OpenAI should really do better. If you want to build a mostly airgapped system, you find the surface that bridges the inside part to the outside part, and you enumerate every single thing that can get through. Which presumably should be a very very small list and should not include DNS.

If you are using a firewall, you are already doing it wrong. Don’t list thinks to block - list things to allow and make that list small.