allow outbound traffic to http hosts (for apt-get)