Hacking Blocking Update Servers - Clarification Needed

[TiMeBoMb4u2]

So, I've been trying to get a clear-cut answer on the IP ranges to block on my router, to block the Nintendo Update Servers (NUS). So far, this is the list I have compiled from several different threads and my own findings (Balanced URLs appear at end of the list). Is anyone able to confirm these are accurate? Any additions?

• 23.62.97.9 (nus.cdn.wup.shop.nintendo.net)
• 23.62.97.16 (nus.cdn.wup.shop.nintendo.net)
• 23.62.97.80 (nus.cdn.wup.shop.nintendo.net)
• 23.62.97.82 (nus.cdn.wup.shop.nintendo.net)
• 23.62.236.0/24 (unconfirmed - not sure if /24 is necessary)
• 23.65.181.75 (source: WiiUBrew.org)
• 23.210.5.9 (nus.cdn.wup.shop.nintendo.net)
• 23.210.5.25 (nus.cdn.wup.shop.nintendo.net)
• 23.210.5.90 (nus.cdn.wup.shop.nintendo.net)
• 23.210.5.96 (nus.cdn.wup.shop.nintendo.net)
• 23.210.5.104 (nus.cdn.wup.shop.nintendo.net)
• 23.210.5.123 (nus.cdn.wup.shop.nintendo.net)
• 23.210.5.129 (nus.cdn.wup.shop.nintendo.net)
• 23.210.5.146 (nus.cdn.wup.shop.nintendo.net)
• 96.17.161.145 (source: WiiUBrew.org)
• 174.35.56.0/24 (nus.cdn.shop.wii.com - /24 not fully confirmed)
  • 174.35.56.81 (nus.cdn.shop.wii.com)
  • 174.35.56.82 (nus.cdn.shop.wii.com)
  • 174.35.56.93 (nus.cdn.shop.wii.com)
  • 174.35.56.99 (nus.cdn.shop.wii.com)
  • 174.35.56.144 (nus.cdn.shop.wii.com)
  • 174.35.56.149 (nus.cdn.shop.wii.com)
  • 174.35.56.150 (nus.cdn.shop.wii.com)
  • 174.35.56.151 (nus.cdn.shop.wii.com)
  • 174.35.56.152 (nus.cdn.shop.wii.com)
  • 174.35.56.153 (nus.cdn.shop.wii.com)
  • 174.35.56.154 (nus.cdn.shop.wii.com)
  • 174.35.56.170 (nus.cdn.shop.wii.com)
  • 174.35.56.172 (nus.cdn.shop.wii.com)
  • 174.35.56.180 (nus.cdn.shop.wii.com)
  • 174.35.56.181 (nus.cdn.shop.wii.com)
  • 174.35.56.182 (nus.cdn.shop.wii.com)
  • 174.35.56.186 (nus.cdn.shop.wii.com)
  • 174.35.56.197 (nus.cdn.shop.wii.com)
  • 174.35.56.201 (nus.cdn.shop.wii.com)
  • 174.35.56.208 (nus.cdn.shop.wii.com)
  • 174.35.56.216 (nus.cdn.shop.wii.com)
  • 174.35.56.218 (nus.cdn.shop.wii.com)
  • 174.35.56.229 (nus.cdn.shop.wii.com)
  • 174.35.56.230 (nus.cdn.shop.wii.com)
  • 174.35.56.232 (nus.cdn.shop.wii.com)
  • 174.35.56.233 (nus.cdn.shop.wii.com)
  • 174.35.56.235 (nus.cdn.shop.wii.com)
  • 174.35.56.236 (nus.cdn.shop.wii.com)
• 184.50.229.137 (source: WiiUBrew.org)
• 184.50.229.158 (source: WiiUBrew.org)
• 184.51.206.26 (nus.cdn.wup.shop.nintendo.net)
• 184.51.206.42 (nus.cdn.wup.shop.nintendo.net)

• Balanced URLs
  • nus.c.shop.nintendowifi.net
  • nus.cdn.c.shop.nintendowifi.net
  • nus.cdn.shop.wii.com
  • nus.cdn.wup.shop.nintendo.net
  • nus.wup.shop.nintendo.net

 

[Bug_Checker_]

So, I've been trying to get a clear-cut answer on the IP ranges to block on my router, to block the Nintendo Update Servers (NUS). So far, this is the list I have compiled from several different threads and my own findings. Is anyone able to confirm these are accurate? Any additions?

