Advisory for Frequent DNS Request On Related TP-Link Routers and Deco Systems (HomeShield)

Advisory for Frequent DNS Request On Related TP-Link Routers and Deco Systems (HomeShield)

Advisory for Frequent DNS Request On Related TP-Link Routers and Deco Systems (HomeShield)
Advisory for Frequent DNS Request On Related TP-Link Routers and Deco Systems (HomeShield)
2022-03-21 23:54:14 - last edited 2022-12-20 02:04:26
Model: General Product  
Hardware Version:
Firmware Version:

 

Recently, it has come to our attention that a user reported their discovery of their TP-Link router frequently launching requests to Avira subdomains. This news has brought up concerns from the media and other users. As such, we have deemed it necessary to clarify the following:

 

  1. TP-Link HomeShield utilizes Avira services. As a result, HomeShield routers routinely obtain Avira's IP address. However, after reviewing the software, we identified flaws in the DNS request logic, resulting in frequent resolution requests. We have optimized the software to avoid frequent queries. Users can follow the link below to update their device firmware.

 

  1. DNS is used to translate domain names to IP addresses so browsers can load internet resources. For example, when you visit tp-link.com, your device sends a DNS request for the IP address of the domain name: tp-link.com. As DNS queries, these requests do not carry any personal information.


TP-Link has always been committed to maintaining users' network security. We do not and never will sell user information. We adhere to the philosophy of transparency and openness and welcome any and all feedback from all sides.

 

 

  0      
  0      
#1
Options
17 Reply
Re:Advisory for Frequent DNS Request On Related TP-Link Routers and Deco Systems (HomeShield)
2022-12-19 21:49:59 - last edited 2022-12-19 22:02:27

  @Carl 
hello my X60 system is sending thuosands of these requrest, how do i stop it ? 

i do not subscribe to homeshield

 

RANK    DOMAIN    REQUESTS

1            ast.safethings.avira.com    435,999

2            dfp.safethings.avira.com   288,366

 

and your FAQ page is not working
 

Oops! The page you're looking for can't be found.

 

  0  
  0  
#2
Options
Re:Advisory for Frequent DNS Request On Related TP-Link Routers and Deco Systems (HomeShield)
2022-12-19 22:01:31 - last edited 2022-12-19 22:02:08

btw, i am running X60(3.0) 1.0.13 Build 20220805 Rel. 71570

which seems to be latest build of firmware on the website

  0  
  0  
#3
Options
Re:Advisory for Frequent DNS Request On Related TP-Link Routers and Deco Systems (HomeShield)
2022-12-20 01:58:35

  @Deejc 

 

The FAQ was taken down when the concern was resolved.  We will need to refer this back to our engineering team.  Please standby.

  0  
  0  
#4
Options
Re:Advisory for Frequent DNS Request On Related TP-Link Routers and Deco Systems (HomeShield)
2022-12-20 20:31:56

3a42fc25c27f4687bd14266ec6b34e78 I blocked it yesterday as I use opendns and I can block it but since blocking it's made around 1.5million request 😞 that's really not ok 

  0  
  0  
#5
Options
Re:Advisory for Frequent DNS Request On Related TP-Link Routers and Deco Systems (HomeShield)
2022-12-22 17:34:07

  @Deejc 

 

Engineering would like to confirm if you are using either version of HomeShield.  such as are you using parental controls or QOS features at all?  

  0  
  0  
#6
Options
Re:Advisory for Frequent DNS Request On Related TP-Link Routers and Deco Systems (HomeShield)
2022-12-22 20:32:24

  @Carl QOS is not on, I have devices assigned to users but that's all 

  0  
  0  
#7
Options
Re:Advisory for Frequent DNS Request On Related TP-Link Routers and Deco Systems (HomeShield)
2022-12-23 07:48:48

BTW, since posting the original message it's blocked around 4.5 Million requests!!! Even if I was using homeshielf (which I'm not) that's excessive 

  0  
  0  
#8
Options
Re:Advisory for Frequent DNS Request On Related TP-Link Routers and Deco Systems (HomeShield)
2022-12-24 09:15:36
i rebooted the X60, it seems to have slowed down the rate, its still connecting to avira but not at the rate it was
  0  
  0  
#9
Options
Re:Advisory for Frequent DNS Request On Related TP-Link Routers and Deco Systems (HomeShield)
2022-12-27 17:30:03

  @Deejc 

 

Hello Dee.  I was on Company Holiday for the past few days.  I will feedback that you are using PC controls, user profiles, and let you know the results of that further conversation with engineering. 

  0  
  0  
#10
Options
Re:Advisory for Frequent DNS Request On Related TP-Link Routers and Deco Systems (HomeShield)
2022-12-29 19:12:45

  @Deejc 

 

Our engineers would like you to try this Beta firmware to see if it addresses this concern.  Let me know what the results are and I can refer that back for further actions. 

  0  
  0  
#11
Options