Merge pull request #5872 from backpaper0/remove-cname-on-domain-ip-resolution

fix: improve DNS resolution in firewall script to filter CNAME records

.devcontainer/init-firewall.sh

@@ -71,7 +71,7 @@ for domain in \
     "statsig.anthropic.com" \
     "statsig.com"; do
     echo "Resolving $domain..."
-    ips=$(dig +short A "$domain")
+    ips=$(dig +noall +answer A "$domain" | awk '$4 == "A" {print $5}')
     if [ -z "$ips" ]; then
         echo "ERROR: Failed to resolve $domain"
         exit 1