lsrules

Some rule groups for use with Little Snitch.

Tailscale 🔗

Tailscale publishes a current list of their DERP servers. A script is included here for importing that list and turning it into a list of IPs that Little Snitch can use to not annoy me.

php scripts/derp.php | pbcopy

As of this writing, Tailscale is using Amazon AWS (possibly ELB?) to frontend the controlplane, which means there's now a larger list of IPs that the client wants to talk to.

php scripts/controlplane.php | pbcopy

Tailscale Nets 🔗

Some netblocks I expect Tailscale to try talking with; you may not necessarily want any or all of these, or as broad as these may be. I assume access control happens elsewhere.

• IANA IPv4 Special-Purpose Address Registry
  • IPv4 Service Continuity Prefix
    • 192.0.0.0/29
• Autonomous systems
  • AS701 (Verizon Business)
    • 2600:4000::/24
    • 98.115.0.0/16
  • AS714 (Apple)
    • 17.0.0.0/8
  • AS7018 (AT&T Services, Inc.)
    • 2600:300::/24 (AT&T Mobility LLC / AS20057)
  • AS7922 (Comcast Cable Communications, LLC)
    • 2601::/20
    • 68.80.0.0/13