https://issues.apache.org/bugzilla/show_bug.cgi?id=49737
Summary: order allow,deny does not work on IPv6
Product: Apache httpd-2
Version: 2.2.14
Platform: PC
OS/Version: Linux
Status: NEW
Severity: normal
Priority: P2
Component: mod_access
AssignedTo: [email protected]
ReportedBy: [email protected]
I was playing with access control and found that while 'order allow,deny' does
work as advertised on
http://httpd.apache.org/docs/2.2/mod/mod_authz_host.html#order for IPv4, it
does not work for IPv6.
I have in my virtual host config file some lines like:
<Location />
order allow,deny
allow from 2001:4860::/32
allow from 10.0.0.0/8
allow from 192.168.0.0/16
....
# no deny lines at all, so deny if not allow match
</Location>
With this, I am able to see that IPv4 addresses not in the list get blocked,
but IPv6 addresses not in the list do not get blocked.
This is a bug as far as I can tell (or something wrong with the documentation).
But it is possible that I am mistaken somehow.
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
