diff --git a/Source/non_ip/apple_services.conf b/Source/non_ip/apple_services.conf
index d61b4fb7..bbe2d5d4 100644
--- a/Source/non_ip/apple_services.conf
+++ b/Source/non_ip/apple_services.conf
@@ -23,7 +23,9 @@ DOMAIN-SUFFIX,apple.news
 # Even if it contacts Apple's own server, it will be matched by domain rules anyway
 # PROCESS-NAME,trustd
 
-PROCESS-NAME,netbiosd
+# Normally, Apple connect to their services through domain & cdn
+# So if we are going to match IP CIDR as well, no-resolve is good enough
+IP-CIDR,17.0.0.0/8,no-resolve
 
 # >> Apple Maps
 PROCESS-NAME,com.apple.geod