(version 1)
; NO_PROXY lab: allow everything except outbound network to non-loopback
; destinations. DNS lookups (the mDNSResponder socket) and TCP connects to
; documentation addresses fail immediately with "Operation not permitted".
(allow default)
(deny network-outbound)
(allow network-outbound (remote ip "localhost:*"))