Updated based on validation test

fingerprints_http.csv

@@ -475,7 +475,7 @@ cl.prod_netsweeper_inject_3,prod,,body,contains,&dpruleid=,6,,,https://explorer.
 cl.prod_opendns_block_2,prod,,body,contains,This domain is blocked due to content filtering.,8,,https://support.opendns.com/hc/en-us/community/posts/220047187-OpenDNS-suddenly-blocks-sites-after-a-few-days-of-use,https://explorer.ooni.org/measurement/20180401T092328Z_AS25019_Fwt7OWzgSX5bgt4fU2uwLnIfAlQrSkXHIrgk0NaMktVUkMsJCC?input=http://www.gayegypt.com,Matches default block page text for an OpenDNS blockpage. Lower fp value due to wording based pattern.
 cl.prod_paloaltonetworks_block,prod,,body,contains,Access to the web page you were trying to visit has been blocked in accordance with company policy.,8,,"https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClXtCAK,https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClsQCAS",https://explorer.ooni.org/measurement/20191104T140958Z_AS8551_3ClYxxNcVYkL21ReDyEXSXYWJzjZgVSGcpycmucSI1MIBq3uDp?input=http://gaytoday.com/,Palo Alto Networks default blockpage text - common filtering middlebox used in institutions
 cl.prod_paloaltonetworks_forward,prod,,header.location,contains,/php/urlblock.php?args=,10,,"https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClXtCAK,https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClsQCAS",https://explorer.ooni.org/measurement/20191104T185520Z_AS2381_aXMx8fZVBM5t27IvVAQGscDgnoJZyhesum6rKk2zqfj25oks4m?input=http://www.gay.com/,Palo Alto Networks typically forwards to url: http(s)://IP/php/urlblock.php?args=
-cl.prod_rmedufilter_blockpage,prod,cl.prod_vasexperts_blockpage_1,body,contains,www.rm.com/filteringpolicy/,10,",RU",https://www.rm.com/security-and-safeguarding/online-safety,https://explorer.ooni.org/measurement/20190924T111147Z_AS5503_tbltX9RU8fCAkZoJf6fhR3wC8TEukKjHbBm6pT54GZnYbFLTiL?input=http://www.glil.org/,RM is a consultancy that provides a filtering product for schools. This matches on the URL to re-categorize URls
+cl.prod_rmedufilter_blockpage,prod,cl.prod_vasexperts_blockpage_1,body,contains,www.rm.com/filteringpolicy/,10,RU,https://www.rm.com/security-and-safeguarding/online-safety,https://explorer.ooni.org/measurement/20190924T111147Z_AS5503_tbltX9RU8fCAkZoJf6fhR3wC8TEukKjHbBm6pT54GZnYbFLTiL?input=http://www.glil.org/,RM is a consultancy that provides a filtering product for schools. This matches on the URL to re-categorize URls
 cl.prod_rmedufilter_forward,prod,,header.location,contains,.ifl.net/filterpages/,10,,https://www.rm.com/security-and-safeguarding/online-safety,https://explorer.ooni.org/measurement/20190924T111147Z_AS5503_tbltX9RU8fCAkZoJf6fhR3wC8TEukKjHbBm6pT54GZnYbFLTiL?input=http://www.glil.org/,RM is a consultancy that provides a filtering product for schools. This matches on a forward in the headers that is done into their DNS space {X}.{Y}.ifl.net/filterpages/ when we saw it it looked like this: http://fp.sn.ifl.net/filterpages/3390-59870.htm#f=1&c=59870&d=1&p=3396&t=145722002&u=http://www.glil.org/&ip={ip}
 cl.prod_sonicwall_cfc,prod,,body,contains,://cfssupport.sonicwall.com,8,,https://www.sonicwall.com/products/firewalls/security-services/content-filtering-client/,https://explorer.ooni.org/measurement/20190530T060325Z_AS9930_aFIp6ijOM0HCyMp1Zo0BA01CHkisHlohZcn9WmB3R43ijK8LYt?input=http://www.gayrice.com/,Sonicwall Client Filter Blockpage
 cl.prod_squid_error_forward,prod,,header.location,contains,/sgerror.php?url=,10,,"http://www.squid-cache.org/Doc/config/err_page_stylesheet/,https://github.com/sullo/nikto/issues/603",https://explorer.ooni.org/measurement/20191014T112153Z_AS766_i7LuwpPrUtwgjjjCNCFwsnvNv8yih3PLXE7lvAF8MyDaSC4abw?input=https://bisexual.org/,"Squid is hard to write a pattern for, as it is a common reverse and in-path proxy. Cases where an inpath squid proxy returns errors is a clear case of inaccessible content that should be flagged however."