
<!--
Disabled by https-everywhere-checker because:
Fetch error: http://mail.metasploit.com/ => https://mail.metasploit.com/: (51, "SSL: no alternative certificate subject name matches target host name 'mail.metasploit.com'")

	For other Rapid7 coverage, see Rapid7.xml.


	NB: Tor users cannot view* this website due to CloudFlare settings.

	See:

		- https://blog.torproject.org/blog/call-arms-helping-internet-services-accept-anonymous-users
		- https://support.cloudflare.com/hc/en-us/articles/203306930-Does-CloudFlare-block-Tor-
		- https://support.cloudflare.com/hc/en-us/articles/200170206-How-do-I-turn-I-m-Under-Attack-mode-on-

	* without enabling javascript, for security and privacy implications see e.g.:

		- https://www.mozilla.org/security/known-vulnerabilities/firefox.html
		- https://trac.torproject.org/projects/tor/query?status=!closed&keywords=~tbb-fingerprinting
		- https://panopticlick.eff.org


	These altnames don't exist:

		- www.help.metasploit.com


	Insecure cookies are set for these domains and hosts:

		- .metasploit.com
		- www.metasploit.com

-->
<ruleset name="Metasploit.com" default_off='failed ruleset test'>

	<!--	Direct rewrites:
				-->
	<target host="metasploit.com" />
	<target host="dev.metasploit.com" />
	<target host="help.metasploit.com" />
	<target host="mail.metasploit.com" />
	<target host="www.metasploit.com" />


	<!--	Secured by server:
					-->
	<!--securecookie host="^\.metasploit\.com$" name="^(__cfduid|cf_clearance)$" /-->
	<!--securecookie host="^www\.metasploit\.com$" name="^JSESSIONID$" /-->

	<securecookie host="^\.metasploit\.com$" name="^(?:__cfduid|cf_clearance)$" />
	<securecookie host="^dev\.metasploit\.com$" name=".+" />


	<rule from="^http:"
		to="https:" />

</ruleset>
