Xfinity ISP tells me my Nucleus has tried 8 times to connect t\o high risk sites. This has occurred 8 times in the past three days. What does this mean and how do I prevent it? I only use music streaming URL’s entered into “My Live Radio” as new additions.
Hi @Gary_Follett,
Generally, these are simple warnings from the Advanced Security settings from Xfinity, particularly if you’re renting their gateway (modem/router combo). Their documentation states that users can except to receive these if they’re 1) gaming and/or 2) port forwarding (Roon ARC relies on the second protocol), because of the external queries generated. This is entirely safe provided you haven’t disabled your network security settings or set up a second router in such a way as to expose the Nucleus or other hardware.
You can usually take a closer look at the content and timing of the warnings by accessing the Xfinity web admin and navigating to Advanced Security: Online Security With xFi – Frequently Asked Questions - Xfinity Support
If the timing matches when you have been listening to the radio, the warnings are likely just flags as the Nucleus+ requested audio from external URLs in different geographic regions, etc.
How have you set up your network? Do you have a second router? Also, are you using Roon ARC?
Thank you for the seedy and useful reply.
Since I have no plans for remote use of my Roon hub, I have removed the ARC app from my devices. I had never connected yet so I think that removal was complete and safe.
I did perform an Internet search for the highest quality Internet Radio statins and found some delightful options, most of which are in Europe. In the process, I had entered some incorrect act URL’s and maybe those caused the Xfinity errors (8 of them). I have since logged into most of those correctly entered URL’s via Roon and have not gotten any further such security flags.
I only have one router. It is an Xfinity device, using the highest. level of security available. I connect to Roon Nucleus via LAN, then to my DAC via USB. My TV connects to the DAC via one-way traffic, Toslink.
I will check the Xfinity log as well. I know that those early errant URL’s were entered in the first day or so of my experimentation with Roon.
Final commentary: I have been a music lover and HiFi enthusiast since I was 12 years old. My first revenue producing venture, aside from routine repairs, was converting old monophonic HiFi sets to stereo by adding amplifiers, new turntable cartridges (or turntable when needed). I have been around the block.
With that background, I wanted to feed back that Roon has rekindled the thrill part of music listening for me. The presentation on the iPad with its exceptional user interface makes simply searching for old music pieces (mostly classical but some 20th century popular music) a major part of the fun. If I find something that triggers a memory, I simply click on it and play it. If I find I don’t like the piece as much as I did then, I simply click away to something else. Allowing a given “tune” to continue playing even while searching for others really makes this a great pastime.
I had experience with BluOS (so-so) and Cambridge Streamagic (YUCK!!!) so you can appreciate the improvement I felt once I got the Roon operating.
That will not disable arc. If you have UPNP disabled and have not forwarded any ports arc won’t be able to send or receive from outside your local network.
Apparently if you set the arc port to 0 it won’t work outside the local network as it can’t forward to port 0… but arc will still work within your local network. There is no off setting.
I don’t understand why there can’t be a button or checkbox that says:
ENABLE/DISABLE Remote Access.
This topic was automatically closed after 45 days. New replies are no longer allowed.