CITADEL GATEKEEPER

default via 45.79.42.1 dev eth0 onlink 10.8.0.0/24 via 10.8.0.2 dev tun0 10.8.0.2 dev tun0 proto kernel scope link src 10.8.0.1 45.79.42.0/24 dev eth0 proto kernel scope link src 45.79.42.117 169.254.0.0/16 dev eth0 scope link metric 1000 172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1

set allowed_dns_v4 { type ipv4_addr elements = { 1.1.1.1, 8.8.8.8, 8.8.4.4, 1.0.0.1} }

set allowed_web_v4 { type ipv4_addr flags interval elements = { 45.79.42.117, 204.44.195.48} }

set allowed_dns_v6 { type ipv6_addr elements = { 2001:4860:4860::8844, 2001:4860:4860::8888, 2606:4700:4700::1001, 2606:4700:4700::1111} }

set allowed_web_v6 { type ipv6_addr elements = { 2600:3c00::2000:d9ff:fefb:2cca} }

set allowed_temp_web_v4 { type ipv4_addr flags interval elements = { 2.20.178.0/24, 3.169.221.6, 3.169.221.20, 3.169.221.39, 3.169.221.53, 13.32.104.0/24, 13.107.0.0/16, 18.160.156.78, 18.160.156.108, 18.160.156.115, 18.160.156.117, 18.160.172.0/24, 18.209.243.58, 20.42.73.0/24, 20.119.0.28, 20.135.6.15, 20.190.0.0/16, 23.11.231.0/24, 23.34.82.10, 23.34.82.12, 23.34.82.22, 23.34.82.26, 23.48.246.0/24, 23.53.13.34, 23.53.13.36, 23.53.13.38, 23.53.13.43, 23.53.13.45, 23.53.13.48, 23.53.13.49, 23.53.13.50, 23.53.13.53, 23.53.127.0/24, 23.64.115.204, 23.64.115.216, 23.64.115.218, 23.103.230.0/24, 23.192.229.165, 23.192.229.176, 23.205.108.0/23, 23.205.110.0/24, 23.205.249.133, 23.205.249.145, 23.205.249.157, 23.211.127.5, 23.211.127.7, 23.211.127.9, 23.211.127.10, 23.211.127.14, 23.211.127.17, 23.211.127.21, 23.211.127.22, 23.211.127.23, 23.211.127.25, 23.211.127.26, 23.211.127.27, 23.211.127.30, 23.211.127.36, 23.211.127.37, 23.211.127.41, 23.212.185.0/24, 23.213.26.0/24, 23.219.87.0/24, 23.220.102.0/24, 23.220.103.0/24, 23.220.160.0/22, 23.221.220.14, 23.221.220.19, 23.221.220.27, 23.221.220.28, 23.221.220.32, 23.221.220.34, 34.206.34.220, 34.232.112.0/21, 37.27.138.133, 40.89.0.0/16, 40.96.0.0/12, 40.112.243.53, 40.126.0.0/16, 44.208.238.19, 45.79.42.117, 51.116.246.0/24, 52.21.69.248, 52.96.22.178, 52.96.55.242, 52.96.57.34, 52.96.57.50, 52.96.57.66, 52.96.57.82, 52.96.57.98, 52.96.57.114, 52.96.90.18, 52.96.91.34, 52.96.91.66, 52.96.103.2, 52.96.103.18, 52.96.111.82, 52.96.121.114, 52.96.121.130, 52.96.121.162, 52.96.121.194, 52.96.121.242, 52.96.172.98, 52.96.191.98, 52.96.191.114, 52.96.214.50, 52.96.222.194, 52.96.222.226, 52.96.223.2, 52.96.228.130, 52.96.229.242, 52.100.0.0/14, 52.112.0.0/14, 52.120.0.0/14, 52.168.0.0/16, 52.190.34.108, 54.146.120.20, 54.156.51.63, 54.160.170.29, 54.234.239.85, 56.136.61.153, 56.137.165.138, 57.144.204.1, 57.144.204.141, 57.144.252.1, 57.144.252.128, 57.144.252.141, 57.144.252.144, 57.144.252.145, 57.144.252.155, 63.241.42.55, 63.241.42.57, 64.236.45.197, 66.33.60.129, 71.18.162.0/24, 74.125.0.0/16, 76.76.21.22, 79.127.140.135, 79.127.140.193, 79.127.140.194, 89.187.164.28, 89.187.164.30, 89.187.164.51, 89.187.164.52, 89.187.164.59, 89.222.127.1, 89.222.127.2, 89.222.127.3, 89.222.127.4, 89.222.127.5, 89.222.127.6, 89.222.127.7, 89.222.127.8, 89.222.127.9, 89.222.127.10, 89.222.127.11, 89.222.127.12, 89.222.127.13, 89.222.127.14, 89.222.127.15, 92.38.145.145, 92.223.97.97, 104.16.0.0/12, 104.71.143.0/24, 104.76.210.149, 104.76.210.156, 107.21.57.231, 127.0.0.1, 130.35.51.0/24, 130.35.100.0/24, 130.35.104.0/24, 130.35.144.0/24, 130.35.145.0/24, 130.35.231.0/24, 131.186.13.0/24, 140.82.112.0/20, 142.250.0.0/15, 146.75.0.0/16, 150.171.110.1, 150.171.110.2, 150.171.110.6, 151.101.1.229, 151.101.3.0/24, 151.101.65.229, 151.101.67.0/24, 151.101.129.229, 151.101.131.0/24, 151.101.193.229, 151.101.195.0/24, 151.207.0.0/16, 156.146.38.20, 156.146.38.21, 156.146.38.38, 156.146.38.39, 156.146.38.41, 156.146.38.42, 156.146.38.44, 156.146.38.45, 156.146.38.50, 156.146.38.51, 156.146.38.54, 156.146.38.55, 162.140.14.82, 162.159.140.245, 172.64.0.0/13, 172.217.0.0/16, 172.253.135.84, 172.253.135.99, 172.253.135.100, 172.253.135.101, 172.253.135.102, 172.253.135.103, 172.253.135.104, 172.253.135.105, 172.253.135.106, 172.253.135.113, 172.253.135.138, 172.253.135.139, 172.253.135.147, 173.194.208.94, 173.194.208.95, 173.194.208.99, 173.194.208.100, 173.194.208.101, 173.194.208.102, 173.194.208.103, 173.194.208.104, 173.194.208.105, 173.194.208.106, 173.194.208.113, 173.194.208.138, 173.194.208.139, 173.194.208.147, 184.51.42.0/24, 185.199.108.0/22, 188.40.99.226, 192.178.220.84, 192.178.220.95, 192.178.220.100, 192.178.220.101, 192.178.220.102, 192.178.220.113, 192.178.220.138, 192.178.220.139, 198.49.23.144, 198.49.23.145, 198.185.159.144, 198.185.159.145, 198.202.211.1, 199.107.17.105, 202.61.206.6, 204.44.195.48, 204.79.197.212, 208.113.189.192, 216.239.32.29} }

