I just noticed someone pushing private addresses into the address pool, causing me to attempt loopback connections (which get dropped by loopback detection). But blacklisting prevents these from going out (and of course you can still enable them for local work):
# en.wikipedia.org/wiki/Private_network
blacklist = 10.0.0.0/8
blacklist = 127.0.0.0/8
blacklist = 172.16.0.0/12
blacklist = 192.168.0.0/16
blacklist = 169.254.0.0/16
blacklist = 100.64.0.0/10
blacklist = [fd00::]/8
blacklist = [fe80::]/10
blacklist = [::1]
(edited)