG's ntp server, it will connect to time-e.netgear.com

         

        The "cached" domain a1599er83nvyl8.iot.us-west-2.amazonaws.com can change anytime they want. That is the reason I list some domains.

         

        If we use pfsense, we can block only .*netgear.com, .*ngxcld.com for all subdomains. And e70.g.akamaiedge.net

         

        I tried to update voxel's firmware, the router access to this domain: netgear-devrecog.fing.io