set allowed_temp_web_v6 { type ipv6_addr flags interval }

SERVICE: chatgpt DOMAIN: ab.chatgpt.com -> 104.18.32.47 -> 172.64.155.209 DOMAIN: api.openai.com -> 162.159.140.245 -> 172.66.0.243 DOMAIN: auth.openai.com -> 104.18.41.241 -> 172.64.146.15 DOMAIN: auth0.openai.com -> 172.65.90.20 -> 172.65.90.21 -> 172.65.90.22 -> 172.65.90.23 DOMAIN: cdn.openai.com -> 150.171.110.2 DOMAIN: chat.openai.com -> 104.18.37.228 -> 172.64.150.28 DOMAIN: chatgpt.com -> 104.18.32.47 -> 172.64.155.209 DOMAIN: files.oaiusercontent.com -> 104.18.43.204 -> 172.64.144.52 DOMAIN: images.openai.com -> 104.18.35.200 -> 172.64.152.56 DOMAIN: ios.chat.openai.com -> 104.18.39.85 -> 172.64.148.171 DOMAIN: oaistatic.com -> 104.18.41.158 -> 172.64.146.98 DOMAIN: openai.com -> 104.18.33.45 -> 172.64.154.211 DOMAIN: status.openai.com -> 66.33.60.129 -> 76.76.21.22 DOMAIN: ws.chatgpt.com -> 104.18.39.21 -> 172.64.148.235 SERVICE: chatgpt_extension DOMAIN: ab.chatgpt.com -> 104.18.32.47 -> 172.64.155.209 DOMAIN: api.openai.com -> 162.159.140.245 -> 172.66.0.243 DOMAIN: auth.openai.com -> 104.18.41.241 -> 172.64.146.15 DOMAIN: auth0.openai.com -> 172.65.90.20 -> 172.65.90.21 -> 172.65.90.22 -> 172.65.90.23 DOMAIN: cdn.openai.com -> 150.171.110.6 DOMAIN: chatgpt.com -> 104.18.32.47 -> 172.64.155.209 DOMAIN: clients2.google.com -> 142.250.115.100 -> 142.250.115.101 -> 142.250.115.102 -> 142.250.115.113 -> 142.250.115.138 -> 142.250.115.139 DOMAIN: clients2.googleusercontent.com -> 142.250.115.132 DOMAIN: files.oaiusercontent.com -> 104.18.43.204 -> 172.64.144.52 DOMAIN: images.openai.com -> 104.18.35.200 -> 172.64.152.56 DOMAIN: oaistatic.com -> 104.18.41.158 -> 172.64.146.98 DOMAIN: openai.com -> 104.18.33.45 -> 172.64.154.211 DOMAIN: ssl.gstatic.com -> 173.194.208.94 DOMAIN: update.googleapis.com -> 142.250.26.100 -> 142.250.26.101 -> 142.250.26.102 -> 142.250.26.113 -> 142.250.26.138 -> 142.250.26.139 DOMAIN: ws.chatgpt.com -> 104.18.39.21 -> 172.64.148.235 DOMAIN: www.gstatic.com -> 142.251.116.94 SERVICE: chrome_web_store DOMAIN: accounts.google.com -> 172.253.135.84 DOMAIN: chromewebstore.google.com -> 142.250.113.100 -> 142.250.113.101 -> 142.250.113.102 -> 142.250.113.113 -> 142.250.113.138 -> 142.250.113.139 DOMAIN: chromewebstore.googleapis.com -> 172.217.112.4 -> 172.217.113.4 -> 172.217.114.4 -> 172.217.115.4 -> 172.217.116.4 -> 172.217.117.4 -> 172.217.118.4 -> 172.217.119.4 DOMAIN: clients2.google.com -> 142.250.115.100 -> 142.250.115.101 -> 142.250.115.102 -> 142.250.115.113 -> 142.250.115.138 -> 142.250.115.139 DOMAIN: clients2.googleusercontent.com -> 142.250.115.132 DOMAIN: clientservices.googleapis.com -> 142.251.186.100 -> 142.251.186.101 -> 142.251.186.102 -> 142.251.186.113 -> 142.251.186.138 -> 142.251.186.139 DOMAIN: gstatic.com -> 142.251.116.120 -> 142.251.116.94 DOMAIN: lh3.ggpht.com -> 142.250.115.132 DOMAIN: lh3.googleusercontent.com -> 142.250.115.132 DOMAIN: ssl.gstatic.com -> 173.194.208.94 DOMAIN: update.googleapis.com -> 142.250.26.100 -> 142.250.26.101 -> 142.250.26.102 -> 142.250.26.113 -> 142.250.26.138 -> 142.250.26.139 DOMAIN: www.gstatic.com -> 142.251.116.94 SERVICE: core_admin DOMAIN: check1two.com -> 204.44.195.48 DOMAIN: ipdns.us -> 45.79.42.117 SERVICE: duckduckgo DOMAIN: duckduckgo.com -> 40.89.244.232 DOMAIN: html.duckduckgo.com -> 40.89.244.232 DOMAIN: icons.duckduckgo.com -> 40.89.244.234 DOMAIN: links.duckduckgo.com -> 64.236.45.197 DOMAIN: lite.duckduckgo.com -> 40.89.244.232 DOMAIN: www.duckduckgo.com -> 40.89.244.232 SERVICE: gemini DOMAIN: accounts.google.com -> 172.253.135.84 -> 192.178.220.84 DOMAIN: aistudio.google.com -> 142.251.116.100 -> 142.251.116.101 -> 142.251.116.102 -> 142.251.116.113 -> 142.251.116.138 -> 142.251.116.139 DOMAIN: apis.google.com -> 142.250.113.100 -> 142.250.113.101 -> 142.250.113.102 -> 142.250.113.113 -> 142.250.113.138 -> 142.250.113.139 DOMAIN: binary-pa.clients6.google.com -> 142.251.116.95 -> 173.194.208.95 DOMAIN: bp.googleusercontent.com -> 142.250.115.132 DOMAIN: canary-pa.clients6.google.com -> 142.250.113.95 -> 142.250.26.95 DOMAIN: cdnjs.cloudflare.com -> 104.17.24.14 -> 104.17.25.14 DOMAIN: chat-pa.clients6.google.com -> 142.250.113.95 -> 142.251.186.95 DOMAIN: clients6.google.com -> 142.250.115.100 -> 142.250.115.101 -> 142.250.115.102 -> 142.250.115.113 -> 142.250.115.138 -> 142.250.115.139 DOMAIN: content-autofill.googleapis.com -> 172.217.112.4 -> 172.217.113.4 -> 172.217.114.4 -> 172.217.115.4 -> 172.217.116.4 -> 172.217.117.4 -> 172.217.118.4 -> 172.217.119.4 DOMAIN: content-push.googleapis.com -> 172.217.112.4 -> 172.217.113.4 -> 172.217.114.4 -> 172.217.115.4 -> 172.217.116.4 -> 172.217.117.4 -> 172.217.118.4 -> 172.217.119.4 DOMAIN: docs.google.com -> 142.251.186.100 -> 142.251.186.101 -> 142.251.186.102 -> 142.251.186.113 -> 142.251.186.138 -> 142.251.186.139 DOMAIN: drive.google.com -> 172.253.135.100 -> 172.253.135.101 -> 172.253.135.102 -> 172.253.135.113 -> 172.253.135.138 -> 172.253.135.139 -> 192.178.220.100 -> 192.178.220.101 -> 192.178.220.102 -> 192.178.220.113 -> 192.178.220.138 -> 192.178.220.139 DOMAIN: feedback-pa.clients6.google.com -> 142.250.26.95 -> 173.194.208.95 DOMAIN: fonts.gstatic.com -> 142.251.186.94 DOMAIN: gemini.google.com -> 142.251.150.2 -> 142.251.151.2 -> 142.251.152.2 -> 142.251.153.2 -> 142.251.154.2 -> 142.251.155.2 -> 142.251.156.2 -> 142.251.157.2 DOMAIN: gemini.gstatic.com -> 142.251.150.2 -> 142.251.151.2 -> 142.251.152.2 -> 142.251.153.2 -> 142.251.154.2 -> 142.251.155.2 -> 142.251.156.2 -> 142.251.157.2 DOMAIN: generativelanguage.googleapis.com -> 172.217.112.4 -> 172.217.113.4 -> 172.217.114.4 -> 172.217.115.4 -> 172.217.116.4 -> 172.217.117.4 -> 172.217.118.4 -> 172.217.119.4 DOMAIN: gg.googleusercontent.com -> 142.250.115.132 DOMAIN: googleapis.com -> 172.253.135.103 -> 172.253.135.104 -> 172.253.135.105 -> 172.253.135.106 -> 172.253.135.147 -> 172.253.135.99 -> 173.194.208.103 -> 173.194.208.104 -> 173.194.208.105 -> 173.194.208.106 -> 173.194.208.147 -> 173.194.208.99 DOMAIN: googleusercontent.com -> 142.250.138.132 DOMAIN: gstatic.com -> 142.251.116.120 -> 142.251.116.94 DOMAIN: lh3.googleusercontent.com -> 142.250.115.132 DOMAIN: lh4.googleusercontent.com -> 142.250.115.132 DOMAIN: lh5.googleusercontent.com -> 142.250.115.132 DOMAIN: lh6.googleusercontent.com -> 142.250.115.132 DOMAIN: mail.google.com -> 142.251.116.17 -> 142.251.116.18 -> 142.251.116.19 -> 142.251.116.83 DOMAIN: ogs.google.com -> 172.253.135.100 -> 172.253.135.101 -> 172.253.135.102 -> 172.253.135.113 -> 172.253.135.138 -> 172.253.135.139 -> 173.194.208.100 -> 173.194.208.101 -> 173.194.208.102 -> 173.194.208.113 -> 173.194.208.138 -> 173.194.208.139 DOMAIN: peoplestack-pa.clients6.google.com -> 142.250.113.95 -> 142.250.26.95 DOMAIN: pki.goog -> 216.239.32.29 DOMAIN: play.google.com -> 172.253.135.100 -> 172.253.135.101 -> 172.253.135.102 -> 172.253.135.113 -> 172.253.135.138 -> 172.253.135.139 -> 192.178.220.100 -> 192.178.220.101 -> 192.178.220.102 -> 192.178.220.113 -> 192.178.220.138 -> 192.178.220.139 DOMAIN: proactive-pa.clients6.google.com -> 142.250.114.95 -> 142.251.186.95 DOMAIN: redirector.gvt1.com -> 142.250.138.100 -> 142.250.138.101 -> 142.250.138.102 -> 142.250.138.113 -> 142.250.138.138 -> 142.250.138.139 -> 142.251.186.100 -> 142.251.186.101 -> 142.251.186.102 -> 142.251.186.113 -> 142.251.186.138 -> 142.251.186.139 DOMAIN: scone-pa.clients6.google.com -> 142.251.116.95 -> 173.194.208.95 DOMAIN: signaler-pa.clients6.google.com -> 142.250.115.95 -> 142.251.116.95 DOMAIN: ssl.gstatic.com -> 173.194.208.94 DOMAIN: update.googleapis.com -> 142.250.26.100 -> 142.250.26.101 -> 142.250.26.102 -> 142.250.26.113 -> 142.250.26.138 -> 142.250.26.139 