Many users face a situation where iPhone or iPad automatically begins downloading the new version of the operating system in the background. This often happens when connected to a home Wi-Fi network, as Apple, by default, only allows large data downloads over wireless connections. Automatic update can take up a significant portion of your bandwidth, causing lag in online games or buffering of video on other devices in your home.
There are several levels of protection against unwanted firmware installation. From simple settings within the smartphone itself to router configuration, you can completely block the device's access to Apple's update servers. It's important to understand that disabling this feature doesn't affect the operation of core apps, but it does require careful adjustments to network settings.
In this article, we'll cover all available blocking methods, including DNS filters and routing rules. You'll learn how to manage your device's network behavior and prevent the unexpected iOS update notification from appearing.
Setting up restrictions within iOS
The easiest and safest way to prevent automatic downloads of updates is to use the operating system's built-in restrictions. Starting with certain versions of iOS, Apple allows users to completely block the installation of new software versions through the Screen Time menu. To do this, go to Settings → Screen Time → Content & Privacy.
Once you activate the toggle, the "Software Updates" option will become available at the top of the screen. Tapping it will reveal the "Allow Updates" option. Deactivation This slider completely blocks the system's ability to download and install update files, even if you initiate a check yourself in the main settings menu.
⚠️ Attention: This method only works on devices running iOS 12 or later. On older versions of the system, this menu item may be missing or may not block background file downloads.
If you want to retain the option to manually update but disable background downloads, you should check your cellular data settings, although this applies more to the mobile network. However, for Wi-Fi, it's crucial to ensure that the section General → Software Update → Automatic Updates All sliders are disabled. This will prevent packages from being installed overnight when the phone is connected to a charger and a wireless network.
Router Blocking: Domain Filtering
A more radical and reliable method of traffic control is to configure the router itself. Since iOS updates require a connection to specific Apple servers, blocking domain names at the router level will prevent any device from accessing the firmware source. This method is effective for all devices on the network simultaneously.
To implement this, you need to log into the router's web interface, usually accessible at 192.168.0.1 or 192.168.1.1. In the section responsible for security or parental control (often called URL Filter, Access Control or Blacklist), you need to add a list of addresses that Apple uses to distribute updates.
Create a blocking rule for the following domains:
- 🍏
mes.apple.com - 🍏
update.apple.com - 🍏
swscan.apple.com - 🍏
swdist.apple.com - 🍏
appldnld.apple.com
After saving the settings, the router will terminate any connections initiated by devices on the local network that attempt to access these addresses. This ensures that even if an iPhone accidentally starts checking for updates, it will not be able to receive data.
Using DNS to block updates
An alternative to domain blacklisting is DNS redirection. This method involves having a router or specific device send requests to Apple's update servers using a non-existent or local address. This is often more effective because it doesn't require constantly updating the domain list.
The most popular solution is to use specialized DNS services or set up static entries in the hosts file (although this is difficult to do on iOS without jailbreaking, so we configure the router). In the router's DNS settings (section WAN or DNS Server) You can set up rules if your firmware supports Custom DNS scripts, or use third-party DNS services with a blocking feature, such as AdGuard Home or Pi-hole.
If you use Pi-hole or a similar system, add the following domains to your blacklist:
- 🔒
gdmf.apple.com - 🔒
stocks.apple.com - 🔒
iosapps.itunes.apple.com
⚠️ Attention: Blocking Apple system domains may, in rare cases, affect push notifications or device activation after a reset. Use this method only if you understand the risks.
For standard home routers (Keenetic, MikroTik, Asus), there is a feature called "DNS Override" or "DNS Masq." You can create a rule that will direct requests to swscan.apple.com to the address 0.0.0.0This will trick the device into thinking the server does not exist.
List of full domains to block
For maximum effectiveness, it's recommended to block not only the main domains but also their variations with regional prefixes, such as swscan.apple.com.akamai.net. The full list of hundreds of addresses changes dynamically, so using DNS filters is often more effective than a static list.
Comparison of blocking methods
The choice of protection method depends on your technical expertise and the router model. iOS's internal settings are simple, but they can be easily reset accidentally. Router settings are more secure, but require some knowledge. Below is a comparison table of methods.
| Method | Complexity | Reliability | Impact on other functions |
|---|---|---|---|
| iOS limitations | Low | Average | No |
| Domain Blocking (Router) | Average | High | Push failures are possible |
| DNS Filtering | High | Very high | Minimum |
| Disabling Wi-Fi | Low | 100% | No internet |
As the table shows, software restrictions within the phone are the golden mean for most users. They don't require network intervention and are easy to manage. However, for corporate networks or situations where you need to reliably prevent updates to your device fleet, network-based methods are preferable.
Features of different iOS versions
Apple regularly changes the logic behind background processes. In older versions, such as iOS 9 or 10, there was a file com.apple.MobileAsset.plist, editing which (via jailbreak) allowed you to disable updates. In modern versions of iOS, the system has become significantly more aggressive in promoting new versions.
Starting with iOS 14 and later, the company implemented a mechanism that can override some local settings if the device hasn't updated for a long time. Therefore, a combination of methods (internal blocking + router blocking) produces the best results.
For users of older models such as iPhone 6 or iPhone 7Those who don't support the new iOS versions shouldn't worry—Apple's servers won't automatically offer them an incompatible version. However, owners of current models who want to stay on the current version for the sake of jailbreaking or stability should be more vigilant.
Download problems and their solutions
Sometimes, after applying the lock settings, users experience problems with their phone using certain Apple services. For example, iCloud Photos may stop syncing or errors may occur when installing apps from the App Store. This is a sign that the lock is too aggressive.
In this case, you need to check your router logs (if such a function is available) and see which requests are being blocked. Often, it is enough to remove the domains associated with itunes.apple.com or icloud.com, leaving the blocking only for swscan And updateFine-tuning firewall rules allows you to block only firmware update traffic.
If you're using a corporate proxy or complex network infrastructure, ensure SSL scanning doesn't interfere with the process. Apple certificates must be trusted, otherwise the iOS security system may block any network activity, deeming the connection insecure.
⚠️ Attention: Router interfaces and iOS menu items may vary depending on the router's firmware version and phone model. Always check the manufacturer's official documentation for up-to-date paths.
☑️ Check blocking settings
Frequently Asked Questions (FAQ)
Is it possible to disable updates for just one app, rather than the entire system?
Yes, in the App Store settings (Settings → App Store) you can disable automatic app updates. However, iOS system updates are controlled separately through Screen Time.
Is it safe to block Apple domains on a router?
Blocking domains associated specifically with software updates (swscan, update), is usually safe. However, blocking major domains (apple.com, icloud.com) will disrupt the operation of the device.
Why does my phone still download the update even though I've blocked everything?
The file may have been downloaded before the settings were applied. Check your storage. Also, some system security processes may use alternative channels that are difficult to block without specialized equipment.
Will the router reset after a firmware update?
Typically, the settings are saved. However, after a major iOS update, the network settings on your phone may reset, and you'll have to re-enter your Wi-Fi password, but the router rules will remain.