NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
PyroDog
Jan 29, 2018Apprentice
Firmware auto update domain
I was running firmware 2.0.0.74 on my Orbi system with NVRAM set to disable updates. Everything was running prefect as that firmware is rock steady for me. Today I found my system had self updated to the latest firmware even though NVRAM was set to prevent this.
Does anyone know what domain name Orbi uses when self updating? I'm thinking of blocking the domains at the firewall level to prevent Orbi from selfupdating again.
Kept digging on this and learned the following:
TCP port 443 (HTTPS): http.fw.updates1.netgear.com
TCP port 21 (FTP): updates1.netgear.com
I believe those two are all that's necessary to block. Orbi tries HTTPS first, then FTP.
7 Replies
Sort By
- rhester72Virtuoso
I suspect this will be very hard to block.
When I just checked, Orbi did an A-record lookup for:
A1599ER83NVYL8.iot.us-west-2.amazonaws.com