changed IP lists to CSL to allow override by env config