Currently when whitelisting unless you include the internal service addresses it blocks those internal services from communicating with each other, e.g. Web service to Postgres etc.