This link should help. You can use the same method to determine what domains you might need to whitelist.