@RavenofDespair@lemmy.ml to add to this; you can use a firewall that's aware of what your systems is trying to contact. pfsense does this in their premium products and i've heard ubiquiti starting doing this as well.