diff --git a/etc/tinyproxy/updates-blocklist b/etc/tinyproxy/updates-blocklist
new file mode 100644
index 0000000..f79e43a
--- /dev/null
+++ b/etc/tinyproxy/updates-blocklist
@@ -0,0 +1,2 @@
+10.137.255.254
+127.0.0.1
diff --git a/usr/lib/qubes-whonix/tinyproxy-config-patch b/usr/lib/qubes-whonix/tinyproxy-config-patch
index 6c98638..ce05f2a 100755
--- a/usr/lib/qubes-whonix/tinyproxy-config-patch
+++ b/usr/lib/qubes-whonix/tinyproxy-config-patch
@@ -23,6 +23,7 @@ true "$0: START"
 #"
 
 append-once /etc/tinyproxy/tinyproxy-updates.conf "## BEGIN: auto-generated configuration by $0"
+append-once /etc/tinyproxy/tinyproxy-updates.conf "Filter /etc/tinyproxy/updates-blocklist"
 append-once /etc/tinyproxy/tinyproxy-updates.conf "Upstream socks5 127.0.0.1:9104"
 append-once /etc/tinyproxy/tinyproxy-updates.conf "## END: auto-generated configuration by $0"