list of rules:
# ——————————————
# GOOGLE
# v 20170224-0002
Include /etc/csf/csf.allow-google
# ——————————————
# ver. 20121221-01 # GOOGLE # http://bgp.he.net/AS15169#_prefixes # # https://apps.db.ripe.net # ############################# tcp|out|d=80|d=104.132.20.0/24 tcp|out|d=80|d=104.154.0.0/16 tcp|out|d=80|d=104.196.0.0/16 tcp|out|d=80|d=107.167.0.0/16 tcp|out|d=80|d=107.178.0.0/16 tcp|out|d=80|d=108.170.0.0/16 tcp|out|d=80|d=108.177.0.0/16 tcp|out|d=80|d=108.59.0.0/16 tcp|out|d=80|d=113.197.106.0/24 tcp|out|d=80|d=130.211.0.0/16 tcp|out|d=80|d=142.250.0.0/16 tcp|out|d=80|d=146.148.0.0/16 tcp|out|d=80|d=162.216.0.0/16 tcp|out|d=80|d=162.222.0.0/16 tcp|out|d=80|d=172.217.0.0/16 tcp|out|d=80|d=172.253.0.0/16 tcp|out|d=80|d=173.194.0.0/16 tcp|out|d=80|d=173.255.0.0/16 tcp|out|d=80|d=192.158.0.0/22 tcp|out|d=80|d=192.178.0.0/16 tcp|out|d=80|d=193.142.125.0/24 tcp|out|d=80|d=194.122.81.0/24 tcp|out|d=80|d=199.192.0.0/16 tcp|out|d=80|d=199.223.0.0/16 tcp|out|d=80|d=203.208.60.0/24 tcp|out|d=80|d=207.223.0.0/16 tcp|out|d=80|d=207.239.27.0/24 tcp|out|d=80|d=209.85.0.0/16 tcp|out|d=80|d=212.162.55.0/24 tcp|out|d=80|d=216.0.148.0/24 tcp|out|d=80|d=216.239.0.0/16 tcp|out|d=80|d=216.3.229.0/24 tcp|out|d=80|d=216.58.0.0/16 tcp|out|d=80|d=23.236.0.0/16 tcp|out|d=80|d=23.251.0.0/16 tcp|out|d=80|d=64.233.0.0/16 tcp|out|d=80|d=66.102.0.0/16 tcp|out|d=80|d=66.249.0.0/16 tcp|out|d=80|d=70.32.0.0/16 tcp|out|d=80|d=72.14.0.0/16 tcp|out|d=80|d=74.125.0.0/16 tcp|out|d=80|d=8.15.202.0/24 tcp|out|d=80|d=8.34.0.0/16 tcp|out|d=80|d=8.35.0.0/16 tcp|out|d=80|d=8.8.4.0/24 tcp|out|d=80|d=8.8.8.0/24 tcp|out|d=443|d=104.132.20.0/24 tcp|out|d=443|d=104.154.0.0/16 tcp|out|d=443|d=104.196.0.0/16 tcp|out|d=443|d=107.167.0.0/16 tcp|out|d=443|d=107.178.0.0/16 tcp|out|d=443|d=108.170.0.0/16 tcp|out|d=443|d=108.177.0.0/16 tcp|out|d=443|d=108.59.0.0/16 tcp|out|d=443|d=113.197.106.0/24 tcp|out|d=443|d=130.211.0.0/16 tcp|out|d=443|d=142.250.0.0/16 tcp|out|d=443|d=146.148.0.0/16 tcp|out|d=443|d=162.216.0.0/16 tcp|out|d=443|d=162.222.0.0/16 tcp|out|d=443|d=172.217.0.0/16 tcp|out|d=443|d=172.253.0.0/16 tcp|out|d=443|d=173.194.0.0/16 tcp|out|d=443|d=173.255.0.0/16 tcp|out|d=443|d=192.158.0.0/22 tcp|out|d=443|d=192.178.0.0/16 tcp|out|d=443|d=193.142.125.0/24 tcp|out|d=443|d=194.122.81.0/24 tcp|out|d=443|d=199.192.0.0/16 tcp|out|d=443|d=199.223.0.0/16 tcp|out|d=443|d=203.208.60.0/24 tcp|out|d=443|d=207.223.0.0/16 tcp|out|d=443|d=207.239.27.0/24 tcp|out|d=443|d=209.85.0.0/16 tcp|out|d=443|d=212.162.55.0/24 tcp|out|d=443|d=216.0.148.0/24 tcp|out|d=443|d=216.239.0.0/16 tcp|out|d=443|d=216.3.229.0/24 tcp|out|d=443|d=216.58.0.0/16 tcp|out|d=443|d=23.236.0.0/16 tcp|out|d=443|d=23.251.0.0/16 tcp|out|d=443|d=64.233.0.0/16 tcp|out|d=443|d=66.102.0.0/16 tcp|out|d=443|d=66.249.0.0/16 tcp|out|d=443|d=70.32.0.0/16 tcp|out|d=443|d=72.14.0.0/16 tcp|out|d=443|d=74.125.0.0/16 tcp|out|d=443|d=8.15.202.0/24 tcp|out|d=443|d=8.34.0.0/16 tcp|out|d=443|d=8.35.0.0/16 tcp|out|d=443|d=8.8.4.0/24 tcp|out|d=443|d=8.8.8.0/24 # The certificate is only valid for the following names: *.googleapis.com, *.clients6.google.com, *.cloudendpointsapis.com, cloudendpointsapis.com, googleapis.com # The certificate is only valid for the following names: *.google.com, *.android.com, *.appengine.google.com, *.cloud.google.com, *.google-analytics.com, *.google.ca, *.google.cl, *.google.co.in, *.google.co.jp, *.google.co.uk, *.google.com.ar, *.google.com.au, *.google.com.br, *.google.com.co, *.google.com.mx, *.google.com.tr, *.google.com.vn, *.google.de, *.google.es, *.google.fr, *.google.hu, *.google.it, *.google.nl, *.google.pl, *.google.pt, *.googleadapis.com, *.googleapis.cn, *.googlecommerce.com, *.googlevideo.com, *.gstatic.cn, *.gstatic.com, *.gvt1.com, *.gvt2.com, *.metric.gstatic.com, *.urchin.com, *.url.google.com, *.youtube-nocookie.com, *.youtube.com, *.youtubeeducation.com, *.ytimg.com, android.clients.google.com, android.com, developer.android.google.cn, g.co, goo.gl, google-analytics.com, google.com, googlecommerce.com, policy.mta-sts.google.com, urchin.com, www.goo.gl, youtu.be, youtube.com, youtubeeducation.com # www.googleapis.com # IPv6: # ripe.net # Responsible organisation: Google Ireland Limited # inet6num: 2a00:1450:4000::/37 # netname: IE-GOOGLE-2a00-1450-4000-1 tcp|out|d=80_993|d=2a00:1450:4000::/37 #route6: 2607:f8b0:4009::/48 #descr: Google #origin: AS15169 #notify: radb-contact@google.com #mnt-by: MAINT-AS15169 #source: RADB-GRS tcp|out|d=80_993|d=2607:f8b0:4009::/48 #inet6num: 2607:f8b0::/32 #org: GOGL #netname: GOOGLE-IPV6 #status: ALLOCATION #source: ARIN-GRS