This is what would consider doing in my home firewall, because I don't want requests going out to unknown sites.