RHEL 9 Firewall: Enable Perplexity.ai Uploads + CLI

We operate RHEL 9 servers under a strict egress-control model using iptables with a default DROP policy. While Perplexity.ai is accessible for standard browsing, file uploads fail consistently, indicating that required Cloudflare-backed upload endpoints are being blocked. We are seeking a senior Linux and network security engineer to perform controlled outbound traffic analysis during Perplexity.ai upload workflows, identify all required domains, IP addresses, and CIDR ranges, and design and implement a minimal, auditable outbound firewall ruleset that enables uploads without relaxing overall egress restrictions. The scope also includes implementing a Perplexity-compatible command-line prototype that operates from the terminal, supports file uploads, and can be used as a deterministic validation tool for firewall behavior. Successful delivery requires that both browser-based and CLI-based uploads function reliably while maintaining a tightly restricted outbound posture. The engagement is short-term (approximately 2 days) and focused on producing a secure, well-documented prototype suitable for long-term maintenance in an enterprise environment.