Advisory for Frequent DNS Request On Related TP-Link Routers and Deco Systems (HomeShield)
Advisory for Frequent DNS Request On Related TP-Link Routers and Deco Systems (HomeShield)
Recently, it has come to our attention that a user reported their discovery of their TP-Link router frequently launching requests to Avira subdomains. This news has brought up concerns from the media and other users. As such, we have deemed it necessary to clarify the following:
- TP-Link HomeShield utilizes Avira services. As a result, HomeShield routers routinely obtain Avira's IP address. However, after reviewing the software, we identified flaws in the DNS request logic, resulting in frequent resolution requests. We have optimized the software to avoid frequent queries. Users can follow the link below to update their device firmware.
- DNS is used to translate domain names to IP addresses so browsers can load internet resources. For example, when you visit tp-link.com, your device sends a DNS request for the IP address of the domain name: tp-link.com. As DNS queries, these requests do not carry any personal information.
TP-Link has always been committed to maintaining users' network security. We do not and never will sell user information. We adhere to the philosophy of transparency and openness and welcome any and all feedback from all sides.
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
@Carl i have instlled this firmware today, reset the DNS stats and will keep an eye on it and let you know
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
The same on Deco X50
1.0.8 Build 20220407 Rel. 69134
avira.com to Germany
HomeShield Pro off
- Copy Link
- Report Inappropriate Content
I have you registered in the Russian Federation. Because of this, there isn't much I can do from my end. This community is managed by the US team and is technically exclusively for US customers. We have a community exclusively for Russian customers as well. https://community.tp-link.com/ru. This would be the best place to raise your concern, especially since the Avira/Norton servers are most likely different from the ones we deal with. The Beta firmware I had in a previous post was for the X60 so I would recommend when you create your thread on the Russian community call back to this and ask if they can provide one for Russian customers on the X50
- Copy Link
- Report Inappropriate Content
As I too have been experiencing very high rate of DNS requests, I have come to this thread to see if this is not normal, or to be expected.
Deco X55 Firmware 1.1.0 build 20221102 rel 66085 (app says it is up to date)
DNS queries to the following:
-24 hours-
ast.safethings.avira.com 94,501
dfp.safethings.avira.com 36,194
-30 days-
ast.safethings.avira.com 3,046,426
dfp.safethings.avira.com 1,083,709
I have enabled parental control and have enabled QoS. i do NOT subscribe to HomeshieldPro
I am a bit uncomfortable with the number of DNS queries, as I can imagine that reason for the DNS queries is to send/receive data from the 3rd party Avira, not simply querying DNS for no reason.
Also, it completely skews the logging and analytics at the DNS provider for my home network. The number of queries to avira outnumbers anything else on the network by a factor of 25.
Does this deserve a technical support case?
thanks
- Copy Link
- Report Inappropriate Content
I would advise it. I can either reach out to the engineers on your behalf and reply with their response here or you can email us locally at ussupportteam@tp-link.com and we can provide updates via Email. Which ever you find convenient.
- Copy Link
- Report Inappropriate Content
I'm experiencing the same issues on TP-Link Deco XE75 Pro.
There's no end to the mysterious and superfluous DNS requests. (*.safethings.avira.com)
- Copy Link
- Report Inappropriate Content
Information
Helpful: 0
Views: 4153
Replies: 17
Voters 0
No one has voted for it yet.