// DISCLAIMER: This PAC File is a public knowledge, be extra cautious what you put inside!
// ZIA DR Proxy PAC File - used to  additionally allow/deny access to domains specified in Zscaler ZIA DR PAC File (below)
// Zscaler ZIA DR Recommended allow list: https://dll7xpq8c5ev0.cloudfront.net/drdb.txt
// Date of last change: 3-july-2025, v0.73
// Last change(s):
//

// List of the Public Domains
var Public_Domains = [
	"afrox",
	"aga",
	"agahealthcare",
	"aga-shop",
	"boc",
	"bocengineering",
	"boc-engineering",
	"bocgas",
	"boc-gas",
	"bocgases",
	"boc-gases",
	"bochealthcare",
	"boc-healthcare",
	"bochop",
	"boclinks",
	"bocmedical",
	"boconline",
	"boconlineshop",
	"bocwelding",
	"boc-welding",
	"cilindergas",
	"cilindergassen",
	"cryocooking",
	"ecovar",
	"elgas",
	"gaseshop",
	"lincare",
	"lincareholdings",
	"lincareonline",
	"lincareportal",
	"lincarepoweredmobility",
	"lincarepowermobility",
	"linde",
	"lindecanada",
	"lindedirect",
	"linde-praxair",
	"lindemobile",
	"lindemedicale",
	"linde-engineering",
	"lindegas",
	"linde-gas",
	"lindehealthcare",
	"linde-healthcare",
	"linde-homecare",
	"linde-le",
	"lindemedicaldirect",
	"lindemedicale",
	"lindemobile",
	"lindeplc",
	"linde-plc",
	"linde-onlineshop",
	"lindeplc",
	"linde-plc",
	"linde-praxair",
	"lindeus",
	"med4home",
	"medigas",
	"mylincare",	
	"mylinde",
	"nuco2",
	"praxairusa",
	"praxair",
	"preferredhomecare",
	"open-aire",
	"oxygenanswers",
	"quickreferralonline",
	"remeo",
	"remoteconnectedcare",
	"tig",
	"weldingsupply",
	"whitemartins"
];


//### BEGIN #######################
function FindProxyForURL(url, host)
{
	if (
		dnsDomainIs(host, "linde.name") ||	// Matching also *.linde.name
		dnsDomainIs(host, "intelex.com") ||
	/* ### Azure ### */
		dnsDomainIs(host, "oraclecloudapps.com") ||
		dnsDomainIs(host, "azmk8s.io") ||
		dnsDomainIs(host, "azureml.ms") ||
		dnsDomainIs(host, "azconfig.io") ||
		dnsDomainIs(host, "azurecr.io") ||
		dnsDomainIs(host, "windowsazure.com") ||
		dnsDomainIs(host, "azmk8s.io") ||
		dnsDomainIs(host, "windowsazure.com") ||
		dnsDomainIs(host, "azurecontainerapps.io") ||
	/* ### TOOLS ### */
		dnsDomainIs(host, "velocloud.net") ||
		dnsDomainIs(host, "sst.net.cn") ||
		dnsDomainIs(host, "cloud.netboxapp.com") ||
		dnsDomainIs(host, "mxtoolbox.com") ||
		dnsDomainIs(host, "ssllabs.com") ||
		localHostOrDomainIs(host, "ifconfig.co") ||
		localHostOrDomainIs(host, "myexternalip.com") ||
		dnsDomainIs(host, "speedtest.net") ||
		dnsDomainIs(host, "azurespeed.com") ||
	/* ### ZSCALER INFRA ### */
		isInNet(host, "100.64.0.0", "255.255.0.0") ||
		dnsDomainIs(host, "zscaler.com") ||
		dnsDomainIs(host, "zslogin.net") ||
		dnsDomainIs(host, "zsapi.net") ||
		dnsDomainIs(host, "zpa-auth.net") ||
		dnsDomainIs(host, "zsloginbeta.net") ||
	/* ### TESTING ### */
		localHostOrDomainIs(host, "pactester.brdbnt.com") ||
		dnsDomainIs(host, "dsl.sk")
	)
	return "DIRECT";


    // Process each domain in the list
    for (var i = 0; i < Public_Domains.length; i++)
	{
        var domain = Public_Domains[i];
        
        // Generate conditions for each domain
        if (
			shExpMatch(host, domain + ".??") ||
			shExpMatch(host, "*." + domain + ".??") ||
			dnsDomainIs(host, domain + ".com") ||
			dnsDomainIs(host, domain + ".net") ||
			dnsDomainIs(host, domain + ".org") ||
			dnsDomainIs(host, domain + ".biz") ||
			dnsDomainIs(host, domain + ".info") ||
			dnsDomainIs(host, domain + ".global") ||
			shExpMatch(host, domain + ".co.??") ||
			shExpMatch(host, "*." + domain + ".co.??") ||
			shExpMatch(host, domain + ".com.??") ||
			shExpMatch(host, domain + ".net.??") ||
			shExpMatch(host, domain + ".org.??") ||
			shExpMatch(host, "*." + domain + ".com.??")	
        )
		return "DIRECT";
    }
}
//### END #########################