~/guides/block-lg-tv-updates
$ cat guides/block-lg-tv-updates.md

Block LG TV firmware updates.

A firmware update can remove root, and patched firmware can't be rooted again. Here's every layer of blocking, from your router to the TV itself.

1. On any TV: turn off automatic updates

In the TV's settings, under Support and Software Update, turn off automatic updates. It's the first layer, but not enough on its own.

2. On your network: block the servers

Add these to Pi-hole, AdGuard Home or your router's DNS blocklist. This works whether or not the TV is rooted, and it's in place before the TV has even started.

snu.lge.com
su.lge.com
su-ssl.lge.com
su-dev.lge.com
nsu.lge.com
snu-dev.lge.com
ngfts.lge.com

DNS can't block one thing: the updater also reaches a server by IP address, 156.147.69.32. Block that with a firewall rule on the router if it supports one.

3. On a rooted TV: the Homebrew Channel's block

The Homebrew Channel's Block system updates points the first four servers above at nothing in the TV's hosts file. People in Homebrew Channel issue #96 found what it misses: nsu.lge.com, LG's current update server, which a TV still reached with the block on, plus the IP address above and an update check that runs early in boot.

4. On a rooted TV: Block updates harder

LG-USB-2-ETH0's Block updates harder covers the gaps, at once and again at every boot:

  • Turns off webOS's own update check (the hidden softwareUpdateEnable setting), including the early one at boot.
  • Adds nsu.lge.com, snu-dev.lge.com and ngfts.lge.com to the hosts file, without touching the Homebrew Channel's lines.
  • Blocks 156.147.69.32 with one firewall rule.
  • Deletes update details already found or downloaded, so a waiting prompt goes away.

Turning it off undoes all of it. It's a toggle in the LG-USB-2-ETH0 TV app, or --block-updates over SSH, and it works whether or not you use a USB adapter.

Related

Rooting an LG TV in 2026Which firmware is still rootableLG-USB-2-ETH0Includes Block updates harderInstall guideRoot, Homebrew Channel, the repo

FAQ

Is turning off automatic updates in the TV's settings enough?
Not on its own. It stops automatic installs, but the TV still checks and can prompt, and people have found updates getting through. On a rooted TV, block the servers as well.
Which LG update servers should I block?
snu.lge.com, su.lge.com, su-ssl.lge.com and su-dev.lge.com (what the Homebrew Channel blocks), plus nsu.lge.com, snu-dev.lge.com and ngfts.lge.com, which it misses.
Can I block LG TV updates with Pi-hole or my router's DNS?
Yes, add those hostnames to your blocklist. It covers the TV before it has even started. It can't block the update server the TV reaches by IP address, 156.147.69.32: that needs a firewall rule, on the router or on the TV.
Will blocking updates break apps?
It doesn't touch app updates from LG's store or the Homebrew Channel. It blocks firmware updates only.