<!--
	For problematic rules, see University-of-Florida-expired.xml.


	Nonfunctional subdomains:

		- (www.)admissions
		- (www.)at
		- print.at		(prints "This is an empty site")
		- (www.)babygator	(times out)
		- www.bridges		(times out)
		- calendar		(times out)
		- (www.)cfo		(interrupted)
		- (www.)cg.cfo
		- (www.)cns
		- docweb.cns
		- telecom.cns
		- (www.)distance	(reset)
		- (www.)dso		(ssl_error_rx_record_too_long)
		- (www.)eap		(cert: www.health.ufl.edu; shows that domain's data)
		- www.erp		(times out)
		- (www.)gatorlink
		- gradcatalog		(cert: *.acalogadmin.com; shows that domain's data)
		- privacy.health	(interrupted)
		- helpdesk
		- ask.helpdesk		(prints "This is an empty site")
		- www.honors		(interrupted)
		- (www.)hr		(interrupted)
		- icsde.ifas		("Bad Request")
		- (www.)it		(times out)
		- (www.)it-train	(reset)
		- (www.)police
		- privacy		(times out)
		- (www.)registrar	(times out)
		- search
		- security		(times out)
		- (www.)ufadvising	(reset)
		- (www.)umatter		(ssl_error_rx_record_too_long)
		- (www.)urel		(times out)
		- www			(times out)

-->
<ruleset name="University of Florida (partial)">

	<target host="www.shands.org" />
	<target host="*.ufl.edu" />
	<target host="*.at.ufl.edu" />
	<target host="www.*.ufl.edu" />
	<target host="service.gatorlink.ufl.edu" />
	<target host="*.health.ufl.edu" />
	<target host="*.helpdesk.ufl.edu" />
	<target host="test.isis.ufl.edu" />
	<target host="alerts.it.ufl.edu" />
	<target host="forwardtogether.sites.medinfo.ufl.edu" />
	<target host="*.ns.ufl.edu" />
	<target host="*.webadmin.ufl.edu" />


	<securecookie host="^\w[\w\.]*\.ufl\.edu$" name=".*" />


	<!--	- cise, isis, & uff: Cert only matches www
		- fa: Cert only matches *.fa
		- //crc cert: COMMPOOL.CRC.UFL.EDU
		- //crc only shows "Under Construction"
					-->
	<rule from="^https?://(?:www\.)?(cise|crc|fa|isis|uff)\.ufl\.edu/"
		to="https://www.$1.ufl.edu/" />

	<!--	Fails to redirect over https.	-->
	<rule from="^https?://lists\.ufl\.edu/archives/net-managers-l\.html"
		to="https://lists.ufl.edu/cgi-bin/wa?A0=NET-MANAGERS-L" />

	<rule from="^http://((?:labs|lss)\.at|catalog|counceling|evaluations|service\.gatorlink|gradschool|security\.health|(?:alerts|asc|etd|static)\.helpdesk|infosec|test\.isis|alerts\.it|lists|login|my|net-services|nms(?:-console)?\.ns|open-systems|(?:images|style)\.webadmin|webmail)\.ufl\.edu/"
		to="https://$1.ufl.edu/" />

	<!--	Cert only matches *.sites.medinfo	-->
	<rule from="^https?://forwardtogether\.(?:health|sites\.medinfo).ufl.edu/"
		to="https://forwardtogether.sites.medinfo.ufl.edu/" />

	<!--	- Cert only matches www
		- At least the homepage redirects to http
		- Seems that all paths in .+/$ are safe, as they redirect to .+/.*.aspx when unsupported
					-->
	<rule from="^https?://(?:www\.)?ufalumni\.ufl\.edu/($|App_Themes/|images/|login\.aspx|membersonly/register|resources/|styles/|WebResource\.axd|[\w\-\./]+/$)"
		to="https://www.ufalumni.ufl.edu/$1" />

	<rule from="^http://www\.shands\.org/"
		to="https://www.shands.org/" />

</ruleset>
