在防火墙上设定以下策略

开放允许: init-p01md.apple.com init.ess.apple.com profile.ess.apple.com static.ess.apple.com identity.ess.apple.com *.query.ess.apple.com

拒绝: *.icloud-content.com *.icloud.com