>>> On 8/1/2006 at 5:34 PM, in message <[EMAIL PROTECTED]>, "Joshua Slive" <[EMAIL PROTECTED]> wrote: > On 8/1/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: >> Author: bnicholes >> Date: Tue Aug 1 15:54:38 2006 >> New Revision: 427780 >> >> URL: http://svn.apache.org/viewvc?rev=427780&view=rev >> Log: >> Converted the reject directive to be definitive and enabled directory_merge > to merge all of the authorization rules and logic. > > Can you explain how you do something like the following: > > Allow access from anywhere except IPs starting 10.2, but also allow > access from the specific subnet 10.2.1. > > Joshua
Good point, I have reverted the reject directive being definitive and determined that I can achieve the same thing through other means. As far as answering your question. You can do it now, this way: <SatisfyAll> reject ip 10.2 require ip 10.2.1 </SatisfyAll> Brad