DOMAIN: waa-pa.clients6.google.com -> 172.217.72.95 DOMAIN: workspace.google.com -> 142.251.186.100 -> 142.251.186.101 -> 142.251.186.102 -> 142.251.186.113 -> 142.251.186.138 -> 142.251.186.139 DOMAIN: www.gstatic.com -> 142.251.116.94 SERVICE: github DOMAIN: [cidr] -> 140.82.112.0/20 -> 146.75.0.0/16 -> 185.199.108.0/22 DOMAIN: api.github.com -> 140.82.114.5 DOMAIN: codeload.github.com -> 140.82.113.9 DOMAIN: github.com -> 140.82.112.3 DOMAIN: github.githubassets.com -> 185.199.108.215 -> 185.199.109.215 -> 185.199.110.215 -> 185.199.111.215 DOMAIN: objects.githubusercontent.com -> 185.199.108.133 -> 185.199.109.133 -> 185.199.110.133 -> 185.199.111.133 DOMAIN: raw.githubusercontent.com -> 185.199.108.133 -> 185.199.109.133 -> 185.199.110.133 -> 185.199.111.133 DOMAIN: www.github.com -> 140.82.112.3 SERVICE: google_meet DOMAIN: [cidr] -> 142.250.0.0/15 -> 172.217.0.0/16 -> 74.125.0.0/16 DOMAIN: accounts.google.com -> 192.178.220.84 DOMAIN: apis.google.com -> 142.250.113.100 -> 142.250.113.101 -> 142.250.113.102 -> 142.250.113.113 -> 142.250.113.138 -> 142.250.113.139 DOMAIN: clients4.google.com -> 142.250.115.100 -> 142.250.115.101 -> 142.250.115.102 -> 142.250.115.113 -> 142.250.115.138 -> 142.250.115.139 DOMAIN: clients6.google.com -> 142.250.115.100 -> 142.250.115.101 -> 142.250.115.102 -> 142.250.115.113 -> 142.250.115.138 -> 142.250.115.139 DOMAIN: contacts.google.com -> 142.250.113.100 -> 142.250.113.101 -> 142.250.113.102 -> 142.250.113.113 -> 142.250.113.138 -> 142.250.113.139 DOMAIN: fonts.googleapis.com -> 142.250.113.95 DOMAIN: fonts.gstatic.com -> 142.251.186.94 DOMAIN: hangouts.google.com -> 173.194.208.100 -> 173.194.208.101 -> 173.194.208.102 -> 173.194.208.113 -> 173.194.208.138 -> 173.194.208.139 DOMAIN: lh3.googleusercontent.com -> 142.250.115.132 DOMAIN: meet.google.com -> 173.194.208.100 -> 173.194.208.101 -> 173.194.208.102 -> 173.194.208.113 -> 173.194.208.138 -> 173.194.208.139 DOMAIN: meetings.googleapis.com -> 172.217.112.4 -> 172.217.113.4 -> 172.217.114.4 -> 172.217.115.4 -> 172.217.116.4 -> 172.217.117.4 -> 172.217.118.4 -> 172.217.119.4 DOMAIN: notifications.google.com -> 142.250.113.100 -> 142.250.113.101 -> 142.250.113.102 -> 142.250.113.113 -> 142.250.113.138 -> 142.250.113.139 DOMAIN: oauth2.googleapis.com -> 192.178.220.95 DOMAIN: people-pa.googleapis.com -> 172.217.112.4 -> 172.217.113.4 -> 172.217.114.4 -> 172.217.115.4 -> 172.217.116.4 -> 172.217.117.4 -> 172.217.118.4 -> 172.217.119.4 DOMAIN: ssl.gstatic.com -> 173.194.208.94 DOMAIN: stun.l.google.com -> 74.125.250.129 DOMAIN: stun1.l.google.com -> 74.125.250.129 DOMAIN: stun2.l.google.com -> 74.125.250.129 DOMAIN: stun3.l.google.com -> 74.125.250.129 DOMAIN: stun4.l.google.com -> 74.125.250.129 DOMAIN: www.gstatic.com -> 142.251.116.94 SERVICE: govinfo DOMAIN: api.govinfo.gov -> 56.136.61.153 -> 56.137.165.138 DOMAIN: govinfo.gov -> 104.17.119.181 -> 104.17.120.181 DOMAIN: gpo.gov -> 162.140.14.82 DOMAIN: www.govinfo.gov -> 104.17.119.181 -> 104.17.120.181 DOMAIN: www.gpo.gov -> 104.17.20.2 -> 104.17.21.2 SERVICE: html5_test DOMAIN: ajax.googleapis.com -> 142.250.115.95 DOMAIN: cdn.jsdelivr.net -> 151.101.1.229 -> 151.101.129.229 -> 151.101.193.229 -> 151.101.65.229 DOMAIN: cdnjs.cloudflare.com -> 104.17.24.14 -> 104.17.25.14 DOMAIN: fonts.googleapis.com -> 142.250.114.95 DOMAIN: fonts.gstatic.com -> 142.250.113.94 DOMAIN: ii.com -> 208.113.189.192 DOMAIN: www.ii.com -> 208.113.189.192 SERVICE: linode DOMAIN: api.linode.com -> 23.205.249.133 -> 23.205.249.145 DOMAIN: app.launchdarkly.com -> 146.75.105.55 DOMAIN: assets.linode.com -> 23.205.249.133 -> 23.205.249.145 DOMAIN: cloud.linode.com -> 23.64.115.204 -> 23.64.115.218 DOMAIN: cloud.linode.com.edgekey.net -> 23.64.115.204 -> 23.64.115.218 DOMAIN: content.linode.com -> 23.205.249.133 -> 23.205.249.145 DOMAIN: events.launchdarkly.com -> 107.21.57.231 -> 18.209.243.58 -> 34.206.34.220 -> 52.21.69.248 -> 54.146.120.20 -> 54.156.51.63 -> 54.160.170.29 -> 54.234.239.85 DOMAIN: linode.com -> 23.205.249.133 -> 23.205.249.145 DOMAIN: linode.com.edgekey.net -> 23.205.249.133 -> 23.205.249.145 DOMAIN: