down? [fixed: disable "advanced security" on Comcast/Xfinity website]

edited January 2021 in Problems Now Fixed

I just received a kiwisdr a couple of days ago and would like to refer to the documentation. But am unable to connect to except for Is the main site down?


  • jksjks
    edited January 2021

    No, it's up. Where are you? Someone in Europe had this problem a few days ago and it cleared up after a few hours. ISP routing problem.

  • I'm in Bloomington, Indiana USA and still can't reach the site.

    This has been going on for several days. I was able to reach the site by just now downloading and using a Tor Browser.

  • Could you print the output of (command prompt)

    "ping" (I'm looking for if it returns the IP address, and in what format)

    And then

    "ping" (to see if it can actually route packets to the address)


    The common issues are DNS where the name does get linked to the right address or more recently the address returned for "" coming up as IPv6 where these is no route using that version from your location. Both are errors but it would help to narrow it down.


  • I don't know what DNS server the OP or are using, but the fifty or so I just checked all resolve to

    However, the reverse DNS for that IP address is An A lookup on that name returned IPv4 and IPv6 addresses:


    Still, I don't really see an issue here. We need more from the OP. The info Stu requested is a good place to start...


  • C:\WINDOWS\system32>ping

    Pinging [] with 32 bytes of data:

    Request timed out.

    Request timed out.

    Request timed out.

    Request timed out.

    Ping statistics for

      Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),


    Pinging with 32 bytes of data:

    Request timed out.

    Request timed out.

    Request timed out.

    Request timed out.

    Ping statistics for

      Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

  • I am strongly suspecting that Comcast is blocking the site for some reason

    I will explore further.

  • OK that is strange. You could try "tracert"

    I tend to remove the first few lines if ever I share tracert results, we just want to see if it gets outside your network and ISP. - those are normally from about line 3 or 4 onward.

  • Comcast Xfi does indeed blacklist Kiwi ports in the default security mode. That has to be turned off since they added it as part of their web configuration of home routers, as far as I can tell. That's what I had to do to restore connection anyway.

  • OK so it's not a DNS issue. The output from tracert will be useful.

  • I've talked to Comcast technical support which so far has been of no help. I was supposed to get a call from their more advanced support. So far no call.

    Tracing route to []

    over a maximum of 30 hops:

     1   1 ms   1 ms   1 ms

     2   *    *    *   Request timed out.

     3   *    *    *   Request timed out.

     4   *    *    *   Request timed out.

     5   *    *    *   Request timed out.

     6   *    *    *   Request timed out.

  • edited January 2021

    So that shows just your router which could mean:

    1. It can't route the traffic on the internet side
    2. Router does not allow ICMP forward (rare -check by "tracert someworkingsite.url)

    My gut feeling is that your WAN might be IPv6 only and that no tunnel/route is handling the v4 address for, but that is just a guess and I'll be interested to hear what support says.

    if you have a Linux box try the same but "traceroute" (you may not have traceroute installed.)

  • Given this seems to be in your router, and Comcast is involved, I would try this:

  • After much digging I found two IP addresses are being blocked, one is for I don't know what the other one is, but I suspect it is the github site for software updates. I am chatting with tech support now.

  • Everything seems to be working.

  • I did remember the Comcast thing as mentioned by N6GN and John but had assumed that was just for serving local Kiwi's to the internet on ports around 8073 not for just visiting the domain or update pages.

    Curious, I wonder why they are so specific.


    did support share what they did, was it turning off advanced security? Maybe that covers any service not on the approved Comcast reading list like Facebook, Twitter, Reddit (oops no).

  • If you know what was done to fix this please let us know. It's valuable to add this to the list of known problems/solutions.

  • Well, within an hour the site was blocked again. I called and have been deserted on chat. (The chat window has been open all night.)

  • edited January 2021

    Disable the advanced security as in the 9770 link above.


    (with credit to Brendan_W)

    1. Go to Xfinity's website, login, select the "XFi" (WiFi) menu.

    2. Select the tab marked "More."

    3. Select the "My Services" tab.

    4. "Advanced Security" should be the only service listed, click to disable.

    5. Exit.


    I doubt many major ISP's are going to keep a whitelist per user so turn that sh.. feature off.

  • edited January 2021

    And then I went back to read more of that thread.

    Brendan_W again

    "while this "Advanced Security" was in effect, I couldn't log into either. My browser (FF) acted like it was a DNS error, and couldn't find it. A strange linkage on this end."

    (Sorry Glen I should have just listened to your first post about that.)

  • That did it, this time for sure!

  • Slightly off topic here but related nonetheless. Verizon FIOS recently changed their routers to not report TTL data on ICMP traffic (at least that is what I think). This causes tracert in windows to return data like this:

    Tracing route to []
    over a maximum of 30 hops:
      1    <1 ms    <1 ms    <1 ms []
      2     1 ms     1 ms     1 ms []
    Trace complete.

    Note the lack of hops and the impossibly low reply time of 1ms.

    If you use linux or a tool which performs UDP route tracing you can get the "real" data. Here's the result from the ssh terminal of the kiwi:

    root@kiwisdr:~# traceroute
    traceroute to (, 30 hops max, 60 byte packets
     1 (  5.389 ms  5.543 ms  5.436 ms
     2  * * *
     3 (  10.663 ms (  13.048 ms  13.301 ms
     4  * * *
     5  * * *
     6 (  14.498 ms (  9.256 ms  8.386 ms
     7 (  11.180 ms  10.503 ms  10.538 ms
     8 (  71.806 ms  70.193 ms  69.822 ms
     9 (  86.708 ms  84.831 ms (  84.700 ms
    10 (  82.195 ms  83.184 ms  82.509 ms
    11 (  69.535 ms  76.168 ms  73.867 ms
    12 (  74.727 ms  74.314 ms  69.503 ms



Sign In or Register to comment.