From owner-freebsd-questions Fri Mar 30 14:20:16 2001 Delivered-To: freebsd-questions@freebsd.org Received: from trinity.lee.net (trinity.lee.net [208.229.121.1]) by hub.freebsd.org (Postfix) with ESMTP id 0BBB137B71A for ; Fri, 30 Mar 2001 14:20:12 -0800 (PST) (envelope-from awells@journalstar.com) Received: from journalstar.com (leepcC-018.sub-c.lee.net [208.205.126.18]) by trinity.lee.net (8.9.3/8.9.3) with ESMTP id PAA27916; Fri, 30 Mar 2001 15:51:54 -0600 Message-ID: <3AC4FFBE.2188E68F@journalstar.com> Date: Fri, 30 Mar 2001 15:50:54 -0600 From: Tony Wells X-Mailer: Mozilla 4.76 [en] (X11; U; Linux 2.0.36 i386) X-Accept-Language: en MIME-Version: 1.0 To: freebsd-questions@FreeBSD.ORG Cc: Kurtis Smith Subject: Re: Apache .htaccess file References: <200103302046.PAA13826@gorn.cse.psu.edu> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Coy A Hile wrote: > > why not try: > > Order Deny, Allow > Deny from > ... > Deny from > Allow from all > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message In my opinion the semantics of the Order directive are somewhat counter-intuitive... From the online apache docs: (Emphasis is mine.) "Deny,Allow The Deny directives are evaluated before the Allow directives. ***Access is allowed by default.*** Any client which does not match a Deny directive ***or does match an Allow directive will be allowed access to the server.***" Get rid of that last "Allow from all", or it will match every request and let them in. Whitespace is also verboten in the Order rules. Use: Order Deny,Allow Good luck, Tony Wells To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message