• 23.62.97.9 (nus.cdn.wup.shop.nintendo.net)
• 23.62.97.16 (nus.cdn.wup.shop.nintendo.net)
• 23.62.97.80 (nus.cdn.wup.shop.nintendo.net)
• 23.62.97.82 (nus.cdn.wup.shop.nintendo.net)
• 23.62.236.0/24 (unconfirmed - not sure if /24 is necessary)
• 23.210.5.9 (nus.cdn.wup.shop.nintendo.net)
• 23.210.5.25 (nus.cdn.wup.shop.nintendo.net)
• 23.210.5.90 (nus.cdn.wup.shop.nintendo.net)
• 23.210.5.96 (nus.cdn.wup.shop.nintendo.net)
• 23.210.5.104 (nus.cdn.wup.shop.nintendo.net)
• 23.210.5.123 (nus.cdn.wup.shop.nintendo.net)
• 23.210.5.129 (nus.cdn.wup.shop.nintendo.net)
• 23.210.5.146 (nus.cdn.wup.shop.nintendo.net)
• 96.17.161.145 (unconfirmed)
• 174.35.56.0/24 (nus.cdn.shop.wii.com - /24 not fully confirmed)
  • 174.35.56.81 (nus.cdn.shop.wii.com)
  • 174.35.56.82 (nus.cdn.shop.wii.com)
  • 174.35.56.93 (nus.cdn.shop.wii.com)
  • 174.35.56.99 (nus.cdn.shop.wii.com)
  • 174.35.56.144 (nus.cdn.shop.wii.com)
  • 174.35.56.149 (nus.cdn.shop.wii.com)
  • 174.35.56.150 (nus.cdn.shop.wii.com)
  • 174.35.56.151 (nus.cdn.shop.wii.com)
  • 174.35.56.152 (nus.cdn.shop.wii.com)
  • 174.35.56.153 (nus.cdn.shop.wii.com)
  • 174.35.56.154 (nus.cdn.shop.wii.com)
  • 174.35.56.170 (nus.cdn.shop.wii.com)
  • 174.35.56.172 (nus.cdn.shop.wii.com)
  • 174.35.56.180 (nus.cdn.shop.wii.com)
  • 174.35.56.181 (nus.cdn.shop.wii.com)
  • 174.35.56.182 (nus.cdn.shop.wii.com)
  • 174.35.56.186 (nus.cdn.shop.wii.com)
  • 174.35.56.197 (nus.cdn.shop.wii.com)
  • 174.35.56.201 (nus.cdn.shop.wii.com)
  • 174.35.56.208 (nus.cdn.shop.wii.com)
  • 174.35.56.216 (nus.cdn.shop.wii.com)
  • 174.35.56.218 (nus.cdn.shop.wii.com)
  • 174.35.56.229 (nus.cdn.shop.wii.com)
  • 174.35.56.230 (nus.cdn.shop.wii.com)
  • 174.35.56.232 (nus.cdn.shop.wii.com)
  • 174.35.56.233 (nus.cdn.shop.wii.com)
  • 174.35.56.235 (nus.cdn.shop.wii.com)
  • 174.35.56.236 (nus.cdn.shop.wii.com)
• 184.50.229.158 (unconfirmed)
• 184.50.229.137 (unconfirmed)
• 184.51.206.26 (nus.cdn.wup.shop.nintendo.net)
• 184.51.206.42 (nus.cdn.wup.shop.nintendo.net)

If Euss says it is so, take it that it's good/confirmed
http://wiiubrew.org/w/index.php?title=System_Software&action=history
http://wiiubrew.org/w/index.php?title=System_Software&diff=954&oldid=948
might want to add 23.65.181.75

 

[TiMeBoMb4u2]

Thanks. Made the changes.

