Playstation Network sign-in fails on DPF

PSN won't sign in with DPF as the console's DNS — sits on connecting then errors. Sony uses a lot of telemetry endpoints and one of them is clearly needed for auth. Whitelisting is trial and error because there's no block log per device.