Afrihost Firmare Settings

[Tattle01]

After almost 2 years of Fibre Connectivity with Afrihost, and many unexplained glitches, I finally decided to migrate to RSAWeb. The cost was nothing and the subscription is cheaper, but that wasn’t the motivator.

I do development and quite recently, while I was in my router configuration, I noticed there was a firmware upgrade available, and trustingly applied it. Yesterday, while waiting for my new free router from RSAWeb, I was migrated, and went into my router to check if it saw the new line from them. While browsing my settings, I noticed that the new Firmware had added a TR-069 Client and that Inform Settings was turned on. The configuration is in the attached screen shot. One can see that it was added by Afrihost. They also setup a convenient Connection Request login. What is worse, is that these settings are now greyed out, so that the client cannot change them.

While there is much debate about the risk to the client, the fact is that this is MY router, fully paid for via my subscription. I have had no communication from Afrihost as to whether I would authorize these changes.

I find this despicable, and a disregard to my right of privacy. I hope that all Afrihost clients are aware of them having to fiddle with our settings to try compensate for their below standard service, and expect some kind of action about this.

I have 2 Websites hosted by them, and no longer trust their form of confidentiality, and will be migrating those to a new ISP too.

 

[RudderVator]

After almost 2 years of Fibre Connectivity with Afrihost, and many unexplained glitches, I finally decided to migrate to RSAWeb. The cost was nothing and the subscription is cheaper, but that wasn’t the motivator.

I do development and quite recently, while I was in my router configuration, I noticed there was a firmware upgrade available, and trustingly applied it. Yesterday, while waiting for my new free router from RSAWeb, I was migrated, and went into my router to check if it saw the new line from them. While browsing my settings, I noticed that the new Firmware had added a TR-069 Client and that Inform Settings was turned on. The configuration is in the attached screen shot. One can see that it was added by Afrihost. They also setup a convenient Connection Request login. What is worse, is that these settings are now greyed out, so that the client cannot change them.

While there is much debate about the risk to the client, the fact is that this is MY router, fully paid for via my subscription. I have had no communication from Afrihost as to whether I would authorize these changes.

I find this despicable, and a disregard to my right of privacy. I hope that all Afrihost clients are aware of them having to fiddle with our settings to try compensate for their below standard service, and expect some kind of action about this.

I have 2 Websites hosted by them, and no longer trust their form of confidentiality, and will be migrating those to a new ISP too.View attachment 926729

All these ISP supplied routers are mostly the pitts or have some weird firmware loaded. Just get an ASUS router and be done with it. Most have way way better power features in the user interface.

 

[Tattle01]

All these ISP supplied routers are mostly the pitts or have some weird firmware loaded. Just get an ASUS router and be done with it. Most have way way better power features in the user interface.

My new router coming is an upgraded one, but the point is that I have a big problem with someone else having access to my settings without my permission!!

 

[powermzii]

Any reason you didn't / don't get your own router? Asking because then you wouldn't have this risk at all

 

[Tattle01]

Any reason you didn't / don't get your own router? Asking because then you wouldn't have this risk at all

Well, thats a great question. The reason was that I trustedtoo much I guess, which I am sure is the same for most of their customers. How many people even know how to log into their router. The point is still that it is a breech of privacy from them without permission. And yes, I will get my own router.

 

[powermzii]

Well, thats a great question. The reason was that I trustedtoo much I guess, which I am sure is the same for most of their customers. How many people even know how to log into their router. The point is still that it is a breech of privacy from them without permission. And yes, I will get my own router.

I wasn't saying you're wrong for feeling /acting that way about Afrihost, just you mentioned you work in Dev so perhaps having your own router setup the way you like would be the way to go

But yes probably needs to be in the Ts and Cs that the ISP can access and remotely manage your router

 

[Tattle01]

Perhaps saying I'm in Dev was an overstatement. Im a 62 year old experimenter, with 30 plus years in electronics and IT. Busy trying to develop a project for my retirement. Don't exactly have a large router budget. Incidentally, Ive been hosting 2 websites through them for a while, and put in a query about whether I could host a gateway with them, and which package they had to fit that, and the answer was that they didn't know what I needed. I'm trying to price the option of running a server to forward messages and pages via my own server. Sort of a cellphone dashboard. There are many subscription services that provide for it, but was just trying to find out what kind of Hosting package, if any, was maybe a fit.

 

[powermzii]

Perhaps saying I'm in Dev was an overstatement. Im a 62 year old experimenter, with 30 plus years in electronics and IT. Busy trying to develop a project for my retirement. Don't exactly have a large router budget. Incidentally, Ive been hosting 2 websites through them for a while, and put in a query about whether I could host a gateway with them, and which package they had to fit that, and the answer was that they didn't know what I needed. I'm trying to price the option of running a server to forward messages and pages via my own server. Sort of a cellphone dashboard. There are many subscription services that provide for it, but was just trying to find out what kind of Hosting package, if any, was maybe a fit.

Good luck with the project...

I've noticed my Rain router has similar settings TR069 settings so I'm certain they log in and do whatever, but it's not my primary router so I'm less fussed about it. I still have a mikrotik as my firewall to prevent any unwanted access

 

[Tattle01]

Thank you so much for your wishes. The problem for me isn't just the fact of privacy, but I have had to go do setups for Dynamic DNS etc, and when things don't seem to be working, I cant eliminate the possibility of someone else playing with my settings while I'm testing.

