Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[mjgriffo]

Hi all,

I recently setup a Pi-hole at home, where I'm also running 3 DLink DCS cameras (2 x DCS-2136L and an older DCS-2121).

The Pi-hole has picked up one of the 2136L cameras regularly trying to contact rootservice.xml on IPv4, and rootservice.xml.localdomain on IPv6 (along with the expected DLink domains and ntp servers).

Is anyone aware why it might be doing so? It's happening several hundred times a day - I've blacklisted the addresses so that they're not getting out, but I'm just concerned that it's only happening with one of the cameras.

Thanks in advance.

[edit - spelling]

[GreenBay42]

Do both 2136Ls have the same firmware? Are they the same hardware revision?

Are you using your router for DHCP or pi-hole's DHCP? or are cameras statically assigned and have the same DNS server IPs?

Strange it would be picking up only one. Being mydlink cameras, they do sent requests out to the mydlink server and time servers. Does that camera have more activity than the others? (motion detection, etc)

I am not that familiar with pi-hole unfortunately. I am not sure what rootservice.xml is related to or why the camera is requesting it.

[mjgriffo]

Both cameras are running the same firmware, not sure about the hardware revision (not at home at the moment). The cameras are all set to DHCP in-cam, however my UniFi USG allocates fixed IPs and DNS (pi-hole) info to each one. The Pi-hole uses Google DNS.

The camera in question has much more network activity, specifically to those two domains.

[mjgriffo]

In fact it is both 2136L cameras generating the DNS requests - and further to my original email they are both sending out requests to the two domains (rootservice.xml and rootservice.xml.localdomain), on both IPv4 and IPv6.

I've successfully blacklisted the IPv4 requests, but for some reason I'm unable to do so for the IPv6 requests - noting that my network doesn't have IPv6 enabled (Unifi USG on standard firmware, and both cameras on firmware v1.04 and have IPv6 unticked in the settings page).

[GreenBay42]

I will notify the camera people to see what this is. It may just be the cameras with the normal mydlink requests.

[Gattsu]

Are you using mydlink services at all?

You can try a factory reset and re-test.

[mjgriffo]

So I've now done a factory reset / firmware reinstall on both of the cameras in question - still having the issue.

They are currently connected to myDlink Home / myDlink Lite.

[mjgriffo]

I will notify the camera people to see what this is. It may just be the cameras with the normal mydlink requests.

Hi GreenBay42, any word back from the camera people?

[GreenBay42]

None. I will ask again...

Doing a google search looks like rootservice.xml is related to LG smart TVs and/or UPnP. Turn off UPnP on the camera and see if it stops. 

Go to Setup > Network Setup > uncheck "Enable UPnP Presentation".

[mjgriffo]

Doing a google search looks like rootservice.xml is related to LG smart TVs and/or UPnP. Turn off UPnP on the camera and see if it stops. 

Go to Setup > Network Setup > uncheck "Enable UPnP Presentation".

Thanks - we don't have any LG televisions, so I'll give the UPnP a try and report back.

[mjgriffo]

None. I will ask again...

Doing a google search looks like rootservice.xml is related to LG smart TVs and/or UPnP. Turn off UPnP on the camera and see if it stops. 

Go to Setup > Network Setup > uncheck "Enable UPnP Presentation".

Good news - turning off UPnP seems to have resolved those DNS calls - thanks for your assistance.

[GreenBay42]

Glad it worked for you.