@foz whilst I totally advocate taking back control using a firewall to prevent automatic updates, unfortunately, technically (although not typical) it is totally possible that the device in question uses the same protocol and same endpoint, and even the same request, for both firmware updates and acceptable normal functionality (such as daily epg updates), thus meaning it may not be a simple firewall block but requiring more detailed packet inspection not possible on commodity gateway routers.
I don’t have a humax so cannot advise on that device specifically, but the chances are it uses different endpoints and someone can share what needs to be blocked to only prevent automatic firmware updates.
With the increasing number of internet connected devices and the increasing number of attacks against them, one option for protection is to totally block such devices access to the internet, both in and out bound, then to manually download firmware updates from a known safe source and apply those updates only when you decide to do so. Of course that can be tedious and relies on the device having a manual firmware upload option. (BTWH doesn’t provide that option)
On the flip side, automatic updates do allow a vendor to ensure the device is protected against known security threats as soon as possible, assuming the vendor releases firmware updates in a timely fashion. So automatic firmware updates are good for some situations or consumers that don’t want to manually maintain their devices. But consumers should always have the choice! (BTWH doesn’t provide the choice)
