Drupal update domain whitelist
The whitelist that we used (which seems to work fine) is as follows:

master.drupal.org
master2.drupal.org
ftp.drupal.org
ftp-osl.osuosl.org
git.acquia.com  &lt;-- we are using this repo for Drupal core, you may not need it


They may not all be needed, ftp-osl.osuosl.org in particular may be required by another part of our stack, but this represents a working list of required domains.