NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

PyroDog's avatar
PyroDog
Apprentice
Jan 29, 2018
Solved

Firmware auto update domain

I was running firmware 2.0.0.74 on my Orbi system with NVRAM set to disable updates. Everything was running prefect as that firmware is rock steady for me. Today I found my system had self updated to the latest firmware even though NVRAM was set to prevent this.

Does anyone know what domain name Orbi uses when self updating? I'm thinking of blocking the domains at the firewall level to prevent Orbi from selfupdating again.

  • Kept digging on this and learned the following:

     

    TCP port 443 (HTTPS): http.fw.updates1.netgear.com

     

    TCP port 21 (FTP): updates1.netgear.com

     

    I believe those two are all that's necessary to block.  Orbi tries HTTPS first, then FTP.

7 Replies

  • I suspect this will be very hard to block.

     

    When I just checked, Orbi did an A-record lookup for:

     

    A1599ER83NVYL8.iot.us-west-2.amazonaws.com

    • rhester72's avatar
      rhester72
      Virtuoso

      Kept digging on this and learned the following:

       

      TCP port 443 (HTTPS): http.fw.updates1.netgear.com

       

      TCP port 21 (FTP): updates1.netgear.com

       

      I believe those two are all that's necessary to block.  Orbi tries HTTPS first, then FTP.