I am prompted by a nice notification from Portmaster-firewall to allow or deny two connections, when
octopi performs an update after it wants to connect to
baidu.com (in China) first.
I do not know why does it need to connect to two URLs? But they are not related to the AUR host and the pacman repositories.
octopi is in Manjaro repo.