 

[madri1]

don't do that, don't block IPS. Only block hosts.
Thoses ips are from akamai, if you block them you will block facebook & a lot of other sites.

 

[jalaneme]

There should be a sticky with all the ips to block and for all regions, I've been waiting for that to happen as i don't know where to start with so many ips needed to block.

 

[Bladexdsl]

Thoses ips are from akamai, if you block them you will block facebook

that's a good than!

 

[NWPlayer123]

don't do that, don't block IPS. Only block hosts.
Thoses ips are from akamai, if you block them you will block facebook & a lot of other sites.

At least on my router, I can set it to block with only a certain device/IP. And I'm pretty sure I'm not going to use fakebook on my wii u anytime soon

 

[Engleman]

At least on my router, I can set it to block with only a certain device/IP. And I'm pretty sure I'm not going to use fakebook on my wii u anytime soon

Blocked by device, that's what I also did. Had no other choice, really, as my router can only block about 15 IPs total.

 

[TiMeBoMb4u2]

Blocked by device, that's what I also did. Had no other choice, really, as my router can only block about 15 IPs total.

Most home routers will allow 10-15 URLs or IPs to be blocked.
I don't suggest blocking an entire device, as it will prevent other games/applications from accessing online content.

 

[TiMeBoMb4u2]

don't do that, don't block IPS. Only block hosts.
Thoses ips are from akamai, if you block them you will block facebook & a lot of other sites.

If you want to block hosts, they are at the end of the IP list in OP.

 

[Engleman]

Most home routers will allow 10-15 URLs or IPs to be blocked.
I don't suggest blocking an entire device, as it will prevent other games/applications from accessing online content.

That's true, but I haven't been playing the Wii U side of the console as much as the vwii, so locking it down like I did works pretty well for me.

 

[the_randomizer]

So what would I block if I want to prevent updates but still go online with Mario Kart? Many users have reported it to be feasible.

 

[NFG]

Blocking the domain names should be all you have to do, but I am not sure how the Wii U checks for an update.

Cause if it just uses domain names the no matter which IP it goes to would be blocked.

Any how, just to be safe I blocked all IP addresses.

For people using DD-WRT here is the list for your Firewall.