 

[Tattle01]

You pay a grand or so for connectivity, you would hope it was a bit more professional.

 

[Rickster]

I got the same router and im sure those settings were off, I cant see it now because its in AP mode and the settings are no longer shown.

Try flash it with the RU firmware or block that port if you are concerned.

 

[SeaSickMama]

My new router coming is an upgraded one, but the point is that I have a big problem with someone else having access to my settings without my permission!!

If you hard reset the guy on the back it should wipe the settings

 

[Tattle01]

I got the same router and im sure those settings were off, I cant see it now because its in AP mode and the settings are no longer shown.

Try flash it with the RU firmware or block that port if you are concerned.

Don't do the latest firmware upgrade

 

[Tattle01]

If you hard reset the guy on the back it should wipe the settings

Getting a new router tomorrow from RSAWEB. Hopefully it doesn't have a strange Russian based firmware like Afrihost's

 

[AfriNatic]

Good morning,

The setting was pushed to assist clients that struggle with setting up routers. From experience and having spent 3 hours on the phone trying to setup a router with clients this makes life easier for both the ISP and the client.

We don't use this to monitor your usage or look at your private settings in fact we can only push a default config to it and currently on our system we only have an option to change the wifi password if clients do not know how to do that.

The router remains unlocked and will still work with other ISPs. There is no ill intent with this just a way we want to prevent clients that do not have any knowledge of routers to break settings and have them return routers to be re configured.

 

[Tattle01]

Good morning,

The setting was pushed to assist clients that struggle with setting up routers. From experience and having spent 3 hours on the phone trying to setup a router with clients this makes life easier for both the ISP and the client.

We don't use this to monitor your usage or look at your private settings in fact we can only push a default config to it and currently on our system we only have an option to change the wifi password if clients do not know how to do that.

The router remains unlocked and will still work with other ISPs. There is no ill intent with this just a way we want to prevent clients that do not have any knowledge of routers to break settings and have them return routers to be re configured.

So you basically force these settings on everyone, without their knowledge to make support of a few easier? Sorry but that is still a sneaky thing to do. You do it via a firmware upgrade, without being transparent up front about it. My understanding is that you supply a line and a Router, The settings are automatically picked up at install. If there are customers that require more than that, it is a chargeable service, and at that stage you can install tools to assist them, as they have requested that. I don't buy your explanation. You are taking a position of arrogant blamelessness.

 

[Rocket-Boy]

Good morning,

The setting was pushed to assist clients that struggle with setting up routers. From experience and having spent 3 hours on the phone trying to setup a router with clients this makes life easier for both the ISP and the client.

We don't use this to monitor your usage or look at your private settings in fact we can only push a default config to it and currently on our system we only have an option to change the wifi password if clients do not know how to do that.

The router remains unlocked and will still work with other ISPs. There is no ill intent with this just a way we want to prevent clients that do not have any knowledge of routers to break settings and have them return routers to be re configured.

Having been in support before I can fully understand this.
Most clients have no idea what they are doing and would prefer the ISP to be able to remotely push settings.

It should still be possible for a more advanced user to disable these settings though, which doesnt seem to be the case.

 

[AfriNatic]

So you basically force these settings on everyone, without their knowledge to make support of a few easier? Sorry but that is still a sneaky thing to do. You do it via a firmware upgrade, without being transparent up front about it. My understanding is that you supply a line and a Router, The settings are automatically picked up at install. If there are customers that require more than that, it is a chargeable service, and at that stage you can install tools to assist them, as they have requested that. I don't buy your explanation. You are taking a position of arrogant blamelessness.

I understand your frustration and I do apologise as I mentioned no ill intent. It's pure based on helping people.

I will speak to our Warehouse manager to see if we can get it disabled and why it's greyed out.

 

[AfriNatic]

Having been in support before I can fully understand this.
Most clients have no idea what they are doing and would prefer the ISP to be able to remotely push settings.

It should still be possible for a more advanced user to disable these settings though, which doesnt seem to be the case.

These settings will not hamper, limit or override the router settings at all unless the client specifically ask for it to be done. The main goal behind this is to integrate more self service tools via clientzone and the app.

Changing router settings remotely via the app even if you are kilometers away. The intention is to make life easier not deceive or force anyone to do anything.

Our routers remain unlocked to be used as a Wifi extender configurable the way our clients want with full access to all the functions that the router might offer. We will not lock you out of your own router because after all if you do cancel the router remains yours to keep.

I will have a chat to our warehouse manager to ask if we can have the option to disable it if clients do not want it.

 

[killerbyte]

These settings will not hamper, limit or override the router settings at all unless the client specifically ask for it to be done. The main goal behind this is to integrate more self service tools via clientzone and the app.

Changing router settings remotely via the app even if you are kilometers away. The intention is to make life easier not deceive or force anyone to do anything.

Our routers remain unlocked to be used as a Wifi extender configurable the way our clients want with full access to all the functions that the router might offer. We will not lock you out of your own router because after all if you do cancel the router remains yours to keep.

I will have a chat to our warehouse manager to ask if we can have the option to disable it if clients do not want it.

The TR069 setting is cooked into the firmware, and even removing the MAC address from the *** portal won't remove those settings from the client's router.
It would be possible for you guys to supply a firmware that doesn't have the TR069 settings baked in.

Regarding any privacy concerns, I can confirm that TR069 serves as a method to push a base config to a router that has been factory reset.