NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

jconradh's avatar
Aug 20, 2025

CAX80 Firmware Version 5.1.1.8 Stops ALL port forwarding

Xfinity keeps updating my CAX80 firmware to 5.1.1.8, and it destroys all port forwarding ability. This is AFTER a full reset multiple times. I have to re-flash to the 2.1.5.2 firmware and port forwarding works again.

 

Others seem to have the same issues.


Is Netgear going to fix this? Or better, how can I stop Xfinity from re-flashing my firmware every few days?

Jeff

10 Replies

  • CrimpOn's avatar
    CrimpOn
    Guru - Experienced User

    How do you know that Xfinity is updating the firmware rather than Netgear?

     

    Some Netgear routers have a setting to control automatic firmware updates.  Guessing that the CAX80 does not?

     

    If the router is updating itself by checking in with Netgear's update servers, one method is to block access to those servers:

     

    • Create an account with OpenDNS.
    • Set the CAX80 to use OpenDNS to resolve URLs (208.67.222.222 and 208.67.220.220)
    • Set the OpenDNS account to block access to:
      update.netgear.com, updates.netgear.com, updates1.netgear.com, updates2.netgear.com, updates3.netgear.com, http.fw.updates1.netgear.com

    Firmware v.5.1.1.8 was released in August, 2024.

     

    jconradh wrote:

    Others seem to have the same issues

    If you have links to other discussions about port forwarding and the CAX80, maybe one of the Forum moderators can refer the issue to Netgear support.

    • jconradh's avatar
      jconradh
      Tutor

      I did as you asked. I will let you know if it works.
      It's a shame I cannot just block it on the CAX80 modem/router.

  • This fellow here has the same issues. I haven't hosted a UT99 or Ghost Recon server in 9 years, and only started trying recently, hence the issues now:
    https://www.reddit.com/r/NETGEAR/comments/1fhqhj8/comment/lr030re/?utm_source=share&utm_medium=web3x&utm_name=web3xcss&utm_term=1&utm_content=share_button

  • CrimpOn's avatar
    CrimpOn
    Guru - Experienced User

    Probably silly questions, but....

     

    When the firmware updates to 5.1.1.8 and the CAX80 reboots, the Port Forwarding settings remain in the web interface, correct?

    and the public IP address remains the same?

    • jconradh's avatar
      jconradh
      Tutor

      100% correct. Turns out Xfinity IS pushing the firmware updates:
      "NETGEAR provides your ISP with the latest firmware and your ISP updates your firmware".
      I'm thinking the OpenDNS won't work. I'll just have to re-flash every time I want to host. My friend has a co-location site and he said he could host for me, but I was hoping not to do this.

  • CrimpOn's avatar
    CrimpOn
    Guru - Experienced User

    Damn.  Since the "90 days of complimentary support" have long expired, the only way to open a case with Netgear is to pay.

    My guess is that would be a total failure.

     

    Sorry

    • jconradh's avatar
      jconradh
      Tutor

      Update: I spent >20 minutes speaking with Xfinity and they are blaming Netgear. I then called Netgear and they assured me that it WAS being pushed by Xfinity. They told me to call Xfinity and keep asking for the next higher level person in technical support who understands how to change and re-map my modem NOT to accept the 5.1.1.8 CAX80 firmware.
      I am back on the phone for >28 minutes having to ask, again and again, for someone who understand modem re-mapping, despite the person saying it's Netgear's issue. Holy crap.
      I'll let you know how this turns out. What a pain. 

      • jconradh's avatar
        jconradh
        Tutor

        54 minutes later I was handed up to a senior tech support rep. She was hesitant to push the older firmware, so I asked her, if I could push the firmware, one revision down, and would she "lock" it into my modem, and she said she would. It appears my issue may be fixed! I will let you know in a few days if the firmware stays locked. Thanks again!