Update allow.txt

allow.txt

@@ -1,3 +1,37 @@
+# --- Apple Private Relay + iCloud essential domains ---
 mask.icloud.com
-mask-api.icloud.com
-mask-h2.icloud.com
+mask-h2.icloud.com
+mask.apple-dns.net
+mask.apple.com.edgesuite.net
+mask-api.fe.apple-dns.net
+mask-api.fe6.apple-dns.net
+
+# --- General iCloud services required for device sync/login ---
+gateway.icloud.com
+gs.apple.com
+setup.icloud.com
+configuration.apple.com
+xp.apple.com
+identity.ess.apple.com
+identity.icloud.com
+client.ess.apple.com
+appleid.apple.com
+pki.apple.com
+
+# --- Push notifications and messaging ---
+courier.push.apple.com
+feedback.push.apple.com
+push.apple.com
+
+# --- App Store and updates ---
+itunes.apple.com
+appstoreconnect.apple.com
+apps.apple.com
+buy.itunes.apple.com
+init.itunes.apple.com
+
+# --- Device activation / telemetry necessary for functionality ---
+mesu.apple.com
+gdmf.apple.com
+deviceenrollment.apple.com
+mdmenrollment.apple.com