login.linode.com -> 23.205.249.133 -> 23.205.249.145 DOMAIN: www.linode.com -> 23.205.249.133 -> 23.205.249.145 SERVICE: manual DOMAIN: cloud.gov -> 3.169.221.20 -> 3.169.221.39 -> 3.169.221.53 -> 3.169.221.6 SERVICE: maven DOMAIN: oss.sonatype.org -> 18.160.172.113 -> 18.160.172.114 -> 18.160.172.45 -> 18.160.172.96 DOMAIN: plugins.gradle.org -> 104.16.72.101 -> 104.16.73.101 DOMAIN: repo.maven.apache.org -> 104.18.18.12 -> 104.18.19.12 DOMAIN: repo1.maven.org -> 104.18.18.12 -> 104.18.19.12 DOMAIN: repository.apache.org -> 37.27.138.133 DOMAIN: s01.oss.sonatype.org -> 18.160.172.113 -> 18.160.172.114 -> 18.160.172.45 -> 18.160.172.96 DOMAIN: search.maven.org -> 18.160.156.108 -> 18.160.156.115 -> 18.160.156.117 -> 18.160.156.78 SERVICE: media_assets DOMAIN: [cidr] -> 104.16.0.0/12 -> 146.75.0.0/16 -> 172.64.0.0/13 DOMAIN: cdn.pixabay.com -> 104.18.40.96 -> 172.64.147.160 DOMAIN: pixabay.com -> 104.18.40.96 -> 172.64.147.160 SERVICE: messenger DOMAIN: chat-e2ee.c10r.facebook.com -> 57.144.252.155 DOMAIN: dgw.c10r.facebook.com -> 57.144.252.145 DOMAIN: edge-mqtt.facebook.com -> 57.144.252.144 DOMAIN: graph.facebook.com -> 57.144.252.141 DOMAIN: login.facebook.com -> 57.144.252.141 DOMAIN: lookaside.fbsbx.com -> 57.144.252.128 DOMAIN: m.facebook.com -> 57.144.252.1 DOMAIN: messenger.com -> 57.144.252.141 DOMAIN: scontent.xx.fbcdn.net -> 57.144.252.128 DOMAIN: star-mini.c10r.facebook.com -> 57.144.252.1 DOMAIN: star-mini.fallback.c10r.facebook.com -> 57.144.204.1 DOMAIN: star.c10r.facebook.com -> 57.144.252.141 DOMAIN: star.fallback.c10r.facebook.com -> 57.144.204.141 DOMAIN: static.xx.fbcdn.net -> 57.144.252.128 DOMAIN: www.facebook.com -> 57.144.252.1 SERVICE: navy_federal DOMAIN: api.navyfederal.org -> 52.190.34.108 DOMAIN: e232916.a.akamaiedge.net -> 23.221.220.14 -> 23.221.220.32 DOMAIN: navyfederal.org -> 23.221.220.27 -> 23.221.220.34 DOMAIN: www.navyfederal.org -> 23.221.220.14 -> 23.221.220.32 DOMAIN: www.navyfederal.org.edgekey.net -> 23.221.220.14 -> 23.221.220.32 SERVICE: outlook DOMAIN: [cidr] -> 13.107.0.0/16 -> 20.190.0.0/16 -> 20.42.73.0/24 -> 20.64.0.0/10 -> 23.103.230.0/24 -> 40.126.0.0/16 -> 40.89.0.0/16 -> 40.96.0.0/12 -> 40.99.0.0/16 -> 51.116.246.0/24 -> 52.100.0.0/14 -> 52.102.96.0/20 -> 52.112.0.0/14 -> 52.120.0.0/14 -> 52.123.246.0/24 -> 52.168.0.0/16 -> 52.96.0.0/12 DOMAIN: aadcdn.msauth.net -> 13.107.246.57 DOMAIN: aadcdn.msftauth.net -> 23.192.229.165 -> 23.192.229.176 DOMAIN: account.live.com -> 20.190.135.17 -> 20.190.135.18 -> 20.190.135.19 -> 20.190.135.3 -> 40.126.28.11 -> 40.126.28.13 -> 40.126.28.18 -> 40.126.28.21 DOMAIN: attachments.office.net -> 52.96.121.114 -> 52.96.121.162 -> 52.96.55.242 -> 52.96.91.66 DOMAIN: graph.microsoft.com -> 20.190.157.160 -> 20.190.157.96 -> 20.190.157.97 -> 20.190.157.98 -> 40.126.29.96 -> 40.126.29.99 DOMAIN: live.com -> 204.79.197.212 DOMAIN: login.live.com -> 20.190.157.11 -> 20.190.157.14 -> 20.190.157.4 -> 40.126.29.10 -> 40.126.29.12 -> 40.126.29.7 -> 40.126.29.9 DOMAIN: login.microsoftonline.com -> 20.190.135.16 -> 20.190.135.18 -> 20.190.135.3 -> 40.126.28.11 -> 40.126.28.14 -> 40.126.28.21 -> 40.126.28.23 -> 40.126.7.32 DOMAIN: login.mso.msidentity.com -> 20.190.135.16 -> 20.190.135.18 -> 20.190.135.3 -> 40.126.28.11 -> 40.126.28.14 -> 40.126.28.21 -> 40.126.28.23 -> 40.126.7.32 DOMAIN: loki.delve.office.com -> 23.103.230.16 -> 23.103.230.24 -> 23.103.230.27 -> 23.103.230.30 -> 23.103.230.31 -> 23.103.230.37 -> 23.103.230.40 -> 23.103.230.57 DOMAIN: microsoft.com -> 150.171.110.1 DOMAIN: na01.safelinks.protection.outlook.com -> 52.102.102.16 -> 52.102.102.23 -> 52.102.102.25 -> 52.102.102.51 DOMAIN: office.com -> 13.107.6.156 DOMAIN: office365.com -> 20.119.0.28 -> 40.112.243.53 DOMAIN: outlook-sdf.office.com -> 40.97.22.19 -> 40.99.168.210 DOMAIN: outlook.com -> 52.96.111.82 -> 52.96.172.98 -> 52.96.214.50 -> 52.96.222.194 -> 52.96.222.226 -> 52.96.223.2 -> 52.96.228.130 -> 52.96.229.242 -> 52.96.91.34 DOMAIN: outlook.live.com -> 40.99.168.226 -> 52.96.103.18 -> 52.96.103.2 -> 52.96.121.194 -> 52.96.191.98 -> 52.96.55.242 -> 52.96.57.114 -> 52.96.57.82 DOMAIN: outlook.office.com -> 52.96.121.114 -> 52.96.121.194 -> 52.96.191.114 -> 52.96.191.98 -> 52.96.22.178 -> 52.96.57.66 -> 52.96.90.18 -> 52.96.91.66 DOMAIN: outlook.office365.com -> 40.99.169.130 -> 40.99.169.146 -> 52.96.103.2 -> 52.96.121.162 -> 52.96.55.242 -> 52.96.57.82 -> 52.96.57.98 -> 52.96.90.18 DOMAIN: res-1.cdn.office.net -> 23.34.82.12 -> 23.34.82.22 DOMAIN: res.cdn.office.net -> 23.34.82.12 -> 23.34.82.22 DOMAIN: res.public.onecdn.static.microsoft -> 23.34.82.10 -> 23.34.82.12 DOMAIN: statics.teams.cdn.office.net -> 23.34.82.10 -> 23.34.82.26 DOMAIN: storage.live.com -> 20.135.6.15 DOMAIN: substrate.office.com -> 40.99.245.34 -> 40.99.245.82 -> 52.96.121.114 -> 52.96.121.130 -> 52.96.121.242 -> 52.96.57.34 -> 52.96.57.50 -> 52.96.57.66 SERVICE: pacer DOMAIN: pacer.login.uscourts.gov -> 63.241.42.57 DOMAIN: pacer.uscourts.gov -> 199.107.17.105 DOMAIN: pcl.uscourts.gov -> 63.241.42.55 SERVICE: scotus DOMAIN: supremecourt.gov -> 23.211.127.21 -> 23.211.127.41 DOMAIN: www.supremecourt.gov -> 23.64.115.204 -> 23.64.115.216 SERVICE: tiktok DOMAIN: [cidr] -> 104.71.143.0/24 -> 130.35.100.0/24 -> 130.35.104.0/24 -> 130.35.144.0/24 -> 130.35.145.0/24 -> 130.35.231.0/24 -> 130.35.51.0/24 -> 131.186.13.0/24 -> 146.75.0.0/16 -> 151.101.131.0/24 -> 151.101.195.0/24 -> 151.101.3.0/24 -> 151.101.67.0/24 -> 184.51.42.0/24 -> 2.20.178.0/24 -> 23.11.231.0/24 -> 23.205.108.0/23 -> 23.205.110.0/24 -> 23.205.249.157/32 -> 23.212.185.0/24 -> 23.213.26.0/24 -> 23.219.87.0/24 -> 23.220.102.0/24 -> 23.220.103.0/24 -> 23.220.160.0/22 -> 23.48.246.0/24 -> 23.53.127.0/24 -> 71.18.162.0/24 DOMAIN: lf16-cdn-tos.tiktokcdn-us.com -> 23.213.26.14 -> 23.213.26.8 -> 23.48.246.101 -> 23.48.246.104 -> 23.48.246.109 -> 23.48.246.133 -> 23.48.246.139 -> 23.48.246.197 -> 23.48.246.230 -> 23.48.246.237 DOMAIN: lf16-tiktok-web.tiktokcdn-us.com -> 23.213.26.10 -> 23.213.26.14 -> 23.213.26.17 -> 23.213.26.5 -> 23.213.26.6 -> 23.213.26.8 -> 23.48.246.101 -> 23.48.246.104 -> 23.48.246.106 -> 23.48.246.107 -> 23.48.246.110 -> 23.48.246.133 -> 23.48.246.137 -> 23.48.246.139 -> 23.48.246.197 -> 23.48.246.198 -> 23.48.246.230 -> 23.48.246.237 DOMAIN: tiktok.com -> 23.221.220.19 -> 23.221.220.28 DOMAIN: tiktokv.com -> 23.211.127.10 -> 23.211.127.14 -> 23.211.127.17 -> 23.211.127.21 -> 23.211.127.22 -> 23.211.127.23 -> 23.211.127.25 -> 23.211.127.26 -> 23.211.127.27 -> 23.211.127.30 -> 23.211.127.36 -> 23.211.127.37 -> 23.211.127.5 -> 23.211.127.7 -> 23.211.127.9 DOMAIN: www.tiktok.com -> 23.220.102.134 -> 23.220.102.137 -> 23.220.102.138 -> 23.220.102.139 -> 23.220.102.141 -> 23.220.102.142 -> 23.220.102.144 -> 23.220.102.150 -> 23.220.102.153 -> 23.220.162.133 -> 23.220.162.135 -> 23.220.162.137 -> 23.220.162.141 -> 23.220.162.145 -> 23.220.162.148 -> 23.220.162.152 -> 23.220.162.154 -> 23.220.162.155 SERVICE: together DOMAIN: api.together.ai -> 104.18.37.81 -> 172.64.150.175 DOMAIN: api.together.xyz -> 104.18.43.158 -> 172.64.144.98 DOMAIN: auth.together.ai -> 104.18.43.182 -> 172.64.144.74 DOMAIN: together.ai -> 198.202.211.1 DOMAIN: together.xyz -> 198.185.159.144 -> 198.185.159.145 -> 198.49.23.144 -> 198.49.23.145 DOMAIN: www.together.ai -> 198.202.211.1 DOMAIN: www.together.xyz -> 198.185.159.144 -> 198.185.159.145 -> 198.49.23.144 -> 198.49.23.145 SERVICE: uspto DOMAIN: [cidr] -> 13.32.104.0/24 -> 151.207.0.0/16 -> 18.160.172.0/24 -> 34.232.112.0/21 DOMAIN: account.uspto.gov -> 13.32.104.115 -> 13.32.104.123 -> 13.32.104.34 -> 13.32.104.64 DOMAIN: my.uspto.gov -> 13.32.104.115 -> 13.32.104.123 -> 13.32.104.34 -> 13.32.104.64 DOMAIN: ppubs.uspto.gov -> 34.232.112.149 -> 44.208.238.19 DOMAIN: ptacts.uspto.gov -> 151.207.245.151 DOMAIN: uspto.gov -> 104.18.35.192 -> 172.64.152.64 DOMAIN: www.uspto.gov -> 18.160.172.101 -> 18.160.172.40 -> 18.160.172.57 -> 18.160.172.9 SERVICE: w3c_media DOMAIN: media.w3.org -> 104.18.22.19 -> 104.18.23.19 SERVICE: weather DOMAIN: api.open-meteo.com -> 188.40.99.226 DOMAIN: api.weather.gov -> 104.76.210.149 -> 104.76.210.156 DOMAIN: geocoding-api.open-meteo.com -> 202.61.206.6 SERVICE: xvideos DOMAIN: amp.xvideos.com -> 89.222.127.1 -> 89.222.127.10 -> 89.222.127.11 -> 89.222.127.12 -> 89.222.127.13 -> 89.222.127.14 -> 89.222.127.15 -> 89.222.127.2 -> 89.222.127.3 -> 89.222.127.4 -> 89.222.127.5 -> 89.222.127.6 -> 89.222.127.7 -> 89.222.127.8 -> 89.222.127.9 DOMAIN: assets-cdn77.xvideos-cdn.com -> 156.146.38.21 -> 156.146.38.39 -> 156.146.38.42 -> 156.146.38.45 -> 156.146.38.50 -> 156.146.38.54 -> 89.187.164.30 -> 89.187.164.59 DOMAIN: assets-o7.xvideos-cdn.com -> 79.127.140.135 -> 79.127.140.193 -> 79.127.140.194 DOMAIN: gcdn.co -> 92.223.97.97 DOMAIN: gcorelabs.com -> 92.38.145.145 DOMAIN: hls-cdn77.xvideos-cdn.com -> 156.146.38.21 -> 156.146.38.38 -> 156.146.38.42 -> 156.146.38.45 -> 156.146.38.50 -> 156.146.38.54 -> 89.187.164.30 -> 89.187.164.52 DOMAIN: mmcdn.com -> 104.16.92.18 -> 104.18.202.4 DOMAIN: stream-production.avcdn.net -> 23.53.13.34 -> 23.53.13.36 -> 23.53.13.38 -> 23.53.13.43 -> 23.53.13.45 -> 23.53.13.48 -> 23.53.13.49 -> 23.53.13.50 -> 23.53.13.53 DOMAIN: thumb-cdn77.xvideos-cdn.com -> 156.146.38.20 -> 156.146.38.38 -> 156.146.38.41 -> 156.146.38.44 -> 156.146.38.51 -> 156.146.38.55 -> 89.187.164.28 -> 89.187.164.51 DOMAIN: thumb.live.mmcdn.com -> 104.17.37.193 -> 104.17.38.193 DOMAIN: thumbs-gcore.xvideos-cdn.com -> 92.38.145.145 DOMAIN: www.xvideos.com -> 89.222.127.1 -> 89.222.127.10 -> 89.222.127.11 -> 89.222.127.12 -> 89.222.127.13 -> 89.222.127.14 -> 89.222.127.15 -> 89.222.127.2 -> 89.222.127.3 -> 89.222.127.4 -> 89.222.127.5 -> 89.222.127.6 -> 89.222.127.7 -> 89.222.127.8 -> 89.222.127.9 DOMAIN: xvideos-cdn.com -> 127.0.0.1 DOMAIN: xvideos.com -> 89.222.127.1 -> 89.222.127.10 -> 89.222.127.11 -> 89.222.127.12 -> 89.222.127.13 -> 89.222.127.14 -> 89.222.127.15 -> 89.222.127.2 -> 89.222.127.3 -> 89.222.127.4 -> 89.222.127.5 -> 89.222.127.6 -> 89.222.127.7 -> 89.222.127.8 -> 89.222.127.9

table inet zt { set allowed_dns_v4 { type ipv4_addr elements = { 1.1.1.1, 8.8.8.8, 8.8.4.4, 1.0.0.1} } set allowed_web_v4 { type ipv4_addr flags interval elements = { 45.79.42.117, 204.44.195.48} } set allowed_dns_v6 { type ipv6_addr elements = { 2001:4860:4860::8844, 2001:4860:4860::8888, 2606:4700:4700::1001, 2606:4700:4700::1111} } set allowed_web_v6 { type ipv6_addr elements = { 2600:3c00::2000:d9ff:fefb:2cca} } set allowed_temp_web_v4 { type ipv4_addr flags interval elements = { 2.20.178.0/24, 3.169.221.6, 3.169.221.20, 3.169.221.39, 3.169.221.53, 13.32.104.0/24, 13.107.0.0/16, 18.160.156.78, 18.160.156.108, 18.160.156.115, 18.160.156.117, 18.160.172.0/24, 18.209.243.58, 20.42.73.0/24, 20.119.0.28, 20.135.6.15, 20.190.0.0/16, 23.11.231.0/24, 23.34.82.10, 23.34.82.12, 23.34.82.22, 23.34.82.26, 23.48.246.0/24, 23.53.13.34, 23.53.13.36, 23.53.13.38, 23.53.13.43, 23.53.13.45, 23.53.13.48, 23.53.13.49, 23.53.13.50, 23.53.13.53, 23.53.127.0/24, 23.64.115.204, 23.64.115.216, 23.64.115.218, 23.103.230.0/24, 23.192.229.165, 23.192.229.176, 23.205.108.0/23, 23.205.110.0/24, 23.205.249.133, 23.205.249.145, 23.205.249.157, 23.211.127.5, 23.211.127.7, 23.211.127.9, 23.211.127.10, 23.211.127.14, 23.211.127.17, 23.211.127.21, 23.211.127.22, 23.211.127.23, 23.211.127.25, 23.211.127.26, 23.211.127.27, 23.211.127.30, 23.211.127.36, 23.211.127.37, 23.211.127.41, 23.212.185.0/24, 23.213.26.0/24, 23.219.87.0/24, 23.220.102.0/24, 23.220.103.0/24, 23.220.160.0/22, 23.221.220.14, 23.221.220.19, 23.221.220.27, 23.221.220.28, 23.221.220.32, 23.221.220.34, 34.206.34.220, 34.232.112.0/21, 37.27.138.133, 40.89.0.0/16, 40.96.0.0/12, 40.112.243.53, 40.126.0.0/16, 44.208.238.19, 45.79.42.117, 51.116.246.0/24, 52.21.69.248, 52.96.22.178, 52.96.55.242, 52.96.57.34, 52.96.57.50, 52.96.57.66, 52.96.57.82, 52.96.57.98, 52.96.57.114, 52.96.90.18, 52.96.91.34, 52.96.91.66, 52.96.103.2, 52.96.103.18, 52.96.111.82, 52.96.121.114, 52.96.121.130, 52.96.121.162, 52.96.121.194, 52.96.121.242, 52.96.172.98, 52.96.191.98, 52.96.191.114, 52.96.214.50, 52.96.222.194, 52.96.222.226, 52.96.223.2, 52.96.228.130, 52.96.229.242, 52.100.0.0/14, 52.112.0.0/14, 52.120.0.0/14, 52.168.0.0/16, 52.190.34.108, 54.146.120.20, 54.156.51.63, 54.160.170.29, 54.234.239.85, 56.136.61.153, 56.137.165.138, 57.144.204.1, 57.144.204.141, 57.144.252.1, 57.144.252.128, 