NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
FTP connections from RBR and RBS 40
Sorry if this is obvious but I can't find a mention anywhere. I'm just installed RBR40 and RBS40 on FW 2.1.4.16 . It's configured in AP mode and connected directly to my Untangle 13.2.1 firewall.This works well with good throughput. However, I'm seeing multiple firewall alerts. Both RBR and RBS units are apparently attempting to 'call home' on port 21 (FTP) to two Irish AWS services:
34.243.216.129
34.241.19.122
These are, according to whois, updates1.netgear.com
There seems to be no way of turning this off in the configuration and also almost nothing I could find on the internet. Having done some due dilligence, I'm comfortable with allowing this connection - Anyone think I should do otherwise ?
3 Replies
What happens if you take the LAN cable from the WAN port on the Orbi router and put it to one of the LAN ports? Doing this may cause the top led to turn on Pink.
Yes this is an auto update feature which can't be disabled. You can block it if you wish on the firewall. It's something NG put in. Theres been requests to be able to disable it as it's been known to cause problems.
Thanks for the response - the alert will still be there as the current rule is to block all outgoing traffic on port 21 no matter what the source- The updates work fine on HTTPS so I guiess I'll just ignore these alerts for now. The other option is to open up an outgoing hole in the firewall for the two IP's currently registered at update1.... I can't see an advantage and I can see a theoretical disavantage....!
I believe the update system tries HTTP first then HTTPS.
Not much you can do about the autoupdate. Good Luck.
