When building the rt/transports/http module in CXF, there is a problem in the internal build system due to the download of an external file from https://publicsuffix.org/list/effective_tld_names.dat. The build is carried out in a sand-boxed environment with only certain domains white-listed, and publicsuffix.org is not one of them.
It may be possible that the proxy that handles maven artifacts may also be able to handle this file as well (I'm discussing this on an internal mailing list), but I'm not sure how it would handle changes to the file.
Alternatively, the effective_tld_names.dat is maintained in a github repository (https://github.com/publicsuffix/list). This could be mirrored internally and synched, and then this internal url used instead. Would this be an acceptable alternative? It would mean a minor change to the pom file to change the url configuration into a property that can be overridden on the command line at build time.