apple
/

DiffuCoder-7B-cpGRPO

+//=========================================================================
+// DOMAINFLAGS.TXT
+//
+// This file allows control of how DG Web Inspection Proxy
+// handles HTTP and HTTPS requests made to specific web servers
+//
+// Current Domain Flags Definition
+// (Version 9.3.0)
+//
+//
+//  Control Flag Name                                    Parameter
+//  ------------------------                             ---------
+//  SKIP INSPECTION                                      SK
+//  SKIP INSPECTION if TLS                               TLSK
+//  USE BROWSER CACHING (default)                        CACHE
+//  DISABLE BROWSER CACHING                              NCACHE
+//  SKIP HTTPS SITES WHEN ACCESSED BY SAFARI             TLSK_SAFARI
+//  SKIP HTTPS SITES WHEN ACCESSED BY CHROME             TLSK_CHROME
+//  SKIP HTTPS SITES WHEN ACCESSED BY FIREFOX            TLSK_FIREFOX
+//  SKIP HTTP TRAFFIC AT THE TCP LEVEL                   HTTP_TCPSK
+//  SKIP THE UPSTREAM PROXY (EXPLICIT PROXY MODE ONLY)   SK_PROXY
+//  USE HTTP1.1 ONLY (AVOID HTTP2.0)                     HTTP1_1_ONLY
+//
+//  NOTES:
+//     CACHE is useful to enable caching on a specific site if caching is disabled globally.
+//     (If caching is not disabled globally, CACHE has no effect, so can be used
+//        to create a domain flag entry that stops other entries from being applied.)
+//     If NCACHE and CACHE are both specified on the same line, NCACHE takes precedence.
+//     If SK or TLSK is specified all other processing is skipped, including CACHE and NCACHE.
+//     Add entries to the domain flags file in order of precedence.
+//     IP Address entries and Domain entries are treated separately.
+//     For each request the flags from the first matching IP address entry,
+//        amd the first matching domain entry are combined and applied.
+//
+// You can add a line to this file for each domain or IP address (range)
+// that you need special handling for.  Each line can contain either a
+// domain entry or an IP subnet entry.
+//
+// Examples:
+//  example.com,SK     //<-- SKIP inspection of requests to example.com
+//  example.com:80,SK  //<-- SKIP inspection of requests to example.com port 80
+//  *.example.com,SK   //<-- SKIP inspection of requests to immediate subdomains of example.com
+//  **.example.com,SK  //<-- SKIP inspection of requests to all subdomains of example.com
+// IPv4 examples
+//  10.20.10.1,SK      //<-- SKIP inspection of requests to the server at 10.20.10.1
+//  10.10.0.0/16,SK    //<-- SKIP inspection of requests to the 10.10.0.0/16 network
+//  10.20.10.1:80,SK   //<-- SKIP inspection of requests to the server at 10.20.10.1 port 80
+//  10.20.0.0:80/16,SK //<-- SKIP inspection of requests to the 10.10.0.0/16 network port 80
+// IPv6 examples
+//  [fe80::1c31:6bc2:7f5:675c],SK    //<-- SKIP inspection of requests to the server at fe80::1c31:6bc2:7f5:675c
+//  [fe80::]/64,SK                   //<-- SKIP inspection of requests to the fe80::/64 network
+//  [fe80::1c31:6bc2:7f5:675c]:80,SK //<-- SKIP inspection of requests to the server at fe80::1c31:6bc2:7f5:675c port 80
+//  [fe80::]:80/64,SK                //<-- SKIP inspection of requests to the fe80::/64 network port 80
+// Domain wildcard syntax is designed to mimic directory glob syntax.
+// It is not a full regular expression syntax.
+// The following meta-characters are supported:
+//  •	“*” will match any character except “.”
+//  •	“**” will match any character including “.”
+//  •	“?” will match a single character
+//  •	“[]” can be used to specify a character match list. For example [ab] will match a or b but will not match c
+//  •	“[!]”  can be used to specify a negative character match list. For example [!ab] will not match a or b but will match c
+//  •	{} can be used to specify comma separated pattern alternatives. For example {ab,de} will match ab or de
+// Ad networks
+secure.adnxs.com,SK
+as-*.casalemedia.com,SK
+logx.optimizely.com,SK
+fastlane.rubiconproject.com,SK
+tps*.doubleverify.com,SK
+timeinc-*.openx.net,SK
+ads.adaptv.advertising.com,SK
+// Microsoft website for AD FS
+login.microsoftonline.com,SK
+// Single Sign On sites
+sso.teamviewer.com,SK
+idp.blackberry.com,SK
+pki.entitlement.siemens.com,SK
+// Apple websites with certificate checks on Safari Browser
+safari-extensions.apple.com,TLSK_SAFARI
+icloud.com,TLSK_SAFARI
+setup.icloud.com,TLSK_SAFARI
+edge.icloud.com,TLSK_SAFARI
+*pushws.icloud.com,TLSK_SAFARI
+*contactsws.icloud.com,TLSK_SAFARI
+feedbackws.icloud.com,TLSK_SAFARI
+*keyvalueservice.icloud.com,TLSK_SAFARI
+idmsa.apple.com,TLSK_SAFARI
+**.apple.com,TLSK_SAFARI
+// Salesforce caches the case files. NCACHE is needed to override caching
+// if you want to log/block NTDs.
+**.force.com,NCACHE
+// dropbox (and others) use cache-control headers for downloaded contents. NCACHE is needed
+// to override caching if you wan to log/block NTDs.
+**.dl.dropboxusercontent.com,NCACHE
+web.opendrive.com,NCACHE
+mail-attachment.googleusercontent.com,NCACHE
+// DLPTEST caches files. NCACHE is needed to override caching for logging/blocking NTDs.
+dlptest.com,NCACHE
+// chrome remote desktop
+instantmessaging-pa.clients6.google.com,TLSK_CHROME
+// Microsoft AIP / MIP (pinned certificates / tls renegotiation)
+**.aadrm.com,SK
+**.protection.outlook.com,SK
+// Microsoft Edge sync service
+edge-enterprise.activity.windows.com,SK
+edge.microsoft.com,SK
+// Microsoft Teams presence
+**presence.teams.microsoft.com,SK
+// Microsoft telemetry (teams, browser, mobile, etc)
+**.events.data.microsoft.com,SK
+**.events.data.msn.com,SK
+*-telemetry.officeapps.live.com,SK
+// Firefox telemetry
+incoming.telemetry.mozilla.org,SK
+// Push Notifications are often implemented by FCM.
+// Fixes the case when push notifications do not appear
+mtalk.google.com,SK
+// SA-38414, Online commerce
+cc.zdtc.app,SK
+// Microsoft Teams audio connections
+**.relay.teams.microsoft.com,SK