| Local network |
| ip address |
| Disallow ^(10 |
| Allow 192.168.* |
| Allow 10.0.* |
| Dell Computer/ntp |
| domain name |
| Disallow .*:123 |
| Allow com.canonical.ps5.ntp1.prod-ntp-4:123 |
| ip address |
| Disallow .*:123 |
| Dell Computer/multicast |
| domain name |
| Disallow ^(224-239)..* |
| ip address |
| Disallow ^(224-239)..* |
| Allow 224.0.0.251:5353 |
| Allow 239.255.255.250:1900 |
| ntp |
| domain name |
| Disallow .*:123 |
| Allow com.google.time4:123 |
| Allow org.computer42.hetzner.obelix:123 |
| ip address |
| Disallow .*:123 |
| internet |
| domain name |
| Allow ^(?!(192.168.1.1 |
| Disallow com.akamaitechnologies..*:(?!(20$ |
| Allow com.akamaitechnologies.static.deploy..*:(?!(20$ |
| Disallow com.amazonaws.compute.eu-central-1.ec2-18-184-76-236..*:(?!(20$ |
| Allow com.amazonaws.compute.eu-central-1.ec2-18-184-76-236:443 |
| Disallow com.amazonaws.compute.eu-central-1.ec2-18-196-142-136..*:(?!(20$ |
| Allow com.amazonaws.compute.eu-central-1.ec2-18-196-142-136:8883 |
| Disallow com.amazonaws.compute.eu-central-1.ec2-18-197-160-145..*:(?!(20$ |
| Allow com.amazonaws.compute.eu-central-1.ec2-18-197-160-145:443 |
| Disallow com.amazonaws.compute.eu-central-1.ec2-18-197-183-192..*:(?!(20$ |
| Allow com.amazonaws.compute.eu-central-1.ec2-18-197-183-192:8883 |
| Disallow com.amazonaws.compute.eu-central-1.ec2-52-29-140-27..*:(?!(20$ |
| Allow com.amazonaws.compute.eu-central-1.ec2-52-29-140-27:443 |
| Disallow com.amazonaws.compute.eu-central-1.ec2-52-29-160-219..*:(?!(20$ |
| Allow com.amazonaws.compute.eu-central-1.ec2-52-29-160-219:443 |
| Disallow com.amazonaws.compute.eu-central-1.ec2-52-29-216-174..*:(?!(20$ |
| Allow com.amazonaws.compute.eu-central-1.ec2-52-29-216-174:443 |
| Disallow com.facebook.edge-msgr-latest-shv-01-lhr8..*:(?!(20$ |
| Allow com.facebook.edge-msgr-latest-shv-01-lhr8:443 |
| Disallow com.facebook.edge-star-shv-01-lhr8..*:(?!(20$ |
| Allow com.facebook.edge-star-shv-01-lhr8.web..*:(?!(20$ |
| Disallow com.facebook.whatsapp-chatd-edge-shv-01-lhr8..*:(?!(20$ |
| Allow com.facebook.whatsapp-chatd-edge-shv-01-lhr8:5222 |
| Disallow com.googleusercontent..*:(?!(20$ |
| Allow com.googleusercontent.bc..*:(?!(20$ |
| Disallow com.googleusercontent.bc.35.186.224.25..*:(?!(20$ |
| Allow com.googleusercontent.bc.35.186.224.25:443 |
| Disallow com.googleusercontent.bc.35.186.224.47..*:(?!(20$ |
| Allow com.googleusercontent.bc.35.186.224.47:443 |
| Disallow net.1e100.ams16s22-in-f4..*:(?!(20$ |
| Allow net.1e100.ams16s22-in-f4:443 |
| Disallow net.1e100.lhr25s31-in-f10..*:(?!(20$ |
| Allow net.1e100.lhr25s31-in-f10:443 |
| Disallow net.1e100.lhr25s33-in-f14..*:(?!(20$ |
| Allow net.1e100.lhr25s33-in-f14:443 |
| Disallow net.1e100.lhr48s27-in-f10..*:(?!(20$ |
| Allow net.1e100.lhr48s27-in-f10:443 |
| Disallow net.1e100.lhr48s27-in-f14..*:(?!(20$ |
| Allow net.1e100.lhr48s27-in-f14.web..*:(?!(20$ |
| Disallow net.cloudfront..*:(?!(20$ |
| Allow net.cloudfront.r..*:(?!(20$ |
| Disallow net.cloudfront.r.lhr61.server-13-224-222-82..*:(?!(20$ |
| Allow net.cloudfront.r.lhr61.server-13-224-222-82:443 |
