Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 30 Mar 2001 15:50:54 -0600
From:      Tony Wells <awells@journalstar.com>
To:        freebsd-questions@FreeBSD.ORG
Cc:        Kurtis Smith <ksscendyn@yahoo.com>
Subject:   Re: Apache .htaccess file
Message-ID:  <3AC4FFBE.2188E68F@journalstar.com>
References:  <200103302046.PAA13826@gorn.cse.psu.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
Coy A Hile wrote:
> 
> why not try:
> 
> Order Deny, Allow
> Deny from <ip address 1>
> ...
> Deny from <ip address n>
> Allow from all
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message

In my opinion the semantics of the Order directive are somewhat
counter-intuitive...

From the online apache docs:  (Emphasis is mine.)

"Deny,Allow  
The Deny directives are evaluated before the Allow directives.
***Access is allowed by default.*** Any client which does not match a
Deny directive ***or does match an Allow directive will be allowed
access to the server.***"

Get rid of that last "Allow from all", or it will match every request
and let them in. Whitespace is also verboten in the Order rules.  Use:

Order Deny,Allow

Good luck,
Tony Wells

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3AC4FFBE.2188E68F>