Return-Path: 
 <users-return-78325-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: (qmail 29383 invoked from network); 15 Jan 2008 14:44:54 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2)
  by minotaur.apache.org with SMTP; 15 Jan 2008 14:44:54 -0000
Received: (qmail 40790 invoked by uid 500); 15 Jan 2008 14:44:33 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 40767 invoked by uid 500); 15 Jan 2008 14:44:33 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
List-Id: <users.httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 40756 invoked by uid 99); 15 Jan 2008 14:44:33 -0000
Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 15 Jan 2008 06:44:33 -0800
X-ASF-Spam-Status: No, hits=-4.0 required=10.0
	tests=RCVD_IN_DNSWL_MED,SPF_PASS
X-Spam-Check-By: apache.org
Received-SPF: pass (athena.apache.org: local policy)
Received: from [146.109.240.105] (HELO irp0a.swx.com) (146.109.240.105)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 15 Jan 2008 14:44:07 +0000
X-IronPort-AV: E=Sophos;i="4.24,287,1196636400";
   d="scan'208";a="8914993"
Received: from unknown (HELO gate0b.unix.swx.ch) ([192.168.252.145])
  by irp0a.swx.com with ESMTP; 15 Jan 2008 15:44:11 +0100
Received: from CIWMEXZSA0E.ex.ordersx.org (siwmexzsa0a.ex.ordersx.org
 [172.20.29.10])
	by gate0b.unix.swx.ch (8.13.4/8.13.4) with ESMTP id m0FEiBjs009726
	for <users@httpd.apache.org>; Tue, 15 Jan 2008 15:44:11 +0100 (MET)
Content-Class: urn:content-classes:message
MIME-Version: 1.0
Importance: normal
Priority: normal
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4133
Date: Tue, 15 Jan 2008 15:44:11 +0100
Message-ID: 
 <FDD5D99066749040AF9098A720E989770378043A@CIWMEXZSA0E.ex.ordersx.org>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: [users@httpd]  Re: Apache ACL
thread-index: AchXcWYYdXtEJPKVQXOteT6GbM4GPwAEuuww
References: A<loom.20080114T153800-8@post.gmane.org>
 <FDD5D99066749040AF9098A720E9897703780435@CIWMEXZSA0E.ex.ordersx.org>
 A<loom.20080115T121005-313@post.gmane.org>
From: "Boyle Owen" <Owen.Boyle@swx.com>
To: <users@httpd.apache.org>
X-Virus-Checked: Checked by ClamAV on apache.org
Subject: RE: [users@httpd]  Re: Apache ACL

> -----Original Message-----
> From: news [mailto:news@ger.gmane.org] On Behalf Of Marc
> Sent: Tuesday, January 15, 2008 1:22 PM
> To: users@httpd.apache.org
> Subject: [users@httpd] Re: Apache ACL
>=20
> Boyle Owen <Owen.Boyle <at> swx.com> writes:
>=20
> >=20
> > The problem you describe has no obvious solution, so there must be
> > additional config directives interfering with your setup. See notes
> > below: =20
> >=20
>=20
> [error] [client 88.xx.xx.xx.xx] client denied by server configuration:
> /path/to/dir3/index.php
>=20
> However, there is no index.php in that directory.=20
> Alone it=20
> being mentioned in
> the DirectoryIndex=20

Aha! that's the "additional config directives interfering with your
setup"... You didn't mention you had a DirectoryIndex directive
somewhere...=20

What's happening is:

- Apache gets request for dir3
- DirectoryIndex tells it to look for index.php
- FileMatch block matches index.php and so triggers a 403

> seems to be enough for the access to be=20
> denied :-\ Strange
> behavior.

That's a matter of opinion - I guess you are expecting it only to block
the PHP file if it exists. But that would mean that apache would have to
stat the file (ie, expensive file operation) even though it knows that
it is going to deny access anyway. That seems pretty pointless in the
general case so it just sends the 403 straight away, before it wastes
time looking up the file.

Rgds,
Owen Boyle
Disclaimer: Any disclaimer attached to this message may be ignored.=20

>=20
> regards,
> Marc
>=20
>=20
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP=20
> Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
=20
=20
This message is for the named person's use only. It may contain =
confidential, proprietary or legally privileged information. If you =
receive this message in error, please notify the sender urgently and =
then immediately delete the message and any copies of it from your =
system. Please also immediately destroy any hardcopies of the message. =
The sender's company reserves the right to monitor all e-mail =
communications through their networks.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org