| Disallow net.cloudfront.r.lhr61.server-99-86-114-87..*:(?!(20$ |
| Allow net.cloudfront.r.lhr61.server-99-86-114-87:443 |
| Disallow net.fbcdn.edge-video-shv-01-lhr8..*:(?!(20$ |
| Allow net.fbcdn.edge-video-shv-01-lhr8:443 |
| Disallow net.llnw..*:(?!(20$ |
| Allow net.llnw.lhr..*:(?!(20$ |
| Disallow net.llnw.lhr.https-87-248-204-27..*:(?!(20$ |
| Allow net.llnw.lhr.https-87-248-204-27:80 |
| ip address |
| Allow ^(?!(192.168.1.1 |
| Disallow 8..*:(?!(20$ |
| Allow 8.209.77.113:443 |
| Disallow 89.21..*:(?!(20$ |
| Allow 89.21.226.138.*:(?!(20$ |
| localnetwork |
| domain name |
| Disallow ^(10. |
| Allow 10.0.5.1:80 |
| Allow 10.0.5.255:51537 |
| Allow 10.0.5.255:57621 |
| Allow 10.0.7.237:14568 |
| Allow 10.0.7.237:41451 |
| ip address |
| Disallow ^(10. |
| microsoftds |
| domain name |
| Disallow .*:445 |
| ip address |
| Disallow .*:445 |
| netbios |
| domain name |
| Disallow .*:(137 |
| ip address |
| Disallow .*:(137 |
| multicast |
| domain name |
| Allow ^(224-239)..* |
| ip address |
| Allow ^(224-239)..* |
| Disallow 224..* |
| Allow 224.0..* |
| Disallow 224.0.0..* |
| Allow 224.0.0.251:5353 |
| Disallow 226.0..* |
| Allow 226.0.16.16:30012 |
| Disallow 226.120..* |
| Allow 226.120.89.84:30012 |
| Disallow 226.121..* |
| Allow 226.121.84.83:30012 |
| Disallow 226.122..* |
| Allow 226.122.49.48:30012 |
| Disallow 226.35..* |
| Allow 226.35.85.69:30012 |
| Disallow 226.64..* |
| Allow 226.64.17.17:30012 |
| Disallow 226.65..* |
| Allow 226.65.134.220:30012 |
| Disallow 226.66..* |
| Allow 226.66.89.65:30012 |
| Disallow 226.67..* |
| Allow 226.67.113.110:30012 |
| Disallow 226.72..* |
| Allow 226.72.116.45:30012 |
| Disallow 226.73..* |
| Allow 226.73.114.117:30012 |
| Disallow 226.74..* |
| Allow 226.74.105.114:30012 |
| Disallow 226.75..* |
| Allow 226.75.0.115:30012 |
| Disallow 239..* |
| Allow 239.255.255.250.* |
| smtps |
| domain name |
| Disallow .*:465 |
| ip address |
| Disallow .*:465 |
| telnet |
| domain name |
| Disallow .*:23 |
| ip address |
| Disallow .*:23 |
| imap-tls |
| domain name |
| Disallow .*:993 |
| Allow net.1e100.wa-in-f108:993 |
| Allow net.1e100.wa-in-f109:993 |
| Allow net.1e100.wb-in-f108:993 |
| Allow net.1e100.wb-in-f109:993 |
| Allow net.1e100.wf-in-f109:993 |
| Allow net.1e100.wg-in-f108:993 |
| Allow net.1e100.wn-in-f109:993 |
| Allow net.1e100.wo-in-f108:993 |
| Allow net.1e100.wq-in-f108:993 |
| Allow net.1e100.wr-in-f108:993 |
| Allow net.1e100.wr-in-f109:993 |
| Allow net.1e100.ws-in-f108:993 |
| Allow net.1e100.ws-in-f109:993 |
| ip address |
| Disallow .*:993 |
| gateway |
| domain name |
| Disallow ^(192.168.1.1 |
| ip address |
| Disallow ^(192.168.1.1 |
| dhcp |
| domain name |
| Disallow .*:(67 |
| Allow 255.255.255.255:67 |
| ip address |
| Disallow .*:(67 |
| dns |
| domain name |
| Disallow .*:53 |
| Allow 10.0.5.1:53 |
| ip address |
| Disallow .*:53 |
| broadcast |
| domain name |
| Disallow ^255.255.255.255.* |
| Allow 255.255.255.255:30011 |
| Allow 255.255.255.255:3703 |
| ip address |
| Disallow ^255.255.255.255.* |
| ssh |
| domain name |
| Disallow .*:22 |
| ip address |
| Disallow .*:22 |
