<ruleset name="TunnelBroker" default_off="self-signed">
  <target host="tunnelbroker.net" />
  <target host="*.tunnelbroker.net" />

  <rule from="^http://tunnelbroker\.net/" to="https://tunnelbroker.net/"/>
  <rule from="^http://([^/:@\.]+)\.tunnelbroker\.net/" to="https://$1.tunnelbroker.net/"/>
</ruleset>
