First, thanks for fixing the issue with dnetc being tagged as an invalid rule. Running 433 now and I seem to have acquired another one:
action: allow
process: /tmp/.ksda.0/ksurl
destination: cache.pack.google.com
port: any
protocol: any
help: wants to connect to cache.pack.google.com on TCP port 80 (http).