On: Log4Shell Log4j vulnerability (CVE-2021-44228) – c...

[zdwolfe]

This might be a stupid question, but is it possible to airgap all classes running in the JVM from the network except for those you trust?

For example, I want to block all classes from opening sockets except those in my.company.domain.* packages.

[narrator → zdwolfe]

Yes, it's called a firewall. Anybody developing high security applications should limit outbound connections from their production servers to what's absolutely necessary.