57.144.252.141, 57.144.252.144, 57.144.252.145, 57.144.252.155, 63.241.42.55, 63.241.42.57, 64.236.45.197, 66.33.60.129, 71.18.162.0/24, 74.125.0.0/16, 76.76.21.22, 79.127.140.135, 79.127.140.193, 79.127.140.194, 89.187.164.28, 89.187.164.30, 89.187.164.51, 89.187.164.52, 89.187.164.59, 89.222.127.1, 89.222.127.2, 89.222.127.3, 89.222.127.4, 89.222.127.5, 89.222.127.6, 89.222.127.7, 89.222.127.8, 89.222.127.9, 89.222.127.10, 89.222.127.11, 89.222.127.12, 89.222.127.13, 89.222.127.14, 89.222.127.15, 92.38.145.145, 92.223.97.97, 104.16.0.0/12, 104.71.143.0/24, 104.76.210.149, 104.76.210.156, 107.21.57.231, 127.0.0.1, 130.35.51.0/24, 130.35.100.0/24, 130.35.104.0/24, 130.35.144.0/24, 130.35.145.0/24, 130.35.231.0/24, 131.186.13.0/24, 140.82.112.0/20, 142.250.0.0/15, 146.75.0.0/16, 150.171.110.1, 150.171.110.2, 150.171.110.6, 151.101.1.229, 151.101.3.0/24, 151.101.65.229, 151.101.67.0/24, 151.101.129.229, 151.101.131.0/24, 151.101.193.229, 151.101.195.0/24, 151.207.0.0/16, 156.146.38.20, 156.146.38.21, 156.146.38.38, 156.146.38.39, 156.146.38.41, 156.146.38.42, 156.146.38.44, 156.146.38.45, 156.146.38.50, 156.146.38.51, 156.146.38.54, 156.146.38.55, 162.140.14.82, 162.159.140.245, 172.64.0.0/13, 172.217.0.0/16, 172.253.135.84, 172.253.135.99, 172.253.135.100, 172.253.135.101, 172.253.135.102, 172.253.135.103, 172.253.135.104, 172.253.135.105, 172.253.135.106, 172.253.135.113, 172.253.135.138, 172.253.135.139, 172.253.135.147, 173.194.208.94, 173.194.208.95, 173.194.208.99, 173.194.208.100, 173.194.208.101, 173.194.208.102, 173.194.208.103, 173.194.208.104, 173.194.208.105, 173.194.208.106, 173.194.208.113, 173.194.208.138, 173.194.208.139, 173.194.208.147, 184.51.42.0/24, 185.199.108.0/22, 188.40.99.226, 192.178.220.84, 192.178.220.95, 192.178.220.100, 192.178.220.101, 192.178.220.102, 192.178.220.113, 192.178.220.138, 192.178.220.139, 198.49.23.144, 198.49.23.145, 198.185.159.144, 198.185.159.145, 198.202.211.1, 199.107.17.105, 202.61.206.6, 204.44.195.48, 204.79.197.212, 208.113.189.192, 216.239.32.29} } set allowed_temp_web_v6 { type ipv6_addr flags interval } chain forward { type filter hook forward priority 0; policy drop; ct state established,related accept iifname "tun0" oifname "eth0" ip daddr @allowed_dns_v4 udp dport domain accept iifname "tun0" oifname "eth0" ip daddr @allowed_dns_v4 tcp dport domain accept iifname "tun0" oifname "eth0" ip6 daddr @allowed_dns_v6 udp dport domain accept iifname "tun0" oifname "eth0" ip6 daddr @allowed_dns_v6 tcp dport domain accept iifname "tun0" oifname "eth0" ip daddr @allowed_dns_v4 tcp dport 853 accept iifname "tun0" oifname "eth0" ip6 daddr @allowed_dns_v6 tcp dport 853 accept iifname "tun0" oifname "eth0" ip daddr @allowed_web_v4 tcp dport { http, https, 2083, mysql} accept iifname "tun0" oifname "eth0" ip6 daddr @allowed_web_v6 tcp dport { http, https} accept iifname "tun0" oifname "eth0" ip daddr @allowed_web_v4 udp dport https accept iifname "tun0" oifname "eth0" ip6 daddr @allowed_web_v6 udp dport https accept iifname "tun0" oifname "eth0" ip daddr @allowed_web_v4 icmp type echo-request accept iifname "tun0" oifname "eth0" ip6 daddr @allowed_web_v6 icmpv6 type echo-request accept iifname "tun0" oifname "eth0" ip daddr @allowed_temp_web_v4 tcp dport { http, https} accept iifname "tun0" oifname "eth0" ip6 daddr @allowed_temp_web_v6 tcp dport { http, https} accept iifname "tun0" oifname "eth0" ip daddr @allowed_temp_web_v4 udp dport https accept iifname "tun0" oifname "eth0" ip6 daddr @allowed_temp_web_v6 udp dport https accept iifname "tun0" oifname "eth0" ip daddr @allowed_temp_web_v4 udp dport ntp accept iifname "tun0" oifname "eth0" ip6 daddr @allowed_temp_web_v6 udp dport ntp accept iifname "tun0" oifname "eth0" ip daddr @allowed_temp_web_v4 icmp type echo-request accept iifname "tun0" oifname "eth0" ip6 daddr @allowed_temp_web_v6 icmpv6 type echo-request accept iifname "tun0" oifname "eth0" log prefix "ZT-DROP " flags all counter packets 553536 bytes 213811816 drop } } table ip nat { chain postrouting { type nat hook postrouting priority 100; policy accept; oifname "eth0" masquerade } }