Does anyone know if he has posted anywhere how his whitelist is working?  Can I use a range (if I am behind a transparant proxy with multiple proxies)?  It allows for DNS but is that checked everytime the ip tries to connect (not likely) or is it only checked when you first put it in?  This would make it less useful for dynamic addresses?