Spoiler

iptables -I FORWARD -s 23.62.97.9 -j DROP
iptables -I FORWARD -s 23.62.97.16 -j DROP
iptables -I FORWARD -s 23.62.97.80 -j DROP
iptables -I FORWARD -s 23.62.97.82 -j DROP
iptables -I 174.35.56.0/24 -j DROP
iptables -I FORWARD -s 23.65.181.75 -j DROP
iptables -I FORWARD -s 23.210.5.9 -j DROP
iptables -I FORWARD -s 23.210.5.25 -j DROP
iptables -I FORWARD -s 23.210.5.90 -j DROP
iptables -I FORWARD -s 23.210.5.96 -j DROP
iptables -I FORWARD -s 23.210.5.104 -j DROP
iptables -I FORWARD -s 23.210.5.123 -j DROP
iptables -I FORWARD -s 23.210.5.129 -j DROP
iptables -I FORWARD -s 23.210.5.146 -j DROP
iptables -I FORWARD -s 96.17.161.145 -j DROP
iptables -I FORWARD -s 174.35.56.0/24 -j DROP
iptables -I FORWARD -s 174.35.56.81 -j DROP
iptables -I FORWARD -s 174.35.56.82 -j DROP
iptables -I FORWARD -s 174.35.56.93 -j DROP
iptables -I FORWARD -s 174.35.56.99 -j DROP
iptables -I FORWARD -s 174.35.56.144 -j DROP
iptables -I FORWARD -s 174.35.56.149 -j DROP
iptables -I FORWARD -s 174.35.56.150 -j DROP
iptables -I FORWARD -s 174.35.56.151 -j DROP
iptables -I FORWARD -s 174.35.56.152 -j DROP
iptables -I FORWARD -s 174.35.56.153 -j DROP
iptables -I FORWARD -s 174.35.56.154 -j DROP
iptables -I FORWARD -s 174.35.56.170 -j DROP
iptables -I FORWARD -s 174.35.56.172 -j DROP
iptables -I FORWARD -s 174.35.56.180 -j DROP
iptables -I FORWARD -s 174.35.56.181 -j DROP
iptables -I FORWARD -s 174.35.56.182 -j DROP
iptables -I FORWARD -s 174.35.56.186 -j DROP
iptables -I FORWARD -s 174.35.56.197 -j DROP
iptables -I FORWARD -s 174.35.56.201 -j DROP
iptables -I FORWARD -s 174.35.56.208 -j DROP
iptables -I FORWARD -s 174.35.56.216 -j DROP
iptables -I FORWARD -s 174.35.56.218 -j DROP
iptables -I FORWARD -s 174.35.56.229 -j DROP
iptables -I FORWARD -s 174.35.56.230 -j DROP
iptables -I FORWARD -s 174.35.56.232 -j DROP
iptables -I FORWARD -s 174.35.56.233 -j DROP
iptables -I FORWARD -s 174.35.56.235 -j DROP
iptables -I FORWARD -s 174.35.56.236 -j DROP
iptables -I FORWARD -s 184.50.229.137 -j DROP
iptables -I FORWARD -s 184.50.229.158 -j DROP
iptables -I FORWARD -s 184.51.206.26 -j DROP
iptables -I FORWARD -s 184.51.206.42 -j DROP
iptables -I FORWARD -s nus.cdn.shop.wii.com -j DROP
iptables -I FORWARD -s nus.cdn.wup.shop.nintendo.net -j DROP
iptables -I FORWARD -s nus.wup.shop.nintendo.net -j DROP

 

[osaka35]

iptables -I 174.35.56.0/24 -j DROP

Did you forget the Forward? Also, darn you for beating me to the punch!

 

[cherryduck]

When I block nus.cdn.wup.shop.nintendo.net I can still ping it, the only difference being that the IP returned is 176.255.246.202, should I worry?

EDIT

Sorry should have checked, a quick Google search returns this as a Sky IP address, so presumably that's a redirection to the page which comes up when you try to browse to a blocked site.

 

[Obveron]

So if you disable stand-by, and also disable auto-update, what is the point of blocking all these servers? Are you guys saying Nintendo will silently update your system even with auto-update disabled?

 

[GorTesK]

this would only stop the automatic installation, it can still download the update and then prompt you to update with that silly little screen that only let's you press "OK" or pull the plug on your wiiu... so Id rather have the updates blocked by my router, then have, let's say some relative or friend boot up my wiiu and press ok... you know, better safe than sorry

 

[Rinnux]

I have blocked the following url's:

• nus.c.shop.nintendowifi.net
• nus.cdn.c.shop.nintendowifi.net
• nus.cdn.shop.wii.com
• nus.cdn.wup.shop.nintendo.net
• nus.wup.shop.nintendo.net

Also I have blocked these ip addresses:

• 96.17.161.145
• 184.50.229.158
• 184.50.229.137

Will that be all I need to block the updates?
Blocking those ip's + nus.cdn.wup.shop.nintendo.net worked on 4.1, however when I updated to 5.0 to get my mk8 free game, I was still able to download things from the eshop.

 

[NWPlayer123]

Yeah, that should be good. Do you still get an error when trying to update? Go into settings and try to update and see if it gets the data or if it fails with an error.

 

[Rinnux]

I am already on the latest firmware