Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Message-ID: <3CFED625.3080104@slive.ca>
Date: Wed, 05 Jun 2002 23:25:25 -0400
From: Joshua Slive <joshua@slive.ca>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US;
 rv:1.0rc3) Gecko/20020523
MIME-Version: 1.0
To: users@httpd.apache.org
Subject: Re: Access Restriction problem in 1.3.24
References: <Pine.LNX.4.44.0206051613420.2196-100000@endor.hsutx.edu>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit

Brandon McMurray wrote:

> I am able to restrict access to /server-info and /server-status, and to 
> directories which do not contain a DirectoryIndex document.  I am not able 
> to restrict any directory that contains a DirectoryIndex document.
> 
> For example, in the same config file, this works:

>     Order Allow,Deny
>     Deny from all
>     Allow from 192.168.0.50

> But this does not:

>    Order Allow,Deny
>    Deny from all
>    Allow from 192.168.0.50

I hate to tell you this, but neither of those work.  It is possible that 
you have some other directives that, by conicidence, seem to make the 
first one do what you want, but this is definitely a wrong configuration.

Look at the docs for the Order directive.  You will see that what you 
have will deny access to all hosts in all cases, because "Order 
Allow,Deny", causes the "Deny from all" to be evaluated last, overriding 
any Allow directives.

Joshua.


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org